This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft File: HmHgACzkS79ZVTyASgrJEub-vzs.mft (raw, json) Hash identifier: /c3g9pkoCPPb80d0bFMvK0AaaTZt8X+5en2MO24nO0s= Subject key identifier: 72:FD:B4:EE:CC:E4:65:C2:49:3F:BF:74:BD:B7:A4:87:71:1E:03:A0 Authority key identifier: 1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B Certificate issuer: /CN=A91EACB9/serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B Certificate serial: 02AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft Manifest number: 02A3 Signing time: Sun 21 Dec 2025 00:42:54 +0000 Manifest this update: Sun 21 Dec 2025 00:42:54 +0000 Manifest next update: Sun 28 Dec 2025 00:42:54 +0000 Files and hashes: 1: HmHgACzkS79ZVTyASgrJEub-vzs.crl (hash: AUhK5BfF6yWYSIPtg1nJ89DQqqKcujVmUVQolIT+Rko=) 2: 654307DC26CC11EDB395A078C4F9AE02.roa (hash: MHZ2vGsbQCY20I3lKFrbGLCD8ljQ+7RHRVNSOxCSytY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 682 (0x2aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EACB9, serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B Validity Not Before: Dec 21 00:42:54 2025 GMT Not After : Dec 28 00:42:54 2025 GMT Subject: CN=6947428e-2a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:40:a4:66:f5:a1:7c:7c:2a:8a:c5:9e:06:62: 6a:fd:15:97:00:2f:f9:ef:47:bd:14:65:fd:32:90: ea:56:5d:52:aa:0b:2d:ac:9d:ef:f2:8c:74:17:7d: 6e:84:53:cc:b8:9d:0d:90:f2:c7:25:27:ea:af:63: 9c:39:ee:37:be:6f:82:7e:09:f7:79:70:4e:92:2d: e8:85:5e:e6:ce:42:4c:15:11:ee:2b:53:f9:83:1b: 14:29:ea:98:7d:5c:77:dd:cf:30:aa:f1:dc:56:27: fb:8c:17:a4:bc:d4:7e:72:35:7c:c0:e6:dc:97:4e: 8a:70:28:1a:54:35:db:f2:35:dc:3c:4c:bf:ca:d4: 9c:2e:0a:ba:9e:e8:bb:a4:c8:34:f8:e2:28:00:c1: f3:6e:4b:05:40:ce:ec:89:ae:e7:69:b4:5a:cf:d5: b2:c3:9a:76:13:ec:0e:f0:65:de:03:66:ca:5a:27: 32:b9:5a:98:b1:d4:5a:df:f1:3b:e0:e6:ca:5a:c1: 85:31:08:78:76:a0:37:7a:05:1b:bf:41:be:33:9d: d6:23:f3:2e:27:a4:74:4b:4a:06:4c:b0:37:02:c5: 78:b0:7f:0c:3e:08:5d:92:fd:f3:cd:b4:25:70:25: aa:6e:79:3d:5e:51:57:ad:69:de:30:95:b6:7c:92: 14:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FD:B4:EE:CC:E4:65:C2:49:3F:BF:74:BD:B7:A4:87:71:1E:03:A0 X509v3 Authority Key Identifier: keyid:1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:a1:22:0c:be:b4:88:cc:17:89:69:8f:95:c6:80:9d:58:c8: 57:b3:f7:e8:49:91:77:f7:43:ae:c9:4a:da:7d:fb:ff:9a:af: 14:e8:1e:42:fb:46:41:1c:0d:ad:f4:f0:19:d7:07:e6:ff:f1: 83:09:01:52:9c:70:bc:92:af:60:a1:cf:03:20:74:8b:b9:d9: d2:ca:70:ef:ce:51:91:c2:dc:bf:fc:b9:a7:02:b4:66:00:f4: 32:ea:64:11:e5:f1:fb:bf:14:da:40:03:bd:c6:2e:b0:71:2a: 1e:e1:3f:c3:d9:ee:68:97:40:8a:fd:fb:06:1c:e4:20:80:87: e1:ee:68:32:8e:82:55:50:4f:3c:82:95:ec:c4:9f:72:62:56: 7d:58:0c:5f:5c:3a:fb:a7:9b:d4:68:da:40:5c:ac:38:f6:d1: bc:e1:6e:66:8d:09:67:b4:25:6e:52:1c:c0:1e:80:cd:00:23: 9c:2a:cc:94:6f:c3:35:29:04:76:db:7d:10:0d:40:e4:72:57: 8f:02:9d:da:93:87:40:60:2a:98:34:55:7b:9b:05:f6:02:8b: 96:55:b5:bf:ba:9f:ec:69:02:90:3b:84:ed:76:aa:44:79:53: 90:9f:a7:92:81:34:3b:0f:fe:de:6b:e8:0a:18:e3:67:42:2d: b7:98:aa:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFDQjkxMTAvBgNVBAUTKDFFNjFFMDAwMkNFNDRCQkY1OTU1M0M4MDRBMEFDOTEy RTZGRUJGM0IwHhcNMjUxMjIxMDA0MjU0WhcNMjUxMjI4MDA0MjU0WjAYMRYwFAYD VQQDDA02OTQ3NDI4ZS0yYTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kCkZvWhfHwqisWeBmJq/RWXAC/570e9FGX9MpDqVl1SqgstrJ3v8ox0F31u hFPMuJ0NkPLHJSfqr2OcOe43vm+Cfgn3eXBOki3ohV7mzkJMFRHuK1P5gxsUKeqY fVx33c8wqvHcVif7jBekvNR+cjV8wObcl06KcCgaVDXb8jXcPEy/ytScLgq6nui7 pMg0+OIoAMHzbksFQM7sia7nabRaz9Wyw5p2E+wO8GXeA2bKWicyuVqYsdRa3/E7 4ObKWsGFMQh4dqA3egUbv0G+M53WI/MuJ6R0S0oGTLA3AsV4sH8MPghdkv3zzbQl cCWqbnk9XlFXrWneMJW2fJIUfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHL9tO7M 5GXCST+/dL23pIdxHgOgMB8GA1UdIwQYMBaAFB5h4AAs5Eu/WVU8gEoKyRLm/r87 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUNCOS8wQzAwMjBFMDI2 OUMxMUVEQkIxNDUyNzdDNEY5QUUwMi9IbUhnQUN6a1M3OVpWVHlBU2dySkV1Yi12 enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htSGdBQ3prUzc5WlZUeUFTZ3JKRXViLXZ6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUNCOS8wQzAwMjBFMDI2OUMxMUVEQkIxNDUyNzdDNEY5QUUwMi9IbUhnQUN6a1M3 OVpWVHlBU2dySkV1Yi12enMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5oSIMvrSIzBeJaY+VxoCdWMhXs/foSZF390OuyUraffv/mq8U6B5C +0ZBHA2t9PAZ1wfm//GDCQFSnHC8kq9goc8DIHSLudnSynDvzlGRwty//LmnArRm APQy6mQR5fH7vxTaQAO9xi6wcSoe4T/D2e5ol0CK/fsGHOQggIfh7mgyjoJVUE88 gpXsxJ9yYlZ9WAxfXDr7p5vUaNpAXKw49tG84W5mjQlntCVuUhzAHoDNACOcKsyU b8M1KQR2230QDUDkclePAp3ak4dAYCqYNFV7mwX2AouWVbW/up/saQKQO4TtdqpE eVOQn6eSgTQ7D/7ea+gKGONnQi23mKo2 -----END CERTIFICATE-----Generated at Mon Dec 22 11:07:25 2025 by rpki-client