This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft File: hsjX-0IuFSejmUSD0fne8sYKMHI.mft (raw, json) Hash identifier: FW9QnvHh7Av4MLTb3kxGVQ9zwM2qTu4YONgNRVPOXSY= Subject key identifier: 72:C3:79:F1:5B:54:AE:B8:09:1B:CE:A6:86:69:4E:F9:43:75:55:EB Authority key identifier: 86:C8:D7:FB:42:2E:15:27:A3:99:44:83:D1:F9:DE:F2:C6:0A:30:72 Certificate issuer: /CN=A91BEB11/serialNumber=86C8D7FB422E1527A3994483D1F9DEF2C60A3072 Certificate serial: 34EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft Manifest number: 34EB Signing time: Thu 18 Dec 2025 14:52:53 +0000 Manifest this update: Thu 18 Dec 2025 14:52:52 +0000 Manifest next update: Thu 25 Dec 2025 14:52:52 +0000 Files and hashes: 1: hsjX-0IuFSejmUSD0fne8sYKMHI.crl (hash: swX6mjPXOMUWviUCSvuJueBD/7avpblhtLuUeJm1TAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.crl rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:52:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13547 (0x34eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEB11, serialNumber=86C8D7FB422E1527A3994483D1F9DEF2C60A3072 Validity Not Before: Dec 18 14:52:52 2025 GMT Not After : Dec 25 14:52:52 2025 GMT Subject: CN=69441545-f6db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b2:52:61:7b:d1:5d:a9:f0:66:78:aa:dc:ff: cb:d2:ef:0a:54:bf:c8:bf:57:36:68:af:96:20:14: c7:f2:fd:44:23:bd:58:3f:53:79:9b:53:2c:58:22: be:78:48:36:2a:31:c7:82:e3:db:9f:94:22:e6:a4: 52:d0:63:2f:47:d0:af:39:0b:dc:5d:ce:f0:01:0a: cc:b1:ed:16:27:42:2c:46:26:1d:61:e8:c7:5e:b1: 27:28:ca:b5:2a:90:58:cf:2e:60:82:ca:d8:ba:e3: 0e:18:12:b1:50:98:c5:b1:e6:04:0f:b9:7d:61:1f: 35:1a:32:0a:59:d9:4f:d9:24:73:45:c4:9e:be:1e: ef:e7:19:9a:9a:ef:24:5c:39:06:7a:6a:a6:dc:c6: fb:fa:e2:f6:1d:c9:5b:ea:75:12:86:43:94:03:4b: f9:e5:c7:65:b5:f1:17:3c:36:ad:70:ff:fc:a2:db: 94:3d:f3:b5:b9:02:7d:d6:11:72:7c:40:55:37:e8: 36:ce:b3:62:d0:fb:5b:ee:e8:d4:4c:9b:a6:ba:4e: 64:37:32:a8:d4:8a:46:a5:99:b2:c5:11:0f:7e:22: a5:bc:fc:7b:73:cf:d5:d5:61:ea:a5:51:70:42:92: bb:23:78:12:ef:4f:8c:cc:66:2b:07:a8:04:9e:b1: 41:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C3:79:F1:5B:54:AE:B8:09:1B:CE:A6:86:69:4E:F9:43:75:55:EB X509v3 Authority Key Identifier: keyid:86:C8:D7:FB:42:2E:15:27:A3:99:44:83:D1:F9:DE:F2:C6:0A:30:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:7b:d4:5b:d1:39:58:97:a1:f4:28:78:65:fe:43:22:24:24: 