This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft File: HN4SRMu7llQubIsJo9rBwbRDaNc.mft (raw, json) Hash identifier: E70wkaoOgLx3IoEXCrJAWlfIrSNntUaczSE6OQtNzy4= Subject key identifier: 75:EB:64:50:4C:41:79:94:3E:42:B5:77:F8:34:D5:4A:0E:1C:C4:EF Authority key identifier: 1C:DE:12:44:CB:BB:96:54:2E:6C:8B:09:A3:DA:C1:C1:B4:43:68:D7 Certificate issuer: /CN=A918A498/serialNumber=1CDE1244CBBB96542E6C8B09A3DAC1C1B44368D7 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft Manifest number: 8F Signing time: Fri 05 Dec 2025 04:28:16 +0000 Manifest this update: Fri 05 Dec 2025 04:28:15 +0000 Manifest next update: Fri 12 Dec 2025 04:28:15 +0000 Files and hashes: 1: HN4SRMu7llQubIsJo9rBwbRDaNc.crl (hash: l4DbRR6BK7N3zGKv6pAzymNPK7C8Ud0wm/ii6LOiQgM=) 2: 62C86698F80A11EFA400AC2FC4F9AE02.roa (hash: iou6EnoDniALad6Yrel3h0kHQ1grK3uoWpHvIkBO8LI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.crl rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A498, serialNumber=1CDE1244CBBB96542E6C8B09A3DAC1C1B44368D7 Validity Not Before: Dec 5 04:28:15 2025 GMT Not After : Dec 12 04:28:15 2025 GMT Subject: CN=69325f60-0f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b1:6e:3f:ee:4a:bf:d6:1c:e6:fc:c0:1c:eb: d7:2c:02:e4:94:6e:42:4b:b9:96:93:eb:16:3e:d4: 09:59:7f:27:56:49:5d:21:7f:42:b3:f2:28:e2:03: 8e:69:5e:fa:78:bb:23:b2:26:af:a3:88:68:28:bb: 27:d9:4a:c4:42:8f:9d:5f:31:f8:0b:04:86:b7:39: a7:ea:64:8b:db:20:20:c2:ad:55:fc:d9:50:cc:0b: 32:1b:50:97:95:37:9d:0b:e2:a6:ff:80:f0:8c:7f: ef:f9:a4:22:16:24:85:7a:55:01:2f:82:ea:9c:56: b9:a5:7c:ce:a3:8f:e8:d3:b0:77:40:f4:b2:fb:6b: 26:30:32:c2:fc:a8:47:d4:e5:a7:27:1b:07:c1:cf: 82:98:6c:5b:77:00:3f:f1:33:c7:83:85:3d:e0:65: f6:ea:b3:6a:06:21:e9:7d:b6:84:28:60:24:38:c9: 0c:f4:2d:18:3b:8d:f4:ab:e0:bf:1a:9b:06:37:07: b1:12:08:f3:15:40:80:bc:45:ef:0b:4d:70:cb:af: b9:f4:2e:5c:81:15:04:ee:61:2b:95:3f:9a:37:65: 15:46:37:fa:eb:e7:f0:82:e9:f3:ca:55:c7:d0:11: 42:52:84:c2:ef:44:93:fc:5d:b0:02:41:b8:10:17: 0a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:EB:64:50:4C:41:79:94:3E:42:B5:77:F8:34:D5:4A:0E:1C:C4:EF X509v3 Authority Key Identifier: keyid:1C:DE:12:44:CB:BB:96:54:2E:6C:8B:09:A3:DA:C1:C1:B4:43:68:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:a2:cd:91:a2:a2:f1:ec:76:49:17:99:0d:f5:49:5e:d4:38: