This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft File: Hv520ajcbNAkyzz0B5Cl8UosITg.mft (raw, json) Hash identifier: 1NvJwrGysjb1P/FRxlcnq/bfHAVALSXwaL2OEyWSYlk= Subject key identifier: D6:83:B4:CB:7C:59:73:25:33:D2:CB:71:C8:00:69:8C:2A:C2:27:4C Authority key identifier: 1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38 Certificate issuer: /CN=A91DB7B3/serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138 Certificate serial: 0517 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft Manifest number: 0512 Signing time: Thu 18 Dec 2025 22:56:26 +0000 Manifest this update: Thu 18 Dec 2025 22:56:25 +0000 Manifest next update: Thu 25 Dec 2025 22:56:25 +0000 Files and hashes: 1: Hv520ajcbNAkyzz0B5Cl8UosITg.crl (hash: HM6eXI9O92vxqFJUt+JZ6a1zWO5YulN5qlmCQjUGXZk=) 2: E52DE77630B611EC981BBF1CC4F9AE02.roa (hash: mphoj0oAxZzkXNiDjzgy+jQGtIB0RRer8k5eq/mlzuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1303 (0x517) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB7B3, serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138 Validity Not Before: Dec 18 22:56:25 2025 GMT Not After : Dec 25 22:56:25 2025 GMT Subject: CN=69448699-fec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:94:f8:ff:d4:19:a5:96:c9:f6:72:53:ac:d5: 32:0b:43:87:f4:d2:dc:df:d0:2f:af:27:e1:57:78: d7:c4:76:c5:d0:86:1f:ff:51:9b:47:8d:cc:93:3a: 26:1b:ca:54:7b:c6:c9:d5:19:a7:a2:4b:2a:53:4a: d6:47:da:df:a8:fa:fc:1f:42:55:91:f0:1f:71:2b: cf:85:7a:c9:55:d4:ce:83:d0:60:61:66:c2:a0:8d: bf:66:81:88:f6:03:54:64:e7:60:a3:f2:1a:a2:09: 5d:f7:14:89:60:4d:2d:e5:40:5a:2b:51:8b:73:30: 6a:14:b5:f9:22:b9:66:30:25:e6:c0:1b:f4:64:28: 3c:29:2c:48:f1:d4:90:49:7a:d0:59:1f:f0:c4:26: 1c:82:c8:41:43:84:ac:fa:bc:5e:4b:09:9e:b2:06: 1a:6e:cd:99:eb:ca:63:47:7e:bc:b9:7e:ba:38:4c: cd:69:ac:2b:bf:c8:8b:82:22:fc:cb:69:99:12:45: d3:f0:18:0f:e2:4c:1e:8a:2b:d7:b0:cb:ce:21:bf: ba:c0:a9:e7:9d:96:34:a1:b7:c1:71:09:73:e8:3c: dc:cf:d0:18:8c:62:63:dd:85:c9:b1:9d:eb:76:19: 64:91:76:e6:e1:cc:b5:6e:03:0c:fe:08:99:ee:f3: e0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:83:B4:CB:7C:59:73:25:33:D2:CB:71:C8:00:69:8C:2A:C2:27:4C X509v3 Authority Key Identifier: keyid:1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e0:cb:11:4c:5d:47:bf:57:03:1d:74:90:b9:f0:d2:98:10: 79:1e:08:85:ef:90:54:50:81:d3:aa:c9:66:10:f4:d4:79:41: 15:5c:bb:67:4a:1a:07:2b:24:f8:7f:d7:ed:57:7a:88:2f:a3: 7b:54:fa:0d:19:3c:4a:30:1e:c4:c7:72:48:93:8e:b1:a8:e1: e5:a1:fb:44:8a:8e:67:f6:2c:80:a5:98:4d:e1:80:a5:9d:55: ca:bb:79:18:6a:fb:7d:84:39:d1:b4:dc:45:90:23:46:38:fd: b7:5e:53:a0:11:c1:99:97:ed:14:3f:f3:cc:4e:e9:67:49:64: 14:48:bf:14:64:0f:b4:38:9c:f7:bc:dc:bc:f9:80:a3:28:53: 79:09:45:60:ed:95:92:6f:56:9b:2c:74:f6:d7:3d:4a:ba:3e: 31:63:53:69:8e:4e:c2:13:80:25:46:8c:12:b6:c1:3a:b6:00: c2:e6:aa:b0:dd:4f:78:e3:a6:ce:f1:e7:60:f7:e9:17:5e:89: ad:c9:e2:15:38:de:73:75:9c:83:a9:9b:bf:f9:84:9b:0a:1a: a3:81:90:63:3f:74:14:f8:7c:4e:43:1d:b5:01:0f:a2:9b:fb: 92:66:6b:e5:23:2f:fa:d2:57:a1:43:b8:c7:b4:bf:86:23:25: 78:a6:9a:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI3QjMxMTAvBgNVBAUTKDFFRkU3NkQxQThEQzZDRDAyNENCM0NGNDA3OTBBNUYx NEEyQzIxMzgwHhcNMjUxMjE4MjI1NjI1WhcNMjUxMjI1MjI1NjI1WjAYMRYwFAYD VQQDDA02OTQ0ODY5OS1mZWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpT4/9QZpZbJ9nJTrNUyC0OH9NLc39AvryfhV3jXxHbF0IYf/1GbR43Mkzom G8pUe8bJ1RmnoksqU0rWR9rfqPr8H0JVkfAfcSvPhXrJVdTOg9BgYWbCoI2/ZoGI 9gNUZOdgo/Iaogld9xSJYE0t5UBaK1GLczBqFLX5IrlmMCXmwBv0ZCg8KSxI8dSQ SXrQWR/wxCYcgshBQ4Ss+rxeSwmesgYabs2Z68pjR368uX66OEzNaawrv8iLgiL8 y2mZEkXT8BgP4kweiivXsMvOIb+6wKnnnZY0obfBcQlz6Dzcz9AYjGJj3YXJsZ3r dhlkkXbm4cy1bgMM/giZ7vPgGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaDtMt8 WXMlM9LLccgAaYwqwidMMB8GA1UdIwQYMBaAFB7+dtGo3GzQJMs89AeQpfFKLCE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjdCMy8yRkQ4MTVFQzMw QjQxMUVDODA2MDkyNzVDNEY5QUUwMi9IdjUyMGFqY2JOQWt5enowQjVDbDhVb3NJ VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2NTIwYWpjYk5Ba3l6ejBCNUNsOFVvc0lUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjdCMy8yRkQ4MTVFQzMwQjQxMUVDODA2MDkyNzVDNEY5QUUwMi9IdjUyMGFqY2JO QWt5enowQjVDbDhVb3NJVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL4MsRTF1Hv1cDHXSQufDSmBB5HgiF75BUUIHTqslmEPTUeUEVXLtn ShoHKyT4f9ftV3qIL6N7VPoNGTxKMB7Ex3JIk46xqOHloftEio5n9iyApZhN4YCl nVXKu3kYavt9hDnRtNxFkCNGOP23XlOgEcGZl+0UP/PMTulnSWQUSL8UZA+0OJz3 vNy8+YCjKFN5CUVg7ZWSb1abLHT21z1Kuj4xY1Npjk7CE4AlRowStsE6tgDC5qqw 3U9446bO8edg9+kXXomtyeIVON5zdZyDqZu/+YSbChqjgZBjP3QU+HxOQx21AQ+i m/uSZmvlIy/60lehQ7jHtL+GIyV4ppp8 -----END CERTIFICATE-----Generated at Sat Dec 20 18:57:07 2025 by rpki-client