This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft File: HVvjkVLqbW3wn52ErGmpYbfIOG4.mft (raw, json) Hash identifier: OTMsijEdX2N4O5fSMNR+03sHOlKjid100RUJyFJYhgU= Subject key identifier: 98:AF:86:56:0C:73:4D:A7:80:F5:79:36:05:F2:62:05:42:92:35:75 Authority key identifier: 1D:5B:E3:91:52:EA:6D:6D:F0:9F:9D:84:AC:69:A9:61:B7:C8:38:6E Certificate issuer: /CN=A91F43F2/serialNumber=1D5BE39152EA6D6DF09F9D84AC69A961B7C8386E Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft Manifest number: 4B Signing time: Fri 05 Dec 2025 05:11:05 +0000 Manifest this update: Fri 05 Dec 2025 05:11:05 +0000 Manifest next update: Fri 12 Dec 2025 05:11:05 +0000 Files and hashes: 1: HVvjkVLqbW3wn52ErGmpYbfIOG4.crl (hash: 2Opdj971Xwsl089/x5xWRnJjNZ3SMyZrnP0YjtAOAfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.crl rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:11:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F43F2, serialNumber=1D5BE39152EA6D6DF09F9D84AC69A961B7C8386E Validity Not Before: Dec 5 05:11:05 2025 GMT Not After : Dec 12 05:11:05 2025 GMT Subject: CN=69326969-52da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ef:dd:35:ff:69:86:33:e6:30:d5:e5:a0:20: 1a:1f:6e:78:0b:7d:2d:6f:2f:4d:2b:07:2b:8b:50: ca:5b:7b:84:96:3a:4c:42:82:55:1a:22:54:21:3a: d1:07:2b:89:5a:48:bd:8a:a3:0f:bd:5e:c4:e6:1c: 52:02:90:c3:ec:74:82:4f:b3:13:87:95:13:1f:c8: 67:31:c4:f9:0f:a7:69:2f:60:1e:ce:05:6a:d5:f7: 03:fd:f1:da:8b:10:17:91:88:c9:03:5d:53:e2:8a: e5:43:8a:d6:4c:5f:a9:69:db:43:b2:83:61:e8:c1: 71:f0:77:85:c6:af:71:93:a7:a4:94:34:48:d2:53: 02:70:10:cb:9e:24:a2:fb:05:bc:0f:62:04:24:62: 65:f4:94:3c:09:59:69:c7:01:66:58:ef:4d:85:b6: 87:6d:da:fc:aa:8c:ea:5e:0e:9f:ca:98:33:bd:ea: ac:2f:e2:dd:8e:7b:74:e4:8f:f1:3a:a4:ee:aa:35: 86:f6:ec:bc:1f:c8:96:69:a7:8b:6f:d9:b0:cc:2a: e9:92:ff:2a:31:a2:32:b4:9c:a8:d2:c2:03:c8:aa: df:f7:c5:4b:b2:0f:f7:f8:8b:cd:20:66:a7:29:0b: 3b:18:34:d8:8e:8d:b4:44:9a:2e:d9:7b:20:d0:62: a6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:AF:86:56:0C:73:4D:A7:80:F5:79:36:05:F2:62:05:42:92:35:75 X509v3 Authority Key Identifier: keyid:1D:5B:E3:91:52:EA:6D:6D:F0:9F:9D:84:AC:69:A9:61:B7:C8:38:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:6d:d7:8a:0d:fd:fe:14:0e:18:59:6a:60:83:b3:c7:ae:78: f5:f3:84:fa:5d:e8:b1:40:00:28:63:b9:84:fd:9a:a3:ae:fb: