This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft File: Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft (raw, json) Hash identifier: k++0rM97MnWXJrVsJSaS/jZrM2C9fdibUy4hXV/l7hM= Subject key identifier: FD:E3:02:81:A4:D5:0A:B5:44:79:42:8A:A5:26:3B:6E:22:4F:0B:22 Authority key identifier: 1E:7E:0D:89:46:BC:48:D0:75:4B:03:E9:87:2A:D3:88:0C:54:E4:BE Certificate issuer: /CN=A91E3C9A/serialNumber=1E7E0D8946BC48D0754B03E9872AD3880C54E4BE Certificate serial: 08B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hn4NiUa8SNB1SwPphyrTiAxU5L4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft Manifest number: 08AC Signing time: Thu 04 Dec 2025 19:38:41 +0000 Manifest this update: Thu 04 Dec 2025 19:38:40 +0000 Manifest next update: Thu 11 Dec 2025 19:38:40 +0000 Files and hashes: 1: Hn4NiUa8SNB1SwPphyrTiAxU5L4.crl (hash: BniVZJtlOIhnlWBps0jmHWpWAQeQGKwJm6dcXbbM/SY=) 2: 3A5B01A0CA8F11EAA35BF958C4F9AE02.roa (hash: 1N0QMhN8bev3U7bduyRkYXLSMRn8SE8/x15vjryS7dU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.crl rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hn4NiUa8SNB1SwPphyrTiAxU5L4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2226 (0x8b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C9A, serialNumber=1E7E0D8946BC48D0754B03E9872AD3880C54E4BE Validity Not Before: Dec 4 19:38:40 2025 GMT Not After : Dec 11 19:38:40 2025 GMT Subject: CN=6931e340-0ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:ca:a6:74:44:0d:94:b2:fc:95:94:8d:80: 8d:d3:e0:f2:bf:08:8e:bf:12:72:d0:09:d0:20:66: ee:00:52:8d:e6:ff:69:82:11:34:96:2b:ce:f7:a2: bf:1b:e2:6c:3c:fe:b5:48:9d:91:46:22:3e:16:af: 22:19:ff:6d:b6:1f:3a:b9:26:75:46:f2:9b:b1:2c: b3:4e:8e:3c:71:3c:2c:3c:fd:4d:ea:89:e4:4e:dc: 6d:87:3a:04:88:79:7f:af:c5:6f:a0:23:16:d3:03: 83:59:eb:18:b0:ae:21:26:c2:03:90:f8:0c:d0:78: 95:c7:92:69:28:41:6b:2b:57:ad:d1:d6:1f:c6:f3: 28:e2:e6:3a:21:c4:80:d9:0d:9e:61:52:62:b3:8f: 85:78:2d:4a:8e:92:c7:96:89:4f:f0:d1:85:55:d8: d9:17:4f:2d:95:e0:60:a0:5a:cd:c3:84:35:bb:7e: b1:1e:01:69:7f:14:12:e0:13:ef:1c:62:de:d3:fa: 17:d5:3d:4f:3d:79:d2:2f:ca:8c:83:cf:75:8f:98: d5:17:4c:5f:cd:6e:d0:1e:9b:17:a0:f8:18:1a:b4: 48:e3:db:b6:f4:8d:9a:59:9e:c5:02:06:ee:5c:27: 00:e2:c4:a2:e4:12:08:cb:0b:a1:f0:85:db:50:24: 46:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E3:02:81:A4:D5:0A:B5:44:79:42:8A:A5:26:3B:6E:22:4F:0B:22 X509v3 Authority Key Identifier: keyid:1E:7E:0D:89:46:BC:48:D0:75:4B:03:E9:87:2A:D3:88:0C:54:E4:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hn4NiUa8SNB1SwPphyrTiAxU5L4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:41:77:a6:e6:7d:1c:d7:8a:e0:5c:b9:73:47:ab:ec:e2:68: e3:29:ce:63:65:f6:80:49:74:c8:f8:43:b5:5d:7a:f9:12:93: 82:9d:fe:cf:78:43:e1:a8:f5:77:14:5f:b7:c2:6a:94:a1:ed: 52:22:21:c3:f6:c6:2c:ae:6f:90:45:08:6e:a0:ba:e1:ed:47: 5a:01:0f:1c:1a:42:7e:90:97:5c:3b:61:8a:45:c3:e4:15:87: 4c:11:b0:db:12:de:24:e6:d0:88:07:18:2b:39:43:cc:a3:7f: 3e:c9:31:f9:67:08:3d:ad:7f:2c:ba:e4:33:69:4a:3d:47:67: fa:09:72:a1:75:5e:ef:3b:d1:ec:88:8a:e2:46:78:5c:8a:8f: 8d:c1:5d:19:ef:3a:d0:5c:35:eb:13:66:e3:e6:94:ec:82:7c: e1:7f:01:79:c2:95:9d:c9:c7:e9:a1:3b:23:4c:43:a4:04:88: 7c:98:58:c0:b3:c3:bb:47:df:b5:25:b6:34:3c:af:82:5d:f6: 6a:1b:c4:f9:1a:1b:84:53:95:40:5e:ca:52:f2:6a:4b:1a:7a: b0:a4:2f:92:24:79:ff:72:04:81:2a:3a:7a:64:95:4d:27:a9: 48:d3:66:23:59:94:3b:09:93:b2:20:6a:eb:aa:40:b4:66:8a: 0c:9d:c9:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDOUExMTAvBgNVBAUTKDFFN0UwRDg5NDZCQzQ4RDA3NTRCMDNFOTg3MkFEMzg4 MEM1NEU0QkUwHhcNMjUxMjA0MTkzODQwWhcNMjUxMjExMTkzODQwWjAYMRYwFAYD VQQDEw02OTMxZTM0MC0wZWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAum3KpnREDZSy/JWUjYCN0+DyvwiOvxJy0AnQIGbuAFKN5v9pghE0livO96K/ G+JsPP61SJ2RRiI+Fq8iGf9tth86uSZ1RvKbsSyzTo48cTwsPP1N6onkTtxthzoE iHl/r8VvoCMW0wODWesYsK4hJsIDkPgM0HiVx5JpKEFrK1et0dYfxvMo4uY6IcSA 2Q2eYVJis4+FeC1KjpLHlolP8NGFVdjZF08tleBgoFrNw4Q1u36xHgFpfxQS4BPv HGLe0/oX1T1PPXnSL8qMg891j5jVF0xfzW7QHpsXoPgYGrRI49u29I2aWZ7FAgbu XCcA4sSi5BIIywuh8IXbUCRGIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3jAoGk 1Qq1RHlCiqUmO24iTwsiMB8GA1UdIwQYMBaAFB5+DYlGvEjQdUsD6Ycq04gMVOS+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M5QS9BMUQ2MUQzQUNB OEQxMUVBQkU1QkI2NTZDNEY5QUUwMi9IbjROaVVhOFNOQjFTd1BwaHlyVGlBeFU1 TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0huNE5pVWE4U05CMVN3UHBoeXJUaUF4VTVMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M5QS9BMUQ2MUQzQUNBOEQxMUVBQkU1QkI2NTZDNEY5QUUwMi9IbjROaVVhOFNO QjFTd1BwaHlyVGlBeFU1TDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqQXem5n0c14rgXLlzR6vs4mjjKc5jZfaASXTI+EO1XXr5EpOCnf7P eEPhqPV3FF+3wmqUoe1SIiHD9sYsrm+QRQhuoLrh7UdaAQ8cGkJ+kJdcO2GKRcPk FYdMEbDbEt4k5tCIBxgrOUPMo38+yTH5Zwg9rX8suuQzaUo9R2f6CXKhdV7vO9Hs iIriRnhcio+NwV0Z7zrQXDXrE2bj5pTsgnzhfwF5wpWdycfpoTsjTEOkBIh8mFjA s8O7R9+1JbY0PK+CXfZqG8T5GhuEU5VAXspS8mpLGnqwpC+SJHn/cgSBKjp6ZJVN J6lI02YjWZQ7CZOyIGrrqkC0ZooMncm3 -----END CERTIFICATE-----Generated at Sat Dec 6 18:08:04 2025 by rpki-client