be:fa:a8:b4:db:ca:41:98:77:a4:4c:6e:07:5a:97:e4:cb:ac: 48:a4:1c:55:bd:66:7a:0f:34:ac:16:c3:e5:c2:65:1b:5c:b7: 7d:44:ba:8e:30:aa:b6:17:b3:d2:b7:70:09:75:a1:db:d7:16: 25:31:39:6f:1f:78:0f:45:b2:ba:b9:84:02:e3:1b:7b:36:63: 87:3c:18:e1:e5:99:e2:3e:4c:fd:e2:49:83:60:8a:6d:0a:ba: fc:d5:5c:ae:2f:e9:24:14:95:59:4c:24:3c:f4:a2:8c:e6:b4: 39:c8:cf:a7:9e:69:67:e1:d9:ff:93:85:fb:eb:65:27:c4:57: 54:e5:6a:54:72:f3:20:b2:f2:e1:81:42:e5:c2:8d:5e:94:22: e7:19:4e:15:18:b8:f4:37:71:72:d4:41:2c:c7:2b:6b:1c:4b: 8a:68:92:90:b3:fc:3f:9c:df:ae:b7:99:a3:59:6a:16:b8:2b: 42:f8:7d:6b:6a:ad:41:62:3e:e4:47:1a:eb:c6:2d:ed:c1:36: 81:0a:b9:8c:1d:81:37:6f:5d:ca:b8:49:ab:2b:5f:b5:23:b8: 17:b2:cf:9f:8e:40:b9:63:05:b7:94:2a:d4:b4:21:f5:d9:5f: 28:ee:a9:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE0OTgxMTAvBgNVBAUTKDFDREUxMjQ0Q0JCQjk2NTQyRTZDOEIwOUEzREFDMUMx QjQ0MzY4RDcwHhcNMjUxMjA1MDQyODE1WhcNMjUxMjEyMDQyODE1WjAYMRYwFAYD VQQDEw02OTMyNWY2MC0wZjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rFuP+5Kv9Yc5vzAHOvXLALklG5CS7mWk+sWPtQJWX8nVkldIX9Cs/Io4gOO aV76eLsjsiavo4hoKLsn2UrEQo+dXzH4CwSGtzmn6mSL2yAgwq1V/NlQzAsyG1CX lTedC+Km/4DwjH/v+aQiFiSFelUBL4LqnFa5pXzOo4/o07B3QPSy+2smMDLC/KhH 1OWnJxsHwc+CmGxbdwA/8TPHg4U94GX26rNqBiHpfbaEKGAkOMkM9C0YO430q+C/ GpsGNwexEgjzFUCAvEXvC01wy6+59C5cgRUE7mErlT+aN2UVRjf66+fwgunzylXH 0BFCUoTC70ST/F2wAkG4EBcKLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXrZFBM QXmUPkK1d/g01UoOHMTvMB8GA1UdIwQYMBaAFBzeEkTLu5ZULmyLCaPawcG0Q2jX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTQ5OC9EMkRFRDM0NkY4 MDkxMUVGQTUyODFCMTZDNEY5QUUwMi9ITjRTUk11N2xsUXViSXNKbzlyQndiUkRh TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hONFNSTXU3bGxRdWJJc0pvOXJCd2JSRGFOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTQ5OC9EMkRFRDM0NkY4MDkxMUVGQTUyODFCMTZDNEY5QUUwMi9ITjRTUk11N2xs UXViSXNKbzlyQndiUkRhTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoos2RoqLx7HZJF5kN9Ule1Di++qi028pBmHekTG4HWpfky6xIpBxV vWZ6DzSsFsPlwmUbXLd9RLqOMKq2F7PSt3AJdaHb1xYlMTlvH3gPRbK6uYQC4xt7 NmOHPBjh5ZniPkz94kmDYIptCrr81VyuL+kkFJVZTCQ89KKM5rQ5yM+nnmln4dn/ k4X762UnxFdU5WpUcvMgsvLhgULlwo1elCLnGU4VGLj0N3Fy1EEsxytrHEuKaJKQ s/w/nN+ut5mjWWoWuCtC+H1raq1BYj7kRxrrxi3twTaBCrmMHYE3b13KuEmrK1+1 I7gXss+fjkC5YwW3lCrUtCH12V8o7qli -----END CERTIFICATE-----Generated at Sun Dec 7 02:01:52 2025 by rpki-client