This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft File: hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft (raw, json) Hash identifier: iJE7Fr7GFJEIzvC3CpH2p5FD6q0BsE/ze2JG72I39z0= Subject key identifier: AA:9C:67:AA:B5:5E:13:44:82:C8:57:1D:82:50:14:61:EB:3A:31:B2 Authority key identifier: 85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07 Certificate issuer: /CN=A91AAC4B/serialNumber=852046915185F855E09EB344788139430E740F07 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft Manifest number: A9 Signing time: Fri 05 Dec 2025 04:09:50 +0000 Manifest this update: Fri 05 Dec 2025 04:09:50 +0000 Manifest next update: Fri 12 Dec 2025 04:09:50 +0000 Files and hashes: 1: hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl (hash: HjvU0ooAP5djNBTJZZaeHyYw2nNgynP1S2im9IHLilY=) 2: B710956ACD7E11EFBBAE2137C4F9AE02.roa (hash: JjAbZf5k619HY4BxA5a3XYqwkE4mZ8Dpr0cRyMIFTZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:09:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAC4B, serialNumber=852046915185F855E09EB344788139430E740F07 Validity Not Before: Dec 5 04:09:50 2025 GMT Not After : Dec 12 04:09:50 2025 GMT Subject: CN=69325b0e-faeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:20:55:15:6e:8e:ec:b6:41:d8:ea:c7:af:40: 37:9e:e8:bc:15:22:a5:23:62:c7:89:17:be:ad:41: 64:27:d4:c7:63:4e:e7:57:ca:e5:13:9b:be:e8:6c: c8:e5:96:a6:0e:f4:4c:2d:63:dd:2f:2c:dc:8e:a5: 16:cb:a6:8b:38:4c:c9:f8:30:a6:f2:fa:43:86:ee: 38:d1:21:1c:d9:b7:05:f2:ac:d8:e6:5b:4b:10:a5: 75:96:e4:e7:1d:09:fc:e1:c5:4f:af:f6:c1:77:8c: d8:50:4c:80:4f:1e:8c:c3:d2:e4:48:cf:d8:2c:d7: 7b:81:e6:e4:b1:c1:07:a4:1d:31:b7:8e:2b:e2:5f: 2f:35:8b:38:32:12:8d:e4:17:71:1c:44:82:3d:bc: fb:06:d4:74:cd:c8:ed:b8:b9:0f:52:a4:4b:03:6b: 77:c5:d5:f0:01:44:6f:6f:8e:37:c9:4f:4d:f4:a0: ee:cc:fd:1d:56:30:1b:05:0b:2c:83:62:c3:91:2b: 04:8f:e2:bf:00:27:b3:6b:ec:04:e4:bf:a4:5c:97: c5:3a:25:10:49:5f:63:3d:47:10:4e:38:c1:21:48: ef:20:14:9e:56:d8:c7:d1:2e:bc:fa:81:32:34:8b: 07:f7:6b:6d:d0:76:9c:25:d1:5c:77:8b:a4:68:47: b0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:9C:67:AA:B5:5E:13:44:82:C8:57:1D:82:50:14:61:EB:3A:31:B2 X509v3 Authority Key Identifier: keyid:85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:92:45:5e:2a:4d:33:00:f0:f4:e4:b8:6e:d7:4d:27:f2:91: 1f:62:96:d3:9a:b3:0e:5f:b3:36:74:95:2b:b7:7a:0c:c8:29: 5c:cb:7b:74:2e:19:07:97:3f:be:a9:f5:d5:fb:ca:13:ac:09: 87:40:d6:e8:aa:5a:e0:2c:81:a2:df:b6:c5:44:61:b1:4a:cc: 24:b2:6c:38:e3:60:11:50:16:3b:56:e9:e4:39:47:10:d9:12: 97:41:46:f3:07:20:88:ec:7a:02:97:c2:ab:e8:91:29:06:5e: e8:15:93:e3:71:39:bd:cf:1d:f8:88:c9:11:64:f5:77:b4:00: 33:c1:c8:98:d9:7f:00:95:d7:84:dd:5c:6f:1b:a3:33:8d:3e: ec:84:a0:47:71:8d:03:01:98:13:e1:ae:33:b8:47:e5:7d:d4: dd:0f:fc:d5:f3:c9:4d:f4:c9:0f:24:e4:00:e3:16:45:cc:66: ab:2b:a8:5b:19:bf:05:6b:1f:98:d3:c7:15:2e:08:84:1d:87: 0b:bb:17:9b:9e:19:6f:5c:ac:0d:53:80:fd:fd:b8:bb:26:12: 1a:79:a6:b4:7a:c4:3f:b2:b3:8c:05:80:a6:87:04:db:08:b6: 24:da:d3:8c:55:03:ee:8a:66:b1:19:00:e5:89:19:21:62:60: 12:1b:e3:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFDNEIxMTAvBgNVBAUTKDg1MjA0NjkxNTE4NUY4NTVFMDlFQjM0NDc4ODEzOTQz MEU3NDBGMDcwHhcNMjUxMjA1MDQwOTUwWhcNMjUxMjEyMDQwOTUwWjAYMRYwFAYD VQQDEw02OTMyNWIwZS1mYWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyBVFW6O7LZB2OrHr0A3nui8FSKlI2LHiRe+rUFkJ9THY07nV8rlE5u+6GzI 5ZamDvRMLWPdLyzcjqUWy6aLOEzJ+DCm8vpDhu440SEc2bcF8qzY5ltLEKV1luTn HQn84cVPr/bBd4zYUEyATx6Mw9LkSM/YLNd7gebkscEHpB0xt44r4l8vNYs4MhKN 5BdxHESCPbz7BtR0zcjtuLkPUqRLA2t3xdXwAURvb443yU9N9KDuzP0dVjAbBQss g2LDkSsEj+K/ACeza+wE5L+kXJfFOiUQSV9jPUcQTjjBIUjvIBSeVtjH0S68+oEy NIsH92tt0HacJdFcd4ukaEewfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqcZ6q1 XhNEgshXHYJQFGHrOjGyMB8GA1UdIwQYMBaAFIUgRpFRhfhV4J6zRHiBOUMOdA8H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUM0Qi9FNjM1Rjc5NkNE N0QxMUVGQUEwNzIzMEFDNEY5QUUwMi9oU0JHa1ZHRi1GWGduck5FZUlFNVF3NTBE d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hTQkdrVkdGLUZYZ25yTkVlSUU1UXc1MER3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUM0Qi9FNjM1Rjc5NkNEN0QxMUVGQUEwNzIzMEFDNEY5QUUwMi9oU0JHa1ZHRi1G WGduck5FZUlFNVF3NTBEd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkkkVeKk0zAPD05Lhu100n8pEfYpbTmrMOX7M2dJUrt3oMyClcy3t0 LhkHlz++qfXV+8oTrAmHQNboqlrgLIGi37bFRGGxSswksmw442ARUBY7VunkOUcQ 2RKXQUbzByCI7HoCl8Kr6JEpBl7oFZPjcTm9zx34iMkRZPV3tAAzwciY2X8AldeE 3VxvG6MzjT7shKBHcY0DAZgT4a4zuEflfdTdD/zV88lN9MkPJOQA4xZFzGarK6hb Gb8Fax+Y08cVLgiEHYcLuxebnhlvXKwNU4D9/bi7JhIaeaa0esQ/srOMBYCmhwTb CLYk2tOMVQPuimaxGQDliRkhYmASG+Og -----END CERTIFICATE-----Generated at Sat Dec 6 15:26:04 2025 by rpki-client