cb:32:2e:8f:8a:97:fc:21:a0:6d:e4:0b:2d:d0:bf:b0:35:5a: 53:d9:fe:48:86:cc:f8:89:2a:6e:54:1a:5a:42:27:48:1a:24: 26:03:72:61:ed:76:05:1f:5f:91:cd:0f:86:be:63:7c:46:6b: b4:f6:1f:04:04:88:f8:e6:ea:8a:eb:ff:5c:07:cc:5e:07:69: 44:97:7e:7e:c6:7d:b3:a8:3c:1d:53:c0:11:0e:77:e1:ee:7d: f8:49:70:9e:df:44:2f:62:00:a2:f7:73:49:57:12:bc:44:21: 15:3d:74:59:43:f4:7e:c9:47:15:3b:fe:ab:83:08:42:55:72: 0d:ab:d3:a7:ca:31:78:e4:7d:3d:35:19:89:a2:5f:f2:50:5f: db:32:3d:2b:ae:85:61:32:48:aa:4e:11:10:ed:fb:a9:25:1c: 1c:49:32:b2:82:26:b6:09:c9:1b:2e:9e:4f:53:b2:f3:51:ad: 62:b7:b0:70:45:f9:ab:77:9a:98:8a:6d:ee:8a:7a:50:3b:43: da:a9:4e:8c:01:af:5e:2b:f5:bf:cd:b8:a3:51:2f:37:07:cd: f9:69:09:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NDNGMjExMC8GA1UEBRMoMUQ1QkUzOTE1MkVBNkQ2REYwOUY5RDg0QUM2OUE5NjFC N0M4Mzg2RTAeFw0yNTEyMDUwNTExMDVaFw0yNTEyMTIwNTExMDVaMBgxFjAUBgNV BAMTDTY5MzI2OTY5LTUyZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDr7901/2mGM+Yw1eWgIBofbngLfS1vL00rByuLUMpbe4SWOkxCglUaIlQhOtEH K4laSL2Kow+9XsTmHFICkMPsdIJPsxOHlRMfyGcxxPkPp2kvYB7OBWrV9wP98dqL EBeRiMkDXVPiiuVDitZMX6lp20Oyg2HowXHwd4XGr3GTp6SUNEjSUwJwEMueJKL7 BbwPYgQkYmX0lDwJWWnHAWZY702Ftodt2vyqjOpeDp/KmDO96qwv4t2Oe3Tkj/E6 pO6qNYb27LwfyJZpp4tv2bDMKumS/yoxojK0nKjSwgPIqt/3xUuyD/f4i80gZqcp CzsYNNiOjbREmi7ZeyDQYqZdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmK+GVgxz TaeA9Xk2BfJiBUKSNXUwHwYDVR0jBBgwFoAUHVvjkVLqbW3wn52ErGmpYbfIOG4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0M0YyLzRDMDRGMDZBNjBD MDExRjBBRkI0NTcyQkM0RjlBRTAyL0hWdmprVkxxYlczd241MkVyR21wWWJmSU9H NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFZ2amtWTHFiVzN3bjUyRXJHbXBZYmZJT0c0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0 M0YyLzRDMDRGMDZBNjBDMDExRjBBRkI0NTcyQkM0RjlBRTAyL0hWdmprVkxxYlcz d241MkVyR21wWWJmSU9HNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABFt14oN/f4UDhhZamCDs8euePXzhPpd6LFAAChjuYT9mqOu+8syLo+K l/whoG3kCy3Qv7A1WlPZ/kiGzPiJKm5UGlpCJ0gaJCYDcmHtdgUfX5HND4a+Y3xG a7T2HwQEiPjm6orr/1wHzF4HaUSXfn7GfbOoPB1TwBEOd+HuffhJcJ7fRC9iAKL3 c0lXErxEIRU9dFlD9H7JRxU7/quDCEJVcg2r06fKMXjkfT01GYmiX/JQX9syPSuu hWEySKpOERDt+6klHBxJMrKCJrYJyRsunk9TsvNRrWK3sHBF+at3mpiKbe6KelA7 Q9qpTowBr14r9b/NuKNRLzcHzflpCQU= -----END CERTIFICATE-----Generated at Sat Dec 6 20:01:53 2025 by rpki-client