This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft File: r_hffvPaWIdDjdIGHy6e4LLdCn8.mft (raw, json) Hash identifier: lVoL09BMdqDvWFHqdTZ8tg8GHaklcRRXBYznMspNEOo= Subject key identifier: 4C:69:CB:EB:B4:00:2F:46:3A:38:B5:DF:C2:1F:AA:C8:4F:CB:2A:56 Authority key identifier: AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F Certificate issuer: /CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft Manifest number: 0201 Signing time: Tue 23 Dec 2025 01:31:33 +0000 Manifest this update: Tue 23 Dec 2025 01:31:33 +0000 Manifest next update: Tue 30 Dec 2025 01:31:33 +0000 Files and hashes: 1: r_hffvPaWIdDjdIGHy6e4LLdCn8.crl (hash: jlONpLScaTHpsdY5op/dXHJu2Ta73kUc5L5puOzWi28=) 2: D4D84D08DA9211ED99CD1D28C4F9AE02.roa (hash: MnDi5zIly9ESguHuvmf3VgR/9XTexkHTRfRhiBCHX8Q=) 3: 8E54F1C6D47711EEBC3E5019C4F9AE02.roa (hash: IrYN/pS7dnASKDxXmePvjb6bA3nISZUXgp/s+ESuDSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E5F6, serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Validity Not Before: Dec 23 01:31:33 2025 GMT Not After : Dec 30 01:31:33 2025 GMT Subject: CN=6949f0f5-7084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e9:a3:a2:47:fa:93:8d:e0:2f:08:a4:b9:0d: c9:62:c7:02:07:f0:b9:4a:0d:b0:15:4d:8d:62:b1: 8c:26:62:16:9d:db:72:11:21:11:35:57:d0:16:ab: 20:a0:1f:b1:ba:56:47:63:eb:5e:94:11:94:7f:e7: 84:a4:03:73:46:41:5c:1b:e4:57:9f:f0:f1:5b:9a: 36:36:c4:58:1e:35:a6:23:f0:25:23:ea:1a:e9:58: 9d:5f:2f:13:8c:53:1c:c4:2d:32:86:97:b0:0b:dd: e1:fb:c5:91:72:35:2a:3b:8b:1d:90:48:03:1e:ce: f7:d3:52:ac:a9:9e:1b:ca:62:b0:70:9e:40:4a:df: 79:9f:bc:78:d0:17:20:ed:d9:09:91:9f:c9:d8:58: 4a:24:87:dc:01:f7:59:9b:4f:f9:2a:0a:01:1c:73: 8f:c6:de:6e:0a:19:dc:d2:0e:07:38:c8:80:19:eb: fb:9a:2f:e3:b8:54:29:c6:60:b9:88:82:bf:8d:cd: 31:00:84:7b:bf:38:1a:b0:05:b9:aa:6a:5c:6b:2a: 49:cc:12:1e:cd:de:07:75:72:89:d6:e2:68:d6:a3: 3a:02:01:16:ce:d3:6a:77:aa:cf:ad:e4:2a:19:07: b7:1f:c4:41:cb:bd:59:1b:29:8e:5f:d1:51:b7:eb: 40:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:69:CB:EB:B4:00:2F:46:3A:38:B5:DF:C2:1F:AA:C8:4F:CB:2A:56 X509v3 Authority Key Identifier: keyid:AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ac:69:bc:ba:30:94:73:6f:34:4d:29:0a:82:22:42:10:24: 43:bd:34:38:fd:7c:9e:c4:66:22:d7:1b:55:bb:db:45:e9:15: e9:b6:ce:7d:50:f9:93:31:ae:08:c0:21:2b:f4:de:55:df:be: 6e:f4:21:a5:76:29:82:5b:60:40:99:f9:1a:70:20:8f:92:f7: 8c:e2:fe:ec:dc:97:c8:e1:5e:47:f3:d9:f6:60:c1:e0:ed:b9: 47:e6:49:b5:ed:00:dc:bf:e5:06:7f:af:95:b1:97:16:11:88: 21:64:d2:aa:50:e4:c8:42:ea:32:2d:63:2b:98:a2:3b:74:9d: 13:f4:10:8c:1c:91:22:04:c7:91:c9:ee:b1:28:da:d1:80:75: c8:9d:a7:8d:07:2a:97:c7:92:88:f4:36:b7:4a:63:94:cc:af: 56:d1:96:32:f4:3c:fb:61:bb:5e:94:61:e8:80:20:20:46:e6: b5:7a:01:95:d7:61:2c:3c:e7:0f:b7:92:fa:d8:a0:71:9d:43: a2:e4:c5:bc:52:98:5d:9a:99:e0:c0:d7:60:68:fd:6f:bf:53: 8b:01:7f:6c:89:c2:14:f9:24:c3:f0:b4:1f:f3:a9:77:bf:10: 03:c7:5e:f8:8e:a7:d8:7b:7b:4a:48:90:d9:c1:a7:e3:9e:e4: c6:84:87:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU1RjYxMTAvBgNVBAUTKEFGRjg1RjdFRjNEQTU4ODc0MzhERDIwNjFGMkU5RUUw QjJERDBBN0YwHhcNMjUxMjIzMDEzMTMzWhcNMjUxMjMwMDEzMTMzWjAYMRYwFAYD VQQDDA02OTQ5ZjBmNS03MDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiOmjokf6k43gLwikuQ3JYscCB/C5Sg2wFU2NYrGMJmIWndtyESERNVfQFqsg oB+xulZHY+telBGUf+eEpANzRkFcG+RXn/DxW5o2NsRYHjWmI/AlI+oa6VidXy8T jFMcxC0yhpewC93h+8WRcjUqO4sdkEgDHs7301KsqZ4bymKwcJ5ASt95n7x40Bcg 7dkJkZ/J2FhKJIfcAfdZm0/5KgoBHHOPxt5uChnc0g4HOMiAGev7mi/juFQpxmC5 iIK/jc0xAIR7vzgasAW5qmpcaypJzBIezd4HdXKJ1uJo1qM6AgEWztNqd6rPreQq GQe3H8RBy71ZGymOX9FRt+tAxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExpy+u0 AC9GOji138IfqshPyypWMB8GA1UdIwQYMBaAFK/4X37z2liHQ43SBh8unuCy3Qp/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTVGNi9CQ0E2NkI3RURB OEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJZERqZElHSHk2ZTRMTGRD bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JfaGZmdlBhV0lkRGpkSUdIeTZlNExMZENuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTVGNi9CQ0E2NkI3RURBOEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJ ZERqZElHSHk2ZTRMTGRDbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBarGm8ujCUc280TSkKgiJCECRDvTQ4/XyexGYi1xtVu9tF6RXpts59 UPmTMa4IwCEr9N5V375u9CGldimCW2BAmfkacCCPkveM4v7s3JfI4V5H89n2YMHg 7blH5km17QDcv+UGf6+VsZcWEYghZNKqUOTIQuoyLWMrmKI7dJ0T9BCMHJEiBMeR ye6xKNrRgHXInaeNByqXx5KI9Da3SmOUzK9W0ZYy9Dz7YbtelGHogCAgRua1egGV 12EsPOcPt5L62KBxnUOi5MW8UphdmpngwNdgaP1vv1OLAX9sicIU+STD8LQf86l3 vxADx174jqfYe3tKSJDZwafjnuTGhIcG -----END CERTIFICATE-----Generated at Wed Dec 24 10:04:08 2025 by rpki-client