This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft File: Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft (raw, json) Hash identifier: 5ZQjLUR+ws0UTbCMlDe9uMlEI8ewtX+QpCebWnQHEB8= Subject key identifier: 65:87:18:6D:38:5C:0C:D0:72:E4:3D:E5:E5:15:2B:E1:9F:32:C4:37 Authority key identifier: 1E:FE:82:9F:16:00:78:C0:6C:9A:15:69:65:42:57:96:87:45:0B:74 Certificate issuer: /CN=A91B7046/serialNumber=1EFE829F160078C06C9A15696542579687450B74 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft Manifest number: 0131 Signing time: Thu 04 Dec 2025 23:10:08 +0000 Manifest this update: Thu 04 Dec 2025 23:10:07 +0000 Manifest next update: Thu 11 Dec 2025 23:10:07 +0000 Files and hashes: 1: Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl (hash: 6w3qlUtvhrnGuHaYWiqLl4GjCO11y660LIMvjBXuaDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:10:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7046, serialNumber=1EFE829F160078C06C9A15696542579687450B74 Validity Not Before: Dec 4 23:10:07 2025 GMT Not After : Dec 11 23:10:07 2025 GMT Subject: CN=693214cf-7c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:56:8c:66:86:fb:0f:73:da:fe:ab:f3:2b:e4: a3:29:56:33:ab:24:d5:68:3d:04:4b:09:0f:ae:e7: 4e:8c:4a:30:a3:e8:9e:66:4b:87:24:49:38:3e:db: b5:7c:da:8c:0f:7f:87:b0:43:f3:5b:b2:dd:c9:da: 09:d2:30:86:76:dc:bd:a8:7f:3d:94:d1:f7:2e:b2: 07:6c:a8:7f:5f:69:05:56:5f:ad:a0:59:ae:7c:76: 72:3b:aa:32:91:44:11:f6:f4:99:d9:36:02:5e:4c: c0:b5:05:88:89:68:a9:2b:f6:4d:a6:7e:31:89:8b: 09:cb:c1:00:2d:9f:a0:cb:5d:c5:e9:7a:bc:74:97: a7:2d:60:ad:5a:ce:e1:84:58:e5:dd:47:48:ae:87: 5e:83:33:c8:f5:8a:ae:6b:2e:b6:3c:39:53:1c:83: 85:cb:8b:95:94:1d:6b:04:fc:c8:7f:9d:00:9e:57: a7:7e:e4:1d:bc:0f:4b:7d:5c:8d:7e:41:bc:d3:71: 4e:52:54:b6:49:b6:cd:ae:e9:da:f7:09:d9:e6:40: 2c:83:90:38:ec:25:06:71:ef:44:c7:57:d1:3a:82: 14:21:86:f8:ff:2d:dc:ab:2d:20:b4:3b:88:31:e5: a4:7c:2b:0a:2b:ea:0c:62:3e:3c:89:42:5c:da:75: ec:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:87:18:6D:38:5C:0C:D0:72:E4:3D:E5:E5:15:2B:E1:9F:32:C4:37 X509v3 Authority Key Identifier: keyid:1E:FE:82:9F:16:00:78:C0:6C:9A:15:69:65:42:57:96:87:45:0B:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:4b:be:00:29:c2:46:6a:36:81:67:d8:4c:2c:b6:9c:94:d3: aa:37:2c:1f:5e:83:9b:27:62:80:e6:8e:e9:41:eb:37:a2:43: 