This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft File: HlpjIbEaoIRvqJvxObzs2604vjc.mft (raw, json) Hash identifier: JWPg8vVGNyoCuaGqLQjPAUesy0gE4rPuJST3ANS0Mro= Subject key identifier: BC:06:D9:79:D3:14:52:F1:70:16:00:B4:37:A2:D2:FF:30:A7:E7:4F Authority key identifier: 1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37 Certificate issuer: /CN=A91C9D76/serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37 Certificate serial: 35A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft Manifest number: 3558 Signing time: Wed 31 Dec 2025 14:15:58 +0000 Manifest this update: Wed 31 Dec 2025 14:15:57 +0000 Manifest next update: Wed 07 Jan 2026 14:15:57 +0000 Files and hashes: 1: HlpjIbEaoIRvqJvxObzs2604vjc.crl (hash: D+tCfM19FiQuwL7t/XRGnPEC/nmGHg3opcHTb6u/Cio=) 2: 0997A5828A1511F09F6EBD2BC4F9AE02.roa (hash: OnxDy/55jjMCiBnkBT8Gsibkcizt1adU0FH5L5R2Oyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 14:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13733 (0x35a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D76, serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37 Validity Not Before: Dec 31 14:15:57 2025 GMT Not After : Jan 7 14:15:57 2026 GMT Subject: CN=6955301d-0c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4f:23:60:43:04:43:be:96:7d:c8:75:1f:30: 30:f0:46:11:27:ac:ec:55:63:3d:ee:ac:97:0d:1f: fb:60:5f:37:f5:c5:74:bd:ee:e2:22:b7:28:b7:a1: f0:6e:3f:b5:30:d8:ab:74:b8:ed:dc:d5:97:eb:3e: 68:f2:4c:92:4b:87:59:5b:71:71:e1:7f:31:e2:bc: 2e:1d:ba:56:81:a4:89:ce:22:aa:29:84:9e:06:44: 58:71:84:21:ca:c2:ce:b0:be:91:ea:88:ce:e2:53: f1:eb:5f:b2:b2:10:cc:e7:49:24:f0:30:c8:8a:9c: f8:75:e8:e4:88:a6:3d:15:2e:e8:55:55:63:ae:79: e4:8a:40:be:d2:36:60:ad:43:45:85:93:02:c6:4c: 36:04:d5:99:d7:3a:19:ef:d0:a0:f9:9a:b3:66:bd: 05:ff:91:d8:06:b7:8a:fe:e0:e9:ea:10:7b:f1:39: 4b:e6:22:39:e8:56:5a:9c:7a:73:85:68:58:05:39: 0a:b1:95:0a:76:a0:de:43:fb:65:b7:07:d8:79:35: 02:a8:48:e0:04:46:e7:0e:cc:f2:b3:ef:b8:98:c5: d9:0b:9b:a8:14:b2:e2:6b:03:e0:1e:4e:90:4c:5c: f6:b1:dc:2e:af:d7:50:06:d8:90:82:26:8e:43:50: f2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:06:D9:79:D3:14:52:F1:70:16:00:B4:37:A2:D2:FF:30:A7:E7:4F X509v3 Authority Key Identifier: keyid:1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:7a:57:3c:4b:50:a4:9b:c0:2a:64:76:7d:37:77:b9:c1:4f: 42:1f:c8:fb:89:aa:77:e1:35:ba:cc:4c:4e:3c:57:16:d3:8b: 3a:cf:58:0b:c3:82:0b:ff:2a:c7:a2:1f:cb:49:96:47:42:fb: 0b:a5:06:e3:e0:b6:31:3c:71:f5:5e:21:da:7a:4e:e3:72:32: 47:d6:82:c8:25:e6:8e:df:2e:ee:a3:6f:31:5d:25:dc:74:c7: 0a:a5:c7:50:b2:74:de:71:51:a8:c5:a9:1e:a7:dc:4b:e1:9c: ee:b6:12:76:c0:cd:25:47:72:9b:90:69:fb:4c:d2:36:5c:e9: d0:81:e9:52:6a:bc:9e:0a:f0:11:0c:45:ac:28:9c:a8:30:20: 0a:fd:bb:ff:06:28:f2:0d:32:fc:a8:e5:37:7f:c2:62:05:aa: 44:5b:a8:28:b8:0b:15:a1:53:fa:db:a6:c5:31:0d:cb:ae:14: a0:ef:d3:ac:34:d5:5d:5f:3f:cf:49:2a:01:50:93:37:c6:f5: d9:6a:96:0e:7b:f3:a4:a2:52:50:2a:0d:c7:00:21:23:f3:fd: d9:2e:2b:72:21:95:cb:e8:f6:2c:96:f2:2f:60:59:d3:47:a2: b8:e1:9b:5a:68:67:dd:a5:4b:2f:fd:44:8b:af:40:88:87:a8: 1d:a5:ae:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlENzYxMTAvBgNVBAUTKDFFNUE2MzIxQjExQUEwODQ2RkE4OUJGMTM5QkNFQ0RC QUQzOEJFMzcwHhcNMjUxMjMxMTQxNTU3WhcNMjYwMTA3MTQxNTU3WjAYMRYwFAYD VQQDDA02OTU1MzAxZC0wYzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArk8jYEMEQ76Wfch1HzAw8EYRJ6zsVWM97qyXDR/7YF839cV0ve7iIrcot6Hw bj+1MNirdLjt3NWX6z5o8kySS4dZW3Fx4X8x4rwuHbpWgaSJziKqKYSeBkRYcYQh ysLOsL6R6ojO4lPx61+yshDM50kk8DDIipz4dejkiKY9FS7oVVVjrnnkikC+0jZg rUNFhZMCxkw2BNWZ1zoZ79Cg+ZqzZr0F/5HYBreK/uDp6hB78TlL5iI56FZanHpz hWhYBTkKsZUKdqDeQ/tltwfYeTUCqEjgBEbnDszys++4mMXZC5uoFLLiawPgHk6Q TFz2sdwur9dQBtiQgiaOQ1DygQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwG2XnT FFLxcBYAtDei0v8wp+dPMB8GA1UdIwQYMBaAFB5aYyGxGqCEb6ib8Tm87NutOL43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQ3Ni82Mjg3QTExNDFE NjkxMUUyODhBQkE5QTYwOEIwMkNEMi9IbHBqSWJFYW9JUnZxSnZ4T2J6czI2MDR2 amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hscGpJYkVhb0lSdnFKdnhPYnpzMjYwNHZqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUQ3Ni82Mjg3QTExNDFENjkxMUUyODhBQkE5QTYwOEIwMkNEMi9IbHBqSWJFYW9J UnZxSnZ4T2J6czI2MDR2amMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2elc8S1Ckm8AqZHZ9N3e5wU9CH8j7iap34TW6zExOPFcW04s6z1gL w4IL/yrHoh/LSZZHQvsLpQbj4LYxPHH1XiHaek7jcjJH1oLIJeaO3y7uo28xXSXc dMcKpcdQsnTecVGoxakep9xL4ZzuthJ2wM0lR3KbkGn7TNI2XOnQgelSaryeCvAR DEWsKJyoMCAK/bv/BijyDTL8qOU3f8JiBapEW6gouAsVoVP626bFMQ3LrhSg79Os NNVdXz/PSSoBUJM3xvXZapYOe/OkolJQKg3HACEj8/3ZLityIZXL6PYslvIvYFnT R6K44ZtaaGfdpUsv/USLr0CIh6gdpa7b -----END CERTIFICATE-----Generated at Thu Jan 1 15:59:08 2026 by rpki-client