62:37:51:3c:58:49:e4:95:79:79:67:04:aa:9a:0d:21:31:c0: 62:74:77:79:eb:e3:02:d7:74:dc:fc:f7:d3:66:61:1a:a7:c8: 06:77:1b:80:ae:6f:4e:d5:f1:fc:8c:d7:6f:25:d6:95:5c:66: 57:5a:70:b2:c0:3e:f9:e0:e1:5c:56:d7:f5:2f:73:6c:a5:fe: e4:fe:41:6a:b2:5e:11:0b:2e:8d:52:80:2f:10:44:b9:ee:43: 29:26:33:13:18:57:a1:cb:b8:8d:f1:4a:14:66:c9:ae:b0:ae: 5e:04:71:fc:55:75:ae:f8:82:22:4c:d7:94:29:c8:9f:85:79: 55:7a:6f:01:67:58:bb:eb:28:1b:95:e3:ef:29:0f:ae:b6:bf: ba:87:bf:2b:44:1d:d9:c7:c7:00:fb:20:52:74:cf:6b:04:79: 49:00:fe:b9:45:ea:f4:53:52:3d:9a:84:1d:d4:b7:9f:6b:d4: e7:57:26:7b:1a:34:e5:ad:8c:ea:e7:09:68:1a:a3:64:ad:42: 46:ed:5c:ab:f6:fc:a9:91:d2:94:52:85:5b:f3:0e:48:78:6c: 2f:08:c4:f3:e7:62:45:3c:10:e5:a8:d6:f6:43:15:bc:18:08: 62:ee:9a:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCMTExMTAvBgNVBAUTKDg2QzhEN0ZCNDIyRTE1MjdBMzk5NDQ4M0QxRjlERUYy QzYwQTMwNzIwHhcNMjUxMjE4MTQ1MjUyWhcNMjUxMjI1MTQ1MjUyWjAYMRYwFAYD VQQDDA02OTQ0MTU0NS1mNmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLJSYXvRXanwZniq3P/L0u8KVL/Iv1c2aK+WIBTH8v1EI71YP1N5m1MsWCK+ eEg2KjHHguPbn5Qi5qRS0GMvR9CvOQvcXc7wAQrMse0WJ0IsRiYdYejHXrEnKMq1 KpBYzy5ggsrYuuMOGBKxUJjFseYED7l9YR81GjIKWdlP2SRzRcSevh7v5xmamu8k XDkGemqm3Mb7+uL2Hclb6nUShkOUA0v55cdltfEXPDatcP/8otuUPfO1uQJ91hFy fEBVN+g2zrNi0Ptb7ujUTJumuk5kNzKo1IpGpZmyxREPfiKlvPx7c8/V1WHqpVFw QpK7I3gS70+MzGYrB6gEnrFBjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLDefFb VK64CRvOpoZpTvlDdVXrMB8GA1UdIwQYMBaAFIbI1/tCLhUno5lEg9H53vLGCjBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUIxMS85RjQzNTg3RTFE OUExMUUyOUFGNkZDODcwOEIwMkNEMi9oc2pYLTBJdUZTZWptVVNEMGZuZThzWUtN SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzalgtMEl1RlNlam1VU0QwZm5lOHNZS01ISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUIxMS85RjQzNTg3RTFEOUExMUUyOUFGNkZDODcwOEIwMkNEMi9oc2pYLTBJdUZT ZWptVVNEMGZuZThzWUtNSEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJe9Rb0TlYl6H0KHhl/kMiJCRiN1E8WEnklXl5ZwSqmg0hMcBidHd5 6+MC13Tc/PfTZmEap8gGdxuArm9O1fH8jNdvJdaVXGZXWnCywD754OFcVtf1L3Ns pf7k/kFqsl4RCy6NUoAvEES57kMpJjMTGFehy7iN8UoUZsmusK5eBHH8VXWu+IIi TNeUKcifhXlVem8BZ1i76ygblePvKQ+utr+6h78rRB3Zx8cA+yBSdM9rBHlJAP65 Rer0U1I9moQd1Lefa9TnVyZ7GjTlrYzq5wloGqNkrUJG7Vyr9vypkdKUUoVb8w5I eGwvCMTz52JFPBDlqNb2QxW8GAhi7poP -----END CERTIFICATE-----Generated at Fri Dec 19 23:55:03 2025 by rpki-client