This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft File: HlpjIbEaoIRvqJvxObzs2604vjc.mft (raw, json) Hash identifier: jtiKSgsKI08T8oppRsjY673PBx0FzhsNp26PCsr5G60= Subject key identifier: 2C:5F:92:AE:1F:35:8E:EB:D7:61:D0:6C:BF:FA:9F:3D:CB:3E:4A:0A Authority key identifier: 1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37 Certificate issuer: /CN=A91C9D76/serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37 Certificate serial: 3598 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft Manifest number: 354B Signing time: Sat 06 Dec 2025 14:15:53 +0000 Manifest this update: Sat 06 Dec 2025 14:15:52 +0000 Manifest next update: Sat 13 Dec 2025 14:15:52 +0000 Files and hashes: 1: HlpjIbEaoIRvqJvxObzs2604vjc.crl (hash: hZM5A1oXD2bkJvuga7o6IgIgMQDrUBT5WHG93qSa9rk=) 2: 0997A5828A1511F09F6EBD2BC4F9AE02.roa (hash: OnxDy/55jjMCiBnkBT8Gsibkcizt1adU0FH5L5R2Oyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13720 (0x3598) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D76, serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37 Validity Not Before: Dec 6 14:15:52 2025 GMT Not After : Dec 13 14:15:52 2025 GMT Subject: CN=69343a99-03d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1b:f6:b5:db:14:a1:db:fa:fe:29:d7:0f:6d: ea:f1:07:44:00:60:02:24:9b:89:4e:d5:a0:67:2e: 74:c8:4e:48:17:3d:ba:af:3e:c5:ee:e7:82:0e:b7: de:a1:a3:da:ee:f2:25:2f:c1:a8:a2:73:85:e9:d2: 08:7a:03:0e:fc:3f:48:ef:52:41:18:99:fd:63:7a: f2:ae:b5:cc:89:ca:e8:28:91:2d:62:c3:3c:43:a7: ee:2f:1e:d5:cc:f9:dd:40:97:e1:98:ae:6c:d8:dc: ea:8f:60:d2:af:61:0b:99:12:4c:91:84:94:df:37: 45:3d:e2:06:83:bb:6f:04:32:e7:9e:7c:93:33:d4: 7f:4e:54:12:dd:69:74:59:32:d4:f0:f5:c1:a0:23: 25:90:34:ea:83:eb:a2:62:d4:46:79:35:01:25:79: 6a:82:94:d6:ed:5c:f8:93:44:84:5f:30:05:b0:b9: 67:51:3e:15:77:6a:93:0d:99:ea:c4:6f:b5:c8:ac: 5d:9f:5e:56:02:f9:0f:dc:02:06:08:80:81:98:da: 20:ab:99:a3:29:9b:86:7a:23:57:f2:16:ab:b1:0f: 5c:4e:50:9d:31:b8:fa:73:37:de:e9:ef:85:2b:ad: aa:81:27:d4:56:a5:64:e6:19:dd:a4:63:a9:99:c9: 11:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5F:92:AE:1F:35:8E:EB:D7:61:D0:6C:BF:FA:9F:3D:CB:3E:4A:0A X509v3 Authority Key Identifier: keyid:1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:aa:63:79:12:41:84:6f:2e:ce:1d:59:a5:ee:b5:93:b0:f4: 5e:e2:62:fb:3a:b4:fb:7e:db:31:2d:4e:7b:96:0d:27:72:de: 84:50:10:58:b5:3f:1f:41:1c:ca:65:84:f1:27:da:c8:30:0c: c0:c0:1a:15:7b:e1:62:1f:3f:20:c6:31:0a:9f:54:28:eb:1a: 50:ee:a8:c9:ad:1e:72:88:e5:29:c2:a4:de:fe:9a:4c:ca:6d: 8f:15:ea:37:b3:ed:66:a1:cc:92:48:22:04:7d:53:31:55:ef: 12:c8:b5:29:71:bd:ff:eb:7e:2f:5d:0a:85:87:0b:dc:1d:72: 8f:9b:05:aa:25:11:3f:7c:21:6e:78:f9:16:fd:52:cf:38:94: 71:f2:53:c5:b2:b9:5b:ea:cb:f5:5a:4f:86:dd:4e:6f:7c:7c: 14:d7:81:e9:eb:15:c0:6f:dd:5a:7d:b1:82:e7:46:7f:bc:fb: 10:bc:e4:0f:5f:d2:4e:26:51:d7:33:d3:90:4c:70:88:c8:69: fd:9e:b5:d1:ed:37:1a:47:93:8f:d0:3c:f6:64:36:73:8b:14: f4:47:3a:5c:67:2e:cb:dd:6b:51:53:c6:14:e1:82:17:ab:2a: 90:1e:3d:6b:24:14:d6:d1:51:b7:c6:bb:50:30:b4:ac:9e:6b: 87:c2:7b:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlENzYxMTAvBgNVBAUTKDFFNUE2MzIxQjExQUEwODQ2RkE4OUJGMTM5QkNFQ0RC QUQzOEJFMzcwHhcNMjUxMjA2MTQxNTUyWhcNMjUxMjEzMTQxNTUyWjAYMRYwFAYD VQQDEw02OTM0M2E5OS0wM2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBv2tdsUodv6/inXD23q8QdEAGACJJuJTtWgZy50yE5IFz26rz7F7ueCDrfe oaPa7vIlL8GoonOF6dIIegMO/D9I71JBGJn9Y3ryrrXMicroKJEtYsM8Q6fuLx7V zPndQJfhmK5s2Nzqj2DSr2ELmRJMkYSU3zdFPeIGg7tvBDLnnnyTM9R/TlQS3Wl0 WTLU8PXBoCMlkDTqg+uiYtRGeTUBJXlqgpTW7Vz4k0SEXzAFsLlnUT4Vd2qTDZnq xG+1yKxdn15WAvkP3AIGCICBmNogq5mjKZuGeiNX8harsQ9cTlCdMbj6czfe6e+F K62qgSfUVqVk5hndpGOpmckR0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxfkq4f NY7r12HQbL/6nz3LPkoKMB8GA1UdIwQYMBaAFB5aYyGxGqCEb6ib8Tm87NutOL43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQ3Ni82Mjg3QTExNDFE NjkxMUUyODhBQkE5QTYwOEIwMkNEMi9IbHBqSWJFYW9JUnZxSnZ4T2J6czI2MDR2 amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hscGpJYkVhb0lSdnFKdnhPYnpzMjYwNHZqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUQ3Ni82Mjg3QTExNDFENjkxMUUyODhBQkE5QTYwOEIwMkNEMi9IbHBqSWJFYW9J UnZxSnZ4T2J6czI2MDR2amMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUqmN5EkGEby7OHVml7rWTsPRe4mL7OrT7ftsxLU57lg0nct6EUBBY tT8fQRzKZYTxJ9rIMAzAwBoVe+FiHz8gxjEKn1Qo6xpQ7qjJrR5yiOUpwqTe/ppM ym2PFeo3s+1mocySSCIEfVMxVe8SyLUpcb3/634vXQqFhwvcHXKPmwWqJRE/fCFu ePkW/VLPOJRx8lPFsrlb6sv1Wk+G3U5vfHwU14Hp6xXAb91afbGC50Z/vPsQvOQP X9JOJlHXM9OQTHCIyGn9nrXR7TcaR5OP0Dz2ZDZzixT0RzpcZy7L3WtRU8YU4YIX qyqQHj1rJBTW0VG3xrtQMLSsnmuHwnuQ -----END CERTIFICATE-----Generated at Sat Dec 6 19:13:20 2025 by rpki-client