This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft File: HdM6aLwLXJMQ__Uq1zlBINECpic.mft (raw, json) Hash identifier: nGjUAlu9wEInWCz2kmPoXRN0ocehKQmsufkhB62amOw= Subject key identifier: CC:A8:2A:9C:66:5C:27:B5:AC:8A:D3:3D:42:7D:D0:71:12:25:CC:FF Authority key identifier: 1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27 Certificate issuer: /CN=A91C5319/serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft Manifest number: D7 Signing time: Fri 05 Dec 2025 03:39:07 +0000 Manifest this update: Fri 05 Dec 2025 03:39:07 +0000 Manifest next update: Fri 12 Dec 2025 03:39:07 +0000 Files and hashes: 1: HdM6aLwLXJMQ__Uq1zlBINECpic.crl (hash: +fEK4DMTKs/3Ou5DfuUjzZFuB6NH2xOvteOLnj9rWPo=) 2: C7500EC88C2F11EF82B2F55CC4F9AE02.roa (hash: X+68fVuVtHa5fnoo84w/HjubbFGCJvnyWNu2O/OuVfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:39:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5319, serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627 Validity Not Before: Dec 5 03:39:07 2025 GMT Not After : Dec 12 03:39:07 2025 GMT Subject: CN=693253db-7cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c4:08:8e:55:c2:cc:63:42:24:c5:35:19:c3: 2b:d6:a2:e5:f0:44:45:91:a2:b1:2a:e1:3c:16:5a: 48:92:92:c7:1f:e4:a4:18:a5:0b:56:0b:5a:4b:cc: 74:2f:11:b4:1d:24:7d:16:2d:54:d9:8c:a8:1f:bf: 6a:fc:5b:23:51:b7:c4:c7:05:b6:8e:d2:a6:b3:1d: bb:fb:f6:3a:ee:fb:be:5b:85:c3:10:d6:dc:48:fb: 8a:e8:ca:cd:b8:5c:cd:04:87:2a:76:8a:7b:77:e2: 21:67:fa:d3:45:86:5c:59:ea:6c:f1:cb:a5:3c:19: ea:95:e0:09:fc:a0:db:05:a2:93:f1:33:32:6c:a2: 76:6b:7c:91:4e:f8:ca:01:66:ee:3e:92:a4:00:17: 32:bc:1f:5a:a4:4a:3a:95:63:69:b9:03:df:56:26: 63:f0:41:98:c4:a1:21:60:b6:c7:a6:69:3b:09:1a: 66:98:b2:4a:2b:8e:47:bc:b6:50:19:7a:71:b9:b1: c7:fd:0f:71:2e:29:04:01:f3:b5:b5:2f:1c:38:94: 48:cb:ec:47:5d:15:f4:10:fe:bb:fd:92:f0:0d:23: 3c:ad:3d:d3:1c:fc:8a:0d:db:a8:c0:36:6a:f6:ed: 65:54:5b:84:a2:df:04:43:9a:cd:b9:69:ff:cf:3d: 3a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A8:2A:9C:66:5C:27:B5:AC:8A:D3:3D:42:7D:D0:71:12:25:CC:FF X509v3 Authority Key Identifier: keyid:1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:35:42:a7:3d:73:8a:45:43:32:ad:4b:09:52:e8:55:51:2a: b1:5e:77:2b:c3:8f:f7:bc:9c:92:db:bf:18:54:e5:1c:b6:ea: 54:c7:8e:52:de:a6:70:17:cc:7d:22:6a:b9:d2:e8:7b:8b:cd: a9:cc:eb:05:8a:dd:e6:64:b7:86:82:74:9b:77:d3:63:97:14: bd:76:30:cf:23:0f:52:bc:59:ff:32:6b:61:fb:1d:59:78:78: ba:71:69:09:48:52:f5:a0:e0:a7:03:8c:5f:98:4d:3f:31:af: 52:48:ed:80:69:01:ea:74:46:90:bc:dd:11:00:ef:4d:d2:18: 6c:f2:12:ab:53:78:26:6f:02:eb:8d:35:88:05:9e:ab:ba:67: 10:4f:68:9f:e6:94:8a:44:e2:18:8b:ae:bf:4a:10:7b:fc:33: f0:3c:4b:39:89:62:2a:b9:df:f6:1b:28:bb:12:86:93:58:e3: 5e:e2:e1:76:5e:ac:96:95:a4:0e:18:f3:0c:00:c7:5f:06:4c: 68:40:12:1d:07:75:34:65:19:d7:ef:a4:73:05:a9:e5:15:95: e8:a4:48:9f:e1:72:77:11:9e:ba:46:a2:4c:78:88:98:56:a6: 61:bf:9f:cc:30:19:fd:97:29:d3:93:64:d9:ab:5e:e0:db:95: 9f:0c:62:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzMTkxMTAvBgNVBAUTKDFERDMzQTY4QkMwQjVDOTMxMEZGRjUyQUQ3Mzk0MTIw RDEwMkE2MjcwHhcNMjUxMjA1MDMzOTA3WhcNMjUxMjEyMDMzOTA3WjAYMRYwFAYD VQQDEw02OTMyNTNkYi03Y2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApsQIjlXCzGNCJMU1GcMr1qLl8ERFkaKxKuE8FlpIkpLHH+SkGKULVgtaS8x0 LxG0HSR9Fi1U2YyoH79q/FsjUbfExwW2jtKmsx27+/Y67vu+W4XDENbcSPuK6MrN uFzNBIcqdop7d+IhZ/rTRYZcWeps8culPBnqleAJ/KDbBaKT8TMybKJ2a3yRTvjK AWbuPpKkABcyvB9apEo6lWNpuQPfViZj8EGYxKEhYLbHpmk7CRpmmLJKK45HvLZQ GXpxubHH/Q9xLikEAfO1tS8cOJRIy+xHXRX0EP67/ZLwDSM8rT3THPyKDduowDZq 9u1lVFuEot8EQ5rNuWn/zz06wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyoKpxm XCe1rIrTPUJ90HESJcz/MB8GA1UdIwQYMBaAFB3TOmi8C1yTEP/1Ktc5QSDRAqYn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTMxOS9GOTRENDFDODhD MkMxMUVGODEyMkVDMTFDNEY5QUUwMi9IZE02YUx3TFhKTVFfX1VxMXpsQklORUNw aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hkTTZhTHdMWEpNUV9fVXExemxCSU5FQ3BpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTMxOS9GOTRENDFDODhDMkMxMUVGODEyMkVDMTFDNEY5QUUwMi9IZE02YUx3TFhK TVFfX1VxMXpsQklORUNwaWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmNUKnPXOKRUMyrUsJUuhVUSqxXncrw4/3vJyS278YVOUctupUx45S 3qZwF8x9Imq50uh7i82pzOsFit3mZLeGgnSbd9NjlxS9djDPIw9SvFn/Mmth+x1Z eHi6cWkJSFL1oOCnA4xfmE0/Ma9SSO2AaQHqdEaQvN0RAO9N0hhs8hKrU3gmbwLr jTWIBZ6rumcQT2if5pSKROIYi66/ShB7/DPwPEs5iWIqud/2Gyi7EoaTWONe4uF2 XqyWlaQOGPMMAMdfBkxoQBIdB3U0ZRnX76RzBanlFZXopEif4XJ3EZ66RqJMeIiY VqZhv5/MMBn9lynTk2TZq17g25WfDGJ7 -----END CERTIFICATE-----Generated at Sat Dec 6 21:45:40 2025 by rpki-client