This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft File: HLQwTtZoyPcWQT79ZhdMOGcMics.mft (raw, json) Hash identifier: zsEQMJ9lXpV1veiWQsfeaXY9VNri8ezAsbT8Z4qc5xw= Subject key identifier: B0:30:D5:16:CC:85:BF:B8:96:08:C1:30:82:37:70:52:C1:0D:9D:85 Authority key identifier: 1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB Certificate issuer: /CN=A91B4286/serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB Certificate serial: 1476 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft Manifest number: 146D Signing time: Fri 26 Dec 2025 16:37:11 +0000 Manifest this update: Fri 26 Dec 2025 16:37:11 +0000 Manifest next update: Fri 02 Jan 2026 16:37:11 +0000 Files and hashes: 1: HLQwTtZoyPcWQT79ZhdMOGcMics.crl (hash: etqRp1yNHy6d8PUof0GyaDbS0KFcyrJPUvSwp34yWyA=) 2: 1CA71D84493D11EAAB30C638C4F9AE02.roa (hash: Namfm+gMj3DTGbqctWwU+VBkFxpSXUjfjiuK5KjjSb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 16:37:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5238 (0x1476) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4286, serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB Validity Not Before: Dec 26 16:37:11 2025 GMT Not After : Jan 2 16:37:11 2026 GMT Subject: CN=694eb9b7-aa64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6a:6f:03:a9:17:c2:12:ae:37:9b:dc:b8:fe: 1f:9b:6a:fd:81:31:38:98:e8:b5:a8:0c:4f:14:e5: 11:01:d7:c9:dd:f3:b7:43:83:17:91:d7:45:cd:26: 79:8c:46:3b:f6:ff:a1:10:57:a7:6f:45:fa:46:c2: bf:21:e3:b5:ea:d1:2f:72:92:28:17:66:4d:4c:3d: 48:bb:23:e3:ff:2e:af:52:97:4c:58:4a:ec:c7:93: 52:65:05:c5:28:6b:6d:bf:80:10:79:fa:aa:24:2c: e6:1f:3e:45:a5:3c:2e:56:fb:1e:07:d6:09:fa:96: 67:3d:ea:cc:5e:2c:0a:73:f6:0f:2a:de:bc:82:32: 71:37:ed:6b:28:c3:82:58:f6:5b:db:ec:cb:7d:00: 54:b3:57:8e:42:7d:55:b8:ea:5c:4c:7a:fd:c6:a7: 6c:aa:68:d4:56:5a:9f:2b:e9:bf:bb:7c:78:a7:4a: 89:b2:d2:86:c7:46:18:05:d3:63:c9:77:4e:3b:90: 90:2a:e4:26:9d:91:f5:0d:5b:ea:e3:01:00:5a:0f: a6:83:a7:1f:64:e0:df:ae:11:db:bd:cd:41:c3:0b: 4f:71:d3:c0:70:89:b9:12:d1:1e:3c:2c:98:a2:cd: 00:1c:b0:15:c7:53:bf:9e:f9:ea:fd:2c:77:68:76: 64:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:30:D5:16:CC:85:BF:B8:96:08:C1:30:82:37:70:52:C1:0D:9D:85 X509v3 Authority Key Identifier: keyid:1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:65:4e:c7:bf:58:fe:50:4d:53:b0:70:95:b8:08:fb:1e:9b: c7:ef:a3:8a:7b:a8:10:8a:8b:66:51:45:92:bb:1c:ec:fe:76: 8a:22:b8:b8:63:cd:27:8f:96:80:41:dd:88:a6:ea:5b:da:3f: c5:b3:aa:30:f7:a6:88:55:79:22:04:6d:a2:75:6b:14:4c:0a: 4d:09:05:0c:a5:ab:da:09:43:ed:73:f6:bf:dd:2c:d7:4e:a2: 87:0f:1a:20:25:fb:b4:f9:c2:82:4d:55:ef:c2:c9:23:ce:5b: cc:85:e3:14:6c:6e:b6:26:63:2a:7c:aa:56:ae:a9:03:b0:a5: 48:f1:7d:e0:b6:63:b8:07:c1:25:0e:0c:5b:65:84:f6:0b:a2: bb:75:a3:5e:d7:8e:4d:c2:ea:3c:e7:6b:a6:77:92:70:45:a4: 18:76:fc:d5:b2:f8:a5:c4:89:e0:a6:a4:97:e8:c5:5f:23:42: a2:32:d3:14:eb:40:9c:12:be:91:69:a6:c2:99:68:de:66:f8: f8:c6:dd:86:f8:b2:61:ec:96:d3:79:19:41:49:0f:d9:f3:c8: ab:d7:a0:4d:0d:fa:56:2b:e6:b4:d6:62:a3:63:f2:e1:71:be: e5:d4:24:b4:cd:ce:53:dd:95:cf:0d:a1:b6:7f:de:a5:26:59: 1a:81:b1:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyODYxMTAvBgNVBAUTKDFDQjQzMDRFRDY2OEM4RjcxNjQxM0VGRDY2MTc0QzM4 NjcwQzg5Q0IwHhcNMjUxMjI2MTYzNzExWhcNMjYwMTAyMTYzNzExWjAYMRYwFAYD VQQDDA02OTRlYjliNy1hYTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WpvA6kXwhKuN5vcuP4fm2r9gTE4mOi1qAxPFOURAdfJ3fO3Q4MXkddFzSZ5 jEY79v+hEFenb0X6RsK/IeO16tEvcpIoF2ZNTD1IuyPj/y6vUpdMWErsx5NSZQXF KGttv4AQefqqJCzmHz5FpTwuVvseB9YJ+pZnPerMXiwKc/YPKt68gjJxN+1rKMOC WPZb2+zLfQBUs1eOQn1VuOpcTHr9xqdsqmjUVlqfK+m/u3x4p0qJstKGx0YYBdNj yXdOO5CQKuQmnZH1DVvq4wEAWg+mg6cfZODfrhHbvc1BwwtPcdPAcIm5EtEePCyY os0AHLAVx1O/nvnq/Sx3aHZkawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAw1RbM hb+4lgjBMII3cFLBDZ2FMB8GA1UdIwQYMBaAFBy0ME7WaMj3FkE+/WYXTDhnDInL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDI4Ni9CMjFBQTA5NDdG NDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQY1dRVDc5WmhkTU9HY01p Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hMUXdUdFpveVBjV1FUNzlaaGRNT0djTWljcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDI4Ni9CMjFBQTA5NDdGNDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQ Y1dRVDc5WmhkTU9HY01pY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7ZU7Hv1j+UE1TsHCVuAj7HpvH76OKe6gQiotmUUWSuxzs/naKIri4 Y80nj5aAQd2Ipupb2j/Fs6ow96aIVXkiBG2idWsUTApNCQUMpavaCUPtc/a/3SzX TqKHDxogJfu0+cKCTVXvwskjzlvMheMUbG62JmMqfKpWrqkDsKVI8X3gtmO4B8El DgxbZYT2C6K7daNe145Nwuo852umd5JwRaQYdvzVsvilxIngpqSX6MVfI0KiMtMU 60CcEr6RaabCmWjeZvj4xt2G+LJh7JbTeRlBSQ/Z88ir16BNDfpWK+a01mKjY/Lh cb7l1CS0zc5T3ZXPDaG2f96lJlkagbG1 -----END CERTIFICATE-----Generated at Sat Dec 27 12:35:15 2025 by rpki-client