This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft File: _hniRte_DjbyHipWt8mvtJ1Z1tQ.mft (raw, json) Hash identifier: s27ADV/DqaMD667/KykMzyWkVAVIGcvA6GZiyPFCXlQ= Subject key identifier: 38:D2:EC:F6:78:EC:D1:31:D3:63:12:F1:B0:68:15:12:0F:D8:E6:56 Authority key identifier: FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4 Certificate issuer: /CN=A91F30C0/serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4 Certificate serial: 048D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft Manifest number: 0489 Signing time: Thu 04 Dec 2025 22:35:16 +0000 Manifest this update: Thu 04 Dec 2025 22:35:16 +0000 Manifest next update: Thu 11 Dec 2025 22:35:16 +0000 Files and hashes: 1: _hniRte_DjbyHipWt8mvtJ1Z1tQ.crl (hash: 7G7okmnIwQu/+lJHiSvKJdogshyHQkYO74qTpMMI8XU=) 2: 5DB5AFEE635C11ECB7C65C23C4F9AE02.roa (hash: ZASmtlmvUHGE1HGhcQSQsz+Y4m88fTiUKIlWzdcPUk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1165 (0x48d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F30C0, serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4 Validity Not Before: Dec 4 22:35:16 2025 GMT Not After : Dec 11 22:35:16 2025 GMT Subject: CN=69320ca4-d622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fa:ca:8e:d5:39:49:0f:ae:d7:f5:9d:62:5c: cd:02:9e:2c:63:08:f6:8f:a7:d8:5d:08:98:82:a7: b7:49:6e:22:22:a5:5c:ac:21:d4:da:20:9a:8c:8d: 7d:97:3e:95:1f:91:0e:57:ff:32:a4:2e:e2:4b:2c: 2a:40:26:aa:42:8a:4e:2f:5d:6f:89:c8:26:1f:51: ae:48:a6:4e:c9:e6:67:b9:eb:9d:4d:92:c9:06:c0: 9d:44:bc:b9:b6:c9:05:f7:0f:4b:fd:ff:d2:25:77: 5e:3d:be:f5:bd:74:1c:6c:28:de:f8:8c:ac:34:ef: 77:17:24:3f:65:59:45:71:07:a1:17:f1:1e:3c:55: c8:0f:7e:0d:78:d3:63:dc:e3:48:a4:eb:32:03:33: 69:7e:8d:e4:1a:49:42:f2:5d:97:47:7b:96:52:06: 14:a3:b0:01:c3:b1:f3:a7:95:59:1b:f8:c1:8a:d9: 99:b3:4d:3a:3f:e4:27:05:74:c2:2b:ec:47:8c:46: 00:fe:1f:c6:e9:e2:76:db:16:40:1d:29:97:e6:ff: dd:47:b1:af:61:be:84:33:28:33:9c:7a:0f:4d:1e: 15:3f:6f:40:5e:a4:fc:be:d0:43:f9:b6:39:c3:4e: 48:7e:c8:8f:47:4d:f5:d6:2a:dc:2f:cd:7b:61:b4: 7e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D2:EC:F6:78:EC:D1:31:D3:63:12:F1:B0:68:15:12:0F:D8:E6:56 X509v3 Authority Key Identifier: keyid:FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:69:7b:8d:11:f8:b4:a2:45:c0:81:26:b0:8e:ca:0d:37:89: 44:89:46:ee:54:6a:70:e3:4c:e2:82:a2:4f:e9:1a:f6:01:86: df:2b:a3:cb:2e:d5:12:6d:bc:d1:97:52:c1:29:17:87:f2:86: c0:21:6b:87:f2:9a:fb:12:d2:a6:8b:74:6d:60:4f:8e:d9:c8: c2:0e:dd:07:23:df:75:a2:a9:4b:68:07:bc:7a:71:00:51:ab: 91:51:aa:d1:84:81:39:f4:af:46:63:da:42:05:58:fe:38:de: 15:65:b7:dc:b5:4d:b5:6f:e9:0f:28:2e:19:f5:99:b7:30:1e: cc:e9:57:39:0c:05:4d:a0:00:af:0b:55:80:59:08:b4:a8:c1: 9f:7c:aa:a1:03:e1:62:12:40:24:a1:62:88:89:64:8d:54:0a: 29:d0:60:ae:75:65:28:08:68:86:b6:13:4d:c0:3d:62:f8:9d: d3:8d:81:4f:be:74:fe:0b:e0:09:e1:11:9e:9e:6b:29:91:91: 3b:98:e5:c6:85:e7:26:58:1d:79:17:14:24:ac:37:c4:fd:cd: b6:85:f5:1b:24:27:93:16:94:78:73:2a:a8:69:49:16:16:89: 34:bc:db:e2:53:3c:45:07:39:ca:d8:1f:46:a8:85:7d:38:e1: 3b:bd:7d:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwQzAxMTAvBgNVBAUTKEZFMTlFMjQ2RDdCRjBFMzZGMjFFMkE1NkI3QzlBRkI0 OUQ1OUQ2RDQwHhcNMjUxMjA0MjIzNTE2WhcNMjUxMjExMjIzNTE2WjAYMRYwFAYD VQQDEw02OTMyMGNhNC1kNjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvrKjtU5SQ+u1/WdYlzNAp4sYwj2j6fYXQiYgqe3SW4iIqVcrCHU2iCajI19 lz6VH5EOV/8ypC7iSywqQCaqQopOL11vicgmH1GuSKZOyeZnueudTZLJBsCdRLy5 tskF9w9L/f/SJXdePb71vXQcbCje+IysNO93FyQ/ZVlFcQehF/EePFXID34NeNNj 3ONIpOsyAzNpfo3kGklC8l2XR3uWUgYUo7ABw7Hzp5VZG/jBitmZs006P+QnBXTC K+xHjEYA/h/G6eJ22xZAHSmX5v/dR7GvYb6EMygznHoPTR4VP29AXqT8vtBD+bY5 w05IfsiPR0311ircL817YbR+BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjS7PZ4 7NEx02MS8bBoFRIP2OZWMB8GA1UdIwQYMBaAFP4Z4kbXvw428h4qVrfJr7SdWdbU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzBDMC8zODdFODYzQzYz NTgxMUVDQjgyRTNCNENDNEY5QUUwMi9faG5pUnRlX0RqYnlIaXBXdDhtdnRKMVox dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19obmlSdGVfRGpieUhpcFd0OG12dEoxWjF0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzBDMC8zODdFODYzQzYzNTgxMUVDQjgyRTNCNENDNEY5QUUwMi9faG5pUnRlX0Rq YnlIaXBXdDhtdnRKMVoxdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApaXuNEfi0okXAgSawjsoNN4lEiUbuVGpw40zigqJP6Rr2AYbfK6PL LtUSbbzRl1LBKReH8obAIWuH8pr7EtKmi3RtYE+O2cjCDt0HI991oqlLaAe8enEA UauRUarRhIE59K9GY9pCBVj+ON4VZbfctU21b+kPKC4Z9Zm3MB7M6Vc5DAVNoACv C1WAWQi0qMGffKqhA+FiEkAkoWKIiWSNVAop0GCudWUoCGiGthNNwD1i+J3TjYFP vnT+C+AJ4RGenmspkZE7mOXGhecmWB15FxQkrDfE/c22hfUbJCeTFpR4cyqoaUkW Fok0vNviUzxFBznK2B9GqIV9OOE7vX3T -----END CERTIFICATE-----Generated at Sun Dec 7 00:02:08 2025 by rpki-client