This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft File: HgeR690MlMNWujc9fg8BYQPUC5I.mft (raw, json) Hash identifier: EZigDcVq1Kzq8RBLWa1dPraM8uDCd/2xLAD5W+WWXJU= Subject key identifier: 94:89:41:F4:EF:E4:44:F4:DE:FA:C5:1F:31:3E:94:60:DE:D5:3C:18 Authority key identifier: 1E:07:91:EB:DD:0C:94:C3:56:BA:37:3D:7E:0F:01:61:03:D4:0B:92 Certificate issuer: /CN=A916D07E/serialNumber=1E0791EBDD0C94C356BA373D7E0F016103D40B92 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft Manifest number: 83 Signing time: Fri 19 Dec 2025 06:25:39 +0000 Manifest this update: Fri 19 Dec 2025 06:25:38 +0000 Manifest next update: Fri 26 Dec 2025 06:25:38 +0000 Files and hashes: 1: HgeR690MlMNWujc9fg8BYQPUC5I.crl (hash: yCdFx7bQ5VhJEmkFXsFmrItFlgzbl9+gwzN4UVloTEA=) 2: 6014E88A257E11F08DB64644C4F9AE02.roa (hash: 7eYSOQ3wsfu7KFAltY0onX1LYBjQ9AeeFQK0c0ksPU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.crl rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D07E, serialNumber=1E0791EBDD0C94C356BA373D7E0F016103D40B92 Validity Not Before: Dec 19 06:25:38 2025 GMT Not After : Dec 26 06:25:38 2025 GMT Subject: CN=6944efe3-f1f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:66:e3:12:73:8d:58:61:34:2d:67:6c:e5:ae: 6d:18:aa:a4:a1:ae:f4:dc:96:a3:c4:d4:f9:55:e0: cb:ca:c7:51:30:33:e8:32:fb:1f:71:11:aa:b0:66: e2:08:38:b5:99:34:48:b5:a7:9f:a4:b6:4a:91:71: 20:d1:cc:fa:af:0d:e7:c9:4c:21:54:c0:ed:3c:c1: 24:82:a9:00:bb:5a:3f:f9:26:d8:91:58:33:3d:5d: f3:0c:f7:a0:98:44:f1:2e:3d:9c:9d:89:73:58:03: 6c:78:d9:08:18:77:31:26:ad:44:8d:d3:cd:45:de: 44:46:19:c4:d1:11:d4:b4:d5:b0:b6:6e:58:23:83: 27:e7:87:53:c4:7d:23:ed:ce:e6:48:3b:b4:a6:de: f7:9b:73:21:af:52:e9:85:aa:44:b8:53:d1:95:a1: 28:bc:68:b8:69:60:e9:5c:fa:3c:2c:19:13:f2:c4: 47:05:d7:a0:a4:24:30:32:6a:a6:23:04:60:67:7d: 6e:2c:d1:7f:27:8f:aa:f0:20:3b:84:21:b3:f4:ff: b4:25:e4:b8:a5:53:a3:fa:e9:aa:2a:9d:04:ab:fc: de:45:d9:29:d1:3a:b0:4e:a4:de:ca:d5:ec:a1:98: fa:24:5d:02:d3:84:61:d2:65:57:fc:57:3d:a0:0a: 9c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:89:41:F4:EF:E4:44:F4:DE:FA:C5:1F:31:3E:94:60:DE:D5:3C:18 X509v3 Authority Key Identifier: keyid:1E:07:91:EB:DD:0C:94:C3:56:BA:37:3D:7E:0F:01:61:03:D4:0B:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:bd:35:e1:9c:6f:31:2b:86:64:3c:04:6b:b5:94:80:24:18: