This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft File: hneZBT7JF0sRHLtGspf6ZH6YKqU.mft (raw, json) Hash identifier: Z63TcFQfo+PtXlS6CTfKZqGbLbhGuY55sI7Nw4bsD1c= Subject key identifier: 67:44:E1:AB:95:0A:95:60:12:9E:CD:9D:F2:6B:F3:1B:01:91:70:E9 Authority key identifier: 86:77:99:05:3E:C9:17:4B:11:1C:BB:46:B2:97:FA:64:7E:98:2A:A5 Certificate issuer: /CN=A91A00E4/serialNumber=867799053EC9174B111CBB46B297FA647E982AA5 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft Manifest number: D2 Signing time: Fri 19 Dec 2025 04:47:10 +0000 Manifest this update: Fri 19 Dec 2025 04:47:09 +0000 Manifest next update: Fri 26 Dec 2025 04:47:09 +0000 Files and hashes: 1: hneZBT7JF0sRHLtGspf6ZH6YKqU.crl (hash: i3q2LnKr7AILv0u794Nvf3OwuO3BcxGaPme1xb4KpOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.crl rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:47:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A00E4, serialNumber=867799053EC9174B111CBB46B297FA647E982AA5 Validity Not Before: Dec 19 04:47:09 2025 GMT Not After : Dec 26 04:47:09 2025 GMT Subject: CN=6944d8ce-1803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5d:c6:d1:50:85:78:0c:eb:16:27:8c:21:12: b4:90:8e:cf:7c:a5:5a:ae:fb:cb:69:be:72:73:2c: 95:e6:dd:13:98:0c:5a:71:bb:da:4d:ff:2f:9b:3b: 75:05:ed:09:71:db:27:0a:ec:0b:91:b3:cd:15:60: a7:9b:bf:45:f1:e8:33:e2:13:31:e8:38:db:f7:7c: 16:62:b3:2b:8e:06:e3:59:98:8f:7b:1a:d2:ff:aa: 04:34:62:83:fd:d7:25:09:4b:2a:e4:a5:ec:c7:97: ab:8b:d2:a6:2b:18:40:6b:51:fc:b9:c8:90:1d:de: e1:a3:6a:8a:5f:74:7e:83:17:f9:18:13:42:cd:38: 92:56:36:2a:a7:4b:67:4f:8f:7a:60:8f:d2:37:29: a2:ff:ed:2c:11:d8:4f:21:b7:58:c1:5a:17:74:a6: 7f:2f:2b:d7:84:ad:78:4a:4c:f8:0c:d1:d7:7e:a2: e2:7c:be:c0:ac:77:a0:48:cc:0d:f3:ef:22:c2:39: ca:5e:38:ed:0e:25:24:f6:e8:ce:a8:78:87:82:eb: 20:ab:38:57:ab:d7:dc:0d:2c:b5:f6:99:af:db:a0: 8e:b2:c7:25:48:17:6b:2b:30:2f:6b:47:84:4b:74: 8a:57:65:5b:c3:bb:10:8e:c5:76:50:bd:7f:46:98: fb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:44:E1:AB:95:0A:95:60:12:9E:CD:9D:F2:6B:F3:1B:01:91:70:E9 X509v3 Authority Key Identifier: keyid:86:77:99:05:3E:C9:17:4B:11:1C:BB:46:B2:97:FA:64:7E:98:2A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:44:43:f5:5a:33:42:93:3b:05:87:a9:01:63:6e:1f:51:94: 75:04:59:e8:c4:8b:38:86:a4:e1:17:b7:a3:9b:71:41:f8:37: 