This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft File: hQh9CO2zN-4B6xruuBLL7jStjmM.mft (raw, json) Hash identifier: b3yGGZqox9E5G/nLt2A3OXoTAbrX3nP+eEJHShIpdnE= Subject key identifier: FC:BA:4F:A2:B3:77:CE:7D:BF:88:EE:C3:AB:BC:0A:D8:D6:EE:A7:06 Authority key identifier: 85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63 Certificate issuer: /CN=A91DE01E/serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft Manifest number: 0E Signing time: Fri 05 Dec 2025 05:47:00 +0000 Manifest this update: Fri 05 Dec 2025 05:46:59 +0000 Manifest next update: Fri 12 Dec 2025 05:46:59 +0000 Files and hashes: 1: hQh9CO2zN-4B6xruuBLL7jStjmM.crl (hash: fvcScDZFgRErllrw5I+Y6vB8LUF1zQnX2Vu9VpQwMC8=) 2: F7DB315EBEC811F0A266E40FC4F9AE02.roa (hash: 2X/xAt2NpQgJSrpIK+jQKjbm6p9J7Q5z+jWa7ZqFy0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE01E, serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63 Validity Not Before: Dec 5 05:46:59 2025 GMT Not After : Dec 12 05:46:59 2025 GMT Subject: CN=693271d3-fb3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f3:f5:45:df:f5:73:11:57:7d:ae:56:2d:cc: 70:35:20:fc:5e:1e:21:84:01:4c:dc:11:cd:ee:96: 3f:91:fb:89:6b:a8:6c:a5:f4:54:2e:7f:ec:6e:bc: 68:50:fc:4b:86:7f:fc:92:4d:e4:ca:1c:89:4a:f6: 81:99:91:94:b4:9a:e4:88:d7:3e:98:74:38:ce:ad: ef:38:ff:10:dd:ab:15:70:af:5e:16:46:20:67:1d: 53:a3:b7:30:bf:d9:d9:7d:66:c7:f0:a1:9d:2a:8e: 15:18:be:88:cf:d7:ed:08:2e:fb:29:01:09:f8:88: fc:9f:a3:a8:19:06:a3:a9:4d:15:1c:bd:4c:0f:b7: 03:17:d3:52:95:ce:ff:5b:37:4d:c4:83:de:fc:20: 45:04:a8:eb:2d:e6:76:2b:e7:87:95:f2:f4:46:ef: fd:66:03:ac:8e:7c:85:1e:07:ee:35:44:3f:e1:a0: d5:8a:55:e3:9e:9c:76:c4:39:34:19:b9:19:69:8e: 72:d3:d8:dc:90:d4:74:a5:18:15:b5:87:f7:fb:67: 54:d6:97:cc:81:75:fe:f8:29:59:b7:54:59:a6:e0: 13:37:4e:67:34:8e:6a:bd:68:93:f2:fe:24:36:c7: 66:98:2e:2b:74:ea:14:9e:04:f2:e2:22:a7:fb:ab: 6f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BA:4F:A2:B3:77:CE:7D:BF:88:EE:C3:AB:BC:0A:D8:D6:EE:A7:06 X509v3 Authority Key Identifier: keyid:85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:0a:a3:d9:62:2f:95:40:ec:55:f2:8c:01:3d:aa:cd:c3:3b: 3a:64:64:10:8a:b8:6d:e4:cb:ac:c5:6e:25:95:b0:3b:26:7c: 14:8d:10:94:64:88:4b:c6:f0:01:a4:bb:f9:86:ae:79:db:57: 47:0f:22:c3:d1:f3:df:fc:96:25:a7:24:a6:ae:17:d9:83:a6: 75:fe:32:50:97:94:43:1d:9c:2e:6a:6e:09:25:e2:eb:1c:42: 6b:c1:19:4d:7b:fd:dc:1d:88:91:8b:34:1a:ce:ff:8f:2a:ec: f5:7c:42:71:10:80:68:ab:5c:86:79:86:98:09:a8:1a:fa:ab: be:e4:6d:00:57:50:a1:eb:73:33:d7:cb:c0:43:58:a9:bf:d9: f0:12:eb:63:0b:ce:b4:10:fc:2a:7e:79:2e:f3:90:d5:81:ac: fe:6b:4b:d1:24:4f:ea:27:ce:5c:70:1f:cb:f0:c4:7d:d1:c9: 71:7f:90:38:3d:10:da:87:a8:e1:24:67:8d:12:a0:5c:3f:11: f1:76:f7:9f:6a:84:54:de:3a:23:87:7c:e3:43:c2:0a:fe:e4: 84:f7:38:2b:81:49:1f:db:d1:95:94:ca:ed:02:e7:35:24:28: af:87:7d:46:b9:ee:2b:fd:43:4a:c4:c9:db:df:7e:7c:1d:fc: c1:c7:df:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RTAxRTExMC8GA1UEBRMoODUwODdEMDhFREIzMzdFRTAxRUIxQUVFQjgxMkNCRUUz NEFEOEU2MzAeFw0yNTEyMDUwNTQ2NTlaFw0yNTEyMTIwNTQ2NTlaMBgxFjAUBgNV BAMTDTY5MzI3MWQzLWZiM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCj8/VF3/VzEVd9rlYtzHA1IPxeHiGEAUzcEc3ulj+R+4lrqGyl9FQuf+xuvGhQ /EuGf/ySTeTKHIlK9oGZkZS0muSI1z6YdDjOre84/xDdqxVwr14WRiBnHVOjtzC/ 2dl9ZsfwoZ0qjhUYvojP1+0ILvspAQn4iPyfo6gZBqOpTRUcvUwPtwMX01KVzv9b N03Eg978IEUEqOst5nYr54eV8vRG7/1mA6yOfIUeB+41RD/hoNWKVeOenHbEOTQZ uRlpjnLT2NyQ1HSlGBW1h/f7Z1TWl8yBdf74KVm3VFmm4BM3Tmc0jmq9aJPy/iQ2 x2aYLit06hSeBPLiIqf7q28XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/LpPorN3 zn2/iO7Dq7wK2NbupwYwHwYDVR0jBBgwFoAUhQh9CO2zN+4B6xruuBLL7jStjmMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMDFFLzE0NDdDMEQ4QkVD ODExRjA4MjczNjYwQkM0RjlBRTAyL2hRaDlDTzJ6Ti00QjZ4cnV1QkxMN2pTdGpt TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFFoOUNPMnpOLTRCNnhydXVCTEw3alN0am1NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF MDFFLzE0NDdDMEQ4QkVDODExRjA4MjczNjYwQkM0RjlBRTAyL2hRaDlDTzJ6Ti00 QjZ4cnV1QkxMN2pTdGptTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKcKo9liL5VA7FXyjAE9qs3DOzpkZBCKuG3ky6zFbiWVsDsmfBSNEJRk iEvG8AGku/mGrnnbV0cPIsPR89/8liWnJKauF9mDpnX+MlCXlEMdnC5qbgkl4usc QmvBGU17/dwdiJGLNBrO/48q7PV8QnEQgGirXIZ5hpgJqBr6q77kbQBXUKHrczPX y8BDWKm/2fAS62MLzrQQ/Cp+eS7zkNWBrP5rS9EkT+onzlxwH8vwxH3RyXF/kDg9 ENqHqOEkZ40SoFw/EfF2959qhFTeOiOHfONDwgr+5IT3OCuBSR/b0ZWUyu0C5zUk KK+HfUa57iv9Q0rEydvffnwd/MHH3/U= -----END CERTIFICATE-----Generated at Sat Dec 6 15:50:10 2025 by rpki-client