This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft File: HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft (raw, json) Hash identifier: K7/+XuTH1nuf3l7PEzldrVDKZrV4juzKKINb2+4S1T0= Subject key identifier: 7D:F1:5E:49:79:FC:65:D3:C5:24:83:23:E0:D2:58:99:3A:23:22:B1 Authority key identifier: 1C:D4:9E:FB:C3:7E:F4:A8:C6:C8:87:65:62:BD:11:33:44:BC:7E:D1 Certificate issuer: /CN=A913277C/serialNumber=1CD49EFBC37EF4A8C6C8876562BD113344BC7ED1 Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft Manifest number: 020A Signing time: Fri 05 Dec 2025 00:46:13 +0000 Manifest this update: Fri 05 Dec 2025 00:46:12 +0000 Manifest next update: Fri 12 Dec 2025 00:46:12 +0000 Files and hashes: 1: HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl (hash: NTkbXJ/mBW4357Tsra2bwuNbAgk+vAGTghP/k1HjsWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913277C, serialNumber=1CD49EFBC37EF4A8C6C8876562BD113344BC7ED1 Validity Not Before: Dec 5 00:46:12 2025 GMT Not After : Dec 12 00:46:12 2025 GMT Subject: CN=69322b54-203d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:70:a9:07:a3:fd:e7:79:07:96:31:1f:cd:40: bf:76:6d:33:b9:b1:3b:a9:06:fd:ff:d0:cd:1e:38: 6e:ed:b7:eb:5c:16:13:17:e4:9f:18:b6:f5:b0:04: 2d:e5:71:1c:62:7d:b0:19:28:2f:3b:79:09:3e:2d: f7:e5:3a:cf:83:f7:dc:24:f0:fe:15:36:69:4e:49: c0:ad:87:62:af:17:c8:c8:9d:af:29:64:a6:e6:ac: 7c:5e:3d:03:b8:06:8c:f4:19:61:39:4d:c2:2e:7e: cc:c7:0c:5a:89:0c:23:05:98:5b:60:66:4b:a3:18: 65:09:8a:15:b6:86:64:c7:ad:c4:f1:ef:9b:75:78: de:13:6f:bc:a3:35:fa:3d:66:7e:99:54:c9:01:10: 59:fe:f0:3d:09:45:a5:74:48:21:69:d5:00:16:ea: 10:f8:fc:2e:03:c7:02:35:8b:0f:ee:bd:12:6f:28: 68:53:04:d3:d8:e5:2d:c7:53:2f:44:fa:e0:5e:fe: ba:1d:89:fe:63:eb:16:e6:89:ed:76:c4:af:b3:bd: 0b:d9:e9:4c:97:59:40:a7:d8:65:9b:07:58:9a:dc: fc:9e:92:99:3d:9b:ba:a5:6c:83:41:32:a5:7c:ad: 25:f9:7e:21:77:88:e9:47:47:82:13:b3:48:07:ea: d3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F1:5E:49:79:FC:65:D3:C5:24:83:23:E0:D2:58:99:3A:23:22:B1 X509v3 Authority Key Identifier: keyid:1C:D4:9E:FB:C3:7E:F4:A8:C6:C8:87:65:62:BD:11:33:44:BC:7E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:90:6f:a6:2e:7f:6a:1c:f0:2c:3d:b6:6d:d4:47:e3:25:bc: 03:98:8a:8f:cb:aa:67:4c:cc:49:05:be:ab:74:41:bb:29:d5: 28:f8:ed:5f:24:ea:10:cc:bc:48:68:8a:df:90:a9:81:22:a1: e4:86:3b:14:81:16:c9:c7:d2:37:26:7d:0d:e2:61:82:98:84: 8e:a5:89:73:ee:6a:21:69:b6:45:6b:2d:46:53:b8:ce:51:1c: 2c:d2:10:01:e1:1d:92:51:c5:b1:2f:f7:12:2c:02:90:f8:ba: a4:7b:10:52:ef:c8:b9:ca:8c:b7:5c:4c:2e:33:47:87:e6:a7: 80:fe:df:50:f2:48:de:a5:db:8f:69:01:c7:9f:d2:02:f4:47: 02:4b:e0:6a:c6:39:10:dd:ea:e7:06:66:5a:46:70:26:17:50: e8:89:cc:11:50:a9:c3:5c:38:02:ce:f1:01:4b:00:15:0b:b7: 3e:44:32:cc:10:c7:68:e0:c5:46:f8:99:18:d3:d7:5f:97:bb: 97:1a:2c:7d:9e:00:cb:a2:7e:73:b3:2d:bc:a1:9d:11:03:c2: 23:22:57:35:f4:de:ad:ed:d6:5c:b5:a0:42:06:38:0b:12:c5: a7:f6:33:1c:73:7e:d3:f9:5a:8f:d4:13:84:fc:6a:ff:38:6d: c2:fc:5e:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI3N0MxMTAvBgNVBAUTKDFDRDQ5RUZCQzM3RUY0QThDNkM4ODc2NTYyQkQxMTMz NDRCQzdFRDEwHhcNMjUxMjA1MDA0NjEyWhcNMjUxMjEyMDA0NjEyWjAYMRYwFAYD VQQDEw02OTMyMmI1NC0yMDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHCpB6P953kHljEfzUC/dm0zubE7qQb9/9DNHjhu7bfrXBYTF+SfGLb1sAQt 5XEcYn2wGSgvO3kJPi335TrPg/fcJPD+FTZpTknArYdirxfIyJ2vKWSm5qx8Xj0D uAaM9BlhOU3CLn7MxwxaiQwjBZhbYGZLoxhlCYoVtoZkx63E8e+bdXjeE2+8ozX6 PWZ+mVTJARBZ/vA9CUWldEghadUAFuoQ+PwuA8cCNYsP7r0SbyhoUwTT2OUtx1Mv RPrgXv66HYn+Y+sW5ontdsSvs70L2elMl1lAp9hlmwdYmtz8npKZPZu6pWyDQTKl fK0l+X4hd4jpR0eCE7NIB+rT5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3xXkl5 /GXTxSSDI+DSWJk6IyKxMB8GA1UdIwQYMBaAFBzUnvvDfvSoxsiHZWK9ETNEvH7R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjc3Qy9COTdDNzM5NkM5 RjIxMUVEQTFEOTlFNjVDNEY5QUUwMi9ITlNlLThOLTlLakd5SWRsWXIwUk0wUzhm dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hOU2UtOE4tOUtqR3lJZGxZcjBSTTBTOGZ0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mjc3Qy9COTdDNzM5NkM5RjIxMUVEQTFEOTlFNjVDNEY5QUUwMi9ITlNlLThOLTlL akd5SWRsWXIwUk0wUzhmdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALkG+mLn9qHPAsPbZt1EfjJbwDmIqPy6pnTMxJBb6rdEG7KdUo+O1f JOoQzLxIaIrfkKmBIqHkhjsUgRbJx9I3Jn0N4mGCmISOpYlz7mohabZFay1GU7jO URws0hAB4R2SUcWxL/cSLAKQ+LqkexBS78i5yoy3XEwuM0eH5qeA/t9Q8kjepduP aQHHn9IC9EcCS+BqxjkQ3ernBmZaRnAmF1DoicwRUKnDXDgCzvEBSwAVC7c+RDLM EMdo4MVG+JkY09dfl7uXGix9ngDLon5zsy28oZ0RA8IjIlc19N6t7dZctaBCBjgL EsWn9jMcc37T+VqP1BOE/Gr/OG3C/F7R -----END CERTIFICATE-----Generated at Sat Dec 6 16:10:45 2025 by rpki-client