This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft File: HUXnKUVKJCRGewPPyZfX6xhK52Y.mft (raw, json) Hash identifier: 1li7YnugEegjAv6GH8CN6hn9K7X0tU1MA3bULw90tmw= Subject key identifier: 4F:8B:08:8F:02:44:E7:45:57:F2:CA:BD:7C:C1:D7:F2:BD:66:8A:9D Authority key identifier: 1D:45:E7:29:45:4A:24:24:46:7B:03:CF:C9:97:D7:EB:18:4A:E7:66 Certificate issuer: /CN=A91B15DC/serialNumber=1D45E729454A2424467B03CFC997D7EB184AE766 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft Manifest number: AA Signing time: Fri 05 Dec 2025 04:10:43 +0000 Manifest this update: Fri 05 Dec 2025 04:10:43 +0000 Manifest next update: Fri 12 Dec 2025 04:10:43 +0000 Files and hashes: 1: HUXnKUVKJCRGewPPyZfX6xhK52Y.crl (hash: 8vUlQmL+fLMB4r0BI58I364ib1CRZ5aZngmP9YJvsVM=) 2: 14F7BC00CEEF11EFAF6F762FC4F9AE02.roa (hash: 2FGmDI1OZCn2kXGRhcOkUfm2jCMswTb7EQPD9YLXHCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.crl rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:10:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B15DC, serialNumber=1D45E729454A2424467B03CFC997D7EB184AE766 Validity Not Before: Dec 5 04:10:43 2025 GMT Not After : Dec 12 04:10:43 2025 GMT Subject: CN=69325b43-7268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2d:55:50:d6:b3:c1:69:67:2e:5c:08:08:6c: c6:23:18:17:17:8e:73:14:1f:ac:14:c1:4f:d6:a8: 08:51:3c:25:06:4a:06:54:d8:8b:d3:24:c8:aa:5e: 0d:8f:51:be:96:8c:f2:a8:81:ff:8a:4b:22:09:74: 73:f9:33:0b:72:35:a5:2e:a4:e4:72:b9:24:97:ae: 6f:fb:50:92:a1:d9:cd:8b:76:18:de:9c:75:7e:24: 06:e4:a8:6e:d7:99:14:8c:10:6e:e3:26:3a:d4:29: c2:9c:b3:6c:9a:db:fe:c2:2c:bf:34:76:ea:fb:ee: 47:70:c4:89:81:d1:a6:7f:21:24:de:57:e7:aa:d9: 95:85:b4:e5:f3:7f:05:5c:5a:71:51:cf:c0:c2:46: 84:64:1e:fc:d8:8c:03:f7:66:e1:7b:37:d9:84:05: 61:cf:b6:17:ee:01:42:2c:92:77:1b:5e:ff:f3:8a: 8c:4c:42:c5:34:bf:39:87:66:39:d7:54:96:f9:a9: e1:8e:96:c0:f7:81:b0:cf:51:14:22:33:06:8e:96: 6b:ae:91:4c:19:a8:05:49:8e:01:93:7e:0b:15:b0: f7:af:11:7b:78:d9:94:a9:22:4b:d9:a4:91:03:cf: dd:3a:fb:76:0f:d8:49:c4:29:a0:f2:75:d4:83:c3: 2d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8B:08:8F:02:44:E7:45:57:F2:CA:BD:7C:C1:D7:F2:BD:66:8A:9D X509v3 Authority Key Identifier: keyid:1D:45:E7:29:45:4A:24:24:46:7B:03:CF:C9:97:D7:EB:18:4A:E7:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:5b:66:57:70:3b:c7:a6:cc:28:a2:93:54:12:11:5e:cc:4f: 