This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft File: hneZBT7JF0sRHLtGspf6ZH6YKqU.mft (raw, json) Hash identifier: jAbQbBWP8M/MQrx66Oot2/K2pBfu47fES15OPc+0hzk= Subject key identifier: 66:64:7B:C5:FA:85:72:AF:39:BA:F2:54:95:9E:AF:1C:F5:F1:CA:E9 Authority key identifier: 86:77:99:05:3E:C9:17:4B:11:1C:BB:46:B2:97:FA:64:7E:98:2A:A5 Certificate issuer: /CN=A91A00E4/serialNumber=867799053EC9174B111CBB46B297FA647E982AA5 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft Manifest number: CB Signing time: Fri 05 Dec 2025 03:45:28 +0000 Manifest this update: Fri 05 Dec 2025 03:45:28 +0000 Manifest next update: Fri 12 Dec 2025 03:45:28 +0000 Files and hashes: 1: hneZBT7JF0sRHLtGspf6ZH6YKqU.crl (hash: JZgqBw4wdNomZmJW5tkHpnL/wiFRmegFTtmdhIawDEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.crl rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A00E4, serialNumber=867799053EC9174B111CBB46B297FA647E982AA5 Validity Not Before: Dec 5 03:45:28 2025 GMT Not After : Dec 12 03:45:28 2025 GMT Subject: CN=69325558-45b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:19:63:5c:07:dd:1a:1e:a3:6e:ea:ae:18:2a: 8e:ab:c3:bb:d8:99:b6:23:d9:37:b4:43:2d:95:39: e6:41:49:dd:d1:72:71:20:4e:fb:37:f7:35:2d:41: 1d:41:41:17:c0:29:d6:d3:02:2d:fe:9c:74:b2:c4: 29:2f:b9:cd:8d:3e:34:5a:d0:3e:19:5a:66:3d:78: d2:87:f7:2c:a8:91:5d:68:87:ae:7a:a4:a8:b2:5d: a7:ac:bc:74:ec:90:d6:32:39:e4:41:aa:fe:89:88: b4:5f:e8:05:7d:ab:4e:47:87:8d:5f:69:22:1b:62: 54:64:d7:07:39:5a:66:98:64:6d:75:aa:d5:d5:1e: 07:3b:98:32:d7:a1:46:7c:20:bb:97:33:f8:26:e4: b4:f8:ab:14:79:b1:8e:90:cb:62:55:7f:1c:d0:16: 62:1b:3b:10:e6:69:e7:67:e1:da:f3:79:9b:a3:22: 55:51:76:da:79:ca:bb:98:0a:d1:f6:e2:32:ce:fb: 93:42:1b:40:83:5a:e4:ff:94:d0:06:71:bf:33:a2: c5:27:6a:bc:62:70:a2:b8:48:14:35:69:6f:50:fd: fa:d9:53:2d:18:71:29:56:e3:55:fd:cd:05:5d:8c: 13:c1:ff:ed:86:48:b6:90:e0:b1:89:42:69:89:2f: 6b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:64:7B:C5:FA:85:72:AF:39:BA:F2:54:95:9E:AF:1C:F5:F1:CA:E9 X509v3 Authority Key Identifier: keyid:86:77:99:05:3E:C9:17:4B:11:1C:BB:46:B2:97:FA:64:7E:98:2A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:32:9a:be:64:c6:a2:d2:da:7b:c1:36:49:2e:fc:38:f8:e7: bd:a5:76:17:16:24:fa:62:96:04:fb:85:6c:4b:51:bb:7f:fe: 