This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft File: HRIX74_oS1glUWcbyjXmhEhpJJc.mft (raw, json) Hash identifier: x+M+Y5nkMbkckR8kPzCw+YMytuW7wp3fZ8bfX5VALVY= Subject key identifier: FC:CC:11:21:DA:A4:2B:8E:A8:10:57:DE:6B:AF:A3:02:8F:20:6D:D7 Authority key identifier: 1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97 Certificate issuer: /CN=A91C8BB4/serialNumber=1D1217EF8FE84B582551671BCA35E68448692497 Certificate serial: 0ABB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft Manifest number: 0AB1 Signing time: Thu 18 Dec 2025 19:08:29 +0000 Manifest this update: Thu 18 Dec 2025 19:08:28 +0000 Manifest next update: Thu 25 Dec 2025 19:08:28 +0000 Files and hashes: 1: HRIX74_oS1glUWcbyjXmhEhpJJc.crl (hash: OMXxZSd6Uyu21zD9NfGl+hdd1A/IiyEMc2DBYi0NdWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2747 (0xabb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8BB4, serialNumber=1D1217EF8FE84B582551671BCA35E68448692497 Validity Not Before: Dec 18 19:08:28 2025 GMT Not After : Dec 25 19:08:28 2025 GMT Subject: CN=6944512d-c3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:59:30:6f:b7:c8:75:9d:4e:0c:44:d7:1a:88: d3:c4:9f:de:a6:56:6f:f9:54:f6:16:2b:1b:ec:52: 56:e0:d8:bc:b7:36:7f:a1:65:a4:4e:a2:b1:95:24: 35:44:af:b3:80:cd:64:59:35:fc:0f:f3:01:07:99: 69:13:80:a1:28:5c:9c:e9:22:13:55:e7:a9:c5:22: 21:12:88:54:31:fe:3d:ba:a3:6e:77:1f:0c:56:6a: ca:32:b7:dd:db:2d:5d:c0:70:c9:c8:08:e2:64:cd: 7d:f0:62:c9:92:8e:eb:34:be:e2:ef:7f:2a:d0:60: 1c:8a:96:ce:bd:4e:3b:c3:d4:21:7a:6a:8e:c9:70: ff:aa:8a:03:88:8b:db:41:5f:01:df:ec:f9:ad:43: 9a:89:87:82:dc:04:30:16:2f:34:da:75:4c:46:db: c3:18:96:e1:bd:dd:2e:a3:15:41:74:70:ce:a7:11: 7e:e0:ef:a8:f4:70:e2:ee:a8:72:e1:d4:09:22:ee: 43:34:04:37:a4:52:73:48:57:45:f7:74:12:cf:3a: bd:16:4f:b1:fb:d8:1c:5a:50:73:dc:6e:7f:ef:e9: 0a:59:ab:88:04:a9:3c:c4:d8:0a:15:62:8b:46:8d: e1:88:98:d7:a0:87:e7:ee:1e:6a:74:00:f3:5e:b0: b9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CC:11:21:DA:A4:2B:8E:A8:10:57:DE:6B:AF:A3:02:8F:20:6D:D7 X509v3 Authority Key Identifier: keyid:1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:b2:f1:5c:18:bf:7a:c0:c5:39:06:da:48:09:e9:a6:03:f2: 95:51:2b:b5:ac:bc:2e:62:b2:c4:5d:a8:c0:71:f0:56:26:4e: 6c:32:1b:a5:d5:f4:37:1f:06:84:54:fb:de:d7:0f:31:69:a7: 77:cf:db:46:18:20:44:4a:36:65:eb:34:61:84:c2:fe:99:d0: a2:5d:83:52:c0:34:82:2e:74:ea:ea:55:b2:16:ab:07:69:20: c9:8f:a1:31:df:40:e9:e0:00:d7:7e:eb:fc:7d:b3:bf:aa:97: 9d:9e:84:b0:26:72:2b:11:b9:97:ac:fe:26:b3:35:ea:97:95: 2e:84:fc:3e:6d:5b:3e:31:33:0f:f3:c6:52:c5:36:36:14:84: 2b:37:34:63:ff:a1:78:48:b6:75:1a:7f:58:80:1c:29:32:3b: 4b:06:42:02:a0:2b:5b:cf:47:b0:03:b7:e3:8d:79:67:c3:ab: ca:e9:5c:cc:8a:12:3c:6c:c1:fa:ae:85:4f:bb:a9:f0:9c:82: 9b:d8:08:94:a1:20:e4:5c:6e:65:57:d8:6a:b0:bd:d8:b3:b5: 8c:d1:39:bf:20:89:1c:61:95:32:0b:ec:45:ac:b4:94:14:8d: 5b:9d:7a:4f:1d:32:0b:dd:b7:fc:e2:e7:db:da:55:45:92:34: f8:7e:af:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhCQjQxMTAvBgNVBAUTKDFEMTIxN0VGOEZFODRCNTgyNTUxNjcxQkNBMzVFNjg0 NDg2OTI0OTcwHhcNMjUxMjE4MTkwODI4WhcNMjUxMjI1MTkwODI4WjAYMRYwFAYD VQQDDA02OTQ0NTEyZC1jM2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1kwb7fIdZ1ODETXGojTxJ/eplZv+VT2Fisb7FJW4Ni8tzZ/oWWkTqKxlSQ1 RK+zgM1kWTX8D/MBB5lpE4ChKFyc6SITVeepxSIhEohUMf49uqNudx8MVmrKMrfd 2y1dwHDJyAjiZM198GLJko7rNL7i738q0GAcipbOvU47w9QhemqOyXD/qooDiIvb QV8B3+z5rUOaiYeC3AQwFi802nVMRtvDGJbhvd0uoxVBdHDOpxF+4O+o9HDi7qhy 4dQJIu5DNAQ3pFJzSFdF93QSzzq9Fk+x+9gcWlBz3G5/7+kKWauIBKk8xNgKFWKL Ro3hiJjXoIfn7h5qdADzXrC5cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzMESHa pCuOqBBX3muvowKPIG3XMB8GA1UdIwQYMBaAFB0SF++P6EtYJVFnG8o15oRIaSSX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEJCNC9EOTU0QkFCRTY5 QjcxMUVBODhFNzJFNTlDNEY5QUUwMi9IUklYNzRfb1MxZ2xVV2NieWpYbWhFaHBK SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hSSVg3NF9vUzFnbFVXY2J5alhtaEVocEpKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEJCNC9EOTU0QkFCRTY5QjcxMUVBODhFNzJFNTlDNEY5QUUwMi9IUklYNzRfb1Mx Z2xVV2NieWpYbWhFaHBKSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASsvFcGL96wMU5BtpICemmA/KVUSu1rLwuYrLEXajAcfBWJk5sMhul 1fQ3HwaEVPve1w8xaad3z9tGGCBESjZl6zRhhML+mdCiXYNSwDSCLnTq6lWyFqsH aSDJj6Ex30Dp4ADXfuv8fbO/qpednoSwJnIrEbmXrP4mszXql5UuhPw+bVs+MTMP 88ZSxTY2FIQrNzRj/6F4SLZ1Gn9YgBwpMjtLBkICoCtbz0ewA7fjjXlnw6vK6VzM ihI8bMH6roVPu6nwnIKb2AiUoSDkXG5lV9hqsL3Ys7WM0Tm/IIkcYZUyC+xFrLSU FI1bnXpPHTIL3bf84ufb2lVFkjT4fq9k -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:05 2025 by rpki-client