This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json) Hash identifier: NVcasEquuFiwCEiLfT+QuEoC7ZyHCIP2UFO7A7o34UA= Subject key identifier: 14:D4:66:F8:A2:1C:83:4C:AE:E9:36:CA:12:3D:A9:77:A4:6A:EB:6A Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0CC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft Manifest number: 0CA9 Signing time: Sat 06 Dec 2025 17:43:59 +0000 Manifest this update: Sat 06 Dec 2025 17:43:59 +0000 Manifest next update: Sat 13 Dec 2025 17:43:59 +0000 Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: frgC6Uao85KF/xgnuPtH+I3U0ion+flyx7mNSTOV5nw=) 2: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: rUTKhJ4mbBn/gtcjaqFary2usRDlDOu+VtUbm3mrKXA=) 3: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: nhOxYzG0rAWYRSzTLJPw39uwciMl2MDnLaJCFvQHhfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3271 (0xcc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A, serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: Dec 6 17:43:59 2025 GMT Not After : Dec 13 17:43:59 2025 GMT Subject: CN=69346b5f-e60f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e1:35:dd:5f:ae:f3:89:c9:bd:63:e5:45:e9: c8:12:1b:45:1b:98:24:cb:55:62:55:52:37:8a:e4: a2:06:d7:b9:96:64:f4:f3:03:c9:c2:d7:8a:18:eb: c5:9e:2c:a5:07:3c:56:71:f9:e2:b6:60:97:f8:e9: 34:5f:3f:12:e1:75:35:33:64:4d:aa:95:ca:6f:48: 6c:10:9b:09:6b:c3:04:fa:e0:a9:90:48:ff:a4:20: cc:b5:f8:a1:7c:f8:2e:7d:19:b0:84:68:65:2b:84: 3f:41:c3:55:d5:fb:bb:24:9e:18:da:59:45:f8:e1: ff:8c:5b:1d:ed:c9:5a:5f:59:bc:78:35:d9:7c:df: 90:62:bf:38:f6:61:32:e6:d2:14:23:5e:98:30:72: 0c:b1:f1:bc:e0:63:2f:d3:66:bb:e0:71:64:2b:e7: 32:a7:48:1c:2e:c3:1e:64:c2:87:10:e0:60:c3:c6: bd:26:cc:15:af:19:0f:62:5a:e7:fe:89:01:eb:46: e3:8c:4f:9b:e7:80:a0:0e:9f:29:d6:65:91:22:0d: 37:2d:9d:3b:c9:bb:9c:f8:09:e4:f7:aa:c7:25:a0: f1:60:ab:7e:80:3a:20:45:5c:7d:4c:f0:f8:9b:36: 06:e5:84:bb:f6:44:eb:a7:70:ba:ae:1e:4a:eb:5e: 76:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D4:66:F8:A2:1C:83:4C:AE:E9:36:CA:12:3D:A9:77:A4:6A:EB:6A X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:a0:fd:b8:d7:ea:f7:f7:83:8d:fc:15:56:d7:f0:9e:c7:2b: 34:c4:96:01:c6:11:32:38:10:d5:dc:db:41:6a:d7:2d:43:a0: 5a:38:69:e7:fa:01:95:d7:83:4f:3f:e2:0e:e0:e1:28:11:54: 00:ba:92:20:83:0f:f5:bb:b5:25:a3:f7:28:50:ef:59:02:88: 6a:79:49:66:35:43:fa:77:8f:10:cc:4f:27:d1:bc:e3:c2:75: 40:7e:28:28:50:da:5a:77:31:c1:13:08:9d:3e:de:0f:3f:e5: ad:d5:6a:ea:c4:b2:d8:4b:0f:07:10:a5:0e:95:bd:5e:e8:9b: da:10:3b:fc:91:4a:ea:c2:c2:09:e6:57:f2:93:6f:f5:88:88: 25:74:01:7a:43:f8:f7:98:7b:a2:16:ca:a3:6f:48:e4:13:52: a5:a6:b1:a3:63:21:2d:2c:a8:b0:17:2f:f5:89:07:33:de:13: d0:0f:9b:ff:98:a9:6a:0b:c8:47:0e:60:32:59:d7:6f:25:19: 5e:c8:c1:41:2c:e0:3c:2c:f6:52:4b:c7:b5:33:28:72:e3:00: 85:98:6e:dd:cb:c3:65:73:d0:5f:53:a4:77:54:5a:d7:ce:bc: a3:66:e3:fd:8d:de:4b:0d:d2:d0:5c:89:37:3e:9e:9a:c4:48: 1b:6d:38:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjUxMjA2MTc0MzU5WhcNMjUxMjEzMTc0MzU5WjAYMRYwFAYD VQQDEw02OTM0NmI1Zi1lNjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3eE13V+u84nJvWPlRenIEhtFG5gky1ViVVI3iuSiBte5lmT08wPJwteKGOvF niylBzxWcfnitmCX+Ok0Xz8S4XU1M2RNqpXKb0hsEJsJa8ME+uCpkEj/pCDMtfih fPgufRmwhGhlK4Q/QcNV1fu7JJ4Y2llF+OH/jFsd7claX1m8eDXZfN+QYr849mEy 5tIUI16YMHIMsfG84GMv02a74HFkK+cyp0gcLsMeZMKHEOBgw8a9JswVrxkPYlrn /okB60bjjE+b54CgDp8p1mWRIg03LZ07ybuc+Ank96rHJaDxYKt+gDogRVx9TPD4 mzYG5YS79kTrp3C6rh5K61522wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTUZvii HINMruk2yhI9qXekautqMB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEUzQS84RTQzRjVENjA2QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6 ejAyMXJaSVVUdnR4NlNaM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChoP241+r394ON/BVW1/Cexys0xJYBxhEyOBDV3NtBatctQ6BaOGnn +gGV14NPP+IO4OEoEVQAupIggw/1u7Ulo/coUO9ZAohqeUlmNUP6d48QzE8n0bzj wnVAfigoUNpadzHBEwidPt4PP+Wt1WrqxLLYSw8HEKUOlb1e6JvaEDv8kUrqwsIJ 5lfyk2/1iIgldAF6Q/j3mHuiFsqjb0jkE1KlprGjYyEtLKiwFy/1iQcz3hPQD5v/ mKlqC8hHDmAyWddvJRleyMFBLOA8LPZSS8e1Myhy4wCFmG7dy8Nlc9BfU6R3VFrX zryjZuP9jd5LDdLQXIk3Pp6axEgbbTj4 -----END CERTIFICATE-----Generated at Sat Dec 6 22:44:38 2025 by rpki-client