This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft File: H4-gq_qNf39-fqANVuoBxwky5gc.mft (raw, json) Hash identifier: uM/TnozKj0QTRWJIqBBRYVEsCL72RDvKfFS5ddGpO8o= Subject key identifier: 47:14:DB:D5:98:10:ED:1F:AB:D8:EB:C2:45:B4:75:D7:1D:C7:92:54 Authority key identifier: 1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07 Certificate issuer: /CN=A91BDD82/serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607 Certificate serial: 0F0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft Manifest number: 10A3 Signing time: Thu 18 Dec 2025 17:26:10 +0000 Manifest this update: Thu 18 Dec 2025 17:26:09 +0000 Manifest next update: Thu 25 Dec 2025 17:26:09 +0000 Files and hashes: 1: H4-gq_qNf39-fqANVuoBxwky5gc.crl (hash: 1xF4Kjj/WjM7Shb+9x2gKlHQCpdxG3OJYa63SQusgrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3850 (0xf0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDD82, serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607 Validity Not Before: Dec 18 17:26:09 2025 GMT Not After : Dec 25 17:26:09 2025 GMT Subject: CN=69443931-d725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:67:20:2b:12:ba:09:75:a0:cd:0b:e1:0c:4e: bf:f9:dd:82:e9:e1:ad:80:56:d0:74:6b:2b:19:f5: eb:70:8e:4f:ef:f7:e0:57:c6:32:9c:75:f2:05:05: c9:c0:1c:de:22:78:f4:75:cc:cc:f8:53:af:63:70: 20:f8:46:a4:1d:14:b0:f6:b5:e9:24:59:51:7e:3b: 28:01:7b:65:98:48:bf:97:4b:4c:a7:b2:87:1b:52: ff:6f:47:34:cd:4d:b9:d7:64:20:8d:72:a5:d3:23: 96:1c:26:65:6d:b8:f8:d6:e4:c0:7c:fa:a5:d9:d9: e3:47:84:81:70:83:97:b5:b2:82:1d:7c:9c:e7:dc: d5:c6:11:a7:19:3d:e2:4a:93:29:88:32:26:92:0e: f9:6a:8a:7e:87:37:95:cc:95:ea:6c:bc:a9:00:c1: 0b:58:02:ab:ff:4c:76:69:f6:53:73:84:6d:d4:61: 5b:11:ef:43:3a:90:19:74:09:b5:16:94:57:98:01: c5:20:df:5c:c9:ba:65:d1:e0:e5:a1:40:94:8f:c2: cd:5b:c6:b8:2e:4a:73:65:4b:4f:1e:89:48:66:f3: 4b:3f:c4:2d:75:20:35:89:41:1f:8b:ab:f1:92:9a: f6:56:01:62:7a:c1:92:ff:da:ba:4e:5a:b6:8d:72: 9c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:14:DB:D5:98:10:ED:1F:AB:D8:EB:C2:45:B4:75:D7:1D:C7:92:54 X509v3 Authority Key Identifier: keyid:1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:d2:1f:ca:c5:19:9b:ca:77:b9:bb:d8:22:51:59:df:55:dc: 28:46:4e:53:4e:6d:fa:00:81:df:92:92:31:ac:db:f5:55:14: dc:b2:07:4c:cd:00:d7:9a:30:54:50:da:95:7a:87:a3:2f:3f: 3f:90:e2:26:e9:fd:c9:2e:06:e0:2f:33:51:01:b7:97:df:1b: 9f:2d:30:7a:0c:cb:94:10:d0:22:f8:7d:f7:6e:ad:99:8a:79: 84:7b:2c:c6:4d:a5:a2:75:3f:8a:70:da:9d:f7:47:3e:19:51: 7f:56:a3:11:a9:5c:ae:4c:8a:8c:c1:b2:c8:e6:3e:7d:20:0a: 50:0a:7e:8a:3e:2b:37:1f:fe:63:4d:f4:63:f6:98:80:2f:a3: c7:44:82:71:73:a0:fa:8b:68:fc:af:9e:28:60:31:1b:82:4f: 99:9e:00:f3:08:46:ba:8a:bd:56:ad:15:79:f7:cc:a2:d7:51: a3:dd:a8:ff:5e:0e:4f:e1:e9:bf:91:9b:a0:e3:fb:04:ee:f2: 6f:88:a6:48:4f:6b:0a:8f:aa:0a:ca:fb:76:de:bd:f5:07:99: 48:e6:e1:a9:4e:95:bd:71:ad:e2:ae:54:56:4b:81:83:09:73: a9:58:e9:5e:09:a9:c8:b0:74:2b:d2:54:50:66:77:ee:2a:a5: cc:08:c6:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREODIxMTAvBgNVBAUTKDFGOEZBMEFCRkE4RDdGN0Y3RTdFQTAwRDU2RUEwMUM3 MDkzMkU2MDcwHhcNMjUxMjE4MTcyNjA5WhcNMjUxMjI1MTcyNjA5WjAYMRYwFAYD VQQDDA02OTQ0MzkzMS1kNzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmcgKxK6CXWgzQvhDE6/+d2C6eGtgFbQdGsrGfXrcI5P7/fgV8YynHXyBQXJ wBzeInj0dczM+FOvY3Ag+EakHRSw9rXpJFlRfjsoAXtlmEi/l0tMp7KHG1L/b0c0 zU2512QgjXKl0yOWHCZlbbj41uTAfPql2dnjR4SBcIOXtbKCHXyc59zVxhGnGT3i SpMpiDImkg75aop+hzeVzJXqbLypAMELWAKr/0x2afZTc4Rt1GFbEe9DOpAZdAm1 FpRXmAHFIN9cybpl0eDloUCUj8LNW8a4LkpzZUtPHolIZvNLP8QtdSA1iUEfi6vx kpr2VgFiesGS/9q6Tlq2jXKchwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcU29WY EO0fq9jrwkW0ddcdx5JUMB8GA1UdIwQYMBaAFB+PoKv6jX9/fn6gDVbqAccJMuYH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi9INC1ncV9xTmYzOS1mcUFOVnVvQnh3a3k1 Z2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g0LWdxX3FOZjM5LWZxQU5WdW9CeHdreTVnYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REQ4Mi8xOTdGOUQ5MjkxRTIxMUU5OTc2ODg5MEVDNEY5QUUwMi9INC1ncV9xTmYz OS1mcUFOVnVvQnh3a3k1Z2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk0h/KxRmbyne5u9giUVnfVdwoRk5TTm36AIHfkpIxrNv1VRTcsgdM zQDXmjBUUNqVeoejLz8/kOIm6f3JLgbgLzNRAbeX3xufLTB6DMuUENAi+H33bq2Z inmEeyzGTaWidT+KcNqd90c+GVF/VqMRqVyuTIqMwbLI5j59IApQCn6KPis3H/5j TfRj9piAL6PHRIJxc6D6i2j8r54oYDEbgk+ZngDzCEa6ir1WrRV598yi11Gj3aj/ Xg5P4em/kZug4/sE7vJviKZIT2sKj6oKyvt23r31B5lI5uGpTpW9ca3irlRWS4GD CXOpWOleCanIsHQr0lRQZnfuKqXMCMYy -----END CERTIFICATE-----Generated at Fri Dec 19 23:51:10 2025 by rpki-client