This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft File: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft (raw, json) Hash identifier: h2brmKpbS4tWoOBbjQUvEKscyH/UCq3DNs9bblIsb8M= Subject key identifier: B5:B1:74:C4:CF:ED:7A:50:0A:60:3F:D9:91:F1:DE:A6:F1:85:6A:19 Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 Certificate issuer: /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft Manifest number: CD Signing time: Sun 21 Dec 2025 05:03:21 +0000 Manifest this update: Sun 21 Dec 2025 05:03:21 +0000 Manifest next update: Sun 28 Dec 2025 05:03:21 +0000 Files and hashes: 1: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl (hash: woTFt+ambFMjdHviozANcQyu/NtdNNiywxeY9Y7iXrQ=) 2: 98AEAB84B72111EF8A087D30C4F9AE02.roa (hash: EmgeGd2nbypcvg/UlNX2SuHf8VqNk8LmkdwfgXUQa7s=) 3: F33309A2B72011EFB3A5D772C4F9AE02.roa (hash: sPYK904wHIWBGcH5mDdbXVeuBhglZFt8rbG1ZnupH8c=) 4: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (hash: X6YAYsczE/+jmZgDW2VDDKtWtCB2xcDLkZqRt9MnRaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Validity Not Before: Dec 21 05:03:21 2025 GMT Not After : Dec 28 05:03:21 2025 GMT Subject: CN=69477f99-1d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:39:11:43:c6:97:2b:94:9c:15:5a:d2:bc:3a: b8:ce:0a:60:95:ab:61:15:1b:41:44:2f:f3:d5:d9: ba:7f:40:e2:c0:df:4a:da:63:fe:4d:d1:7a:d7:83: c8:4e:ad:f0:71:ed:11:01:63:6d:a8:36:87:55:92: 37:d8:c4:eb:4e:99:7b:9a:94:24:bb:fa:e5:1a:46: eb:02:d7:4e:63:e5:04:b3:b5:fb:55:9f:d3:e9:2b: 29:5b:c7:e4:fa:55:d3:44:34:43:51:92:59:95:b2: 4f:da:cc:12:e4:d2:23:a0:37:82:8f:c8:12:14:0a: 27:06:d8:a1:c2:21:a8:db:79:2c:0b:1f:4a:88:54: d8:7a:e3:fc:be:76:de:82:01:42:42:ee:b1:4f:2f: 42:4f:9b:99:3b:c3:8e:87:2e:01:86:cc:6d:12:b2: 07:86:d5:14:18:76:af:7c:a8:58:c5:04:fa:87:45: d9:61:68:a4:29:43:ac:63:00:50:64:2a:51:98:90: 1d:4c:eb:4e:ab:01:aa:6e:d7:2f:8e:08:d1:36:b1: 63:01:ac:71:3f:6d:35:6e:35:74:83:98:a7:70:71: 43:95:4a:70:d8:36:49:27:6b:67:76:7a:ca:52:75: a1:26:e7:fa:22:40:13:89:15:80:32:d8:97:0c:84: 2d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B1:74:C4:CF:ED:7A:50:0A:60:3F:D9:91:F1:DE:A6:F1:85:6A:19 X509v3 Authority Key Identifier: keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:ad:02:7e:a2:ae:de:13:8a:9e:fc:ab:dc:3b:82:f4:8d:fd: 74:b2:a3:20:30:d9:17:85:51:bf:f3:20:88:5f:d9:22:cf:15: 02:ef:a1:fb:0a:54:97:71:43:45:37:4a:be:2d:ca:a6:d7:65: a2:0b:db:62:db:60:f3:52:6c:83:23:e4:3a:20:cf:c9:3b:f7: c3:7d:3f:cf:27:e9:7d:1a:70:b8:51:32:28:f3:71:57:32:85: c9:01:ef:bf:77:2d:dc:a2:1a:a5:fe:37:32:2a:15:b7:42:bf: 7b:91:a7:7d:b9:6f:a2:70:d3:eb:0f:d5:74:17:f9:f9:56:98: f1:15:09:11:fd:a8:df:d8:c5:6a:6d:cc:5f:94:9f:42:7e:38: 03:e5:55:06:05:1e:57:ed:21:79:e2:ed:32:a6:6b:a2:79:1a: 55:11:05:25:78:28:df:7e:1d:2b:fb:42:d8:3c:29:f3:6f:a7: 56:d5:3a:4d:d1:46:57:a9:e3:22:83:35:80:ac:28:50:5b:6d: 34:8f:27:b7:be:a6:56:a4:cc:aa:4e:78:36:df:ac:92:a0:28: 84:58:08:32:33:97:c4:b1:6b:2d:69:e5:8b:ca:a1:bc:1b:ef: eb:54:2b:83:59:27:08:51:5c:2d:5f:94:09:ab:65:53:cf:0f: f2:fe:e4:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyRUYxMTAvBgNVBAUTKDg3MTk3RkQ1NDZEQzMxNTIzMTExREQ5MzkwQjFCQTNG M0Q3MDI2NTYwHhcNMjUxMjIxMDUwMzIxWhcNMjUxMjI4MDUwMzIxWjAYMRYwFAYD VQQDDA02OTQ3N2Y5OS0xZDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlzkRQ8aXK5ScFVrSvDq4zgpglathFRtBRC/z1dm6f0DiwN9K2mP+TdF614PI Tq3wce0RAWNtqDaHVZI32MTrTpl7mpQku/rlGkbrAtdOY+UEs7X7VZ/T6SspW8fk +lXTRDRDUZJZlbJP2swS5NIjoDeCj8gSFAonBtihwiGo23ksCx9KiFTYeuP8vnbe ggFCQu6xTy9CT5uZO8OOhy4BhsxtErIHhtUUGHavfKhYxQT6h0XZYWikKUOsYwBQ ZCpRmJAdTOtOqwGqbtcvjgjRNrFjAaxxP201bjV0g5incHFDlUpw2DZJJ2tndnrK UnWhJuf6IkATiRWAMtiXDIQtbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWxdMTP 7XpQCmA/2ZHx3qbxhWoZMB8GA1UdIwQYMBaAFIcZf9VG3DFSMRHdk5Cxuj89cCZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJFRi9GQzY1MEI3MkI3 MUQxMUVGODk4MkM0MENDNEY5QUUwMi9oeGxfMVViY01WSXhFZDJUa0xHNlB6MXdK bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h4bF8xVWJjTVZJeEVkMlRrTEc2UHoxd0psWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODJFRi9GQzY1MEI3MkI3MUQxMUVGODk4MkM0MENDNEY5QUUwMi9oeGxfMVViY01W SXhFZDJUa0xHNlB6MXdKbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxrQJ+oq7eE4qe/KvcO4L0jf10sqMgMNkXhVG/8yCIX9kizxUC76H7 ClSXcUNFN0q+Lcqm12WiC9ti22DzUmyDI+Q6IM/JO/fDfT/PJ+l9GnC4UTIo83FX MoXJAe+/dy3cohql/jcyKhW3Qr97kad9uW+icNPrD9V0F/n5VpjxFQkR/ajf2MVq bcxflJ9CfjgD5VUGBR5X7SF54u0ypmuieRpVEQUleCjffh0r+0LYPCnzb6dW1TpN 0UZXqeMigzWArChQW200jye3vqZWpMyqTng236ySoCiEWAgyM5fEsWstaeWLyqG8 G+/rVCuDWScIUVwtX5QJq2VTzw/y/uTj -----END CERTIFICATE-----Generated at Sun Dec 21 22:11:55 2025 by rpki-client