This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft File: hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft (raw, json) Hash identifier: 6aVifpYfZp8boYzAyE9/i4+OAaEOLWcNDSQB/sPWCyQ= Subject key identifier: C4:96:FB:A7:CD:1B:0F:FD:85:64:A8:7E:65:A5:95:D6:4C:C7:6B:AD Authority key identifier: 84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 Certificate issuer: /CN=A91F4091/serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft Manifest number: 0122 Signing time: Fri 19 Dec 2025 03:49:11 +0000 Manifest this update: Fri 19 Dec 2025 03:49:10 +0000 Manifest next update: Fri 26 Dec 2025 03:49:10 +0000 Files and hashes: 1: hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl (hash: NxSrkGnDUH5gpT9XQfjzkMqqfnW0S3iB9RgGEOUHjcI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:49:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4091, serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Validity Not Before: Dec 19 03:49:10 2025 GMT Not After : Dec 26 03:49:10 2025 GMT Subject: CN=6944cb37-2ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5e:d5:5e:b6:89:0b:73:b2:a1:82:de:7a:2c: 07:d4:4a:74:79:09:68:83:77:99:5e:1f:1d:82:7f: 1e:c4:ae:03:df:0b:6c:4d:4b:6b:8b:8e:5d:fa:99: 4c:bb:a0:c3:09:d0:3b:73:ab:cb:f2:6d:e1:f5:cd: b5:4f:6a:ad:53:ad:13:70:96:22:84:21:7b:57:f1: 31:f8:8c:03:7f:8c:cb:28:f0:69:af:4b:b6:11:56: e0:0a:89:8d:31:af:fe:41:18:e5:cb:85:b1:74:b6: 54:60:22:68:7d:04:a6:74:44:50:cd:29:c8:be:bc: 6e:49:25:3c:d7:30:7c:e7:c8:e4:7a:5f:c2:ef:79: ad:c1:75:b6:e0:10:ba:cb:84:2c:4e:71:2d:9b:07: 75:92:eb:f3:3d:ea:9f:b8:c8:d4:40:f7:d0:f6:fd: bb:a5:1a:1c:08:91:62:d6:b0:45:c9:f5:c9:0e:a4: d2:a1:b4:62:04:87:35:f6:b6:cc:6e:80:b2:f9:61: 29:f9:28:4c:5e:60:8b:95:b6:7e:23:1b:bd:2e:62: 12:41:53:5a:88:d6:76:43:69:6d:a1:17:b1:ea:97: c6:2b:75:3e:2f:87:75:b9:88:38:9a:dd:9a:a5:9e: 72:12:6b:76:b0:fa:30:79:09:77:94:2e:3a:d5:3a: 55:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:96:FB:A7:CD:1B:0F:FD:85:64:A8:7E:65:A5:95:D6:4C:C7:6B:AD X509v3 Authority Key Identifier: keyid:84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:cf:bf:51:c5:9d:9e:f0:38:f5:d1:f5:f3:1e:97:63:fc:a7: 43:5d:08:52:f9:c5:8a:b2:98:06:28:f3:54:dd:be:7d:d7:c0: bc:ac:29:86:b6:9f:cb:84:f0:f5:77:20:79:a6:dc:0f:d9:d4: 4f:aa:86:85:c9:86:56:4f:a4:e6:5e:1a:cd:6d:57:6c:45:5d: 39:4c:ee:98:e9:5b:5c:74:bf:1d:98:fa:a8:60:33:9f:31:d5: 29:ad:5c:44:ab:d0:eb:76:b2:9e:79:54:3d:91:43:ca:a6:0d: aa:e1:b6:ff:97:cf:bc:bf:ae:8e:fe:59:c5:3f:30:4c:fb:8c: cb:d8:37:ac:87:4e:ec:c5:82:c4:38:f3:83:41:ff:73:c3:3f: 44:aa:de:20:5d:e7:f2:ba:84:78:74:74:e8:6b:0b:a0:80:e5: ed:fe:61:bf:6c:8c:e6:c2:ea:2f:5c:c5:bc:50:33:44:e8:f6: 52:a9:48:97:0f:77:0a:37:84:53:d7:5a:ed:33:46:7f:f8:44: 77:78:ce:9e:70:09:72:84:58:a2:67:3d:fa:42:d2:13:3a:b2: 17:b8:aa:1a:97:62:00:cb:c9:02:15:03:36:0a:a2:51:7c:07: fa:28:bd:89:73:5b:21:1c:d1:d5:cc:2b:5c:2e:53:f8:07:21: 65:1e:ad:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQwOTExMTAvBgNVBAUTKDg0NTlGQjcyOTBENzRBOUJDRTI2MEUzRkFCNjA1RDdG RDgzMjQ5MzEwHhcNMjUxMjE5MDM0OTEwWhcNMjUxMjI2MDM0OTEwWjAYMRYwFAYD VQQDDA02OTQ0Y2IzNy0yY2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqV7VXraJC3OyoYLeeiwH1Ep0eQlog3eZXh8dgn8exK4D3wtsTUtri45d+plM u6DDCdA7c6vL8m3h9c21T2qtU60TcJYihCF7V/Ex+IwDf4zLKPBpr0u2EVbgComN Ma/+QRjly4WxdLZUYCJofQSmdERQzSnIvrxuSSU81zB858jkel/C73mtwXW24BC6 y4QsTnEtmwd1kuvzPeqfuMjUQPfQ9v27pRocCJFi1rBFyfXJDqTSobRiBIc19rbM boCy+WEp+ShMXmCLlbZ+Ixu9LmISQVNaiNZ2Q2ltoRex6pfGK3U+L4d1uYg4mt2a pZ5yEmt2sPoweQl3lC461TpVnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSW+6fN Gw/9hWSofmWlldZMx2utMB8GA1UdIwQYMBaAFIRZ+3KQ10qbziYOP6tgXX/YMkkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDA5MS82NTIxQTBGMDFE OUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNwdk9KZzRfcTJCZGY5Z3lT VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hGbjdjcERYU3B2T0pnNF9xMkJkZjlneVNURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDA5MS82NTIxQTBGMDFEOUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNw dk9KZzRfcTJCZGY5Z3lTVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuz79RxZ2e8Dj10fXzHpdj/KdDXQhS+cWKspgGKPNU3b5918C8rCmG tp/LhPD1dyB5ptwP2dRPqoaFyYZWT6TmXhrNbVdsRV05TO6Y6VtcdL8dmPqoYDOf MdUprVxEq9DrdrKeeVQ9kUPKpg2q4bb/l8+8v66O/lnFPzBM+4zL2Desh07sxYLE OPODQf9zwz9Eqt4gXefyuoR4dHToawuggOXt/mG/bIzmwuovXMW8UDNE6PZSqUiX D3cKN4RT11rtM0Z/+ER3eM6ecAlyhFiiZz36QtITOrIXuKoal2IAy8kCFQM2CqJR fAf6KL2Jc1shHNHVzCtcLlP4ByFlHq2a -----END CERTIFICATE-----Generated at Fri Dec 19 21:54:44 2025 by rpki-client