61:cb:e5:86:1b:3d:6d:92:ae:88:5c:fe:a2:7a:d0:75:af:1a: 6d:01:88:67:43:ff:a0:ce:97:5f:57:c6:bb:a2:09:30:99:a3: 1b:22:24:ce:f4:10:46:12:f3:28:bc:f8:c6:21:a8:9c:be:7e: 3a:b9:d3:1e:91:fe:5c:ac:7e:f6:45:93:cc:8a:f2:bb:7b:0d: 28:90:9a:de:54:57:69:37:cf:1b:b5:1f:57:f7:d9:2c:d7:38: 15:5b:25:36:6a:2f:5f:6d:e2:70:d3:88:1e:6d:2c:f4:97:4d: de:9a:92:4d:1c:e8:9a:bf:53:03:b8:58:d3:65:b9:ec:4d:c6: 12:42:ae:b9:e0:f4:72:1d:61:f1:04:96:44:49:e4:72:fa:8e: 46:d5:83:3a:17:82:33:99:4a:ef:61:11:09:bc:45:c3:4d:a6: 19:31:dc:e1:d1:45:b9:4a:e9:ab:ce:a7:aa:10:3c:e5:7a:85: 3e:3c:9e:8f:ea:33:f2:c4:38:6c:9d:8e:9d:e7:2a:82:99:15: b1:d6:6e:fd:97:eb:55:f4:49:81:41:5a:e4:8b:7d:0f:2f:95: 5b:a8:3f:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAwRTQxMTAvBgNVBAUTKDg2Nzc5OTA1M0VDOTE3NEIxMTFDQkI0NkIyOTdGQTY0 N0U5ODJBQTUwHhcNMjUxMjE5MDQ0NzA5WhcNMjUxMjI2MDQ0NzA5WjAYMRYwFAYD VQQDDA02OTQ0ZDhjZS0xODAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs13G0VCFeAzrFieMIRK0kI7PfKVarvvLab5ycyyV5t0TmAxacbvaTf8vmzt1 Be0JcdsnCuwLkbPNFWCnm79F8egz4hMx6Djb93wWYrMrjgbjWZiPexrS/6oENGKD /dclCUsq5KXsx5eri9KmKxhAa1H8uciQHd7ho2qKX3R+gxf5GBNCzTiSVjYqp0tn T496YI/SNymi/+0sEdhPIbdYwVoXdKZ/LyvXhK14Skz4DNHXfqLifL7ArHegSMwN 8+8iwjnKXjjtDiUk9ujOqHiHgusgqzhXq9fcDSy19pmv26COssclSBdrKzAva0eE S3SKV2Vbw7sQjsV2UL1/Rpj70wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdE4auV CpVgEp7NnfJr8xsBkXDpMB8GA1UdIwQYMBaAFIZ3mQU+yRdLERy7RrKX+mR+mCql MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDBFNC81NjA4QTQ5ODlB NjUxMUVGOUY3QUIyMjZDNEY5QUUwMi9obmVaQlQ3SkYwc1JITHRHc3BmNlpINllL cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2huZVpCVDdKRjBzUkhMdEdzcGY2Wkg2WUtxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDBFNC81NjA4QTQ5ODlBNjUxMUVGOUY3QUIyMjZDNEY5QUUwMi9obmVaQlQ3SkYw c1JITHRHc3BmNlpINllLcVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkREP1WjNCkzsFh6kBY24fUZR1BFnoxIs4hqThF7ejm3FB+Ddhy+WG Gz1tkq6IXP6ietB1rxptAYhnQ/+gzpdfV8a7ogkwmaMbIiTO9BBGEvMovPjGIaic vn46udMekf5crH72RZPMivK7ew0okJreVFdpN88btR9X99ks1zgVWyU2ai9fbeJw 04gebSz0l03empJNHOiav1MDuFjTZbnsTcYSQq654PRyHWHxBJZESeRy+o5G1YM6 F4IzmUrvYREJvEXDTaYZMdzh0UW5SumrzqeqEDzleoU+PJ6P6jPyxDhsnY6d5yqC mRWx1m79l+tV9EmBQVrki30PL5VbqD/z -----END CERTIFICATE-----Generated at Fri Dec 19 12:51:37 2025 by rpki-client