This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft File: hhIZKNm0AeMdansgbrAWLThuBHI.mft (raw, json) Hash identifier: X3J34I6lB/s/833qcJrdkmAkLpEM+YwL8VEYrLqnHoA= Subject key identifier: C9:F3:B6:8D:46:1D:2A:99:2D:7C:03:A7:25:7A:12:2B:FA:4A:77:D3 Authority key identifier: 86:12:19:28:D9:B4:01:E3:1D:6A:7B:20:6E:B0:16:2D:38:6E:04:72 Certificate issuer: /CN=A91B8C6C/serialNumber=86121928D9B401E31D6A7B206EB0162D386E0472 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hhIZKNm0AeMdansgbrAWLThuBHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft Manifest number: 06 Signing time: Thu 18 Dec 2025 15:03:59 +0000 Manifest this update: Thu 18 Dec 2025 15:03:59 +0000 Manifest next update: Thu 25 Dec 2025 15:03:59 +0000 Files and hashes: 1: hhIZKNm0AeMdansgbrAWLThuBHI.crl (hash: MDr7a5liaIsiN0768djx7Ubx+eWHAw4hsFl6fAPQRzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.crl rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hhIZKNm0AeMdansgbrAWLThuBHI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:03:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C6C, serialNumber=86121928D9B401E31D6A7B206EB0162D386E0472 Validity Not Before: Dec 18 15:03:59 2025 GMT Not After : Dec 25 15:03:59 2025 GMT Subject: CN=694417df-ca93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a3:12:65:3b:20:c9:1e:b2:e1:34:f1:29:12: 24:39:87:fe:fa:36:84:07:47:35:ce:71:50:97:c5: 19:de:2f:d1:f9:f7:05:11:51:9a:c4:02:16:b8:70: 54:ad:6c:a9:a2:51:a4:71:87:89:65:37:c8:5e:80: 93:ab:56:3a:f1:0c:64:86:92:3e:5d:da:35:ce:8e: 55:49:cf:15:98:fe:94:db:12:be:8c:27:77:a7:bb: ab:d3:77:89:d9:2b:9f:37:10:6d:49:c1:b0:d9:08: 79:2b:50:74:3c:ad:53:ef:e3:fa:2b:91:f7:a0:c7: 32:57:1d:42:1e:57:fe:a6:2c:5c:23:71:dd:ec:32: e0:07:c3:a1:a7:ed:90:b4:a6:0e:76:02:f9:9c:92: ef:21:38:83:83:5b:28:59:ce:3f:bb:e2:f3:a0:4c: dc:11:b2:5f:10:bb:ed:e7:8a:01:06:f5:6d:26:5c: f6:00:2b:b5:8f:80:f0:3f:58:e3:23:cd:71:10:2d: 07:61:47:fc:8b:cc:d2:f4:ae:6a:d3:02:c8:dd:d5: cc:4f:9d:6d:b5:85:5f:31:df:6f:8c:fe:3e:fc:47: 26:3d:44:2d:6b:91:b9:a4:e4:ad:61:2e:57:be:52: d1:a8:0b:65:26:10:fe:6c:5b:03:75:cc:a6:df:ef: 7d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F3:B6:8D:46:1D:2A:99:2D:7C:03:A7:25:7A:12:2B:FA:4A:77:D3 X509v3 Authority Key Identifier: keyid:86:12:19:28:D9:B4:01:E3:1D:6A:7B:20:6E:B0:16:2D:38:6E:04:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hhIZKNm0AeMdansgbrAWLThuBHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:eb:a6:69:a8:60:3b:db:64:30:54:f7:55:60:ab:ca:a6:8f: 