This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft File: hsI8F7xNIO4W8JLTWiz2VU_scRk.mft (raw, json) Hash identifier: zKhxd8BaQnpCCp/3JJzsAejSXqtqolWU9HLzqK0E4n8= Subject key identifier: EB:3F:29:47:12:DF:83:23:F9:40:B1:02:9E:21:1D:7D:2F:2A:BE:2A Authority key identifier: 86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19 Certificate issuer: /CN=A91E1D77/serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119 Certificate serial: 0961 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft Manifest number: 0958 Signing time: Wed 24 Dec 2025 19:36:18 +0000 Manifest this update: Wed 24 Dec 2025 19:36:18 +0000 Manifest next update: Wed 31 Dec 2025 19:36:18 +0000 Files and hashes: 1: hsI8F7xNIO4W8JLTWiz2VU_scRk.crl (hash: 9UrLhKjgrXigCm+WmtHhOeq+JUJnDj7Tf+mJDKpdSQU=) 2: E6FD5EBCBA3A11EBA9482F5AC4F9AE02.roa (hash: Do71l71FTiixHCCIPeakkaaBf4R9F2qJdYWGM64Ufb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 19:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2401 (0x961) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1D77, serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119 Validity Not Before: Dec 24 19:36:18 2025 GMT Not After : Dec 31 19:36:18 2025 GMT Subject: CN=694c40b2-9599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:56:a4:dd:ac:0f:51:a7:4b:88:d6:86:52:01: 0b:78:c3:60:d5:eb:72:ea:f1:68:e0:39:a9:e6:e4: 16:94:08:db:b4:2d:3b:b6:5b:59:22:50:c4:a0:05: 27:d8:57:c1:dc:00:ad:c0:4b:74:84:cd:1b:f7:39: 80:f9:47:65:57:24:fd:c9:6a:41:f5:4b:57:ee:ba: 0f:59:63:51:0f:9b:e0:65:44:64:db:36:78:3a:b0: 34:89:9a:2f:2a:65:06:5e:2c:62:a7:3e:fa:8f:c9: 5d:5f:0e:68:38:54:8d:84:c7:ff:64:93:42:66:a5: 8c:8c:37:cc:1b:20:cb:41:02:05:f7:7f:99:62:e8: b0:b6:ae:c0:87:09:06:cf:84:1e:16:45:20:4b:03: 67:f6:28:14:a4:40:af:c9:89:e2:df:6a:7c:8a:52: 85:79:b1:02:b0:f2:17:b5:de:f6:fe:e2:37:c7:01: 5f:11:ef:9b:7f:e6:93:51:66:81:6a:54:30:16:b4: 1a:a7:09:a8:49:fa:72:3e:aa:99:c0:7b:d8:b0:29: 5b:7b:cf:aa:16:29:96:33:9a:c6:ec:b9:1a:75:45: 11:51:ae:ed:79:f9:ab:b1:ee:44:12:f1:3b:3a:33: c4:1c:63:7c:1e:ae:1b:6b:28:e7:3b:e9:c3:04:97: 92:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3F:29:47:12:DF:83:23:F9:40:B1:02:9E:21:1D:7D:2F:2A:BE:2A X509v3 Authority Key Identifier: keyid:86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e4:bd:97:c7:2c:3e:d3:25:be:5d:ae:7a:07:52:7e:58:17: d9:5e:90:05:79:3c:54:71:0d:af:0e:49:83:62:90:61:88:9c: 9a:bc:05:5f:05:f5:ee:0a:4b:ac:d0:7d:80:88:02:1a:a1:35: a9:9d:35:fc:8c:b5:5b:9f:56:ca:bf:ae:fc:ca:92:14:e8:c3: b8:81:ab:7f:42:69:72:df:a0:64:0e:24:47:6e:01:90:bf:d7: 4f:0a:38:e6:5e:ac:e3:a8:7f:d7:5c:1b:4b:4e:80:49:35:41: e0:d2:3c:7c:66:82:56:03:15:d7:4e:f2:7d:7f:e2:96:b3:45: 1c:e1:78:8f:b6:fe:b5:e3:e5:4a:b3:45:85:22:16:6e:5c:eb: 8b:f7:50:aa:3c:fb:bf:97:80:9d:94:90:34:05:55:78:e9:b3: 5c:0a:d7:48:76:b8:e6:e7:ab:25:95:f6:01:5f:70:aa:d1:54: 12:fc:ed:2a:82:91:e5:8f:bc:31:35:6d:f8:f6:7c:ee:73:84: 03:cf:ab:e1:be:36:8d:f2:c0:92:82:42:3c:82:1b:7e:b6:95: 7e:f3:79:4e:aa:29:6b:00:53:12:62:75:d3:4b:26:fd:ce:d6: c9:87:25:7d:dc:35:3e:68:ee:77:97:6c:8a:be:78:99:bd:04: 23:5a:57:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFENzcxMTAvBgNVBAUTKDg2QzIzQzE3QkM0RDIwRUUxNkYwOTJEMzVBMkNGNjU1 NEZFQzcxMTkwHhcNMjUxMjI0MTkzNjE4WhcNMjUxMjMxMTkzNjE4WjAYMRYwFAYD VQQDDA02OTRjNDBiMi05NTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVak3awPUadLiNaGUgELeMNg1ety6vFo4Dmp5uQWlAjbtC07tltZIlDEoAUn 2FfB3ACtwEt0hM0b9zmA+UdlVyT9yWpB9UtX7roPWWNRD5vgZURk2zZ4OrA0iZov KmUGXixipz76j8ldXw5oOFSNhMf/ZJNCZqWMjDfMGyDLQQIF93+ZYuiwtq7AhwkG z4QeFkUgSwNn9igUpECvyYni32p8ilKFebECsPIXtd72/uI3xwFfEe+bf+aTUWaB alQwFrQapwmoSfpyPqqZwHvYsClbe8+qFimWM5rG7LkadUURUa7tefmrse5EEvE7 OjPEHGN8Hq4bayjnO+nDBJeS0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOs/KUcS 34Mj+UCxAp4hHX0vKr4qMB8GA1UdIwQYMBaAFIbCPBe8TSDuFvCS01os9lVP7HEZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUQ3Ny80QjY0MjdFMkFC RjkxMUVBODhBQUUzMkNDNEY5QUUwMi9oc0k4Rjd4TklPNFc4SkxUV2l6MlZVX3Nj UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzSThGN3hOSU80VzhKTFRXaXoyVlVfc2NSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUQ3Ny80QjY0MjdFMkFCRjkxMUVBODhBQUUzMkNDNEY5QUUwMi9oc0k4Rjd4TklP NFc4SkxUV2l6MlZVX3NjUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL5L2Xxyw+0yW+Xa56B1J+WBfZXpAFeTxUcQ2vDkmDYpBhiJyavAVf BfXuCkus0H2AiAIaoTWpnTX8jLVbn1bKv678ypIU6MO4gat/Qmly36BkDiRHbgGQ v9dPCjjmXqzjqH/XXBtLToBJNUHg0jx8ZoJWAxXXTvJ9f+KWs0Uc4XiPtv614+VK s0WFIhZuXOuL91CqPPu/l4CdlJA0BVV46bNcCtdIdrjm56sllfYBX3Cq0VQS/O0q gpHlj7wxNW349nzuc4QDz6vhvjaN8sCSgkI8ght+tpV+83lOqilrAFMSYnXTSyb9 ztbJhyV93DU+aO53l2yKvniZvQQjWldt -----END CERTIFICATE-----Generated at Thu Dec 25 12:43:12 2025 by rpki-client