This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft File: HRIX74_oS1glUWcbyjXmhEhpJJc.mft (raw, json) Hash identifier: L1A/ApJG4TK+gQt7kiGghFIdh0vvR/kckzigTkoYSOs= Subject key identifier: 4A:95:8A:32:30:AC:49:D7:97:12:DE:01:BC:8E:AA:BF:B6:F2:90:9D Authority key identifier: 1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97 Certificate issuer: /CN=A91C8BB4/serialNumber=1D1217EF8FE84B582551671BCA35E68448692497 Certificate serial: 0AB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft Manifest number: 0AAA Signing time: Thu 04 Dec 2025 18:50:49 +0000 Manifest this update: Thu 04 Dec 2025 18:50:49 +0000 Manifest next update: Thu 11 Dec 2025 18:50:49 +0000 Files and hashes: 1: HRIX74_oS1glUWcbyjXmhEhpJJc.crl (hash: LUbzTXJnqMtZeh6dR1Pz29DG6eQNevqligyL786x8+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2740 (0xab4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8BB4, serialNumber=1D1217EF8FE84B582551671BCA35E68448692497 Validity Not Before: Dec 4 18:50:49 2025 GMT Not After : Dec 11 18:50:49 2025 GMT Subject: CN=6931d809-5311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ef:f4:6b:76:e9:c0:2b:44:79:64:85:09:28: bc:cc:b8:18:f6:36:b9:00:05:6f:f0:85:31:09:ce: aa:7e:28:85:46:4f:ad:b6:93:57:0f:5e:0b:51:0d: 2a:e2:0f:47:6d:ff:79:b4:b7:33:52:d1:6b:63:3e: 9a:bc:43:27:c9:7a:8a:fd:75:01:1c:2f:12:86:47: 6c:cc:ca:9e:aa:a1:71:8c:06:eb:fc:74:e0:55:9a: 2c:da:85:8c:64:39:7a:c2:10:1a:f2:b2:e4:af:2b: 2f:44:0d:2a:05:f4:d1:8f:bd:e1:d9:a7:e9:0b:0f: b7:a3:a3:81:a3:cb:67:67:2c:35:e8:e8:38:3d:c5: 6b:c1:cc:ff:75:68:59:46:f4:16:c6:9b:8b:56:2d: 3e:a0:30:f0:f6:8b:99:e1:ef:cf:7f:c1:58:dd:7b: 06:1e:03:52:8d:ec:21:df:a4:13:d1:65:2b:7f:9a: 5b:30:51:14:d2:53:48:0b:d7:32:ec:97:40:76:d6: a9:e5:be:ab:a1:41:fc:9f:37:8c:54:ac:55:da:33: c4:a9:91:36:8e:98:8d:a3:b5:0e:51:63:87:0f:3b: b3:96:5b:8c:e9:cf:83:f2:7b:1d:66:af:03:ef:b9: 61:56:bd:44:ce:1c:fd:d0:0f:dd:18:35:72:d9:30: 38:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:95:8A:32:30:AC:49:D7:97:12:DE:01:BC:8E:AA:BF:B6:F2:90:9D X509v3 Authority Key Identifier: keyid:1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:ac:2c:4f:3f:68:15:73:3a:81:dc:2b:23:21:50:58:13:b9: 77:ca:2e:58:ca:94:99:d4:8b:62:a0:b1:95:ba:2e:48:b2:c1: 73:bf:80:18:26:4c:89:5e:0c:69:9e:ec:f5:2e:32:d7:aa:03: ec:3f:0d:67:43:4d:9d:49:19:dc:b5:39:fe:35:96:19:05:99: 00:2d:82:8d:cf:3c:4e:1f:7b:0f:4b:e0:69:e8:20:5b:0e:0e: f7:ad:c9:a0:fc:1e:d7:7e:86:89:54:e9:fd:91:8c:5c:ca:24: 5e:12:e0:22:cd:4a:71:1c:f6:3c:cb:cc:91:74:21:00:fa:46: ca:ba:80:48:39:30:b4:ac:d5:22:b5:52:25:57:bd:e3:76:8a: ff:f2:b7:36:de:b4:71:88:82:a1:ff:6a:18:33:9c:fe:c7:53: fb:f2:31:b8:55:b1:83:06:96:84:e3:d9:9d:65:25:53:79:ce: 95:67:96:5b:fc:90:4b:fa:eb:a4:a6:a8:50:11:d7:c4:8a:a8: 12:e4:aa:f2:75:78:0a:75:f7:25:ca:9c:6f:da:28:18:2c:fc: 64:28:cc:58:a4:c2:00:4a:2c:50:23:ec:8f:7b:b3:4e:ba:6c: 31:b1:4f:d8:56:95:72:b5:c3:e2:37:8d:c2:93:5a:41:88:05: 12:92:e1:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhCQjQxMTAvBgNVBAUTKDFEMTIxN0VGOEZFODRCNTgyNTUxNjcxQkNBMzVFNjg0 NDg2OTI0OTcwHhcNMjUxMjA0MTg1MDQ5WhcNMjUxMjExMTg1MDQ5WjAYMRYwFAYD VQQDEw02OTMxZDgwOS01MzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoe/0a3bpwCtEeWSFCSi8zLgY9ja5AAVv8IUxCc6qfiiFRk+ttpNXD14LUQ0q 4g9Hbf95tLczUtFrYz6avEMnyXqK/XUBHC8ShkdszMqeqqFxjAbr/HTgVZos2oWM ZDl6whAa8rLkrysvRA0qBfTRj73h2afpCw+3o6OBo8tnZyw16Og4PcVrwcz/dWhZ RvQWxpuLVi0+oDDw9ouZ4e/Pf8FY3XsGHgNSjewh36QT0WUrf5pbMFEU0lNIC9cy 7JdAdtap5b6roUH8nzeMVKxV2jPEqZE2jpiNo7UOUWOHDzuzlluM6c+D8nsdZq8D 77lhVr1Ezhz90A/dGDVy2TA4yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqVijIw rEnXlxLeAbyOqr+28pCdMB8GA1UdIwQYMBaAFB0SF++P6EtYJVFnG8o15oRIaSSX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEJCNC9EOTU0QkFCRTY5 QjcxMUVBODhFNzJFNTlDNEY5QUUwMi9IUklYNzRfb1MxZ2xVV2NieWpYbWhFaHBK SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hSSVg3NF9vUzFnbFVXY2J5alhtaEVocEpKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEJCNC9EOTU0QkFCRTY5QjcxMUVBODhFNzJFNTlDNEY5QUUwMi9IUklYNzRfb1Mx Z2xVV2NieWpYbWhFaHBKSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHrCxPP2gVczqB3CsjIVBYE7l3yi5YypSZ1ItioLGVui5IssFzv4AY JkyJXgxpnuz1LjLXqgPsPw1nQ02dSRnctTn+NZYZBZkALYKNzzxOH3sPS+Bp6CBb Dg73rcmg/B7XfoaJVOn9kYxcyiReEuAizUpxHPY8y8yRdCEA+kbKuoBIOTC0rNUi tVIlV73jdor/8rc23rRxiIKh/2oYM5z+x1P78jG4VbGDBpaE49mdZSVTec6VZ5Zb /JBL+uukpqhQEdfEiqgS5KrydXgKdfclypxv2igYLPxkKMxYpMIASixQI+yPe7NO umwxsU/YVpVytcPiN43Ck1pBiAUSkuH6 -----END CERTIFICATE-----Generated at Sat Dec 6 20:30:10 2025 by rpki-client