This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft File: Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft (raw, json) Hash identifier: 8YZoEPaY2gg7fbCFEZ/mQC5zuK5nHiCPMeTWoxMwq8E= Subject key identifier: 02:5B:03:84:04:56:7B:BD:51:9B:97:40:80:24:D8:01:3E:A1:E5:8C Authority key identifier: 1E:FE:82:9F:16:00:78:C0:6C:9A:15:69:65:42:57:96:87:45:0B:74 Certificate issuer: /CN=A91B7046/serialNumber=1EFE829F160078C06C9A15696542579687450B74 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft Manifest number: 013C Signing time: Fri 26 Dec 2025 23:44:37 +0000 Manifest this update: Fri 26 Dec 2025 23:44:37 +0000 Manifest next update: Fri 02 Jan 2026 23:44:37 +0000 Files and hashes: 1: Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl (hash: 1EaYAt3Hka8lMfuaHgwTdmwANYloV7SG0ikf1pJ/QfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 22:51:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7046, serialNumber=1EFE829F160078C06C9A15696542579687450B74 Validity Not Before: Dec 26 23:44:37 2025 GMT Not After : Jan 2 23:44:37 2026 GMT Subject: CN=694f1de5-7139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:30:01:95:1f:7d:9c:86:c7:1c:d4:d4:18:12: 26:7c:a3:a9:4f:80:bf:2c:45:9a:fb:ae:8d:d2:40: bd:1c:92:e8:2d:86:e3:03:f6:80:9a:30:b5:fa:86: 7a:dd:25:2d:69:6a:6f:f4:7a:7a:b2:6b:e8:a4:e0: 51:4f:f0:90:be:3d:89:28:15:81:02:d7:33:53:14: da:11:89:6f:48:05:9f:da:77:6e:af:b7:bc:43:03: 68:00:9a:ef:64:93:ab:57:52:4a:bf:a4:db:5a:3d: b5:31:62:b5:6e:64:11:ec:08:b7:ed:c5:0b:19:04: 42:b3:76:03:90:cb:af:fd:90:ff:df:3f:e2:93:b2: 3a:5f:dc:d2:51:f0:d7:7d:ce:49:42:14:14:7b:82: f6:b0:0a:c4:9f:7b:70:47:f6:63:27:6c:d1:2a:6f: 42:95:96:a7:9a:e7:cb:c2:8f:b4:34:6a:13:3b:ce: 51:7d:f7:75:99:aa:76:8e:b7:10:d4:c8:b0:25:84: 16:9f:3b:95:29:ff:8d:b0:f0:63:da:fb:29:00:14: f5:d5:24:c9:c5:42:c2:97:99:4d:32:71:6c:4c:8b: 69:55:77:db:b2:54:b1:fb:72:49:79:54:c1:7a:74: 26:1b:27:de:d1:b0:15:75:e5:ea:69:2c:c7:ba:3e: eb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5B:03:84:04:56:7B:BD:51:9B:97:40:80:24:D8:01:3E:A1:E5:8C X509v3 Authority Key Identifier: keyid:1E:FE:82:9F:16:00:78:C0:6C:9A:15:69:65:42:57:96:87:45:0B:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:9e:0c:47:aa:32:5f:ff:37:75:5d:e8:a9:6a:fe:8a:f9:0b: 6c:3e:9a:a8:04:f7:32:2e:48:ed:eb:f5:b7:f4:3a:e8:b1:91: 08:80:71:93:c6:d6:c3:29:32:2d:06:b3:95:ed:ac:93:ca:c1: 0c:50:31:d6:6f:e8:aa:cd:82:ad:4c:1f:30:ec:ae:e9:f6:4f: 94:e4:88:d3:e9:db:4d:41:f2:6b:08:29:7d:6b:02:73:9f:16: 46:f3:74:9b:57:fb:51:db:b2:aa:6c:c0:da:43:0f:46:3d:20: 76:ef:60:a3:45:4f:32:36:70:47:d6:4a:6d:34:80:ef:36:c0: 0f:b6:4a:15:ec:00:07:cb:fc:1b:0c:27:b9:f3:71:87:d8:fc: 6c:e9:ec:1c:25:f2:91:46:77:8d:a7:46:c3:8c:b2:24:30:c3: d7:44:bd:a3:34:61:be:6b:0d:89:6e:19:2f:d5:e1:18:a7:55: d6:03:80:1a:bc:a6:7b:9d:a0:43:4b:97:14:75:e2:9c:68:6b: b9:5f:d7:51:b2:65:63:fa:92:62:73:84:db:dc:b7:79:ae:e2: 59:93:4b:31:d4:d7:8d:d5:c4:82:38:cc:25:13:27:3e:76:49: f5:ee:15:70:1e:1d:91:a1:69:d8:99:71:bc:3f:10:cb:6b:f1: 40:8a:7c:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcwNDYxMTAvBgNVBAUTKDFFRkU4MjlGMTYwMDc4QzA2QzlBMTU2OTY1NDI1Nzk2 ODc0NTBCNzQwHhcNMjUxMjI2MjM0NDM3WhcNMjYwMTAyMjM0NDM3WjAYMRYwFAYD VQQDDA02OTRmMWRlNS03MTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjABlR99nIbHHNTUGBImfKOpT4C/LEWa+66N0kC9HJLoLYbjA/aAmjC1+oZ6 3SUtaWpv9Hp6smvopOBRT/CQvj2JKBWBAtczUxTaEYlvSAWf2ndur7e8QwNoAJrv ZJOrV1JKv6TbWj21MWK1bmQR7Ai37cULGQRCs3YDkMuv/ZD/3z/ik7I6X9zSUfDX fc5JQhQUe4L2sArEn3twR/ZjJ2zRKm9ClZanmufLwo+0NGoTO85Rffd1map2jrcQ 1MiwJYQWnzuVKf+NsPBj2vspABT11STJxULCl5lNMnFsTItpVXfbslSx+3JJeVTB enQmGyfe0bAVdeXqaSzHuj7r7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJbA4QE Vnu9UZuXQIAk2AE+oeWMMB8GA1UdIwQYMBaAFB7+gp8WAHjAbJoVaWVCV5aHRQt0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzA0Ni9BMjIwMDNEMkZE RkIxMUVFQTkxMEQ3ODdDNEY5QUUwMi9IdjZDbnhZQWVNQnNtaFZwWlVKWGxvZEZD M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2NkNueFlBZU1Cc21oVnBaVUpYbG9kRkMzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzA0Ni9BMjIwMDNEMkZERkIxMUVFQTkxMEQ3ODdDNEY5QUUwMi9IdjZDbnhZQWVN QnNtaFZwWlVKWGxvZEZDM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVngxHqjJf/zd1Xeipav6K+QtsPpqoBPcyLkjt6/W39DrosZEIgHGT xtbDKTItBrOV7ayTysEMUDHWb+iqzYKtTB8w7K7p9k+U5IjT6dtNQfJrCCl9awJz nxZG83SbV/tR27KqbMDaQw9GPSB272CjRU8yNnBH1kptNIDvNsAPtkoV7AAHy/wb DCe583GH2Pxs6ewcJfKRRneNp0bDjLIkMMPXRL2jNGG+aw2Jbhkv1eEYp1XWA4Aa vKZ7naBDS5cUdeKcaGu5X9dRsmVj+pJic4Tb3Ld5ruJZk0sx1NeN1cSCOMwlEyc+ dkn17hVwHh2RoWnYmXG8PxDLa/FAinzk -----END CERTIFICATE-----Generated at Sat Dec 27 00:48:00 2025 by rpki-client