This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft File: hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft (raw, json) Hash identifier: R7iShHTf8sVgnNTOwzgGxjt5DA69u3dVO/MzlRGLFLw= Subject key identifier: 91:1D:22:3F:E6:FB:30:3A:78:B7:2B:4A:9D:51:2F:21:02:6A:E2:AE Authority key identifier: 85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4 Certificate issuer: /CN=A9196DCA/serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft Manifest number: AA Signing time: Fri 05 Dec 2025 04:07:55 +0000 Manifest this update: Fri 05 Dec 2025 04:07:54 +0000 Manifest next update: Fri 12 Dec 2025 04:07:54 +0000 Files and hashes: 1: hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl (hash: kG4TaHS25g7HoBlISxX7m8m6T2duU+c6ounmxTAHhrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DCA, serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4 Validity Not Before: Dec 5 04:07:54 2025 GMT Not After : Dec 12 04:07:54 2025 GMT Subject: CN=69325a9b-8429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b5:ca:31:f8:ca:6a:1f:14:25:6c:2d:03:32: 9d:6a:8a:01:1c:ee:6a:52:6f:bb:ac:52:1e:0d:a5: 54:70:ef:19:4b:d1:3a:0c:fb:ac:ee:db:6f:e7:c1: 6d:8e:0c:07:dd:b6:b6:4c:4b:50:97:ec:38:cc:69: f2:3a:eb:96:84:31:5e:c8:fe:05:53:85:81:6d:7c: 3b:99:d1:f3:64:f1:1d:a5:7e:ac:a0:e9:b9:4c:01: 44:61:71:bd:51:4e:eb:79:34:07:9d:aa:ea:bc:49: ff:eb:1f:47:de:31:ee:27:b1:93:2d:59:13:3b:1e: e1:6c:9d:32:d2:03:a4:d6:a7:a1:7c:4f:d7:51:00: bf:5f:04:c6:c8:4b:b9:37:22:9c:cc:ca:7e:5e:63: 43:bf:8e:57:9b:04:69:8d:32:6c:59:e3:de:e4:00: 07:13:4b:a2:c5:39:10:8b:a4:f7:7f:57:ea:73:db: 07:3c:22:e8:ee:16:d4:46:f9:8e:e4:db:26:35:6f: d6:73:b8:16:6c:39:d9:e3:e3:27:5b:24:56:49:ee: e0:13:35:82:8c:8f:a9:66:ca:ab:01:1c:7a:f4:2d: ef:8c:b8:e4:60:79:41:37:a4:3e:72:99:ed:19:1a: dd:d7:1b:bd:65:f5:3e:9c:c5:d6:19:c2:05:39:ae: e9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1D:22:3F:E6:FB:30:3A:78:B7:2B:4A:9D:51:2F:21:02:6A:E2:AE X509v3 Authority Key Identifier: keyid:85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:1b:4f:c1:91:08:41:06:c6:65:95:e0:29:49:35:cc:55:8a: 59:b0:01:37:7a:40:03:80:4e:04:b4:ee:08:96:96:ee:4d:21: ec:d3:4c:2f:ca:96:b5:a8:a3:24:46:45:9d:ca:9d:fe:3b:d5: 42:33:0e:fb:19:a4:e5:6b:05:05:1c:7e:d6:3d:e4:88:12:93: 9b:8e:7e:12:7e:73:4f:b2:09:63:e1:ac:4d:0d:71:f4:01:18: 47:1a:60:96:a8:9d:41:86:35:6e:11:cd:f3:ad:88:b5:4c:7f: c7:1c:ed:c1:1c:2b:aa:30:3d:39:32:b0:02:61:9c:62:9a:b0: 4d:4b:8e:7b:19:39:08:e2:31:75:8b:81:94:62:37:6c:3e:66: 28:8d:0b:d4:5c:f5:06:14:67:ba:6b:f9:d9:25:39:dc:d3:5f: 69:1b:60:35:27:bf:1d:b2:8f:ce:bd:16:a7:ec:39:16:54:8d: 5c:14:1d:08:d6:1d:b0:5c:bb:b6:c3:c5:0b:0b:f7:12:6f:45: a9:71:3c:fb:e5:b0:e5:0d:88:cc:79:95:43:c0:33:48:19:14: 96:44:10:e5:29:c1:15:03:1e:b7:da:b4:9d:5c:53:78:7b:b7: 06:fc:dc:96:b7:06:fa:58:72:b4:b9:6d:85:0c:41:fd:c6:f5: d4:a1:d7:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZEQ0ExMTAvBgNVBAUTKDg1QzU2NzI1OTEwM0Q5RTIyOTJFNjREQkZCNzlGRDM5 QjI1NkZERTQwHhcNMjUxMjA1MDQwNzU0WhcNMjUxMjEyMDQwNzU0WjAYMRYwFAYD VQQDEw02OTMyNWE5Yi04NDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5bXKMfjKah8UJWwtAzKdaooBHO5qUm+7rFIeDaVUcO8ZS9E6DPus7ttv58Ft jgwH3ba2TEtQl+w4zGnyOuuWhDFeyP4FU4WBbXw7mdHzZPEdpX6soOm5TAFEYXG9 UU7reTQHnarqvEn/6x9H3jHuJ7GTLVkTOx7hbJ0y0gOk1qehfE/XUQC/XwTGyEu5 NyKczMp+XmNDv45XmwRpjTJsWePe5AAHE0uixTkQi6T3f1fqc9sHPCLo7hbURvmO 5NsmNW/Wc7gWbDnZ4+MnWyRWSe7gEzWCjI+pZsqrARx69C3vjLjkYHlBN6Q+cpnt GRrd1xu9ZfU+nMXWGcIFOa7pewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJEdIj/m +zA6eLcrSp1RLyECauKuMB8GA1UdIwQYMBaAFIXFZyWRA9niKS5k2/t5/TmyVv3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRDQS81ODNGRkM5NENC MUYxMUVGQjdBQzI3ODZDNEY5QUUwMi9oY1ZuSlpFRDJlSXBMbVRiLTNuOU9iSldf ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hjVm5KWkVEMmVJcExtVGItM245T2JKV19lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRDQS81ODNGRkM5NENCMUYxMUVGQjdBQzI3ODZDNEY5QUUwMi9oY1ZuSlpFRDJl SXBMbVRiLTNuOU9iSldfZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDG0/BkQhBBsZlleApSTXMVYpZsAE3ekADgE4EtO4IlpbuTSHs00wv ypa1qKMkRkWdyp3+O9VCMw77GaTlawUFHH7WPeSIEpObjn4SfnNPsglj4axNDXH0 ARhHGmCWqJ1BhjVuEc3zrYi1TH/HHO3BHCuqMD05MrACYZximrBNS457GTkI4jF1 i4GUYjdsPmYojQvUXPUGFGe6a/nZJTnc019pG2A1J78dso/OvRan7DkWVI1cFB0I 1h2wXLu2w8ULC/cSb0WpcTz75bDlDYjMeZVDwDNIGRSWRBDlKcEVAx632rSdXFN4 e7cG/NyWtwb6WHK0uW2FDEH9xvXUodfk -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:26 2025 by rpki-client