4b:92:98:d6:a9:fc:f8:09:d7:82:4c:ac:5a:f5:d2:44:31:58: 40:df:40:b1:69:32:fd:48:a7:0d:35:23:42:09:91:0f:40:6e: e0:01:f1:6b:dc:9a:45:0d:38:6f:6d:a4:0d:71:81:ee:b1:44: f2:40:ca:3b:85:71:4f:1a:3b:15:5d:67:f7:66:db:5e:20:90: be:31:00:a8:7e:ef:dd:1b:f5:ec:5e:c1:21:45:4e:24:7f:04: b6:8d:3c:c6:c9:c1:db:86:0c:70:93:5c:8c:b1:2f:19:16:00: 38:05:73:b5:f7:d4:7f:83:af:78:89:c9:0f:1d:85:87:87:09: 59:c3:50:9e:0f:c7:f1:6c:bd:7a:93:21:93:2b:22:64:b2:e2: 73:cb:ee:b6:83:fc:c1:23:ec:4a:3c:d0:91:f9:9a:18:d0:34: 40:0c:7b:88:67:e3:0a:40:0d:2c:e2:8a:4d:79:6b:c8:bf:95: 50:f2:53:25:6f:b2:dd:a6:e5:04:fd:86:c0:e3:75:b9:40:69: bf:27:82:f8:af:ef:be:ac:a9:e6:b8:f7:c4:aa:e7:3c:0d:ec: 0a:d0:36:7a:a2:00:2f:bb:e3:7f:4c:8f:ac:5c:e0:b5:ac:c5: be:0b:92:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEM2QzExMC8GA1UEBRMoODYxMjE5MjhEOUI0MDFFMzFENkE3QjIwNkVCMDE2MkQz ODZFMDQ3MjAeFw0yNTEyMTgxNTAzNTlaFw0yNTEyMjUxNTAzNTlaMBgxFjAUBgNV BAMMDTY5NDQxN2RmLWNhOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxoxJlOyDJHrLhNPEpEiQ5h/76NoQHRzXOcVCXxRneL9H59wURUZrEAha4cFSt bKmiUaRxh4llN8hegJOrVjrxDGSGkj5d2jXOjlVJzxWY/pTbEr6MJ3enu6vTd4nZ K583EG1JwbDZCHkrUHQ8rVPv4/orkfegxzJXHUIeV/6mLFwjcd3sMuAHw6Gn7ZC0 pg52Avmcku8hOIODWyhZzj+74vOgTNwRsl8Qu+3nigEG9W0mXPYAK7WPgPA/WOMj zXEQLQdhR/yLzNL0rmrTAsjd1cxPnW21hV8x32+M/j78RyY9RC1rkbmk5K1hLle+ UtGoC2UmEP5sWwN1zKbf730lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyfO2jUYd KpktfAOnJXoSK/pKd9MwHwYDVR0jBBgwFoAUhhIZKNm0AeMdansgbrAWLThuBHIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QzZDLzMwQTU0RjZDRDY1 RjExRjBCMDZGRDhBMjBBQjQzRTEzL2hoSVpLTm0wQWVNZGFuc2dickFXTFRodUJI SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaGhJWktObTBBZU1kYW5zZ2JyQVdMVGh1QkhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 QzZDLzMwQTU0RjZDRDY1RjExRjBCMDZGRDhBMjBBQjQzRTEzL2hoSVpLTm0wQWVN ZGFuc2dickFXTFRodUJISS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEjrpmmoYDvbZDBU91Vgq8qmj0uSmNap/PgJ14JMrFr10kQxWEDfQLFp Mv1Ipw01I0IJkQ9AbuAB8WvcmkUNOG9tpA1xge6xRPJAyjuFcU8aOxVdZ/dm214g kL4xAKh+790b9exewSFFTiR/BLaNPMbJwduGDHCTXIyxLxkWADgFc7X31H+Dr3iJ yQ8dhYeHCVnDUJ4Px/FsvXqTIZMrImSy4nPL7raD/MEj7Eo80JH5mhjQNEAMe4hn 4wpADSziik15a8i/lVDyUyVvst2m5QT9hsDjdblAab8ngviv776sqea498Sq5zwN 7ArQNnqiAC+7439Mj6xc4LWsxb4Lkos= -----END CERTIFICATE-----Generated at Sat Dec 20 00:28:11 2025 by rpki-client