This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft File: HxGmFtcy5BY7RP62KF7-7lh8bdI.mft (raw, json) Hash identifier: 3vAcq0r/h6VAgjYnwuwc42vIg3svVVjMwnVbhfe4NOU= Subject key identifier: 7C:77:E9:DB:E3:31:15:F5:0F:E3:AC:13:5E:19:B2:90:4C:34:E7:71 Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 Certificate issuer: /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Certificate serial: 0496 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft Manifest number: 048C Signing time: Sat 06 Dec 2025 22:46:12 +0000 Manifest this update: Sat 06 Dec 2025 22:46:11 +0000 Manifest next update: Sat 13 Dec 2025 22:46:11 +0000 Files and hashes: 1: HxGmFtcy5BY7RP62KF7-7lh8bdI.crl (hash: 5aPnJB4ihfpf7IGaPi+dZql5g86qeuLfTz/ulTzg1Js=) 2: F45C79E262F711EC8184F344C4F9AE02.roa (hash: wVB4uw3FvRPkAbU+6VZBotQsPi/8FbB7ml2/chpWBXA=) 3: 30E0A83C62F511ECA1FC5A6CC4F9AE02.roa (hash: VycFyv5t+loVs/y1sOBlV2psU6Ox9PEIROVSCHBVpH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1174 (0x496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C113B, serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Validity Not Before: Dec 6 22:46:11 2025 GMT Not After : Dec 13 22:46:11 2025 GMT Subject: CN=6934b233-329f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2b:f2:8b:08:d4:7e:0f:02:47:6e:7d:30:1d: 72:94:4b:2f:bc:0a:e6:03:26:9b:dd:39:06:c9:22: 7a:09:1a:3c:19:a5:9f:4f:a0:8b:03:ce:1c:3f:f0: f5:95:14:a3:1d:c3:ae:9d:eb:22:f2:61:65:80:63: 9b:ab:73:44:29:1f:ff:71:13:50:36:d6:9b:41:51: 7f:a7:ac:e8:b1:29:ca:f3:2f:0b:9b:60:8e:1f:19: c6:45:6a:66:16:6d:35:24:2d:c2:4b:bf:0f:41:09: b6:ff:f8:31:54:e4:c3:30:19:48:06:cc:ab:b1:ec: 6f:1a:5b:19:67:62:3b:6f:c2:fd:f4:d1:c7:45:08: a1:ef:bf:b2:48:0f:f5:3f:ca:cc:ab:ae:b7:48:32: 83:e9:32:2d:8c:ef:ee:1f:dd:3a:0e:77:c2:d2:07: 88:1b:ad:35:03:fd:fe:57:51:a5:eb:25:01:cb:fb: 09:ea:65:95:28:90:7c:8b:90:3a:d1:e6:96:52:9f: 06:0c:05:63:d6:03:25:59:f2:3c:42:43:27:c0:d8: 55:2e:43:16:a7:5f:12:88:2d:73:f2:6d:78:51:c1: a6:6a:29:1f:71:8a:61:d6:6b:51:d3:c1:64:12:44: 6b:f1:71:e0:85:e4:6f:c0:6e:90:bf:8d:da:0b:e4: 31:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:77:E9:DB:E3:31:15:F5:0F:E3:AC:13:5E:19:B2:90:4C:34:E7:71 X509v3 Authority Key Identifier: keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:72:f0:f6:e9:cd:dd:3d:36:b7:2b:50:ad:d4:e8:0c:d2:3f: a5:74:41:05:30:9d:b9:92:25:59:5c:72:4d:83:c7:33:5d:38: ef:df:61:b1:26:3a:b6:88:08:2a:76:db:da:7d:80:e3:4f:0c: f5:7e:2e:8f:74:01:60:37:80:41:d2:c3:54:94:ac:bb:21:8d: b8:3b:3a:1e:d0:ac:ab:54:f4:d1:57:b7:22:b5:a0:5d:4d:03: bc:f8:cf:74:0d:58:8e:fe:1c:1c:18:c6:e8:16:b6:70:83:0f: 1e:b3:10:c1:0c:24:fd:40:2e:70:a7:a7:30:53:4d:e2:49:66: 49:54:06:a0:b4:a4:c8:04:4f:de:48:52:78:50:b6:b3:9c:e4: 7e:83:60:9b:36:9b:0d:17:7e:68:7a:e2:f6:ee:a5:0c:46:59: 0f:32:50:7f:75:93:e3:e3:3b:cf:73:90:49:7b:4a:3e:24:e0: 9d:62:f7:c0:30:e7:35:59:b9:87:73:af:08:f2:6c:06:98:d4: 20:7f:c2:c0:99:a1:f9:d9:cc:13:38:ec:4c:7e:5a:aa:00:e3: 74:e2:26:86:87:0c:35:ac:73:9f:2a:f7:c6:98:38:bf:2e:8c: 88:a3:9a:ec:11:92:89:6b:1e:73:2d:73:e0:41:99:3c:f7:75: 94:81:12:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzExM0IxMTAvBgNVBAUTKDFGMTFBNjE2RDczMkU0MTYzQjQ0RkVCNjI4NUVGRUVF NTg3QzZERDIwHhcNMjUxMjA2MjI0NjExWhcNMjUxMjEzMjI0NjExWjAYMRYwFAYD VQQDEw02OTM0YjIzMy0zMjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4yvyiwjUfg8CR259MB1ylEsvvArmAyab3TkGySJ6CRo8GaWfT6CLA84cP/D1 lRSjHcOunesi8mFlgGObq3NEKR//cRNQNtabQVF/p6zosSnK8y8Lm2COHxnGRWpm Fm01JC3CS78PQQm2//gxVOTDMBlIBsyrsexvGlsZZ2I7b8L99NHHRQih77+ySA/1 P8rMq663SDKD6TItjO/uH906DnfC0geIG601A/3+V1Gl6yUBy/sJ6mWVKJB8i5A6 0eaWUp8GDAVj1gMlWfI8QkMnwNhVLkMWp18SiC1z8m14UcGmaikfcYph1mtR08Fk EkRr8XHgheRvwG6Qv43aC+QxYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHx36dvj MRX1D+OsE14ZspBMNOdxMB8GA1UdIwQYMBaAFB8RphbXMuQWO0T+tihe/u5YfG3S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTEzQi83QkU3QzA5MDYy RjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVCWTdSUDYyS0Y3LTdsaDhi ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4R21GdGN5NUJZN1JQNjJLRjctN2xoOGJkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTEzQi83QkU3QzA5MDYyRjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVC WTdSUDYyS0Y3LTdsaDhiZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUcvD26c3dPTa3K1Ct1OgM0j+ldEEFMJ25kiVZXHJNg8czXTjv32Gx Jjq2iAgqdtvafYDjTwz1fi6PdAFgN4BB0sNUlKy7IY24Ozoe0KyrVPTRV7citaBd TQO8+M90DViO/hwcGMboFrZwgw8esxDBDCT9QC5wp6cwU03iSWZJVAagtKTIBE/e SFJ4ULaznOR+g2CbNpsNF35oeuL27qUMRlkPMlB/dZPj4zvPc5BJe0o+JOCdYvfA MOc1WbmHc68I8mwGmNQgf8LAmaH52cwTOOxMflqqAON04iaGhww1rHOfKvfGmDi/ LoyIo5rsEZKJax5zLXPgQZk893WUgRKI -----END CERTIFICATE-----Generated at Sun Dec 7 01:51:35 2025 by rpki-client