02:6b:e3:54:ea:27:59:37:69:eb:48:83:bc:2c:1a:87:b4:25: aa:f4:23:c3:75:5a:fc:b7:b0:f8:ca:5b:6c:e1:ae:45:5a:4b: 06:3e:38:ba:5c:26:e7:1f:d0:cc:e9:06:ef:f5:8d:99:96:72: bd:77:61:2b:dd:66:7e:b9:52:eb:ef:aa:cb:74:7b:37:7a:ad: 17:6d:6d:5c:9c:16:9b:74:0a:97:92:dd:dd:4c:6e:df:5c:f9: 9a:2c:48:25:7b:84:03:4f:8b:2f:0b:09:5c:91:f9:fb:25:2a: 92:fd:b6:ff:3b:3d:d1:0b:58:3a:1e:1e:f5:63:9f:1e:6d:e7: 6d:fa:ac:b0:19:f5:5c:71:65:70:67:09:70:21:d6:ba:63:5a: fa:cc:fd:dd:72:e0:1d:f9:d4:26:23:44:a3:99:0c:42:b6:ca: 5c:d6:50:4d:e9:1b:9a:cc:b8:c4:25:8d:02:2f:a8:08:26:bc: ab:0e:1e:de:84:1d:07:80:c0:ee:15:e3:c6:fa:09:fb:77:4b: 14:c8:d3:7a:6a:67:e1:c5:39:ce:05:fd:d6:68:59:28:c0:9c: 97:c4:82:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcwNDYxMTAvBgNVBAUTKDFFRkU4MjlGMTYwMDc4QzA2QzlBMTU2OTY1NDI1Nzk2 ODc0NTBCNzQwHhcNMjUxMjA0MjMxMDA3WhcNMjUxMjExMjMxMDA3WjAYMRYwFAYD VQQDEw02OTMyMTRjZi03Yzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl1aMZob7D3Pa/qvzK+SjKVYzqyTVaD0ESwkPrudOjEowo+ieZkuHJEk4Ptu1 fNqMD3+HsEPzW7LdydoJ0jCGdty9qH89lNH3LrIHbKh/X2kFVl+toFmufHZyO6oy kUQR9vSZ2TYCXkzAtQWIiWipK/ZNpn4xiYsJy8EALZ+gy13F6Xq8dJenLWCtWs7h hFjl3UdIrodegzPI9Yquay62PDlTHIOFy4uVlB1rBPzIf50AnlenfuQdvA9LfVyN fkG803FOUlS2SbbNruna9wnZ5kAsg5A47CUGce9Ex1fROoIUIYb4/y3cqy0gtDuI MeWkfCsKK+oMYj48iUJc2nXs2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWHGG04 XAzQcuQ95eUVK+GfMsQ3MB8GA1UdIwQYMBaAFB7+gp8WAHjAbJoVaWVCV5aHRQt0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzA0Ni9BMjIwMDNEMkZE RkIxMUVFQTkxMEQ3ODdDNEY5QUUwMi9IdjZDbnhZQWVNQnNtaFZwWlVKWGxvZEZD M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2NkNueFlBZU1Cc21oVnBaVUpYbG9kRkMzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzA0Ni9BMjIwMDNEMkZERkIxMUVFQTkxMEQ3ODdDNEY5QUUwMi9IdjZDbnhZQWVN QnNtaFZwWlVKWGxvZEZDM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNS74AKcJGajaBZ9hMLLaclNOqNywfXoObJ2KA5o7pQes3okMCa+NU 6idZN2nrSIO8LBqHtCWq9CPDdVr8t7D4ylts4a5FWksGPji6XCbnH9DM6Qbv9Y2Z lnK9d2Er3WZ+uVLr76rLdHs3eq0XbW1cnBabdAqXkt3dTG7fXPmaLEgle4QDT4sv Cwlckfn7JSqS/bb/Oz3RC1g6Hh71Y58ebedt+qywGfVccWVwZwlwIda6Y1r6zP3d cuAd+dQmI0SjmQxCtspc1lBN6RuazLjEJY0CL6gIJryrDh7ehB0HgMDuFePG+gn7 d0sUyNN6amfhxTnOBf3WaFkowJyXxIKV -----END CERTIFICATE-----Generated at Sat Dec 6 13:52:23 2025 by rpki-client