This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft File: hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft (raw, json) Hash identifier: K3y+sq37krMCmB+Kv/sImOJZqnsRzKFaA+tTyrFLUZA= Subject key identifier: AD:7F:A5:C1:09:A4:D4:5E:DA:9D:1E:34:AF:C7:3E:B6:D3:00:D9:AD Authority key identifier: 84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 Certificate issuer: /CN=A91F4091/serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft Manifest number: 011B Signing time: Fri 05 Dec 2025 02:50:13 +0000 Manifest this update: Fri 05 Dec 2025 02:50:12 +0000 Manifest next update: Fri 12 Dec 2025 02:50:12 +0000 Files and hashes: 1: hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl (hash: khU6STsH8D/dPbPxK6/X19ILw34xdMTCtPsiycpi9lc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4091, serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Validity Not Before: Dec 5 02:50:12 2025 GMT Not After : Dec 12 02:50:12 2025 GMT Subject: CN=69324864-bab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cc:d5:45:8b:95:fd:9d:16:38:5a:5f:d9:d5: a2:b8:47:55:6a:1f:5f:45:37:82:12:b3:de:c0:a4: 4d:ff:6a:a0:1b:f4:8e:96:aa:07:19:ee:b6:85:dd: 1d:79:05:9f:88:74:04:97:73:25:47:26:82:b2:be: 67:a7:0b:83:75:a6:ce:f6:d8:e0:26:7d:f5:37:6e: 41:5f:27:42:47:fc:03:34:17:77:2f:0c:85:7c:2c: c5:a2:2f:47:b7:09:75:b9:5c:2b:98:48:96:f7:a0: d1:44:e3:4e:eb:07:3b:bf:e9:75:14:2c:af:0e:55: fe:f9:68:59:4f:88:01:9d:d1:d1:b0:6e:c9:91:e3: 9b:f5:6c:63:40:04:fb:d2:73:7e:4a:52:a8:87:f7: 80:22:46:a8:77:13:10:01:95:e9:d8:ae:89:b6:4f: f2:a5:04:f0:13:e8:58:e1:71:6d:35:0f:fe:9b:14: 78:8b:bf:93:35:e4:df:62:c6:ee:57:71:81:4e:f5: f9:05:8c:1f:78:6f:3b:2a:e6:bb:15:ab:73:92:d2: 66:f0:0d:0a:fb:aa:7f:8a:52:21:69:8e:6b:c9:e2: 1a:19:47:84:9b:a1:ec:fe:2a:70:2a:82:a6:61:fa: a4:3e:c4:ff:0f:05:5f:9e:09:3c:cb:76:b6:11:7a: f6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7F:A5:C1:09:A4:D4:5E:DA:9D:1E:34:AF:C7:3E:B6:D3:00:D9:AD X509v3 Authority Key Identifier: keyid:84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:25:fb:02:b9:df:4c:0c:0b:de:f8:b8:74:40:6b:fe:3c:0b: 5c:56:42:8f:06:f2:0f:89:f4:66:e5:e9:12:ac:de:d5:c9:51: 94:91:aa:46:bc:5a:9f:04:e5:43:fb:e5:c4:75:a7:b6:3e:e8: 46:49:f9:d3:e6:41:c3:2a:12:bc:01:76:f0:84:29:07:cd:9f: f6:72:5e:db:50:04:43:a9:b5:6f:0a:c8:3b:06:32:32:db:7c: dc:03:f5:3c:70:be:56:ee:5f:f2:23:00:be:fb:f7:47:fc:11: fe:32:76:b3:b1:9e:a1:56:7f:26:4a:35:0e:39:6b:98:f1:24: 1d:91:4c:3d:09:cf:16:cd:fb:ed:53:c3:eb:e7:27:8e:e5:62: a2:54:9d:9a:07:92:3b:53:2e:09:8f:c1:e7:fd:06:bc:fd:58: 06:d0:89:60:a5:f2:28:f8:f7:8c:73:2a:2c:fd:31:1f:a6:cd: 93:42:f4:aa:c8:50:dd:ae:b6:a3:e7:c1:5c:cb:98:0a:8c:3b: 88:cb:cf:c8:95:97:f1:02:9b:d4:d3:fe:20:07:af:32:ad:5a: c1:68:85:91:10:e8:29:93:6d:ac:9f:4f:e4:61:07:63:c5:95: ac:ec:30:17:27:a9:0d:5b:a8:26:ab:7d:ee:c1:81:39:40:8c: 63:c6:28:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQwOTExMTAvBgNVBAUTKDg0NTlGQjcyOTBENzRBOUJDRTI2MEUzRkFCNjA1RDdG RDgzMjQ5MzEwHhcNMjUxMjA1MDI1MDEyWhcNMjUxMjEyMDI1MDEyWjAYMRYwFAYD VQQDEw02OTMyNDg2NC1iYWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmMzVRYuV/Z0WOFpf2dWiuEdVah9fRTeCErPewKRN/2qgG/SOlqoHGe62hd0d eQWfiHQEl3MlRyaCsr5npwuDdabO9tjgJn31N25BXydCR/wDNBd3LwyFfCzFoi9H twl1uVwrmEiW96DRRONO6wc7v+l1FCyvDlX++WhZT4gBndHRsG7JkeOb9WxjQAT7 0nN+SlKoh/eAIkaodxMQAZXp2K6Jtk/ypQTwE+hY4XFtNQ/+mxR4i7+TNeTfYsbu V3GBTvX5BYwfeG87Kua7FatzktJm8A0K+6p/ilIhaY5ryeIaGUeEm6Hs/ipwKoKm YfqkPsT/DwVfngk8y3a2EXr2hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1/pcEJ pNRe2p0eNK/HPrbTANmtMB8GA1UdIwQYMBaAFIRZ+3KQ10qbziYOP6tgXX/YMkkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDA5MS82NTIxQTBGMDFE OUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNwdk9KZzRfcTJCZGY5Z3lT VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hGbjdjcERYU3B2T0pnNF9xMkJkZjlneVNURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDA5MS82NTIxQTBGMDFEOUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNw dk9KZzRfcTJCZGY5Z3lTVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9JfsCud9MDAve+Lh0QGv+PAtcVkKPBvIPifRm5ekSrN7VyVGUkapG vFqfBOVD++XEdae2PuhGSfnT5kHDKhK8AXbwhCkHzZ/2cl7bUARDqbVvCsg7BjIy 23zcA/U8cL5W7l/yIwC++/dH/BH+MnazsZ6hVn8mSjUOOWuY8SQdkUw9Cc8Wzfvt U8Pr5yeO5WKiVJ2aB5I7Uy4Jj8Hn/Qa8/VgG0IlgpfIo+PeMcyos/TEfps2TQvSq yFDdrraj58Fcy5gKjDuIy8/IlZfxApvU0/4gB68yrVrBaIWREOgpk22sn0/kYQdj xZWs7DAXJ6kNW6gmq33uwYE5QIxjxigG -----END CERTIFICATE-----Generated at Sat Dec 6 13:17:58 2025 by rpki-client