This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft File: hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft (raw, json) Hash identifier: uZ4l4GJHTXro4nylS6yu4A/pYFrSaNIv/Fxj+lhvgvE= Subject key identifier: 95:D3:48:19:F4:D0:52:83:58:7F:87:BB:71:06:24:CC:0D:60:F6:5A Authority key identifier: 84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 Certificate issuer: /CN=A91505AB/serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Certificate serial: 1A86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft Manifest number: 1A7D Signing time: Sat 06 Dec 2025 15:58:45 +0000 Manifest this update: Sat 06 Dec 2025 15:58:45 +0000 Manifest next update: Sat 13 Dec 2025 15:58:45 +0000 Files and hashes: 1: hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl (hash: +w0DPQtbO4JzDVI4XCDXyp39XWCv75k8w2GKWLgafwA=) 2: 4EF483C64C2911E78BF1BD13C4F9AE02.roa (hash: gmxypZgEWPdJyaxL0d+DHAXn8CkOhTwU8vnSEJsmC3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6790 (0x1a86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91505AB, serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Validity Not Before: Dec 6 15:58:45 2025 GMT Not After : Dec 13 15:58:45 2025 GMT Subject: CN=693452b5-fc7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:34:b4:15:e4:34:8c:81:b6:52:11:14:d7:81: 3d:63:09:5f:37:ef:f5:ae:99:94:e3:4e:6e:7f:6a: e0:89:05:0d:5a:55:4e:0a:3a:a4:68:ec:d0:72:91: f8:29:45:5e:34:00:bb:5e:6f:9d:a5:cc:0c:ac:f1: ed:19:28:3d:7a:b1:3c:a1:53:17:2c:3a:25:4b:ed: 19:95:62:50:11:d9:0e:77:33:50:3d:b8:aa:94:51: 07:9e:b7:e4:bc:b7:c4:7e:b9:c1:c2:0e:a7:d7:4a: 9a:e7:41:68:94:38:49:7e:c0:35:9b:3a:8f:b7:fa: 4f:3c:69:8c:98:38:5a:44:7e:cb:b1:bb:3e:97:52: 79:84:da:22:0d:13:7c:34:5b:03:58:f5:8a:e4:d8: 3f:ef:dd:57:51:5c:38:4e:1f:42:b1:41:f0:03:d2: 4b:c8:5a:56:c5:ef:8a:6c:87:92:64:7f:ce:69:98: 54:cb:96:6c:bc:69:0a:48:45:18:90:98:2c:d2:f7: a1:8f:1b:4b:9c:fd:1b:00:c3:57:2e:d9:f5:08:8d: 54:4c:17:9e:8d:c2:aa:bc:6e:6e:95:64:6e:9c:66: 86:4f:be:66:2c:73:0f:1a:b2:de:14:99:8e:45:87: a9:26:f2:19:d0:9f:f6:5c:92:d8:ff:07:5f:b3:77: ba:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D3:48:19:F4:D0:52:83:58:7F:87:BB:71:06:24:CC:0D:60:F6:5A X509v3 Authority Key Identifier: keyid:84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ed:70:aa:91:8f:20:2a:2f:bf:4a:61:83:8a:24:01:67:14: 84:2b:89:e2:75:d4:af:3c:72:10:a1:11:31:52:6e:7c:f8:1e: ba:29:be:cc:15:88:f2:1f:49:0f:11:f8:20:1b:2d:e1:d9:f9: a9:5b:b2:ec:a4:6c:6f:bc:ba:1f:fd:e7:3c:26:84:b3:5d:ce: 3c:fb:de:93:59:39:b2:bb:8a:dd:91:00:71:37:fe:42:ff:8e: 3e:4d:f0:7a:50:f5:60:ee:08:1e:f0:68:d7:3d:01:d1:01:59: 6f:11:55:e4:88:d0:75:b9:b3:1e:b3:f1:65:4a:5c:f9:fa:84: e4:71:9f:4d:a7:d1:77:6d:6b:55:01:3e:f8:c6:da:21:c7:df: 7f:3b:52:d4:a4:c1:d8:32:61:07:75:67:64:e3:12:2f:ba:47: 6e:f1:b1:35:38:d3:d3:1b:3a:9a:7c:a5:43:70:ff:a4:d7:21: f1:a0:43:b4:35:dc:98:5b:00:ca:63:c8:c0:ab:f2:3b:b9:70: 2d:35:6d:df:3a:26:3c:76:2d:d2:4d:87:1d:9b:26:4f:f7:89: 75:9e:68:8b:9d:bc:1a:88:00:8b:cf:63:c4:65:c3:96:19:cf: 3c:58:3e:f4:78:28:45:1f:ca:14:e4:8b:6c:6e:ec:b9:65:58: 00:2a:f3:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA1QUIxMTAvBgNVBAUTKDg0MDE4QzA4M0QxMEEzOUU3RjY4NUM0MUFFMTY2Mzcw QzZENzdBQzQwHhcNMjUxMjA2MTU1ODQ1WhcNMjUxMjEzMTU1ODQ1WjAYMRYwFAYD VQQDEw02OTM0NTJiNS1mYzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjS0FeQ0jIG2UhEU14E9YwlfN+/1rpmU405uf2rgiQUNWlVOCjqkaOzQcpH4 KUVeNAC7Xm+dpcwMrPHtGSg9erE8oVMXLDolS+0ZlWJQEdkOdzNQPbiqlFEHnrfk vLfEfrnBwg6n10qa50FolDhJfsA1mzqPt/pPPGmMmDhaRH7Lsbs+l1J5hNoiDRN8 NFsDWPWK5Ng/791XUVw4Th9CsUHwA9JLyFpWxe+KbIeSZH/OaZhUy5ZsvGkKSEUY kJgs0vehjxtLnP0bAMNXLtn1CI1UTBeejcKqvG5ulWRunGaGT75mLHMPGrLeFJmO RYepJvIZ0J/2XJLY/wdfs3e6BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXTSBn0 0FKDWH+Hu3EGJMwNYPZaMB8GA1UdIwQYMBaAFIQBjAg9EKOef2hcQa4WY3DG13rE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDVBQi8wNTI0M0FDNjRD MjgxMUU3OTY4QUQyMTFDNEY5QUUwMi9oQUdNQ0QwUW81NV9hRnhCcmhaamNNYlhl c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hBR01DRDBRbzU1X2FGeEJyaFpqY01iWGVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDVBQi8wNTI0M0FDNjRDMjgxMUU3OTY4QUQyMTFDNEY5QUUwMi9oQUdNQ0QwUW81 NV9hRnhCcmhaamNNYlhlc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+7XCqkY8gKi+/SmGDiiQBZxSEK4niddSvPHIQoRExUm58+B66Kb7M FYjyH0kPEfggGy3h2fmpW7LspGxvvLof/ec8JoSzXc48+96TWTmyu4rdkQBxN/5C /44+TfB6UPVg7gge8GjXPQHRAVlvEVXkiNB1ubMes/FlSlz5+oTkcZ9Np9F3bWtV AT74xtohx99/O1LUpMHYMmEHdWdk4xIvukdu8bE1ONPTGzqafKVDcP+k1yHxoEO0 NdyYWwDKY8jAq/I7uXAtNW3fOiY8di3STYcdmyZP94l1nmiLnbwaiACLz2PEZcOW Gc88WD70eChFH8oU5Itsbuy5ZVgAKvOT -----END CERTIFICATE-----Generated at Sat Dec 6 20:07:14 2025 by rpki-client