This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft File: hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft (raw, json) Hash identifier: ZBazmA3CofUlbFEll0Vog/eMcDeyBQ7IaAoUMV4z0/Y= Subject key identifier: 85:A8:37:60:0A:19:33:FD:69:4A:04:F6:B2:25:DA:97:A3:98:9A:FF Authority key identifier: 85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC Certificate issuer: /CN=A91AC567/serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft Manifest number: 33 Signing time: Fri 05 Dec 2025 05:25:24 +0000 Manifest this update: Fri 05 Dec 2025 05:25:23 +0000 Manifest next update: Fri 12 Dec 2025 05:25:23 +0000 Files and hashes: 1: hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl (hash: qxZ3/9wSJqKJ55bkz9LjYhu6pJJXLQKte0TimBHi3aQ=) 2: 3014B5BC86D011F08795B91FC4F9AE02.roa (hash: FD/7U7XSmgg6Fwdvyfw/wFBPedO+DNiEk5bwRU3tAxw=) 3: 675D716092EE11F0990BEA65C4F9AE02.roa (hash: 4QCa8Wv6sDtZDWi9ABDwu1xQIu9iLo9GAI+6YdZfu04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC567, serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC Validity Not Before: Dec 5 05:25:23 2025 GMT Not After : Dec 12 05:25:23 2025 GMT Subject: CN=69326cc4-9920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:1c:fc:99:f8:00:19:80:ac:9a:19:21:a4:97: 1f:ac:b3:11:e1:b9:bb:4d:5f:cb:41:ff:42:b2:3e: e6:88:db:34:6f:ef:57:e2:d8:68:7e:16:43:38:6d: f5:a4:cd:ac:24:f9:6b:1d:69:bc:cb:36:19:fa:8b: 03:45:55:ff:64:0c:42:59:83:61:9b:1f:90:58:78: 18:e9:3f:a5:05:1f:07:c5:d5:c6:43:73:ad:f6:6d: d7:03:fe:bd:da:be:3c:e7:c6:2e:1e:5c:2d:ef:f3: f5:07:56:c7:27:74:36:4b:ce:3c:ea:b1:aa:35:37: 09:b1:f7:1f:59:0e:0a:43:a9:68:69:41:82:47:3d: 1d:8b:fd:a9:a9:5a:90:75:51:21:49:7e:8a:a6:fa: 95:48:14:da:b1:e8:04:57:6f:c3:ac:c5:f3:ad:fe: af:c2:fc:1c:ae:54:c5:ad:05:fd:c5:fd:10:fa:e0: d5:b4:19:43:5e:f4:33:16:92:c7:85:78:82:dd:7d: fa:62:61:f2:2d:27:c0:4e:ab:87:38:2f:37:c4:d8: 50:2e:2a:cd:cf:dc:fa:93:fe:f4:10:37:d2:c0:c4: fb:60:0b:0c:7f:b0:b2:9c:3c:c2:3f:61:66:36:dd: dd:46:6c:c2:32:e1:d3:1c:ea:51:a7:d8:6a:a8:54: 7d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A8:37:60:0A:19:33:FD:69:4A:04:F6:B2:25:DA:97:A3:98:9A:FF X509v3 Authority Key Identifier: keyid:85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:66:bb:69:fc:06:c5:64:2c:8a:e8:1d:e2:4a:89:26:95:df: 98:33:8f:2d:09:59:36:86:88:ac:79:c2:01:37:18:f4:10:f5: 60:b2:78:c0:92:da:38:a5:0a:03:7f:54:1d:be:2e:ee:17:cc: 96:e7:44:08:62:17:48:9d:c6:d3:69:5a:49:fa:70:43:11:a4: 70:1b:8d:1b:b1:23:69:bf:6d:69:ac:23:1a:83:4c:9c:cd:aa: 3f:0f:55:ce:b6:a6:ce:91:e3:d8:2c:59:ad:a5:a1:5a:cf:75: aa:07:e6:25:04:32:bd:71:a6:9a:53:48:3d:08:6d:69:40:a0: 49:70:41:32:43:22:df:8f:1a:5a:a8:d5:13:2b:13:c3:3a:06: bb:9a:19:78:27:34:f8:64:a2:6d:44:2b:10:42:69:47:0a:70: 7d:22:ea:cd:7b:2c:0a:ae:9c:09:ff:bf:96:a0:43:85:3a:9c: a7:ae:5a:81:bf:5f:3d:86:e7:b0:d1:3a:75:9f:19:fc:77:2d: c4:2f:68:a9:4b:65:2c:19:d5:dc:e8:74:43:32:55:47:5f:f6: 6e:71:23:2a:d4:0b:42:05:12:41:2d:d6:1d:69:8b:6f:a1:30: 9a:15:9a:69:23:9c:d0:d6:e6:25:22:c7:88:e3:1c:ff:80:ad: 22:36:b2:b4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzU2NzExMC8GA1UEBRMoODU2QkMxOUZFRUJFQjBCNTU5NUYwM0JCMTIxNDgzRTUz QTgxMDNDQzAeFw0yNTEyMDUwNTI1MjNaFw0yNTEyMTIwNTI1MjNaMBgxFjAUBgNV BAMTDTY5MzI2Y2M0LTk5MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtHPyZ+AAZgKyaGSGklx+ssxHhubtNX8tB/0KyPuaI2zRv71fi2Gh+FkM4bfWk zawk+WsdabzLNhn6iwNFVf9kDEJZg2GbH5BYeBjpP6UFHwfF1cZDc632bdcD/r3a vjznxi4eXC3v8/UHVscndDZLzjzqsao1Nwmx9x9ZDgpDqWhpQYJHPR2L/ampWpB1 USFJfoqm+pVIFNqx6ARXb8OsxfOt/q/C/ByuVMWtBf3F/RD64NW0GUNe9DMWkseF eILdffpiYfItJ8BOq4c4LzfE2FAuKs3P3PqT/vQQN9LAxPtgCwx/sLKcPMI/YWY2 3d1GbMIy4dMc6lGn2GqoVH1vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhag3YAoZ M/1pSgT2siXal6OYmv8wHwYDVR0jBBgwFoAUhWvBn+6+sLVZXwO7EhSD5TqBA8ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNTY3LzQwRUYyRkQwODZD RjExRjBCODcwN0E1NEM0RjlBRTAyL2hXdkJuLTYtc0xWWlh3TzdFaFNENVRxQkE4 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFd2Qm4tNi1zTFZaWHdPN0VoU0Q1VHFCQTh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD NTY3LzQwRUYyRkQwODZDRjExRjBCODcwN0E1NEM0RjlBRTAyL2hXdkJuLTYtc0xW Wlh3TzdFaFNENVRxQkE4dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEJmu2n8BsVkLIroHeJKiSaV35gzjy0JWTaGiKx5wgE3GPQQ9WCyeMCS 2jilCgN/VB2+Lu4XzJbnRAhiF0idxtNpWkn6cEMRpHAbjRuxI2m/bWmsIxqDTJzN qj8PVc62ps6R49gsWa2loVrPdaoH5iUEMr1xpppTSD0IbWlAoElwQTJDIt+PGlqo 1RMrE8M6BruaGXgnNPhkom1EKxBCaUcKcH0i6s17LAqunAn/v5agQ4U6nKeuWoG/ Xz2G57DROnWfGfx3LcQvaKlLZSwZ1dzodEMyVUdf9m5xIyrUC0IFEkEt1h1pi2+h MJoVmmkjnNDW5iUix4jjHP+ArSI2srQ= -----END CERTIFICATE-----Generated at Sat Dec 6 16:10:10 2025 by rpki-client