This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft File: H1rFBrARMMguXkcxYDuiZM7YSGY.mft (raw, json) Hash identifier: 42eispErR6KHkesxtIzB3LSvItqL3MWzXLt98FK4DWk= Subject key identifier: 44:83:11:B8:6A:70:79:0F:91:28:AA:99:AC:B1:BE:82:4E:CF:8B:3C Authority key identifier: 1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 Certificate issuer: /CN=A91CBB22/serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Certificate serial: 0677 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft Manifest number: 0674 Signing time: Thu 18 Dec 2025 21:55:04 +0000 Manifest this update: Thu 18 Dec 2025 21:55:04 +0000 Manifest next update: Thu 25 Dec 2025 21:55:04 +0000 Files and hashes: 1: H1rFBrARMMguXkcxYDuiZM7YSGY.crl (hash: 7xZM8R6HzaJWqQmnEfigXGYKZL4FshT0ZFepl/2UF2E=) 2: F7F03FB2EF3211EDA614D473C4F9AE02.roa (hash: 4FifQNCcp/QNphiorNeb31DnXb9TCxFLDNFh3h59mKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1655 (0x677) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB22, serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Validity Not Before: Dec 18 21:55:04 2025 GMT Not After : Dec 25 21:55:04 2025 GMT Subject: CN=69447838-79d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8a:bb:bb:57:42:22:ba:f9:98:2b:1a:e1:a0: 96:be:7d:b0:e1:9f:fc:fe:8a:df:b4:5b:c9:d8:87: b8:96:a2:83:16:78:24:98:81:e6:8e:f4:fd:a3:24: b5:e5:79:fd:c0:84:1f:78:66:47:91:ad:2c:1f:b7: 4a:9c:20:3d:33:f6:ce:b7:96:38:a1:9c:2c:a7:f1: 58:9d:50:e4:0a:26:83:11:b3:2a:1c:e5:da:73:e6: 65:3f:20:ca:4d:0e:0a:d5:28:f4:8b:09:3d:41:d1: 0b:ad:d8:a0:86:f3:30:26:38:ef:48:c0:94:e2:70: 6b:6e:79:ee:4f:d7:ab:5c:54:7c:28:72:c4:f8:f9: 68:f2:bb:4a:d8:c7:94:d7:a4:39:6c:55:11:80:fc: 0e:9e:56:ab:55:13:3c:1a:ed:9b:fc:d8:0a:16:c4: 3e:c5:44:c5:95:6a:90:f3:b8:17:7e:68:63:a8:38: d3:33:2d:46:1e:12:f5:77:c3:55:21:f9:83:6f:03: ae:2e:3d:6f:3d:2f:ac:d6:e4:f1:42:a9:83:7a:f4: 8a:bb:94:40:75:2f:49:b1:a7:d6:ab:6e:34:b0:b9: f5:ad:21:c4:62:e0:eb:e9:83:95:c2:cf:2f:2e:62: c1:38:fc:12:29:f7:77:e0:2e:74:df:c9:3d:9f:30: 8f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:83:11:B8:6A:70:79:0F:91:28:AA:99:AC:B1:BE:82:4E:CF:8B:3C X509v3 Authority Key Identifier: keyid:1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:80:81:ba:5f:a7:87:3a:df:a3:cd:5d:2c:9e:a6:f7:15:7a: 20:ad:32:fb:c2:88:6d:2d:39:5e:f0:7d:a1:0a:3e:2f:4b:a1: 00:78:b9:99:cc:b7:4b:ed:93:40:d0:89:58:5f:ef:fe:9d:59: 23:ff:dc:8e:f9:cd:e1:37:ad:40:d6:b6:d5:61:b0:f0:2e:98: 4a:58:91:20:ba:db:e5:6e:7b:c5:8f:84:60:9a:0c:96:fc:0b: 39:cb:8b:10:57:59:b9:40:d2:ed:79:06:7f:e1:8b:b3:3d:8d: 20:8f:6d:08:3c:0c:35:07:bc:8a:6a:f7:65:12:5f:dd:00:4e: a7:23:e3:63:e3:82:a5:2b:d0:94:48:13:8d:a8:68:5f:4b:83: 36:0c:ca:5e:21:0c:15:b0:66:67:88:9e:4b:d3:d6:ef:ef:d6: ac:fe:1e:f1:57:88:e0:5c:8d:ce:0c:f8:ee:3e:a9:f4:93:14: f4:0b:ce:35:43:0a:49:50:09:ba:97:46:65:b7:a8:9a:f5:87: 2e:5f:d1:c8:45:7c:99:52:35:7f:9b:d0:ce:c1:0d:7e:10:f2: 33:b2:6d:ea:16:00:7b:8f:d1:64:f7:52:4b:9e:8c:6c:8b:69: 79:de:2b:7c:12:69:94:20:20:0b:63:6d:12:78:49:4c:3f:29: 6e:5f:a0:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMjIxMTAvBgNVBAUTKDFGNUFDNTA2QjAxMTMwQzgyRTVFNDczMTYwM0JBMjY0 Q0VEODQ4NjYwHhcNMjUxMjE4MjE1NTA0WhcNMjUxMjI1MjE1NTA0WjAYMRYwFAYD VQQDDA02OTQ0NzgzOC03OWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm4q7u1dCIrr5mCsa4aCWvn2w4Z/8/orftFvJ2Ie4lqKDFngkmIHmjvT9oyS1 5Xn9wIQfeGZHka0sH7dKnCA9M/bOt5Y4oZwsp/FYnVDkCiaDEbMqHOXac+ZlPyDK TQ4K1Sj0iwk9QdELrdighvMwJjjvSMCU4nBrbnnuT9erXFR8KHLE+Plo8rtK2MeU 16Q5bFURgPwOnlarVRM8Gu2b/NgKFsQ+xUTFlWqQ87gXfmhjqDjTMy1GHhL1d8NV IfmDbwOuLj1vPS+s1uTxQqmDevSKu5RAdS9JsafWq240sLn1rSHEYuDr6YOVws8v LmLBOPwSKfd34C5038k9nzCPlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFESDEbhq cHkPkSiqmayxvoJOz4s8MB8GA1UdIwQYMBaAFB9axQawETDILl5HMWA7omTO2Ehm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIyMi9DM0JDNzVGNEEx OTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1NZ3VYa2N4WUR1aVpNN1lT R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gxckZCckFSTU1ndVhrY3hZRHVpWk03WVNHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIyMi9DM0JDNzVGNEExOTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1N Z3VYa2N4WUR1aVpNN1lTR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAggIG6X6eHOt+jzV0snqb3FXogrTL7wohtLTle8H2hCj4vS6EAeLmZ zLdL7ZNA0IlYX+/+nVkj/9yO+c3hN61A1rbVYbDwLphKWJEgutvlbnvFj4RgmgyW /As5y4sQV1m5QNLteQZ/4YuzPY0gj20IPAw1B7yKavdlEl/dAE6nI+Nj44KlK9CU SBONqGhfS4M2DMpeIQwVsGZniJ5L09bv79as/h7xV4jgXI3ODPjuPqn0kxT0C841 QwpJUAm6l0Zlt6ia9YcuX9HIRXyZUjV/m9DOwQ1+EPIzsm3qFgB7j9Fk91JLnoxs i2l53it8EmmUICALY20SeElMPyluX6AU -----END CERTIFICATE-----Generated at Sat Dec 20 18:27:53 2025 by rpki-client