This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft File: HFloWGy0x-KD8UGfWFBGjtpVloI.mft (raw, json) Hash identifier: u88yBteuSirQc6zrdy/K29hFMtR7XpZkWr73LIl2EXY= Subject key identifier: ED:98:8D:7C:50:F6:28:61:59:12:AC:D8:5E:62:28:50:80:23:3B:F3 Authority key identifier: 1C:59:68:58:6C:B4:C7:E2:83:F1:41:9F:58:50:46:8E:DA:55:96:82 Certificate issuer: /CN=A91C78A7/serialNumber=1C5968586CB4C7E283F1419F5850468EDA559682 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft Manifest number: 1C Signing time: Sun 07 Dec 2025 05:52:27 +0000 Manifest this update: Sun 07 Dec 2025 05:52:27 +0000 Manifest next update: Sun 14 Dec 2025 05:52:26 +0000 Files and hashes: 1: HFloWGy0x-KD8UGfWFBGjtpVloI.crl (hash: Ir3Q12gkKRWZwdHK3qt9J4jdyp4QET2HhtkEHPMKMNc=) 2: 9DB152BEBAE311F0A6981134C4F9AE02.roa (hash: Yie6R1tMSTTJ1xr/2FaX5Nl172a/1lK4icTSFxQ0j4I=) 3: 886DFB52BE4711F0A5FBDC5FC4F9AE02.roa (hash: ypcepGzARLWbouWGE3k73Jk0jJnQAUjY1dbnZc9nuLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.crl rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C78A7, serialNumber=1C5968586CB4C7E283F1419F5850468EDA559682 Validity Not Before: Dec 7 05:52:27 2025 GMT Not After : Dec 14 05:52:26 2025 GMT Subject: CN=6935161b-de93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:55:a8:dd:a4:b2:18:b9:65:55:8f:f2:05:ba: 4f:71:05:1a:eb:de:c5:eb:a6:7f:04:2e:4d:40:af: 9d:4d:32:e2:d2:a5:9c:ec:26:70:38:a2:47:b4:9e: 26:09:0b:46:df:42:23:a4:03:fe:df:69:68:5e:ac: 4a:37:7c:47:11:b3:d1:22:c9:5e:54:cf:df:59:2f: 13:02:3e:3f:54:8c:a4:1e:35:5c:f7:4e:e9:a9:e8: 86:be:aa:72:a6:cc:41:1a:05:a2:5a:80:51:89:0a: 26:2e:71:4f:6a:78:f5:0b:32:d7:d3:df:bd:c7:0a: 1f:bb:44:ad:56:53:3e:4e:61:79:e0:4d:cc:17:7c: c2:0e:46:c6:c6:17:ad:23:57:9b:eb:c9:a4:23:42: e8:37:39:64:80:2a:b1:73:2b:e1:6c:f9:50:7c:19: d6:c3:73:76:e1:c3:c8:54:35:69:d3:df:ce:10:45: ff:e2:8a:81:33:d7:02:81:a9:af:f5:7b:5d:fa:9c: 5b:e2:51:ef:ec:0e:72:82:b4:5c:64:37:5c:35:0e: 06:14:fe:3e:c4:57:24:79:31:4a:05:28:29:cf:50: b9:e2:e9:62:93:52:2b:a7:08:0d:37:c9:23:a0:51: 8d:ee:65:5b:d9:86:7e:46:f7:f0:69:f0:69:ea:f3: 1c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:98:8D:7C:50:F6:28:61:59:12:AC:D8:5E:62:28:50:80:23:3B:F3 X509v3 Authority Key Identifier: keyid:1C:59:68:58:6C:B4:C7:E2:83:F1:41:9F:58:50:46:8E:DA:55:96:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:a6:06:30:6d:ae:dc:1e:75:be:58:7f:22:bf:a4:8f:a5:a0: 