This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft File: hpBNLQLbigWb7ZOPL46u88Qgb9A.mft (raw, json) Hash identifier: 2xqHQUx/lBDMziMDFv9HaU00YdhYImDL4RXD35LidNU= Subject key identifier: A1:9A:8E:1B:09:65:FC:EE:CB:E9:E1:49:F2:1B:CA:57:76:5C:0E:E9 Authority key identifier: 86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0 Certificate issuer: /CN=A91D4ACD/serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft Manifest number: E8 Signing time: Fri 05 Dec 2025 03:28:51 +0000 Manifest this update: Fri 05 Dec 2025 03:28:51 +0000 Manifest next update: Fri 12 Dec 2025 03:28:51 +0000 Files and hashes: 1: hpBNLQLbigWb7ZOPL46u88Qgb9A.crl (hash: D8fXLpGAHurSEcMaLt1KrZQlCAxbFHnI1EpKdkh7kXU=) 2: 388D7E38797D11EF8CA64711C4F9AE02.roa (hash: w4Rh9NpZ/IQ60xsdouCsCPn/eRzJ06RRF4GvfzZ5uwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.crl rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4ACD, serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0 Validity Not Before: Dec 5 03:28:51 2025 GMT Not After : Dec 12 03:28:51 2025 GMT Subject: CN=69325173-f350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ee:03:8b:df:5d:63:f4:70:e7:b3:71:c8:34: 6f:ae:94:b5:8c:f9:b3:c7:dd:ea:eb:58:58:19:45: c4:1f:9a:50:d2:83:e4:c2:af:e7:84:8b:35:d8:63: e0:f6:a8:7f:9a:74:fd:2e:10:b8:4c:23:d9:e4:a3: be:9e:13:95:93:99:c0:21:a2:07:7a:9b:0a:86:e1: ae:cb:af:f3:f7:28:ce:cc:2a:bb:84:78:ac:c9:4a: 4b:18:d7:32:10:3e:e9:44:ce:64:d5:f8:f6:45:77: 97:54:3a:92:90:bf:2e:af:9d:ca:c7:fa:a8:e9:12: 6f:32:82:8b:93:64:ff:4d:3e:a1:28:42:17:af:91: b4:f1:d2:d2:d1:a7:43:7b:4a:96:0d:33:95:b8:5f: 14:04:87:12:eb:e1:bb:96:d5:84:33:94:6a:49:c3: 65:7b:59:8e:a9:ab:2c:66:cb:b7:d5:54:e0:a2:e0: 73:d6:b1:c7:78:cd:fe:45:b7:84:c5:eb:6f:84:46: a1:98:14:0c:ab:0d:0d:96:98:7d:17:f4:90:47:70: 65:83:3c:4f:71:5a:de:51:60:a5:91:2d:a0:e1:e6: 79:ef:0f:59:21:b6:3d:0c:07:f6:48:1c:61:de:0c: de:0d:9b:32:bd:4c:4f:ef:94:28:a3:4d:b6:39:41: 16:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9A:8E:1B:09:65:FC:EE:CB:E9:E1:49:F2:1B:CA:57:76:5C:0E:E9 X509v3 Authority Key Identifier: keyid:86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:e9:c9:9b:fc:9c:98:98:70:82:54:16:68:43:9f:15:1a:79: 34:7b:9b:50:bd:1d:39:5f:4b:c9:fc:68:3e:8b:b4:2d:cc:53: 00:36:e0:f0:3f:5d:79:ca:d1:c3:b4:5b:7c:01:8d:fe:8b:ac: 91:f8:5d:f7:fb:ed:f7:54:9c:07:ad:8f:64:bd:11:53:6b:eb: 0e:ca:7b:81:e6:f8:78:18:40:09:4b:39:2a:09:e1:6d:a0:ef: d9:a2:68:24:12:eb:b7:88:49:dc:0f:75:3c:0e:4f:ed:3a:38: 34:95:83:7e:f7:e6:c3:74:46:52:b2:ab:18:f0:e7:c1:c3:96: 42:9f:78:e8:03:95:48:e8:f3:ed:05:66:8b:39:c0:8d:6a:1e: 41:b4:6d:66:84:f7:01:09:15:e7:1e:ee:27:0a:08:b1:8c:a6: 53:86:38:25:e4:ea:42:bb:cb:f7:ad:8f:29:d9:ab:4e:90:f4: 15:02:d5:74:a8:27:c2:fa:b9:3d:55:13:f9:69:f6:da:dd:0d: fb:6c:c8:8d:0d:96:74:0d:e8:1d:fc:99:fa:64:d5:bb:6e:dc: d1:15:a6:7f:f4:a6:3b:c7:d0:b9:60:ea:3c:b4:cf:7f:b1:3d: 9f:68:53:8e:3c:a0:28:d7:d5:64:b2:54:80:ea:e0:65:13:ec: d8:a1:cb:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRBQ0QxMTAvBgNVBAUTKDg2OTA0RDJEMDJEQjhBMDU5QkVEOTM4RjJGOEVBRUYz QzQyMDZGRDAwHhcNMjUxMjA1MDMyODUxWhcNMjUxMjEyMDMyODUxWjAYMRYwFAYD VQQDEw02OTMyNTE3My1mMzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAru4Di99dY/Rw57NxyDRvrpS1jPmzx93q61hYGUXEH5pQ0oPkwq/nhIs12GPg 9qh/mnT9LhC4TCPZ5KO+nhOVk5nAIaIHepsKhuGuy6/z9yjOzCq7hHisyUpLGNcy ED7pRM5k1fj2RXeXVDqSkL8ur53Kx/qo6RJvMoKLk2T/TT6hKEIXr5G08dLS0adD e0qWDTOVuF8UBIcS6+G7ltWEM5RqScNle1mOqassZsu31VTgouBz1rHHeM3+RbeE xetvhEahmBQMqw0Nlph9F/SQR3BlgzxPcVreUWClkS2g4eZ57w9ZIbY9DAf2SBxh 3gzeDZsyvUxP75Qoo022OUEWnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGajhsJ Zfzuy+nhSfIbyld2XA7pMB8GA1UdIwQYMBaAFIaQTS0C24oFm+2Tjy+OrvPEIG/Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEFDRC8xRjUzNTY5RTc1 NkUxMUVGOUNBNDZFNTFDNEY5QUUwMi9ocEJOTFFMYmlnV2I3Wk9QTDQ2dTg4UWdi OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hwQk5MUUxiaWdXYjdaT1BMNDZ1ODhRZ2I5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEFDRC8xRjUzNTY5RTc1NkUxMUVGOUNBNDZFNTFDNEY5QUUwMi9ocEJOTFFMYmln V2I3Wk9QTDQ2dTg4UWdiOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG6cmb/JyYmHCCVBZoQ58VGnk0e5tQvR05X0vJ/Gg+i7QtzFMANuDw P115ytHDtFt8AY3+i6yR+F33++33VJwHrY9kvRFTa+sOynuB5vh4GEAJSzkqCeFt oO/ZomgkEuu3iEncD3U8Dk/tOjg0lYN+9+bDdEZSsqsY8OfBw5ZCn3joA5VI6PPt BWaLOcCNah5BtG1mhPcBCRXnHu4nCgixjKZThjgl5OpCu8v3rY8p2atOkPQVAtV0 qCfC+rk9VRP5afba3Q37bMiNDZZ0Degd/Jn6ZNW7btzRFaZ/9KY7x9C5YOo8tM9/ sT2faFOOPKAo19VkslSA6uBlE+zYocto -----END CERTIFICATE-----Generated at Sun Dec 7 01:53:30 2025 by rpki-client