This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft File: HmHgACzkS79ZVTyASgrJEub-vzs.mft (raw, json) Hash identifier: ZFXvdfB1v8dqlaD/d1kSiNKc3Noj9hPVUbLI9gaaN+8= Subject key identifier: D5:BE:5A:08:97:B4:64:BB:FB:43:83:81:51:7F:AB:2F:5B:8D:C6:29 Authority key identifier: 1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B Certificate issuer: /CN=A91EACB9/serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft Manifest number: 02A2 Signing time: Fri 19 Dec 2025 00:43:06 +0000 Manifest this update: Fri 19 Dec 2025 00:43:05 +0000 Manifest next update: Fri 26 Dec 2025 00:43:05 +0000 Files and hashes: 1: HmHgACzkS79ZVTyASgrJEub-vzs.crl (hash: R+o5Ko2zMI+vSWFEY1rj0nUPShQ4CngZzcByojeT23A=) 2: 654307DC26CC11EDB395A078C4F9AE02.roa (hash: MHZ2vGsbQCY20I3lKFrbGLCD8ljQ+7RHRVNSOxCSytY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:43:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EACB9, serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B Validity Not Before: Dec 19 00:43:05 2025 GMT Not After : Dec 26 00:43:05 2025 GMT Subject: CN=69449f9a-7703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4c:d0:86:76:d0:5f:67:7b:a6:69:ca:a1:04: 9e:be:8a:fa:91:c9:db:7c:a3:6c:9d:5b:4e:d7:3e: 05:e9:f3:8d:d2:2e:b0:a5:e8:50:ac:44:6e:3c:90: fc:f6:a3:64:04:a6:27:b3:93:62:2d:77:6b:3b:d3: 9c:56:22:01:7a:7c:99:fc:e4:8d:69:94:1b:d8:13: 67:e1:48:9b:f8:2d:99:7d:97:fc:a1:98:31:7f:77: b5:d9:3d:ff:d5:6b:ba:13:fb:8f:10:3a:e9:fa:39: 62:74:ad:e7:21:88:93:99:f1:58:10:03:5d:1f:b5: f5:bd:0b:87:40:99:9f:1b:1f:a8:3c:6b:20:3a:0b: 5a:bd:77:cf:20:57:36:ff:a6:d0:70:cb:6e:a3:bc: db:d1:28:ec:e7:fd:41:f9:dc:73:52:a7:d4:6b:ca: 8d:40:d7:41:32:01:0f:a6:f3:c1:42:5b:72:dd:9e: 2e:7d:75:e2:47:16:17:db:cb:40:7f:3e:3b:36:82: de:80:a1:28:00:1c:09:6c:92:89:17:99:21:c7:49: 84:47:2e:01:21:a6:4b:8d:06:7b:d6:47:b8:56:1c: ca:1d:df:62:e6:54:dd:e3:e3:38:94:22:c1:b4:97: 7a:c3:96:eb:f6:91:72:a3:95:c4:1c:14:e6:9c:10: ad:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BE:5A:08:97:B4:64:BB:FB:43:83:81:51:7F:AB:2F:5B:8D:C6:29 X509v3 Authority Key Identifier: keyid:1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:3f:93:c6:f3:33:42:42:a1:44:97:25:ed:3a:c3:3a:4d:9b: 2e:59:39:04:8a:2d:85:6c:82:a4:30:89:8b:16:ad:52:b1:8f: f7:0c:d9:b6:cc:e6:91:c5:87:71:5b:74:1c:65:a3:2c:a2:45: c7:e1:29:6c:3c:6e:30:b3:87:10:c4:2d:62:b4:03:7d:31:5f: 27:62:35:73:b1:2b:f8:30:cc:2d:38:8a:d3:d9:0e:01:90:fd: 28:17:17:c3:3c:d8:4f:23:cd:d6:07:f0:26:d2:e4:eb:54:cc: 5a:ff:6a:e4:03:03:c2:9d:25:4f:07:79:e9:13:32:e1:bc:7f: 89:1c:51:64:12:f9:34:9c:af:c6:ed:a9:37:2c:a7:63:84:3d: d6:cc:ff:05:ad:2d:4f:84:2c:0d:22:00:d0:07:2e:56:11:86: ed:f0:8c:8f:50:48:bf:24:b9:7c:e0:b0:a7:a6:30:e6:91:c9: 34:a7:0c:62:ae:a2:f4:3b:d0:9c:d3:2f:d1:60:d3:38:d7:01: f2:1f:7a:96:9d:e6:d5:10:1b:3f:0d:46:19:fa:37:84:79:d5: 05:65:2d:65:c4:2e:7c:6f:ab:dd:c0:1a:84:de:cd:c0:f7:34: 5f:9f:b9:ad:2e:8a:6a:04:57:46:c5:70:61:fb:6d:e2:1c:c2: 06:da:a3:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFDQjkxMTAvBgNVBAUTKDFFNjFFMDAwMkNFNDRCQkY1OTU1M0M4MDRBMEFDOTEy RTZGRUJGM0IwHhcNMjUxMjE5MDA0MzA1WhcNMjUxMjI2MDA0MzA1WjAYMRYwFAYD VQQDDA02OTQ0OWY5YS03NzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUzQhnbQX2d7pmnKoQSevor6kcnbfKNsnVtO1z4F6fON0i6wpehQrERuPJD8 9qNkBKYns5NiLXdrO9OcViIBenyZ/OSNaZQb2BNn4Uib+C2ZfZf8oZgxf3e12T3/ 1Wu6E/uPEDrp+jlidK3nIYiTmfFYEANdH7X1vQuHQJmfGx+oPGsgOgtavXfPIFc2 /6bQcMtuo7zb0Sjs5/1B+dxzUqfUa8qNQNdBMgEPpvPBQlty3Z4ufXXiRxYX28tA fz47NoLegKEoABwJbJKJF5khx0mERy4BIaZLjQZ71ke4VhzKHd9i5lTd4+M4lCLB tJd6w5br9pFyo5XEHBTmnBCtzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNW+WgiX tGS7+0ODgVF/qy9bjcYpMB8GA1UdIwQYMBaAFB5h4AAs5Eu/WVU8gEoKyRLm/r87 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUNCOS8wQzAwMjBFMDI2 OUMxMUVEQkIxNDUyNzdDNEY5QUUwMi9IbUhnQUN6a1M3OVpWVHlBU2dySkV1Yi12 enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htSGdBQ3prUzc5WlZUeUFTZ3JKRXViLXZ6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUNCOS8wQzAwMjBFMDI2OUMxMUVEQkIxNDUyNzdDNEY5QUUwMi9IbUhnQUN6a1M3 OVpWVHlBU2dySkV1Yi12enMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApP5PG8zNCQqFElyXtOsM6TZsuWTkEii2FbIKkMImLFq1SsY/3DNm2 zOaRxYdxW3QcZaMsokXH4SlsPG4ws4cQxC1itAN9MV8nYjVzsSv4MMwtOIrT2Q4B kP0oFxfDPNhPI83WB/Am0uTrVMxa/2rkAwPCnSVPB3npEzLhvH+JHFFkEvk0nK/G 7ak3LKdjhD3WzP8FrS1PhCwNIgDQBy5WEYbt8IyPUEi/JLl84LCnpjDmkck0pwxi rqL0O9Cc0y/RYNM41wHyH3qWnebVEBs/DUYZ+jeEedUFZS1lxC58b6vdwBqE3s3A 9zRfn7mtLopqBFdGxXBh+23iHMIG2qPg -----END CERTIFICATE-----Generated at Fri Dec 19 19:05:38 2025 by rpki-client