3f:61:3a:5d:fc:8c:bb:ae:d6:85:8b:4a:d0:4c:a5:4b:8e:46: e8:a7:77:08:bc:fa:ac:d9:46:d2:fd:38:05:6c:65:8c:0e:1a: c2:a9:ff:5b:59:a5:58:0a:65:49:21:db:11:a4:3e:bb:58:aa: db:96:e3:51:c2:64:32:38:fb:21:39:ce:06:3e:73:2a:e0:91: c4:67:ae:93:d7:1c:11:a8:dd:d7:b0:de:1a:9f:35:d8:46:a5: ed:5d:79:ab:30:61:4b:d3:5f:e7:e5:d4:bf:5e:35:8d:6a:6a: 8b:5b:10:bc:8e:59:be:8d:09:f5:86:7a:b3:0f:5a:c6:72:be: 3b:4b:16:7a:fc:cd:78:56:4f:0c:ca:50:f3:51:cc:6f:23:98: fb:9a:fc:43:1c:7f:ed:09:28:8c:4b:92:bb:96:c3:9a:19:08: e7:70:a0:ff:97:44:77:37:9b:0c:f4:29:33:a2:88:65:e5:48: 96:03:40:7a:f5:37:d4:28:ef:a3:2f:0f:62:02:73:0f:db:7c: 20:89:da:90:30:e6:b8:56:10:cd:b7:e1:d8:2e:47:c2:31:0c: b4:a3:85:c8:cb:61:22:f5:5a:d3:35:a6:86:eb:69:2f:5d:dc: d5:88:75:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzhBNzExMC8GA1UEBRMoMUM1OTY4NTg2Q0I0QzdFMjgzRjE0MTlGNTg1MDQ2OEVE QTU1OTY4MjAeFw0yNTEyMDcwNTUyMjdaFw0yNTEyMTQwNTUyMjZaMBgxFjAUBgNV BAMTDTY5MzUxNjFiLWRlOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLVajdpLIYuWVVj/IFuk9xBRrr3sXrpn8ELk1Ar51NMuLSpZzsJnA4oke0niYJ C0bfQiOkA/7faWherEo3fEcRs9EiyV5Uz99ZLxMCPj9UjKQeNVz3Tump6Ia+qnKm zEEaBaJagFGJCiYucU9qePULMtfT373HCh+7RK1WUz5OYXngTcwXfMIORsbGF60j V5vryaQjQug3OWSAKrFzK+Fs+VB8GdbDc3bhw8hUNWnT384QRf/iioEz1wKBqa/1 e136nFviUe/sDnKCtFxkN1w1DgYU/j7EVyR5MUoFKCnPULni6WKTUiunCA03ySOg UY3uZVvZhn5G9/Bp8Gnq8xzBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7ZiNfFD2 KGFZEqzYXmIoUIAjO/MwHwYDVR0jBBgwFoAUHFloWGy0x+KD8UGfWFBGjtpVloIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3OEE3L0ZBRTk2QzRBQjYy MDExRjBBNzQ5MjExRkM0RjlBRTAyL0hGbG9XR3kweC1LRDhVR2ZXRkJHanRwVmxv SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSEZsb1dHeTB4LUtEOFVHZldGQkdqdHBWbG9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 OEE3L0ZBRTk2QzRBQjYyMDExRjBBNzQ5MjExRkM0RjlBRTAyL0hGbG9XR3kweC1L RDhVR2ZXRkJHanRwVmxvSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKimBjBtrtwedb5YfyK/pI+loD9hOl38jLuu1oWLStBMpUuORuindwi8 +qzZRtL9OAVsZYwOGsKp/1tZpVgKZUkh2xGkPrtYqtuW41HCZDI4+yE5zgY+cyrg kcRnrpPXHBGo3dew3hqfNdhGpe1deaswYUvTX+fl1L9eNY1qaotbELyOWb6NCfWG erMPWsZyvjtLFnr8zXhWTwzKUPNRzG8jmPua/EMcf+0JKIxLkruWw5oZCOdwoP+X RHc3mwz0KTOiiGXlSJYDQHr1N9Qo76MvD2ICcw/bfCCJ2pAw5rhWEM234dguR8Ix DLSjhcjLYSL1WtM1pobraS9d3NWIdUI= -----END CERTIFICATE-----Generated at Sun Dec 7 22:59:53 2025 by rpki-client