This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft File: hhe5_iqn_uIl8uDS3IdkCYE33m0.mft (raw, json) Hash identifier: XGGcNGuT7NxinGyL/NJajzeif3/qyQmRbC3b2Us+cqQ= Subject key identifier: FD:58:F9:9E:23:C6:DA:D6:46:4A:23:94:30:E6:46:60:04:B5:FB:1C Authority key identifier: 86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D Certificate issuer: /CN=A9117715/serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D Certificate serial: 0A45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft Manifest number: 0A3D Signing time: Thu 04 Dec 2025 18:59:50 +0000 Manifest this update: Thu 04 Dec 2025 18:59:49 +0000 Manifest next update: Thu 11 Dec 2025 18:59:49 +0000 Files and hashes: 1: hhe5_iqn_uIl8uDS3IdkCYE33m0.crl (hash: KA5CHoN3fEw/P/ao6Ae1mpgJQPrF3z7CDHcaAG/55Fk=) 2: E118A9DA7CB911EABD07CE5EC4F9AE02.roa (hash: QwIma1yY7YkOQP5MP7P6PHkUn+CQDErkQ0yx5EKSwl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2629 (0xa45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117715, serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D Validity Not Before: Dec 4 18:59:49 2025 GMT Not After : Dec 11 18:59:49 2025 GMT Subject: CN=6931da26-2c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5e:71:e0:2b:5e:dd:ef:80:86:4e:bf:24:bb: e8:9c:f3:ac:9d:6a:62:c2:34:b2:4c:1a:6c:bd:cc: 0c:01:02:64:4d:1f:48:05:07:5d:8c:03:75:9e:fc: 28:16:dc:5c:ce:8e:72:7a:5a:8e:bc:01:fc:d1:74: c1:f3:f5:ff:1d:28:fa:ed:40:c5:e5:cf:c6:6c:ec: bf:17:56:4b:d6:4e:cd:f0:e1:a3:84:91:66:a2:c1: de:ae:52:cc:d7:1e:b6:73:ea:45:71:57:61:f8:0f: f7:55:64:33:ff:3d:08:b0:1f:0b:0e:65:be:17:88: a0:0b:42:53:6b:68:cd:32:ea:5a:70:09:12:06:31: 01:f4:b4:8e:d3:8d:68:69:41:3f:ec:b7:66:22:bf: 8a:86:f5:69:bc:be:07:bb:aa:ff:82:3f:5e:5d:18: c1:2e:83:80:a2:61:c4:d0:1a:39:50:2a:71:fb:83: 98:da:26:97:87:c7:cb:05:78:ab:8e:2b:d3:ac:2a: 93:c5:b3:71:fd:8c:51:84:0b:a5:35:6e:e0:00:43: d1:4e:17:41:d0:63:05:1c:24:e7:57:e0:d8:aa:de: 51:a6:17:f7:b5:a0:cd:00:ef:2d:cf:5c:fb:47:f9: c0:05:b4:4a:98:14:c6:95:9f:21:53:af:ff:0b:5b: a1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:58:F9:9E:23:C6:DA:D6:46:4A:23:94:30:E6:46:60:04:B5:FB:1C X509v3 Authority Key Identifier: keyid:86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:ef:a8:ff:be:f4:08:d1:38:25:4e:3e:9d:bb:cb:b9:1b:cb: 18:c6:9a:48:0e:4a:54:18:dc:ef:8d:9a:96:86:84:6e:be:ca: 21:85:f1:1a:7d:04:68:e8:48:d0:29:ce:f1:5c:b9:69:29:d9: 12:42:3b:09:4e:10:bd:38:17:92:0c:55:24:1e:6b:0e:dc:1e: d3:48:ae:57:60:bf:2d:71:22:f2:b0:30:d8:b9:81:4c:63:29: 40:8c:9e:4f:46:a9:89:3e:c8:03:18:06:f3:ec:10:88:31:e4: f3:6f:36:3b:c1:14:cf:5b:2c:a9:41:e7:98:e8:4e:c8:be:e6: d7:f7:40:e4:e1:79:aa:0e:59:9d:e9:27:46:b3:61:3d:3c:db: 2b:60:f6:5c:6b:3d:6b:8f:43:75:55:e4:b5:dd:f1:f4:7d:82: 95:a3:0e:a3:8e:2e:dd:33:df:ce:90:b3:78:cf:c1:5f:da:e5: ee:a1:1e:c3:37:de:d0:28:71:a4:f6:18:21:71:d7:2d:64:cf: 96:9d:72:1a:cc:1c:bd:75:c6:92:0f:29:cf:09:1b:41:b9:a6: 27:bf:db:df:99:6b:4e:1f:bd:1a:13:93:35:85:25:74:64:c7: de:08:72:65:d2:f0:27:0b:83:66:dd:39:42:50:e8:4b:4f:c2: 90:5b:b5:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3MTUxMTAvBgNVBAUTKDg2MTdCOUZFMkFBN0ZFRTIyNUYyRTBEMkRDODc2NDA5 ODEzN0RFNkQwHhcNMjUxMjA0MTg1OTQ5WhcNMjUxMjExMTg1OTQ5WjAYMRYwFAYD VQQDEw02OTMxZGEyNi0yYzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqF5x4Cte3e+Ahk6/JLvonPOsnWpiwjSyTBpsvcwMAQJkTR9IBQddjAN1nvwo Ftxczo5yelqOvAH80XTB8/X/HSj67UDF5c/GbOy/F1ZL1k7N8OGjhJFmosHerlLM 1x62c+pFcVdh+A/3VWQz/z0IsB8LDmW+F4igC0JTa2jNMupacAkSBjEB9LSO041o aUE/7LdmIr+KhvVpvL4Hu6r/gj9eXRjBLoOAomHE0Bo5UCpx+4OY2iaXh8fLBXir jivTrCqTxbNx/YxRhAulNW7gAEPRThdB0GMFHCTnV+DYqt5Rphf3taDNAO8tz1z7 R/nABbRKmBTGlZ8hU6//C1uhCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1Y+Z4j xtrWRkojlDDmRmAEtfscMB8GA1UdIwQYMBaAFIYXuf4qp/7iJfLg0tyHZAmBN95t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzcxNS9CQzFDNUYxMDdD QjgxMUVBQjBGNjQ3NURDNEY5QUUwMi9oaGU1X2lxbl91SWw4dURTM0lka0NZRTMz bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hoZTVfaXFuX3VJbDh1RFMzSWRrQ1lFMzNtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzcxNS9CQzFDNUYxMDdDQjgxMUVBQjBGNjQ3NURDNEY5QUUwMi9oaGU1X2lxbl91 SWw4dURTM0lka0NZRTMzbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR76j/vvQI0TglTj6du8u5G8sYxppIDkpUGNzvjZqWhoRuvsohhfEa fQRo6EjQKc7xXLlpKdkSQjsJThC9OBeSDFUkHmsO3B7TSK5XYL8tcSLysDDYuYFM YylAjJ5PRqmJPsgDGAbz7BCIMeTzbzY7wRTPWyypQeeY6E7IvubX90Dk4XmqDlmd 6SdGs2E9PNsrYPZcaz1rj0N1VeS13fH0fYKVow6jji7dM9/OkLN4z8Ff2uXuoR7D N97QKHGk9hghcdctZM+WnXIazBy9dcaSDynPCRtBuaYnv9vfmWtOH70aE5M1hSV0 ZMfeCHJl0vAnC4Nm3TlCUOhLT8KQW7XP -----END CERTIFICATE-----Generated at Sat Dec 6 17:09:54 2025 by rpki-client