This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft File: H1rFBrARMMguXkcxYDuiZM7YSGY.mft (raw, json) Hash identifier: FyFeUQuzjtKeUcFU0EUFVeuAhEqsW0bOKD/+2gCoM4A= Subject key identifier: 7B:6C:01:AF:C0:61:15:C7:4A:31:C6:24:9A:0C:89:32:41:54:9F:18 Authority key identifier: 1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 Certificate issuer: /CN=A91CBB22/serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Certificate serial: 0670 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft Manifest number: 066D Signing time: Thu 04 Dec 2025 21:19:59 +0000 Manifest this update: Thu 04 Dec 2025 21:19:59 +0000 Manifest next update: Thu 11 Dec 2025 21:19:59 +0000 Files and hashes: 1: H1rFBrARMMguXkcxYDuiZM7YSGY.crl (hash: XbhnalSf7g/K2SyL66DQGXGr8vDVZFkRIfj4dcrqYSQ=) 2: F7F03FB2EF3211EDA614D473C4F9AE02.roa (hash: 4FifQNCcp/QNphiorNeb31DnXb9TCxFLDNFh3h59mKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1648 (0x670) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB22, serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Validity Not Before: Dec 4 21:19:59 2025 GMT Not After : Dec 11 21:19:59 2025 GMT Subject: CN=6931faff-b471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:34:c0:20:2c:63:31:e8:73:e1:87:17:9a:cb: 7d:af:b6:2c:5f:64:7d:1e:59:ab:33:d9:65:e5:26: 15:3c:23:b8:37:d1:b4:c4:86:01:bb:be:34:e6:2f: cd:3d:eb:d6:1e:6e:b5:90:15:b4:5e:df:0b:89:59: e3:ed:7c:bd:05:c2:d0:14:72:b3:50:97:9c:6a:de: 04:58:a3:c9:e1:4e:dc:b2:b4:83:af:a2:36:6f:77: 48:b9:7f:da:30:85:a2:d3:de:2d:76:c9:5e:d4:59: 4b:6a:84:10:a3:4f:00:10:6d:1c:dd:36:ac:89:ca: 72:e2:c5:3f:7d:5c:87:d1:3d:fa:1d:05:7e:b5:15: 47:61:f6:48:0f:6b:e0:41:38:c5:2d:f7:06:72:37: f0:69:91:8e:3d:f8:7f:5f:7b:ad:ea:74:7d:54:4b: cf:70:08:3b:bf:70:ce:27:82:17:dc:3c:7d:b0:d3: 9a:dd:33:ab:da:99:18:24:fe:86:ca:fb:07:f7:d5: 0d:9c:24:c8:5a:3d:8d:ea:5c:c3:52:ba:2f:f0:18: a2:bf:05:84:1a:27:0a:56:31:ce:ef:c5:67:73:b0: e1:c2:31:74:9c:2b:4b:9c:90:17:cb:cb:70:63:41: 5a:99:84:03:de:8c:d3:c4:5e:bc:8b:d4:3d:73:de: ed:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6C:01:AF:C0:61:15:C7:4A:31:C6:24:9A:0C:89:32:41:54:9F:18 X509v3 Authority Key Identifier: keyid:1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:af:bc:7b:90:c9:66:4e:df:85:12:a4:1e:2a:67:a9:88:7a: c7:9f:a3:fe:a4:c9:bc:49:43:97:16:73:dd:36:e1:1c:6b:b7: 94:bd:7a:3e:ce:e5:22:b6:3e:b4:91:88:ed:9c:9a:69:7d:23: 49:66:a9:87:aa:84:e1:c8:fa:28:09:3d:52:36:b3:57:01:a5: fb:7f:74:d5:ad:d0:21:5e:5a:d7:c9:ec:d6:9a:9c:82:51:07: 7b:bb:43:71:b2:b9:f9:11:d2:40:4d:94:94:b1:d1:fb:be:f5: 33:26:63:77:fc:87:cc:1a:a6:23:b0:8c:1f:8e:30:2a:a5:67: 1d:ea:eb:0e:55:9b:88:85:a8:6a:45:52:51:09:53:26:cf:28: e4:a5:19:3a:f4:7c:52:3f:33:13:8f:ee:2d:fa:1e:1c:2f:1c: 80:42:a6:1a:80:75:80:ea:31:82:77:dc:49:e9:89:9c:e6:15: 54:e7:a8:83:e6:ae:87:d8:60:14:5a:ee:81:39:93:87:3c:62: 60:c8:f7:44:b5:ab:36:ca:68:f3:ae:67:76:b5:85:b7:6f:36: 09:de:70:0a:d4:b1:df:26:8c:6e:08:11:e7:2e:4e:27:25:5c: 01:1a:a0:73:a6:3b:cd:29:f0:68:dd:d0:a3:e9:53:0b:88:ac: 78:b7:54:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMjIxMTAvBgNVBAUTKDFGNUFDNTA2QjAxMTMwQzgyRTVFNDczMTYwM0JBMjY0 Q0VEODQ4NjYwHhcNMjUxMjA0MjExOTU5WhcNMjUxMjExMjExOTU5WjAYMRYwFAYD VQQDEw02OTMxZmFmZi1iNDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDTAICxjMehz4YcXmst9r7YsX2R9HlmrM9ll5SYVPCO4N9G0xIYBu7405i/N PevWHm61kBW0Xt8LiVnj7Xy9BcLQFHKzUJecat4EWKPJ4U7csrSDr6I2b3dIuX/a MIWi094tdsle1FlLaoQQo08AEG0c3Tasicpy4sU/fVyH0T36HQV+tRVHYfZID2vg QTjFLfcGcjfwaZGOPfh/X3ut6nR9VEvPcAg7v3DOJ4IX3Dx9sNOa3TOr2pkYJP6G yvsH99UNnCTIWj2N6lzDUrov8BiivwWEGicKVjHO78Vnc7DhwjF0nCtLnJAXy8tw Y0FamYQD3ozTxF68i9Q9c97t0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtsAa/A YRXHSjHGJJoMiTJBVJ8YMB8GA1UdIwQYMBaAFB9axQawETDILl5HMWA7omTO2Ehm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIyMi9DM0JDNzVGNEEx OTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1NZ3VYa2N4WUR1aVpNN1lT R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gxckZCckFSTU1ndVhrY3hZRHVpWk03WVNHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIyMi9DM0JDNzVGNEExOTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1N Z3VYa2N4WUR1aVpNN1lTR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZr7x7kMlmTt+FEqQeKmepiHrHn6P+pMm8SUOXFnPdNuEca7eUvXo+ zuUitj60kYjtnJppfSNJZqmHqoThyPooCT1SNrNXAaX7f3TVrdAhXlrXyezWmpyC UQd7u0Nxsrn5EdJATZSUsdH7vvUzJmN3/IfMGqYjsIwfjjAqpWcd6usOVZuIhahq RVJRCVMmzyjkpRk69HxSPzMTj+4t+h4cLxyAQqYagHWA6jGCd9xJ6Ymc5hVU56iD 5q6H2GAUWu6BOZOHPGJgyPdEtas2ymjzrmd2tYW3bzYJ3nAK1LHfJoxuCBHnLk4n JVwBGqBzpjvNKfBo3dCj6VMLiKx4t1TE -----END CERTIFICATE-----Generated at Sat Dec 6 21:27:43 2025 by rpki-client