9d:05:10:e4:33:c5:01:51:36:b2:6f:a4:a5:9a:21:e9:bb:92: e7:94:1d:1b:10:d8:66:77:94:a2:63:9a:32:bf:da:f9:b2:e7: 0d:72:04:1b:17:52:5c:eb:ba:58:42:56:f4:5b:c9:d9:31:29: c0:37:d7:32:97:52:27:a4:91:53:a7:a3:96:1a:e4:b8:50:70: bd:10:5f:9b:cc:2c:49:f0:7f:5c:f2:bd:fd:c6:b0:e8:48:43: ed:03:ce:dc:f3:36:cf:39:44:ff:fb:a3:92:ab:7d:e0:c6:82: b1:a2:8d:69:33:40:8e:69:57:6c:7b:3a:4c:b4:e3:73:dc:aa: 53:bb:87:97:44:64:d1:a9:a3:f3:3c:b5:68:3e:d5:23:54:a2: a7:be:d3:48:a5:ad:8d:f8:f4:2f:8a:87:4e:32:5b:4f:be:b5: be:92:85:d4:0d:bd:43:af:46:1e:9c:a1:25:32:9a:b0:44:3f: 59:4a:94:ef:4b:08:f2:1b:ac:bb:8c:c5:64:8d:f8:af:b4:1f: 3d:16:0f:bd:d2:16:ee:35:0f:4b:d6:f0:a8:5e:66:ce:45:3d: bc:51:4c:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAwRTQxMTAvBgNVBAUTKDg2Nzc5OTA1M0VDOTE3NEIxMTFDQkI0NkIyOTdGQTY0 N0U5ODJBQTUwHhcNMjUxMjA1MDM0NTI4WhcNMjUxMjEyMDM0NTI4WjAYMRYwFAYD VQQDEw02OTMyNTU1OC00NWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBljXAfdGh6jbuquGCqOq8O72Jm2I9k3tEMtlTnmQUnd0XJxIE77N/c1LUEd QUEXwCnW0wIt/px0ssQpL7nNjT40WtA+GVpmPXjSh/csqJFdaIeueqSosl2nrLx0 7JDWMjnkQar+iYi0X+gFfatOR4eNX2kiG2JUZNcHOVpmmGRtdarV1R4HO5gy16FG fCC7lzP4JuS0+KsUebGOkMtiVX8c0BZiGzsQ5mnnZ+Ha83mboyJVUXbaecq7mArR 9uIyzvuTQhtAg1rk/5TQBnG/M6LFJ2q8YnCiuEgUNWlvUP362VMtGHEpVuNV/c0F XYwTwf/thki2kOCxiUJpiS9rlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZke8X6 hXKvObryVJWerxz18crpMB8GA1UdIwQYMBaAFIZ3mQU+yRdLERy7RrKX+mR+mCql MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDBFNC81NjA4QTQ5ODlB NjUxMUVGOUY3QUIyMjZDNEY5QUUwMi9obmVaQlQ3SkYwc1JITHRHc3BmNlpINllL cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2huZVpCVDdKRjBzUkhMdEdzcGY2Wkg2WUtxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDBFNC81NjA4QTQ5ODlBNjUxMUVGOUY3QUIyMjZDNEY5QUUwMi9obmVaQlQ3SkYw c1JITHRHc3BmNlpINllLcVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMMpq+ZMai0tp7wTZJLvw4+Oe9pXYXFiT6YpYE+4VsS1G7f/6dBRDk M8UBUTayb6SlmiHpu5LnlB0bENhmd5SiY5oyv9r5sucNcgQbF1Jc67pYQlb0W8nZ MSnAN9cyl1InpJFTp6OWGuS4UHC9EF+bzCxJ8H9c8r39xrDoSEPtA87c8zbPOUT/ +6OSq33gxoKxoo1pM0COaVdsezpMtONz3KpTu4eXRGTRqaPzPLVoPtUjVKKnvtNI pa2N+PQviodOMltPvrW+koXUDb1Dr0YenKElMpqwRD9ZSpTvSwjyG6y7jMVkjfiv tB89Fg+90hbuNQ9L1vCoXmbORT28UUx7 -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:50 2025 by rpki-client