This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft File: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft (raw, json) Hash identifier: uQhOOlbEZ34NKfMWUSVJuxdHklGwjqbhswJrKlKSdBY= Subject key identifier: F3:73:47:57:3F:A7:D0:68:B8:E9:05:A8:A5:55:1F:76:6A:2C:7B:09 Authority key identifier: 85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 Certificate issuer: /CN=A91E9EBA/serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft Manifest number: FA Signing time: Sun 07 Dec 2025 03:27:34 +0000 Manifest this update: Sun 07 Dec 2025 03:27:33 +0000 Manifest next update: Sun 14 Dec 2025 03:27:33 +0000 Files and hashes: 1: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl (hash: +SRAcl7AmxTYtoTUCWl2vrvaW1l+nc1LY5sNMiZILfc=) 2: 06F73C70ABD011F0977C9F10C4F9AE02.roa (hash: qVJeghg9xFTUN1CD6PkiZIjv0lu5fKKjik0h1AgrzM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EBA, serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Validity Not Before: Dec 7 03:27:33 2025 GMT Not After : Dec 14 03:27:33 2025 GMT Subject: CN=6934f425-28b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:93:77:1d:c1:88:09:fe:f0:d0:49:6d:98:c0: 1a:07:ed:6c:ce:23:05:fb:e9:d6:9d:cb:eb:18:f8: a8:eb:06:8b:7d:2b:b5:4b:47:8d:75:94:f5:0b:c6: 5c:9c:cd:d0:f1:ee:f2:1c:44:42:50:29:c5:56:5b: ad:26:33:ac:23:37:76:05:54:1c:46:86:a9:0c:42: a8:8d:4f:f3:5b:39:d2:3b:60:56:44:60:32:fa:52: e1:32:69:8b:16:98:a7:58:c1:03:6f:e5:fd:7c:60: 1a:bc:2b:7a:49:dd:68:9f:22:2f:88:6c:47:a0:f9: a2:97:bf:2d:c0:3e:7e:bd:4d:ea:8e:ca:5a:40:f7: 05:49:35:3c:c8:24:64:97:47:ba:06:ec:c9:4a:6f: 18:be:a1:b2:24:8c:24:90:d7:6a:e6:59:e4:b2:30: 9b:5a:4a:8d:cd:7b:94:8e:4c:12:c6:ad:3c:67:d7: d7:4c:e3:1a:78:94:1c:ab:cd:53:d1:dd:99:29:77: e1:bd:a8:4e:30:9f:0c:23:4c:0d:b4:f0:21:4a:62: ab:1d:93:28:01:01:42:04:d2:cf:a7:38:84:84:cd: d1:cd:f8:cb:d5:5b:16:ba:07:4a:46:fa:e9:ad:76: 17:ef:8b:07:8d:34:ab:a9:45:ea:f2:f0:e1:55:39: 6c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:73:47:57:3F:A7:D0:68:B8:E9:05:A8:A5:55:1F:76:6A:2C:7B:09 X509v3 Authority Key Identifier: keyid:85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:14:64:bb:3c:b3:62:e4:46:ab:58:51:81:d9:79:d5:36:ab: 6e:27:b8:90:fc:77:cb:fb:47:0b:d6:3d:fe:9e:7a:cd:84:b6: f4:69:bd:57:e9:ae:f0:bf:85:93:d8:de:13:6b:34:f9:0c:fc: 8b:f0:eb:16:a8:ba:7a:2b:39:b3:df:04:a2:ba:ea:e9:40:80: f1:b4:3c:6e:b5:75:d9:25:ac:81:80:73:bd:1b:fa:dd:8b:59: 21:be:ba:cc:6a:0c:9f:76:90:c6:78:a9:b9:29:a6:25:54:a1: 27:00:54:89:70:f7:42:f4:98:5d:4d:65:57:dc:33:28:0e:68: bd:12:a9:88:2c:0e:20:67:47:da:b0:d3:3a:70:40:bb:09:b9: aa:a5:ff:97:3e:06:47:4c:5b:68:6d:1c:61:83:36:bc:07:30: f1:da:7c:38:4a:2e:90:ab:31:71:04:64:b9:36:70:bc:f8:87: 94:b8:ff:d5:20:32:51:30:08:8f:4d:be:d9:db:c3:48:e7:ec: 32:87:6a:b4:c2:90:0f:d8:f8:c3:e1:a0:aa:c1:f1:08:a4:7e: 35:fc:d5:a8:97:66:06:84:61:3b:e4:50:3f:d2:03:0c:0f:6e: 2c:c8:2a:94:96:60:08:41:4d:4c:0d:70:ab:65:43:06:38:5b: 05:28:d8:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQkExMTAvBgNVBAUTKDg1QUU2MjE5Rjg2MjY5NDE0QkUxNzZCNzgyNUYxNkNE REQ0MjQyRDQwHhcNMjUxMjA3MDMyNzMzWhcNMjUxMjE0MDMyNzMzWjAYMRYwFAYD VQQDEw02OTM0ZjQyNS0yOGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ZN3HcGICf7w0EltmMAaB+1sziMF++nWncvrGPio6waLfSu1S0eNdZT1C8Zc nM3Q8e7yHERCUCnFVlutJjOsIzd2BVQcRoapDEKojU/zWznSO2BWRGAy+lLhMmmL FpinWMEDb+X9fGAavCt6Sd1onyIviGxHoPmil78twD5+vU3qjspaQPcFSTU8yCRk l0e6BuzJSm8YvqGyJIwkkNdq5lnksjCbWkqNzXuUjkwSxq08Z9fXTOMaeJQcq81T 0d2ZKXfhvahOMJ8MI0wNtPAhSmKrHZMoAQFCBNLPpziEhM3RzfjL1VsWugdKRvrp rXYX74sHjTSrqUXq8vDhVTlslQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNzR1c/ p9BouOkFqKVVH3ZqLHsJMB8GA1UdIwQYMBaAFIWuYhn4YmlBS+F2t4JfFs3dQkLU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVCQS9GQTMyMENEQTVB REMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFVRkw0WGEzZ2w4V3pkMUNR dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hhNWlHZmhpYVVGTDRYYTNnbDhXemQxQ1F0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUVCQS9GQTMyMENEQTVBREMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFV Rkw0WGEzZ2w4V3pkMUNRdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSFGS7PLNi5EarWFGB2XnVNqtuJ7iQ/HfL+0cL1j3+nnrNhLb0ab1X 6a7wv4WT2N4TazT5DPyL8OsWqLp6Kzmz3wSiuurpQIDxtDxutXXZJayBgHO9G/rd i1khvrrMagyfdpDGeKm5KaYlVKEnAFSJcPdC9JhdTWVX3DMoDmi9EqmILA4gZ0fa sNM6cEC7Cbmqpf+XPgZHTFtobRxhgza8BzDx2nw4Si6QqzFxBGS5NnC8+IeUuP/V IDJRMAiPTb7Z28NI5+wyh2q0wpAP2PjD4aCqwfEIpH41/NWol2YGhGE75FA/0gMM D24syCqUlmAIQU1MDXCrZUMGOFsFKNh5 -----END CERTIFICATE-----Generated at Sun Dec 7 04:30:35 2025 by rpki-client