This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft File: Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft (raw, json) Hash identifier: pCUxNJsJOQLkqgfBX+sxx+wOJk+rseX/kFk0UDdbXW8= Subject key identifier: B9:4E:7D:0D:B1:66:A7:9A:C4:79:B1:BE:A8:18:E0:A5:5A:26:4C:77 Authority key identifier: 1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D Certificate issuer: /CN=A91CFA8D/serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D Certificate serial: 0740 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft Manifest number: 073B Signing time: Sun 28 Dec 2025 21:03:26 +0000 Manifest this update: Sun 28 Dec 2025 21:03:26 +0000 Manifest next update: Sun 04 Jan 2026 21:03:26 +0000 Files and hashes: 1: Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl (hash: kMN47nVRWqdtZpFKeV3tLV7MkYJkNglqkeQDLEU1Z9c=) 2: 6AA36A7E564D11EB8B387024C4F9AE02.roa (hash: fGJYrfdMmxnMU9m3ImkorOWGB4M3nyP+3+G+aL2cIE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 21:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1856 (0x740) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8D, serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D Validity Not Before: Dec 28 21:03:26 2025 GMT Not After : Jan 4 21:03:26 2026 GMT Subject: CN=69519b1e-5d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a1:ef:9c:cf:32:95:c7:92:37:93:2f:e7:be: 0c:3a:14:16:fa:12:0b:69:d1:b8:bc:49:56:5f:f6: 5f:19:60:d0:bd:60:9e:d8:4c:6e:18:e9:0b:38:a9: 0d:28:3d:a1:76:43:fb:d4:54:55:13:11:3c:07:77: 48:4b:eb:11:d8:7e:c4:71:b0:8c:fa:9c:df:91:5b: c2:b9:d2:9c:98:f7:cf:56:04:c8:2e:9d:15:ce:69: bb:38:4f:07:99:c5:97:cc:43:14:5f:29:de:21:48: 86:73:0b:0b:c8:18:16:0c:09:d2:c5:7d:e2:eb:12: a8:b6:bb:e5:04:e3:43:ce:cd:4e:6a:65:54:e6:ac: a6:40:4a:b5:59:0c:d0:9a:d3:4e:66:b7:2d:5b:94: 0e:d3:82:b1:21:57:0b:45:70:9c:81:12:f4:0b:50: 52:1f:54:a8:31:f1:7c:bd:b7:d4:eb:5c:12:24:5d: 69:f0:b1:80:ea:e8:34:c2:33:9e:7a:ea:ef:ab:37: 88:0d:28:96:1d:7a:28:bc:de:86:a8:85:a4:e8:45: 57:5a:94:6a:f7:b5:b3:74:88:aa:b2:e8:73:b1:b3: ac:02:2b:84:0b:0b:3f:2d:c5:b1:8b:a3:00:6d:ff: 3f:98:74:a4:11:c5:ca:86:28:99:0c:67:d7:68:9b: bf:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4E:7D:0D:B1:66:A7:9A:C4:79:B1:BE:A8:18:E0:A5:5A:26:4C:77 X509v3 Authority Key Identifier: keyid:1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:df:c8:d3:fd:4f:d1:98:87:04:d9:b4:0e:b1:d4:37:5a:7d: 9e:1c:eb:95:99:f2:f8:74:c9:fc:08:0d:70:4a:5c:b7:3e:f7: 57:b0:24:b0:46:6c:2f:2a:13:f3:9f:13:c4:ca:be:6f:8c:61: 23:18:f1:ed:7b:15:7f:36:b7:cf:bb:41:2c:96:dd:78:cd:7f: 1c:a4:65:38:97:12:43:11:46:e3:3f:e2:de:a0:f7:d4:35:c9: 40:92:67:e6:8d:3d:ea:37:e5:7d:63:a5:26:7e:44:52:98:54: 8c:ff:53:d1:cd:55:e7:c8:4f:c4:de:8b:ec:14:e0:a3:6c:78: 6e:39:8b:d4:92:1a:a5:3d:82:c8:e8:c8:e5:22:5c:53:f5:c3: 6a:ac:1b:ca:1b:fc:26:a9:c6:42:5e:e6:6f:2f:54:9f:e6:24: 88:fa:e8:b2:a2:0e:c8:06:dc:5b:25:92:0a:ac:5e:5d:09:ee: 3a:37:02:ad:f6:55:6c:74:ae:69:be:93:60:be:e9:da:85:2b: 81:5e:29:27:78:c2:75:86:8b:c1:95:b3:b9:a4:24:41:a0:08: f6:bd:ba:cf:eb:86:8b:8d:58:d9:17:2a:e4:c7:57:5f:42:e2: 7d:2f:83:a8:1e:e8:52:ae:40:ba:75:43:fa:9a:2b:5c:fc:0d: bc:0c:2a:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBOEQxMTAvBgNVBAUTKDFERUJCNzM3MUFCOTdCQjlGM0E5MDZFQjA3RDU5MUM5 Q0YzODhENUQwHhcNMjUxMjI4MjEwMzI2WhcNMjYwMTA0MjEwMzI2WjAYMRYwFAYD VQQDDA02OTUxOWIxZS01ZDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6HvnM8ylceSN5Mv574MOhQW+hILadG4vElWX/ZfGWDQvWCe2ExuGOkLOKkN KD2hdkP71FRVExE8B3dIS+sR2H7EcbCM+pzfkVvCudKcmPfPVgTILp0Vzmm7OE8H mcWXzEMUXyneIUiGcwsLyBgWDAnSxX3i6xKotrvlBONDzs1OamVU5qymQEq1WQzQ mtNOZrctW5QO04KxIVcLRXCcgRL0C1BSH1SoMfF8vbfU61wSJF1p8LGA6ug0wjOe eurvqzeIDSiWHXoovN6GqIWk6EVXWpRq97WzdIiqsuhzsbOsAiuECws/LcWxi6MA bf8/mHSkEcXKhiiZDGfXaJu/0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlOfQ2x ZqeaxHmxvqgY4KVaJkx3MB8GA1UdIwQYMBaAFB3rtzcauXu586kG6wfVkcnPOI1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RC81NkZFRkY4MDU2 NEIxMUVCOEZFOUI0MjFDNEY5QUUwMi9IZXUzTnhxNWU3bnpxUWJyQjlXUnljODRq VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hldTNOeHE1ZTduenFRYnJCOVdSeWM4NGpWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkE4RC81NkZFRkY4MDU2NEIxMUVCOEZFOUI0MjFDNEY5QUUwMi9IZXUzTnhxNWU3 bnpxUWJyQjlXUnljODRqVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt38jT/U/RmIcE2bQOsdQ3Wn2eHOuVmfL4dMn8CA1wSly3PvdXsCSw RmwvKhPznxPEyr5vjGEjGPHtexV/NrfPu0Eslt14zX8cpGU4lxJDEUbjP+LeoPfU NclAkmfmjT3qN+V9Y6UmfkRSmFSM/1PRzVXnyE/E3ovsFOCjbHhuOYvUkhqlPYLI 6MjlIlxT9cNqrBvKG/wmqcZCXuZvL1Sf5iSI+uiyog7IBtxbJZIKrF5dCe46NwKt 9lVsdK5pvpNgvunahSuBXikneMJ1hovBlbO5pCRBoAj2vbrP64aLjVjZFyrkx1df QuJ9L4OoHuhSrkC6dUP6mitc/A28DCpM -----END CERTIFICATE-----Generated at Mon Dec 29 01:08:48 2025 by rpki-client