This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft File: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft (raw, json) Hash identifier: jcCZDdkqySM6cQ6rl9dbaCgTeHZ5uwVzzK+mRrivSfw= Subject key identifier: 1F:3E:6C:77:F5:36:70:BE:54:B3:D0:55:FD:FF:00:BC:88:8B:AA:29 Authority key identifier: FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE Certificate issuer: /CN=A91D2A6D/serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Certificate serial: 02E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft Manifest number: 02E3 Signing time: Fri 19 Dec 2025 00:32:20 +0000 Manifest this update: Fri 19 Dec 2025 00:32:20 +0000 Manifest next update: Fri 26 Dec 2025 00:32:20 +0000 Files and hashes: 1: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl (hash: 4hxSRqqmAQSPyDPsEUnOBAtMdMlb+vYoUY/pwGqjy08=) 2: 7B18C5B40CCE11ED97C94316C4F9AE02.roa (hash: goaKWUv5rRzy+se4DCphxh+KiAGhLohPjMAfli+5ur8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 744 (0x2e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2A6D, serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Validity Not Before: Dec 19 00:32:20 2025 GMT Not After : Dec 26 00:32:20 2025 GMT Subject: CN=69449d14-ddc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8b:60:d0:a4:30:a6:e0:d1:fc:fb:57:d7:4e: b3:88:0e:a7:1a:fe:7f:43:dc:a1:ea:7a:69:7d:99: 27:61:26:ac:92:c6:58:ab:dd:44:30:66:42:e9:aa: 82:a1:b9:5d:4b:c9:c2:34:fd:15:8f:dd:09:5d:a4: fb:d7:8c:65:4a:72:d9:c3:1c:23:b9:52:16:5e:02: ae:24:62:e1:cc:ce:de:ec:d4:6b:fa:52:f1:2f:fc: b7:0e:0a:a3:e5:6a:c2:01:da:a7:08:a7:81:ba:4d: dd:91:7b:42:d2:c0:39:71:8e:b6:f6:5c:ed:51:8a: c2:8d:10:16:8d:c9:bc:b1:97:99:0e:71:da:8e:c6: 84:78:3f:fa:03:07:fd:2b:cb:4d:a4:fa:7b:ea:85: d1:58:35:e0:7c:c4:db:58:62:7f:7d:d7:13:8d:29: ee:58:fa:a0:af:34:5b:17:cd:a3:ee:10:c0:e9:2f: 7d:f6:b9:7d:14:12:87:f5:52:3d:91:f8:72:b0:3f: f5:dc:a1:9b:81:8d:4c:66:38:17:80:da:a6:7d:c9: 30:e9:6c:7d:9f:18:62:10:39:6e:21:07:e6:2d:0e: a0:2c:19:55:a8:63:c6:08:de:e9:c6:ef:81:80:cd: 90:e7:92:f6:3e:4b:da:d6:8e:d3:a9:ed:dd:43:b1: 0f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3E:6C:77:F5:36:70:BE:54:B3:D0:55:FD:FF:00:BC:88:8B:AA:29 X509v3 Authority Key Identifier: keyid:FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:59:30:8c:14:f6:d2:a1:32:45:a5:a7:71:34:4a:88:89:48: 81:da:cb:df:d0:04:f9:e3:2e:da:5c:f9:56:6a:37:f0:41:54: b3:69:16:f9:cb:63:d6:8e:c0:03:1a:92:05:f5:99:55:2a:90: c0:2b:32:31:33:5d:79:df:29:58:f9:6d:81:7e:ef:ff:c4:96: c8:03:50:25:dc:dd:16:60:07:89:4f:cd:70:ef:22:f4:19:ab: 5a:50:a0:a7:47:ac:e5:80:df:13:1c:9a:82:61:ad:dd:ab:7e: 2b:38:63:5f:e1:f2:64:a5:cf:a4:f2:c4:ed:d8:28:ab:bd:a5: 1d:e6:f6:35:99:e8:52:30:7e:0d:77:f5:23:60:4e:2f:4d:33: 31:7e:4c:d9:b0:1a:12:8b:7f:96:90:aa:27:7f:e8:6d:aa:91: 4f:09:f1:3b:f8:6a:c5:8c:37:a1:9d:89:ac:e9:7a:25:df:54: 5b:31:0a:20:a4:4c:7b:6e:51:da:6c:47:48:8f:1c:5a:2a:18: c7:5b:b4:66:3b:55:04:d4:19:47:15:37:b1:96:de:ef:9e:b2: 1a:5f:8b:4b:05:72:3b:72:c6:7b:94:ac:52:08:1f:70:43:71: dd:a2:94:37:bc:2d:e0:77:a0:0f:4e:39:53:89:42:1f:e2:e5: 74:15:cf:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBNkQxMTAvBgNVBAUTKEZDN0IzOTRGOEY5Q0JGOUNERDIwOTNDMjcyNkRERkU5 MTNGQUE5Q0UwHhcNMjUxMjE5MDAzMjIwWhcNMjUxMjI2MDAzMjIwWjAYMRYwFAYD VQQDDA02OTQ0OWQxNC1kZGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4tg0KQwpuDR/PtX106ziA6nGv5/Q9yh6nppfZknYSasksZYq91EMGZC6aqC obldS8nCNP0Vj90JXaT714xlSnLZwxwjuVIWXgKuJGLhzM7e7NRr+lLxL/y3Dgqj 5WrCAdqnCKeBuk3dkXtC0sA5cY629lztUYrCjRAWjcm8sZeZDnHajsaEeD/6Awf9 K8tNpPp76oXRWDXgfMTbWGJ/fdcTjSnuWPqgrzRbF82j7hDA6S999rl9FBKH9VI9 kfhysD/13KGbgY1MZjgXgNqmfckw6Wx9nxhiEDluIQfmLQ6gLBlVqGPGCN7pxu+B gM2Q55L2Pkva1o7Tqe3dQ7EPnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8+bHf1 NnC+VLPQVf3/ALyIi6opMB8GA1UdIwQYMBaAFPx7OU+PnL+c3SCTwnJt3+kT+qnO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkE2RC83RjhENjNCNDBD Q0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1emRJSlBDY20zZjZSUDZx YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19IczVUNC1jdjV6ZElKUENjbTNmNlJQNnFjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkE2RC83RjhENjNCNDBDQ0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1 emRJSlBDY20zZjZSUDZxYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgWTCMFPbSoTJFpadxNEqIiUiB2svf0AT54y7aXPlWajfwQVSzaRb5 y2PWjsADGpIF9ZlVKpDAKzIxM1153ylY+W2Bfu//xJbIA1Al3N0WYAeJT81w7yL0 GataUKCnR6zlgN8THJqCYa3dq34rOGNf4fJkpc+k8sTt2CirvaUd5vY1mehSMH4N d/UjYE4vTTMxfkzZsBoSi3+WkKonf+htqpFPCfE7+GrFjDehnYms6Xol31RbMQog pEx7blHabEdIjxxaKhjHW7RmO1UE1BlHFTexlt7vnrIaX4tLBXI7csZ7lKxSCB9w Q3HdopQ3vC3gd6APTjlTiUIf4uV0Fc+k -----END CERTIFICATE-----Generated at Fri Dec 19 22:10:29 2025 by rpki-client