This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft File: HA0tulqzbC-WcsFN2He57qBsysc.mft (raw, json) Hash identifier: /QvyzkPMny5+0Rbtd4Elm3s4XYbwbGNOZJH8Wq5vT3I= Subject key identifier: 1F:0A:E2:21:43:E1:4E:23:1E:5B:3F:A0:58:4D:9C:C8:F6:F7:17:DC Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7 Certificate issuer: /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7 Certificate serial: 0910 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft Manifest number: 0902 Signing time: Mon 22 Dec 2025 19:41:23 +0000 Manifest this update: Mon 22 Dec 2025 19:41:23 +0000 Manifest next update: Mon 29 Dec 2025 19:41:23 +0000 Files and hashes: 1: HA0tulqzbC-WcsFN2He57qBsysc.crl (hash: UZBZ0NsoaSk37HBKRsefPD82WIpvFUPh/Ublhbkrm3M=) 2: BA69B6FABC2C11EA96657B4BC4F9AE02.roa (hash: /qSqUUquW8P34EzhMbBxrdao9SE8qOtCjPceo9nPsLE=) 3: BB250202BC2C11EA96657B4BC4F9AE02.roa (hash: +c2DPE0WaPr48QApZCLfEPaMsExO+TZ/BLuuQJmn+Mg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2320 (0x910) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7 Validity Not Before: Dec 22 19:41:23 2025 GMT Not After : Dec 29 19:41:23 2025 GMT Subject: CN=69499ee3-e79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:55:5d:0a:b6:39:96:10:ae:a6:e8:fd:62:7a: 9e:7a:5f:1d:b4:46:7d:0a:74:da:85:b4:68:36:b3: dc:42:e8:82:c9:4d:97:3c:b1:c5:a7:86:ea:77:10: 1e:b3:70:ec:36:b8:dc:c7:5a:5f:e0:78:77:08:76: d3:9b:4d:9a:01:21:0f:8e:38:08:e7:a4:8e:ef:c7: 69:f8:30:3f:49:47:82:66:8f:7f:f8:6d:80:a3:86: 92:7f:dc:16:11:ab:a1:eb:0d:11:47:8b:2c:4c:53: 6d:e0:2c:f5:ed:e9:10:3e:a1:f4:1d:ee:ff:08:4f: f1:88:40:72:f8:2b:c7:e4:46:b9:07:9a:9d:6e:21: 6e:6e:b6:e9:14:9e:8d:71:ab:f2:bf:5b:db:fa:66: 0d:39:4e:77:63:24:c1:3d:38:db:de:87:06:51:17: 97:6b:d3:c2:a6:e0:9a:16:35:2b:1b:4e:d1:2a:d6: 5e:51:7e:d8:fc:94:b9:32:e4:a2:44:80:d8:43:eb: 46:9d:02:b5:43:00:64:6c:04:24:3f:bb:31:cd:99: ab:bd:ad:a7:72:e7:1e:1e:ff:30:f5:83:a3:ee:2a: d5:ba:11:11:c0:ae:df:10:d5:57:ae:ee:9b:4d:8d: f9:86:80:54:34:af:88:7a:0e:50:08:2d:5e:9c:d9: d4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0A:E2:21:43:E1:4E:23:1E:5B:3F:A0:58:4D:9C:C8:F6:F7:17:DC X509v3 Authority Key Identifier: keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:09:35:8f:57:3a:19:5e:74:33:13:16:64:73:04:95:b3:8a: eb:59:af:ae:61:3d:1a:7b:8e:43:b2:b6:cf:08:37:79:90:05: bf:9a:c3:df:f7:65:14:86:ff:64:01:ba:1c:86:7e:9d:10:5d: 01:92:05:ad:d4:51:88:15:a7:53:5a:18:bd:7f:a8:a2:30:a3: ac:e2:2c:81:66:c6:3e:63:33:bb:e3:19:0b:89:d6:4a:7d:58: 78:0d:c5:63:35:63:bf:b7:26:a1:8d:c8:a8:5d:9b:99:91:6d: f6:d5:7f:1e:a7:3f:e4:fa:8d:e3:e7:e5:a6:10:6a:eb:19:a6: 68:64:89:e2:a7:11:b6:17:9b:d5:ef:5c:44:12:2d:63:ee:36: 68:c5:c2:36:0d:1a:3f:ad:33:32:aa:33:d3:ac:fe:c0:fc:27: 16:27:85:d6:15:c4:75:d0:66:19:95:4a:7c:63:af:00:a7:81: 3c:d6:20:d9:10:69:68:a7:b8:61:8a:57:2c:f4:d9:05:ff:f4: 81:28:de:ee:05:c8:cc:89:7d:4c:1f:23:31:fc:c0:a9:50:cc: 3e:97:91:da:c7:3c:85:94:d5:c8:fa:ea:8c:5f:a4:bf:21:82: c5:3d:82:10:38:07:fe:00:84:2c:a2:36:63:e1:22:07:b6:9a: 1e:10:97:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExQjQxMTAvBgNVBAUTKDFDMEQyREJBNUFCMzZDMkY5NjcyQzE0REQ4NzdCOUVF QTA2Q0NBQzcwHhcNMjUxMjIyMTk0MTIzWhcNMjUxMjI5MTk0MTIzWjAYMRYwFAYD VQQDDA02OTQ5OWVlMy1lNzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnFVdCrY5lhCupuj9Ynqeel8dtEZ9CnTahbRoNrPcQuiCyU2XPLHFp4bqdxAe s3DsNrjcx1pf4Hh3CHbTm02aASEPjjgI56SO78dp+DA/SUeCZo9/+G2Ao4aSf9wW Eauh6w0RR4ssTFNt4Cz17ekQPqH0He7/CE/xiEBy+CvH5Ea5B5qdbiFubrbpFJ6N cavyv1vb+mYNOU53YyTBPTjb3ocGUReXa9PCpuCaFjUrG07RKtZeUX7Y/JS5MuSi RIDYQ+tGnQK1QwBkbAQkP7sxzZmrva2ncuceHv8w9YOj7irVuhERwK7fENVXru6b TY35hoBUNK+Ieg5QCC1enNnU0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8K4iFD 4U4jHls/oFhNnMj29xfcMB8GA1UdIwQYMBaAFBwNLbpas2wvlnLBTdh3ue6gbMrH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTFCNC9CMTk5M0M0MEJD MkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJDLVdjc0ZOMkhlNTdxQnN5 c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hBMHR1bHF6YkMtV2NzRk4ySGU1N3FCc3lzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTFCNC9CMTk5M0M0MEJDMkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJD LVdjc0ZOMkhlNTdxQnN5c2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+CTWPVzoZXnQzExZkcwSVs4rrWa+uYT0ae45DsrbPCDd5kAW/msPf 92UUhv9kAbochn6dEF0BkgWt1FGIFadTWhi9f6iiMKOs4iyBZsY+YzO74xkLidZK fVh4DcVjNWO/tyahjcioXZuZkW321X8epz/k+o3j5+WmEGrrGaZoZInipxG2F5vV 71xEEi1j7jZoxcI2DRo/rTMyqjPTrP7A/CcWJ4XWFcR10GYZlUp8Y68Ap4E81iDZ EGlop7hhilcs9NkF//SBKN7uBcjMiX1MHyMx/MCpUMw+l5HaxzyFlNXI+uqMX6S/ IYLFPYIQOAf+AIQsojZj4SIHtpoeEJfu -----END CERTIFICATE-----Generated at Tue Dec 23 18:53:31 2025 by rpki-client