This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft File: HFloWGy0x-KD8UGfWFBGjtpVloI.mft (raw, json) Hash identifier: vakx5irsY64LcHbE0DCjs68b8PZsOlDmS0Jzgo+lHUo= Subject key identifier: 6F:30:CB:53:BF:A6:4E:9D:E7:7C:C4:EA:74:DD:E2:55:3E:2F:78:8B Authority key identifier: 1C:59:68:58:6C:B4:C7:E2:83:F1:41:9F:58:50:46:8E:DA:55:96:82 Certificate issuer: /CN=A91C78A7/serialNumber=1C5968586CB4C7E283F1419F5850468EDA559682 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft Manifest number: 35 Signing time: Sun 25 Jan 2026 06:40:32 +0000 Manifest this update: Sun 25 Jan 2026 06:40:31 +0000 Manifest next update: Sun 01 Feb 2026 06:40:31 +0000 Files and hashes: 1: HFloWGy0x-KD8UGfWFBGjtpVloI.crl (hash: +cUIqZeD0G8o52CaCATXqvERu5hXBOEzPu9vJFzek0Q=) 2: 9DB152BEBAE311F0A6981134C4F9AE02.roa (hash: Yie6R1tMSTTJ1xr/2FaX5Nl172a/1lK4icTSFxQ0j4I=) 3: 886DFB52BE4711F0A5FBDC5FC4F9AE02.roa (hash: ypcepGzARLWbouWGE3k73Jk0jJnQAUjY1dbnZc9nuLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.crl rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C78A7, serialNumber=1C5968586CB4C7E283F1419F5850468EDA559682 Validity Not Before: Jan 25 06:40:31 2026 GMT Not After : Feb 1 06:40:31 2026 GMT Subject: CN=6975bae0-4142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:49:9e:98:d8:19:bf:51:c7:78:b8:41:fa:12: 05:c0:bf:cf:cd:d7:fb:41:2d:ba:0e:5f:68:19:e4: ca:ce:e9:18:da:25:1d:2e:18:a3:3c:4e:d8:0b:4d: 33:09:bc:b8:42:04:60:7b:1d:4b:bc:de:aa:f3:bd: 8b:8f:4a:3e:2f:65:be:27:f3:32:e3:68:6b:f3:60: 1b:e2:19:9b:21:ac:0b:b4:79:40:a6:02:70:e7:5b: 5d:aa:12:16:37:8c:0e:15:9d:95:f3:f8:fb:11:e9: 11:ef:d9:ca:c7:63:3f:00:d6:57:1f:ba:b2:92:f6: 0b:d0:de:35:0d:d7:28:d2:42:4e:b0:f1:92:3d:ca: 67:68:60:a5:b8:bf:88:e5:27:76:32:ac:ad:36:e0: 6f:24:a2:74:19:1a:d7:90:c5:90:04:31:52:de:f6: 60:59:b9:2b:20:bd:3c:9c:de:f8:20:0e:6a:1d:19: 47:57:29:fa:46:b1:9b:4c:ee:9b:6d:c9:06:a9:db: 51:29:9e:bc:0c:ba:fa:17:56:9a:d1:a9:3b:6c:f7: 67:bb:af:43:95:cb:b5:f9:e5:d3:67:e3:64:7f:64: c7:aa:18:67:6b:7a:63:f8:b0:28:d7:e5:9b:bc:c5: cc:31:79:58:0c:c0:12:96:bf:dd:67:be:3a:11:22: b9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:30:CB:53:BF:A6:4E:9D:E7:7C:C4:EA:74:DD:E2:55:3E:2F:78:8B X509v3 Authority Key Identifier: keyid:1C:59:68:58:6C:B4:C7:E2:83:F1:41:9F:58:50:46:8E:DA:55:96:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:16:5a:de:36:80:49:fb:8b:17:0f:56:0a:da:1f:70:59:f5: 