b1:49:58:12:51:06:b7:6b:06:d2:87:d5:99:5e:c9:75:db:82: 9c:4f:64:35:b0:2f:04:81:7e:1e:05:0b:4b:a7:ca:be:ff:3c: ce:82:5f:da:bd:3e:ed:9f:73:24:02:ca:ed:7a:04:ff:18:3c: 8d:c2:26:a9:8f:72:ad:bc:f8:fa:1e:b7:46:78:56:5f:f5:95: e3:27:31:77:ef:43:15:ef:63:96:74:e9:b8:67:ae:94:d8:a5: df:3c:2e:a1:7a:99:ce:0a:da:e7:8e:12:e9:74:13:71:ac:7b: 85:68:aa:95:49:e1:6c:78:61:9c:92:30:4a:30:7c:1d:21:32: 3d:18:fc:a3:0a:0c:b1:29:c6:90:51:89:d2:d8:ab:fa:97:a0: a0:05:3f:07:91:b5:f8:12:38:cb:89:84:5c:ce:b8:66:66:ae: 1e:5f:2e:2b:94:57:33:d1:6c:45:71:24:cd:87:31:d5:ec:49: 7f:28:db:1c:58:45:4f:99:d5:47:cc:6a:63:8c:4e:d6:b9:5e: 59:7e:d1:cc:6d:23:df:c4:6b:7d:bf:97:af:94:f0:71:05:ab: d5:e8:8a:16:39:70:01:d9:ed:90:33:36:b4:d7:94:b4:64:14: bb:7a:62:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NkQwN0UxMTAvBgNVBAUTKDFFMDc5MUVCREQwQzk0QzM1NkJBMzczRDdFMEYwMTYx MDNENDBCOTIwHhcNMjUxMjE5MDYyNTM4WhcNMjUxMjI2MDYyNTM4WjAYMRYwFAYD VQQDDA02OTQ0ZWZlMy1mMWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmbjEnONWGE0LWds5a5tGKqkoa703JajxNT5VeDLysdRMDPoMvsfcRGqsGbi CDi1mTRItaefpLZKkXEg0cz6rw3nyUwhVMDtPMEkgqkAu1o/+SbYkVgzPV3zDPeg mETxLj2cnYlzWANseNkIGHcxJq1EjdPNRd5ERhnE0RHUtNWwtm5YI4Mn54dTxH0j 7c7mSDu0pt73m3Mhr1LphapEuFPRlaEovGi4aWDpXPo8LBkT8sRHBdegpCQwMmqm IwRgZ31uLNF/J4+q8CA7hCGz9P+0JeS4pVOj+umqKp0Eq/zeRdkp0TqwTqTeytXs oZj6JF0C04Rh0mVX/Fc9oAqcuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSJQfTv 5ET03vrFHzE+lGDe1TwYMB8GA1UdIwQYMBaAFB4HkevdDJTDVro3PX4PAWED1AuS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDA3RS9FMDIzRjIxRTE1 MDcxMUYwODVGQjQ0NTVDNEY5QUUwMi9IZ2VSNjkwTWxNTld1amM5Zmc4QllRUFVD NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hnZVI2OTBNbE1OV3VqYzlmZzhCWVFQVUM1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDA3RS9FMDIzRjIxRTE1MDcxMUYwODVGQjQ0NTVDNEY5QUUwMi9IZ2VSNjkwTWxN Tld1amM5Zmc4QllRUFVDNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASvTXhnG8xK4ZkPARrtZSAJBixSVgSUQa3awbSh9WZXsl124KcT2Q1 sC8EgX4eBQtLp8q+/zzOgl/avT7tn3MkAsrtegT/GDyNwiapj3KtvPj6HrdGeFZf 9ZXjJzF370MV72OWdOm4Z66U2KXfPC6hepnOCtrnjhLpdBNxrHuFaKqVSeFseGGc kjBKMHwdITI9GPyjCgyxKcaQUYnS2Kv6l6CgBT8HkbX4EjjLiYRczrhmZq4eXy4r lFcz0WxFcSTNhzHV7El/KNscWEVPmdVHzGpjjE7WuV5ZftHMbSPfxGt9v5evlPBx BavV6IoWOXAB2e2QMza015S0ZBS7emKy -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:42 2025 by rpki-client