80:d4:fd:aa:8a:5b:ea:87:58:e3:20:58:bc:69:75:5d:e8:96: 8f:6a:f1:60:de:ed:53:69:ad:11:76:64:42:4d:f6:67:08:b2: f6:29:17:dc:19:1a:1c:a3:ac:e0:3b:89:48:02:03:10:64:ee: e5:06:06:d8:f8:dc:49:49:f5:85:24:5c:52:e9:cf:9c:79:95: 0b:b3:28:11:29:fc:19:ee:9d:fc:b0:2f:50:4a:9c:eb:05:3d: 28:96:d1:3b:f6:f2:2a:0a:fe:95:d9:19:21:f9:2d:da:d4:1a: ee:d8:5b:44:f3:57:83:fd:d6:ac:81:ad:04:14:8a:6b:83:0a: 59:ce:97:2e:1e:de:36:40:f2:71:eb:3a:a5:3e:46:a7:36:ca: 19:3d:12:aa:6f:08:87:f1:f8:c4:1f:56:2e:24:36:2f:37:ee: da:13:8c:5c:a2:e1:77:48:a7:68:af:64:36:c7:bf:df:03:5d: 63:a9:18:b6:92:f0:76:7c:1b:2d:a9:9e:1b:d2:43:81:0a:1c: 64:1f:a8:b0:89:bd:61:1c:47:55:2d:a0:54:7d:bf:67:15:65: cf:a8:71:76:99:3b:23:48:3f:33:88:86:78:2a:03:f7:f0:6c: 7e:2a:65:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE1REMxMTAvBgNVBAUTKDFENDVFNzI5NDU0QTI0MjQ0NjdCMDNDRkM5OTdEN0VC MTg0QUU3NjYwHhcNMjUxMjA1MDQxMDQzWhcNMjUxMjEyMDQxMDQzWjAYMRYwFAYD VQQDEw02OTMyNWI0My03MjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3S1VUNazwWlnLlwICGzGIxgXF45zFB+sFMFP1qgIUTwlBkoGVNiL0yTIql4N j1G+lozyqIH/iksiCXRz+TMLcjWlLqTkcrkkl65v+1CSodnNi3YY3px1fiQG5Khu 15kUjBBu4yY61CnCnLNsmtv+wiy/NHbq++5HcMSJgdGmfyEk3lfnqtmVhbTl838F XFpxUc/AwkaEZB782IwD92bhezfZhAVhz7YX7gFCLJJ3G17/84qMTELFNL85h2Y5 11SW+anhjpbA94Gwz1EUIjMGjpZrrpFMGagFSY4Bk34LFbD3rxF7eNmUqSJL2aSR A8/dOvt2D9hJxCmg8nXUg8MtkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+LCI8C ROdFV/LKvXzB1/K9ZoqdMB8GA1UdIwQYMBaAFB1F5ylFSiQkRnsDz8mX1+sYSudm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTVEQy81ODIzQUY4NkNF RUQxMUVGQkQ2NTU1MTFDNEY5QUUwMi9IVVhuS1VWS0pDUkdld1BQeVpmWDZ4aEs1 MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hVWG5LVVZLSkNSR2V3UFB5WmZYNnhoSzUyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTVEQy81ODIzQUY4NkNFRUQxMUVGQkQ2NTU1MTFDNEY5QUUwMi9IVVhuS1VWS0pD Ukdld1BQeVpmWDZ4aEs1MlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfW2ZXcDvHpswoopNUEhFezE+A1P2qilvqh1jjIFi8aXVd6JaPavFg 3u1Taa0RdmRCTfZnCLL2KRfcGRoco6zgO4lIAgMQZO7lBgbY+NxJSfWFJFxS6c+c eZULsygRKfwZ7p38sC9QSpzrBT0oltE79vIqCv6V2Rkh+S3a1Bru2FtE81eD/das ga0EFIprgwpZzpcuHt42QPJx6zqlPkanNsoZPRKqbwiH8fjEH1YuJDYvN+7aE4xc ouF3SKdor2Q2x7/fA11jqRi2kvB2fBstqZ4b0kOBChxkH6iwib1hHEdVLaBUfb9n FWXPqHF2mTsjSD8ziIZ4KgP38Gx+KmVm -----END CERTIFICATE-----Generated at Sun Dec 7 05:19:50 2025 by rpki-client