41:2a:da:d9:5b:30:9c:19:95:8a:54:b9:09:f4:cd:28:e0:aa: 5f:02:82:91:5b:fa:be:41:68:de:b5:15:e2:01:69:83:f2:2c: 06:75:98:b7:4f:72:d4:86:c4:d6:cb:7b:ba:0c:5b:04:d6:7e: 54:dd:6e:8e:70:50:5c:17:4f:d8:88:35:44:45:62:7c:7e:54: 12:1b:be:0a:f0:c9:4e:d6:c5:65:54:8f:d5:36:da:5b:de:8a: 4f:ae:9e:b0:55:4c:00:1e:7c:f6:ad:d0:a4:26:da:05:97:92: 46:41:86:c4:29:dd:5b:b5:79:4a:e8:13:b2:ff:da:c1:92:2b: 5d:7c:0a:f1:e5:a3:95:65:1b:a4:c3:fc:7b:d3:63:10:16:e4: 02:5a:a0:1a:8c:86:e6:bd:a9:2a:ef:e5:84:fa:0d:6f:12:90: 2c:ba:5c:5f:ea:8c:e0:c7:6d:6a:82:8e:28:d9:61:54:33:87: e8:45:e9:3c:a1:38:97:05:00:d8:29:31:09:83:a1:f2:77:d8: 2d:d1:9a:d8:4b:fe:30:0b:8a:67:03:f3:9c:4d:f0:f8:49:95: d6:d3:4e:2e:bc:e1:31:76:68:a7:89:4e:50:6f:69:58:0b:92: 8c:f4:56:0c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzhBNzExMC8GA1UEBRMoMUM1OTY4NTg2Q0I0QzdFMjgzRjE0MTlGNTg1MDQ2OEVE QTU1OTY4MjAeFw0yNjAxMjUwNjQwMzFaFw0yNjAyMDEwNjQwMzFaMBgxFjAUBgNV BAMMDTY5NzViYWUwLTQxNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDASZ6Y2Bm/Ucd4uEH6EgXAv8/N1/tBLboOX2gZ5MrO6RjaJR0uGKM8TtgLTTMJ vLhCBGB7HUu83qrzvYuPSj4vZb4n8zLjaGvzYBviGZshrAu0eUCmAnDnW12qEhY3 jA4VnZXz+PsR6RHv2crHYz8A1lcfurKS9gvQ3jUN1yjSQk6w8ZI9ymdoYKW4v4jl J3YyrK024G8konQZGteQxZAEMVLe9mBZuSsgvTyc3vggDmodGUdXKfpGsZtM7ptt yQap21EpnrwMuvoXVprRqTts92e7r0OVy7X55dNn42R/ZMeqGGdremP4sCjX5Zu8 xcwxeVgMwBKWv91nvjoRIrnJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbzDLU7+m Tp3nfMTqdN3iVT4veIswHwYDVR0jBBgwFoAUHFloWGy0x+KD8UGfWFBGjtpVloIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3OEE3L0ZBRTk2QzRBQjYy MDExRjBBNzQ5MjExRkM0RjlBRTAyL0hGbG9XR3kweC1LRDhVR2ZXRkJHanRwVmxv SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSEZsb1dHeTB4LUtEOFVHZldGQkdqdHBWbG9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 OEE3L0ZBRTk2QzRBQjYyMDExRjBBNzQ5MjExRkM0RjlBRTAyL0hGbG9XR3kweC1L RDhVR2ZXRkJHanRwVmxvSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAN0WWt42gEn7ixcPVgraH3BZ9UEq2tlbMJwZlYpUuQn0zSjgql8CgpFb +r5BaN61FeIBaYPyLAZ1mLdPctSGxNbLe7oMWwTWflTdbo5wUFwXT9iINURFYnx+ VBIbvgrwyU7WxWVUj9U22lveik+unrBVTAAefPat0KQm2gWXkkZBhsQp3Vu1eUro E7L/2sGSK118CvHlo5VlG6TD/HvTYxAW5AJaoBqMhua9qSrv5YT6DW8SkCy6XF/q jODHbWqCjijZYVQzh+hF6TyhOJcFANgpMQmDofJ32C3RmthL/jALimcD85xN8PhJ ldbTTi684TF2aKeJTlBvaVgLkoz0Vgw= -----END CERTIFICATE-----Generated at Sun Jan 25 13:52:39 2026 by rpki-client