This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft File: hemZwivuAcMmTT0iZ1ghCS__0Cw.mft (raw, json) Hash identifier: fBeRrrlOSM7SWoHog1CiipYRCUXjZX9nPIfjCdcSSPc= Subject key identifier: 49:37:C1:63:0C:D9:63:DC:D8:CC:4F:48:DC:93:13:29:CC:24:0B:30 Authority key identifier: 85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C Certificate issuer: /CN=A91AC132/serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft Manifest number: C1 Signing time: Fri 19 Dec 2025 05:03:37 +0000 Manifest this update: Fri 19 Dec 2025 05:03:37 +0000 Manifest next update: Fri 26 Dec 2025 05:03:37 +0000 Files and hashes: 1: hemZwivuAcMmTT0iZ1ghCS__0Cw.crl (hash: H9f02uoCH2K1Fq1XSh9SOBvutEsC7TqcBraMOuO79Gg=) 2: 8B91AD8CD6B811EF86FC5149C4F9AE02.roa (hash: ztHcyied63n5u52LWMJ9U0s6jM6YVpsvBanXfX0Gx6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC132, serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C Validity Not Before: Dec 19 05:03:37 2025 GMT Not After : Dec 26 05:03:37 2025 GMT Subject: CN=6944dca9-f189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c9:76:96:15:b4:c6:7a:10:c7:3b:bc:2f:3a: 7a:ad:da:3e:fb:f4:ad:a3:43:85:5f:67:3b:d2:22: 6f:09:64:34:90:90:54:97:3c:74:f8:94:0a:ec:bb: 0c:95:87:27:ca:28:6c:63:dc:66:75:34:b5:aa:9f: cd:08:e5:45:e8:fd:c7:cd:31:fb:42:7c:f5:dc:6b: 63:42:34:8a:15:9d:5d:2c:6d:f1:72:28:36:f9:eb: b2:cc:c7:35:27:59:27:0e:84:79:34:aa:ac:03:4b: 47:0d:ca:6b:81:59:da:4b:46:73:30:e7:fb:67:54: 9f:91:cf:10:77:19:47:45:6f:f0:58:66:c2:0c:36: 04:5a:1a:86:76:13:7d:80:03:10:fb:a2:cc:79:dd: 63:49:d1:60:c1:65:b7:ec:56:dc:06:6d:17:e1:13: b0:26:4b:2c:01:d9:9f:98:02:fc:09:61:da:ff:dd: 3d:7b:3c:8c:35:01:6b:8e:95:e3:7a:2c:de:b3:c8: 16:a7:94:34:af:19:68:8c:4b:b9:6d:d5:1f:2d:4c: 76:b7:95:28:16:c6:42:fe:2e:3e:70:e9:93:dd:06: fd:5c:d8:d5:59:08:7e:e0:5e:52:18:fe:0d:bc:46: 88:c6:e7:a9:31:8b:9c:fa:94:28:37:f2:41:c2:53: 65:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:37:C1:63:0C:D9:63:DC:D8:CC:4F:48:DC:93:13:29:CC:24:0B:30 X509v3 Authority Key Identifier: keyid:85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:0c:bc:42:6e:37:b8:4d:cb:e7:29:71:f7:2e:36:98:3d:1f: e8:e9:bd:06:78:2b:59:0f:37:fe:89:dc:b4:af:33:fd:3c:93: 23:90:05:a5:d1:e0:aa:3a:65:00:78:7f:f5:53:a8:da:cb:b3: 5d:bb:ae:0e:a1:29:81:a4:07:3c:3a:ea:25:df:ce:3f:fe:79: db:5a:e5:7c:2d:d5:b3:4d:d2:ce:db:81:00:22:03:4c:8e:5f: a7:97:3f:75:d7:0a:d8:6f:11:c1:fb:28:dc:22:d8:9f:c6:c5: ca:05:4e:b1:5f:12:3d:e1:99:92:e9:01:bc:1f:41:69:1a:64: 5f:1c:fc:33:29:ef:4b:0c:b8:eb:de:fe:4d:71:f2:a5:4c:24: 73:20:f0:0c:7b:88:1b:48:69:af:17:07:42:42:9a:d3:72:94: 33:54:86:c9:64:d0:2d:26:b7:03:8a:be:01:dd:27:6e:24:a9: 7e:d4:9c:46:18:ea:d6:05:32:a6:98:c7:fc:fc:5d:5b:fd:c9: 01:d6:e8:ce:0d:2d:4e:36:b2:c9:29:38:b0:f5:57:47:c4:35: b4:9d:db:1e:5e:17:bb:83:eb:1f:2c:0e:ba:bc:4d:74:ad:1c: ad:e6:03:40:e3:ee:74:1b:44:15:5b:7a:38:ca:6e:5b:f1:c2: 0b:22:e3:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUMxMzIxMTAvBgNVBAUTKDg1RTk5OUMyMkJFRTAxQzMyNjREM0QyMjY3NTgyMTA5 MkZGRkQwMkMwHhcNMjUxMjE5MDUwMzM3WhcNMjUxMjI2MDUwMzM3WjAYMRYwFAYD VQQDDA02OTQ0ZGNhOS1mMTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA68l2lhW0xnoQxzu8Lzp6rdo++/Sto0OFX2c70iJvCWQ0kJBUlzx0+JQK7LsM lYcnyihsY9xmdTS1qp/NCOVF6P3HzTH7Qnz13GtjQjSKFZ1dLG3xcig2+euyzMc1 J1knDoR5NKqsA0tHDcprgVnaS0ZzMOf7Z1Sfkc8QdxlHRW/wWGbCDDYEWhqGdhN9 gAMQ+6LMed1jSdFgwWW37FbcBm0X4ROwJkssAdmfmAL8CWHa/909ezyMNQFrjpXj eizes8gWp5Q0rxlojEu5bdUfLUx2t5UoFsZC/i4+cOmT3Qb9XNjVWQh+4F5SGP4N vEaIxuepMYuc+pQoN/JBwlNlBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEk3wWMM 2WPc2MxPSNyTEynMJAswMB8GA1UdIwQYMBaAFIXpmcIr7gHDJk09ImdYIQkv/9As MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzEzMi9DNEZBMTRGOEI4 MEMxMUVGODRGQTNFMzVDNEY5QUUwMi9oZW1ad2l2dUFjTW1UVDBpWjFnaENTX18w Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlbVp3aXZ1QWNNbVRUMGlaMWdoQ1NfXzBDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzEzMi9DNEZBMTRGOEI4MEMxMUVGODRGQTNFMzVDNEY5QUUwMi9oZW1ad2l2dUFj TW1UVDBpWjFnaENTX18wQ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBADLxCbje4TcvnKXH3LjaYPR/o6b0GeCtZDzf+idy0rzP9PJMjkAWl 0eCqOmUAeH/1U6jay7Ndu64OoSmBpAc8Ouol384//nnbWuV8LdWzTdLO24EAIgNM jl+nlz911wrYbxHB+yjcItifxsXKBU6xXxI94ZmS6QG8H0FpGmRfHPwzKe9LDLjr 3v5NcfKlTCRzIPAMe4gbSGmvFwdCQprTcpQzVIbJZNAtJrcDir4B3SduJKl+1JxG GOrWBTKmmMf8/F1b/ckB1ujODS1ONrLJKTiw9VdHxDW0ndseXhe7g+sfLA66vE10 rRyt5gNA4+50G0QVW3o4ym5b8cILIuMp -----END CERTIFICATE-----Generated at Sat Dec 20 01:18:25 2025 by rpki-client