This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft File: HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft (raw, json) Hash identifier: G1eXMTEN3QEcWRQDYlKCcjSiynF15yKENIJL5ZGXvDE= Subject key identifier: D9:01:D3:4D:F0:AD:23:9E:6A:43:BF:7D:7F:B4:AC:81:39:19:DF:7E Authority key identifier: 1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A Certificate issuer: /CN=A91707D0/serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft Manifest number: 88 Signing time: Fri 05 Dec 2025 04:33:24 +0000 Manifest this update: Fri 05 Dec 2025 04:33:23 +0000 Manifest next update: Fri 12 Dec 2025 04:33:23 +0000 Files and hashes: 1: HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl (hash: 4ouc6L8KQEI0wfGXHiiDk6HbJNTVWtY2WC3yWJDhU2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91707D0, serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A Validity Not Before: Dec 5 04:33:23 2025 GMT Not After : Dec 12 04:33:23 2025 GMT Subject: CN=69326093-d2d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:93:b4:e6:e9:ea:58:8d:8a:1d:6f:c7:f5:f8: 85:24:2a:3f:7a:a8:04:56:e3:19:12:66:cf:88:df: f2:e0:db:cc:32:4f:a5:fe:bc:e3:ae:d1:cb:25:fd: 91:bd:6e:13:c0:b2:06:e7:80:ed:3b:1b:24:d5:53: ba:b9:6f:4c:b9:d8:fa:9a:1c:f4:35:2d:37:57:69: d5:4b:73:17:85:d8:ac:c4:29:f2:76:6f:01:3d:22: ab:c0:77:72:65:05:d3:ad:23:31:01:72:8b:21:83: 0a:1f:14:3e:ec:68:27:84:79:70:37:e9:0c:f3:48: b1:42:11:39:fd:8b:a5:85:1a:10:e6:10:81:4b:68: 47:32:a4:37:08:43:a4:c2:e3:59:a0:e0:e0:8d:22: bc:2d:84:21:7a:e0:3b:33:4c:9f:5b:58:2b:61:07: ec:76:37:e2:55:b8:22:8d:b5:2e:4f:f6:cf:2f:ba: 9f:e7:f3:17:b8:1c:33:ce:43:b6:dd:c3:f7:02:92: ea:65:ae:f3:da:fe:a6:85:cb:75:b3:07:fc:08:5a: 9b:4c:d9:c6:fe:b6:06:ce:3e:7d:56:bd:e9:59:11: 5e:a5:79:3e:47:dd:20:5e:65:f0:c6:0d:ee:e0:0f: 88:22:26:0f:70:15:97:41:55:2c:52:a9:db:7c:19: 96:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:01:D3:4D:F0:AD:23:9E:6A:43:BF:7D:7F:B4:AC:81:39:19:DF:7E X509v3 Authority Key Identifier: keyid:1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:e0:f9:ef:9f:49:b4:bc:2d:b0:6d:b2:da:36:07:9a:9c:8c: ec:e3:70:ec:29:42:34:5e:9d:28:91:ec:09:07:15:76:50:f8: 2f:04:c5:76:20:ce:42:66:cc:5c:fc:08:59:1f:11:cc:23:92: ef:00:22:1e:4b:1a:ff:7d:53:14:8a:af:17:0c:72:9e:0d:00: 7b:49:f8:9e:3a:3a:e0:be:8e:e6:03:e3:a4:17:6c:05:c4:da: 48:92:a1:fb:6f:a8:d1:63:ea:3e:69:68:38:7d:a1:80:f0:27: 38:24:5b:eb:f1:21:79:ff:c8:ff:42:2c:3c:d7:18:39:61:a1: 12:68:6a:b0:0b:14:5e:2e:5b:d9:62:fe:c2:c9:15:0f:c9:4f: 62:2a:8f:74:36:a7:35:f2:d6:ca:05:2a:8f:cd:1a:68:a9:b5: 62:95:ab:22:db:72:53:41:82:6c:b7:25:b8:1b:2a:fc:7e:4c: ac:2a:26:1c:4a:da:ad:eb:fb:e8:aa:91:d2:10:11:bc:2c:ce: 55:10:ef:78:6f:7a:e7:c8:44:ae:d7:14:69:fe:40:f9:93:c9: 01:45:ec:42:06:a7:69:fe:a1:cf:de:2d:9b:8a:ce:a1:4a:8c: 1b:95:91:75:82:0b:5f:7d:24:25:a7:54:ee:5f:ff:c3:76:be: 32:31:c5:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA3RDAxMTAvBgNVBAUTKDFENjM0MTZDNDczQjBDMDkxMkJEQUIzNzEwMjcwMTA5 NUZDNkMzNUEwHhcNMjUxMjA1MDQzMzIzWhcNMjUxMjEyMDQzMzIzWjAYMRYwFAYD VQQDEw02OTMyNjA5My1kMmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpO05unqWI2KHW/H9fiFJCo/eqgEVuMZEmbPiN/y4NvMMk+l/rzjrtHLJf2R vW4TwLIG54DtOxsk1VO6uW9Mudj6mhz0NS03V2nVS3MXhdisxCnydm8BPSKrwHdy ZQXTrSMxAXKLIYMKHxQ+7GgnhHlwN+kM80ixQhE5/YulhRoQ5hCBS2hHMqQ3CEOk wuNZoODgjSK8LYQheuA7M0yfW1grYQfsdjfiVbgijbUuT/bPL7qf5/MXuBwzzkO2 3cP3ApLqZa7z2v6mhct1swf8CFqbTNnG/rYGzj59Vr3pWRFepXk+R90gXmXwxg3u 4A+IIiYPcBWXQVUsUqnbfBmW8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkB003w rSOeakO/fX+0rIE5Gd9+MB8GA1UdIwQYMBaAFB1jQWxHOwwJEr2rNxAnAQlfxsNa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDdEMC82NUI2OEU5NjAw NzIxMUYwQjM2M0RGNUVDNEY5QUUwMi9IV05CYkVjN0RBa1N2YXMzRUNjQkNWX0d3 MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXTkJiRWM3REFrU3ZhczNFQ2NCQ1ZfR3cxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDdEMC82NUI2OEU5NjAwNzIxMUYwQjM2M0RGNUVDNEY5QUUwMi9IV05CYkVjN0RB a1N2YXMzRUNjQkNWX0d3MW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC54Pnvn0m0vC2wbbLaNgeanIzs43DsKUI0Xp0okewJBxV2UPgvBMV2 IM5CZsxc/AhZHxHMI5LvACIeSxr/fVMUiq8XDHKeDQB7SfieOjrgvo7mA+OkF2wF xNpIkqH7b6jRY+o+aWg4faGA8Cc4JFvr8SF5/8j/Qiw81xg5YaESaGqwCxReLlvZ Yv7CyRUPyU9iKo90Nqc18tbKBSqPzRpoqbVilasi23JTQYJstyW4Gyr8fkysKiYc Stqt6/voqpHSEBG8LM5VEO94b3rnyESu1xRp/kD5k8kBRexCBqdp/qHP3i2bis6h SowblZF1ggtffSQlp1TuX//Ddr4yMcVE -----END CERTIFICATE-----Generated at Sat Dec 6 11:23:01 2025 by rpki-client