This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft File: -H8wma149Ynd_kql85E3_7Mq_54.mft (raw, json) Hash identifier: oU1d+BA0vRhEFZ09Kf/YFAKosevapaMx69EsvBOsP64= Subject key identifier: C8:33:06:96:BC:07:FF:E3:DB:19:BF:B7:73:B0:79:A9:C1:0F:E7:E9 Authority key identifier: F8:7F:30:99:AD:78:F5:89:DD:FE:4A:A5:F3:91:37:FF:B3:2A:FF:9E Certificate issuer: /CN=A91F17B3/serialNumber=F87F3099AD78F589DDFE4AA5F39137FFB32AFF9E Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-H8wma149Ynd_kql85E3_7Mq_54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft Manifest number: 3B Signing time: Fri 05 Dec 2025 05:20:06 +0000 Manifest this update: Fri 05 Dec 2025 05:20:05 +0000 Manifest next update: Fri 12 Dec 2025 05:20:05 +0000 Files and hashes: 1: -H8wma149Ynd_kql85E3_7Mq_54.crl (hash: xXLSA+rli1Q2UKAyKQ/TamvrF0K+NG3ak3pxLrSvZJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.crl rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-H8wma149Ynd_kql85E3_7Mq_54.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17B3, serialNumber=F87F3099AD78F589DDFE4AA5F39137FFB32AFF9E Validity Not Before: Dec 5 05:20:05 2025 GMT Not After : Dec 12 05:20:05 2025 GMT Subject: CN=69326b86-89b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4e:1c:62:06:5f:71:b2:b9:c1:dc:51:e7:55: d0:c4:93:f7:ad:ae:78:7d:5a:40:f3:31:c0:a9:14: 0b:64:a6:3c:6c:f5:eb:d1:0f:16:27:e9:e4:cc:ad: de:4c:9c:80:3d:d1:70:49:b2:92:d0:47:45:5e:37: 78:9c:32:3a:7e:0d:a6:2c:ac:f9:1b:e8:93:78:80: bd:26:c6:4b:ac:28:9e:f9:8a:5b:1e:92:3d:df:f5: 3b:f9:86:9e:af:9d:30:7d:59:b6:69:ac:95:33:b0: 51:48:73:8b:c3:c5:38:ef:72:9f:03:d8:cc:17:ea: ed:8a:b1:5e:d6:1e:8b:ad:e5:df:60:cf:26:e7:db: ab:e8:6b:1c:58:06:d5:86:46:1b:63:cf:30:00:a9: c8:a1:17:07:93:85:e3:bf:50:63:1a:31:f1:bd:61: a3:66:0d:b9:fc:60:d6:71:3e:6c:88:1a:ff:f5:2e: a9:bf:01:12:6d:93:7f:7b:ff:da:73:2c:1e:d2:5d: ab:50:09:e2:54:c1:76:32:1a:6d:62:30:15:93:f5: 37:4b:3a:46:74:3c:1b:e3:0b:3d:f8:0c:8c:6a:e5: b5:64:f0:45:4d:df:3f:28:01:20:1b:75:fa:c7:4f: dc:95:bd:f6:62:0e:e7:af:4d:74:dd:c3:12:86:b8: 53:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:33:06:96:BC:07:FF:E3:DB:19:BF:B7:73:B0:79:A9:C1:0F:E7:E9 X509v3 Authority Key Identifier: keyid:F8:7F:30:99:AD:78:F5:89:DD:FE:4A:A5:F3:91:37:FF:B3:2A:FF:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-H8wma149Ynd_kql85E3_7Mq_54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:5e:2a:e9:6d:e7:aa:30:26:11:ad:aa:5f:b4:8d:09:2c:19: d8:0e:d9:b5:a4:75:ae:03:88:b4:e1:6d:f7:27:fc:0f:27:45: 19:12:d8:ba:a1:20:66:fd:77:b1:dc:88:bc:87:8e:4f:d5:37: 3c:43:27:a9:94:e4:3f:19:8a:7e:4c:74:3d:fe:81:a8:6a:22: 38:52:33:42:36:a5:f1:ae:61:a7:70:d6:40:a0:7d:69:3c:65: c3:b3:4a:fa:08:b4:b2:2b:79:d0:b6:27:77:b6:e4:51:94:54: d7:e4:a0:85:0b:87:0d:e2:18:d4:2f:a2:6d:96:e1:ca:8b:4b: bb:c2:34:d2:a3:95:f0:92:a8:7a:45:48:df:03:fe:17:9b:cb: 10:41:fc:03:5f:16:34:c7:db:fb:cb:7e:37:4d:ab:a2:f4:52: 66:9f:4f:70:0a:39:c7:81:bc:b1:83:2c:df:5b:0a:e5:12:8d: 42:dd:a6:85:a5:e0:64:6f:7f:19:c6:e7:18:19:81:f1:f5:ef: 7d:dd:68:36:e2:83:9e:5b:b0:41:5a:da:8e:d1:70:cc:14:76: b9:52:f7:50:bb:21:a4:58:1e:ef:be:84:5f:7e:24:ee:2a:16: ac:ad:56:a4:34:cd:2b:42:08:3a:b1:40:a4:9f:e4:fd:5a:0f: 22:48:ad:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTdCMzExMC8GA1UEBRMoRjg3RjMwOTlBRDc4RjU4OURERkU0QUE1RjM5MTM3RkZC MzJBRkY5RTAeFw0yNTEyMDUwNTIwMDVaFw0yNTEyMTIwNTIwMDVaMBgxFjAUBgNV BAMTDTY5MzI2Yjg2LTg5YjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHThxiBl9xsrnB3FHnVdDEk/etrnh9WkDzMcCpFAtkpjxs9evRDxYn6eTMrd5M nIA90XBJspLQR0VeN3icMjp+DaYsrPkb6JN4gL0mxkusKJ75ilsekj3f9Tv5hp6v nTB9WbZprJUzsFFIc4vDxTjvcp8D2MwX6u2KsV7WHout5d9gzybn26voaxxYBtWG RhtjzzAAqcihFweTheO/UGMaMfG9YaNmDbn8YNZxPmyIGv/1Lqm/ARJtk397/9pz LB7SXatQCeJUwXYyGm1iMBWT9TdLOkZ0PBvjCz34DIxq5bVk8EVN3z8oASAbdfrH T9yVvfZiDuevTXTdwxKGuFNBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyDMGlrwH /+PbGb+3c7B5qcEP5+kwHwYDVR0jBBgwFoAU+H8wma149Ynd/kql85E3/7Mq/54w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxN0IzLzVFNTA5NUM4NzlD RDExRjBBOUI5MDMyMUM0RjlBRTAyLy1IOHdtYTE0OVluZF9rcWw4NUUzXzdNcV81 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLUg4d21hMTQ5WW5kX2txbDg1RTNfN01xXzU0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx N0IzLzVFNTA5NUM4NzlDRDExRjBBOUI5MDMyMUM0RjlBRTAyLy1IOHdtYTE0OVlu ZF9rcWw4NUUzXzdNcV81NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKVeKult56owJhGtql+0jQksGdgO2bWkda4DiLThbfcn/A8nRRkS2Lqh IGb9d7HciLyHjk/VNzxDJ6mU5D8Zin5MdD3+gahqIjhSM0I2pfGuYadw1kCgfWk8 ZcOzSvoItLIredC2J3e25FGUVNfkoIULhw3iGNQvom2W4cqLS7vCNNKjlfCSqHpF SN8D/hebyxBB/ANfFjTH2/vLfjdNq6L0UmafT3AKOceBvLGDLN9bCuUSjULdpoWl 4GRvfxnG5xgZgfH1733daDbig55bsEFa2o7RcMwUdrlS91C7IaRYHu++hF9+JO4q FqytVqQ0zStCCDqxQKSf5P1aDyJIrek= -----END CERTIFICATE-----Generated at Sun Dec 7 03:43:22 2025 by rpki-client