This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft File: HfNLnj96ONdYmO1LBfntTEAEzrw.mft (raw, json) Hash identifier: ukETSl+bJajb1RzMO1gV+jrq+PQ2eaJRJ5YvdB9noLs= Subject key identifier: 6A:00:C8:78:6C:4C:1D:5D:9D:80:1A:0E:E4:64:50:43:C6:52:91:9C Authority key identifier: 1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC Certificate issuer: /CN=A91F6227/serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC Certificate serial: 0A5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft Manifest number: 0A50 Signing time: Sat 06 Dec 2025 18:55:15 +0000 Manifest this update: Sat 06 Dec 2025 18:55:15 +0000 Manifest next update: Sat 13 Dec 2025 18:55:15 +0000 Files and hashes: 1: HfNLnj96ONdYmO1LBfntTEAEzrw.crl (hash: sVUjsGKcAXyuD42Y8RwgMqC5wiM6RTADvaf5d5cNty8=) 2: A23D5DE87A6911EA930EB439C4F9AE02.roa (hash: 0c8vFwsGm0y9J7tirCRPVhjPNwdGg4DZRn3e0fuJjls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2651 (0xa5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6227, serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC Validity Not Before: Dec 6 18:55:15 2025 GMT Not After : Dec 13 18:55:15 2025 GMT Subject: CN=69347c13-581b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:37:7d:2f:93:b0:c7:23:62:cd:d6:e4:77:cd: 2a:26:6c:a8:5e:fe:d5:0e:d8:4d:9e:58:81:03:aa: 81:cb:41:69:fd:dd:a4:3a:11:ea:de:af:9e:d7:18: 64:ec:c7:69:a5:4a:22:b2:19:9b:d4:e8:bc:d5:5a: f1:e2:5a:0f:1b:42:c3:f7:77:7d:16:35:52:c2:1b: e1:63:54:c3:b3:75:40:6a:ce:e6:30:b1:65:e2:6a: 5f:98:a5:74:51:fd:14:69:1d:c4:84:aa:1a:4c:c7: 62:ad:bc:4c:4d:31:39:28:fa:55:9f:07:32:ed:e4: 9c:1e:7c:c6:4e:96:fd:62:2c:1a:45:83:b3:5b:94: 45:b5:17:8a:af:76:a2:99:aa:7c:86:43:64:b0:8d: 9e:a0:27:ae:ea:b9:d1:c1:90:e8:76:07:f3:a7:f6: 74:c8:ca:2d:f7:75:bf:aa:bd:06:78:2f:96:a9:ff: 5d:4d:07:8a:8d:29:7e:68:6f:51:b9:88:76:66:19: d6:1b:7d:6f:d7:25:74:63:15:db:dc:8f:34:7e:e8: 12:dc:aa:32:14:bd:78:f9:47:73:4f:8b:09:49:4e: 21:30:d0:94:68:70:4d:ff:cf:be:5f:98:bb:80:31: 17:e3:1b:fc:a2:4c:38:0f:7b:ac:e2:6a:ed:04:89: 8a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:00:C8:78:6C:4C:1D:5D:9D:80:1A:0E:E4:64:50:43:C6:52:91:9C X509v3 Authority Key Identifier: keyid:1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:3a:5b:81:3c:df:51:b0:e3:e6:a8:f4:66:e1:6d:06:c3:8f: 71:60:71:15:17:77:3c:d9:f2:28:e3:f6:50:32:7e:84:bd:39: 38:d9:ff:1d:fb:e2:f1:79:d6:8f:4d:08:6c:3c:6e:8c:8c:af: 5f:51:e7:4f:81:95:2c:ff:18:0d:70:f9:6c:8a:53:e3:f8:9a: 33:35:57:2e:72:79:5e:7c:cd:bc:6f:a8:7f:17:30:09:64:9d: 1d:2e:ae:01:1a:69:2f:41:ce:14:30:8a:2b:94:cc:4e:8b:dc: e2:c3:2b:03:3a:10:f3:29:88:2c:a0:fe:a8:36:3f:7a:b6:ab: bb:dc:cf:83:c1:81:04:c1:a3:e8:8c:ee:01:fa:0d:23:cf:0c: b8:29:65:1f:c7:e9:41:b3:dc:d5:02:e7:ad:d2:9f:3e:f2:3f: ac:35:bd:e5:6a:8e:da:d5:7b:ea:99:d4:09:5a:ad:ee:f2:52: cf:1b:fb:c7:be:01:5f:98:c8:3e:f7:89:fb:8b:42:02:cc:4e: 07:60:e9:ef:2a:00:12:48:c8:52:cc:dc:59:31:b7:a1:43:23: a8:e3:df:d5:38:5b:4d:48:3f:25:8d:b7:e0:68:d8:ae:1a:f0: b6:9e:be:7e:8e:a8:5a:d9:de:c1:cb:b2:ad:dc:12:00:7a:80: 00:24:e3:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYyMjcxMTAvBgNVBAUTKDFERjM0QjlFM0Y3QTM4RDc1ODk4RUQ0QjA1RjlFRDRD NDAwNENFQkMwHhcNMjUxMjA2MTg1NTE1WhcNMjUxMjEzMTg1NTE1WjAYMRYwFAYD VQQDEw02OTM0N2MxMy01ODFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzd9L5OwxyNizdbkd80qJmyoXv7VDthNnliBA6qBy0Fp/d2kOhHq3q+e1xhk 7MdppUoishmb1Oi81Vrx4loPG0LD93d9FjVSwhvhY1TDs3VAas7mMLFl4mpfmKV0 Uf0UaR3EhKoaTMdirbxMTTE5KPpVnwcy7eScHnzGTpb9YiwaRYOzW5RFtReKr3ai map8hkNksI2eoCeu6rnRwZDodgfzp/Z0yMot93W/qr0GeC+Wqf9dTQeKjSl+aG9R uYh2ZhnWG31v1yV0YxXb3I80fugS3KoyFL14+UdzT4sJSU4hMNCUaHBN/8++X5i7 gDEX4xv8okw4D3us4mrtBImKIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoAyHhs TB1dnYAaDuRkUEPGUpGcMB8GA1UdIwQYMBaAFB3zS54/ejjXWJjtSwX57UxABM68 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjIyNy8wRDcyOEEwQTdB M0YxMUVBOEUzRDgwMzVDNEY5QUUwMi9IZk5Mbmo5Nk9OZFltTzFMQmZudFRFQUV6 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hmTkxuajk2T05kWW1PMUxCZm50VEVBRXpydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjIyNy8wRDcyOEEwQTdBM0YxMUVBOEUzRDgwMzVDNEY5QUUwMi9IZk5Mbmo5Nk9O ZFltTzFMQmZudFRFQUV6cncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmOluBPN9RsOPmqPRm4W0Gw49xYHEVF3c82fIo4/ZQMn6EvTk42f8d ++LxedaPTQhsPG6MjK9fUedPgZUs/xgNcPlsilPj+JozNVcucnlefM28b6h/FzAJ ZJ0dLq4BGmkvQc4UMIorlMxOi9ziwysDOhDzKYgsoP6oNj96tqu73M+DwYEEwaPo jO4B+g0jzwy4KWUfx+lBs9zVAuet0p8+8j+sNb3lao7a1XvqmdQJWq3u8lLPG/vH vgFfmMg+94n7i0ICzE4HYOnvKgASSMhSzNxZMbehQyOo49/VOFtNSD8ljbfgaNiu GvC2nr5+jqha2d7By7Kt3BIAeoAAJOMA -----END CERTIFICATE-----Generated at Sun Dec 7 00:40:55 2025 by rpki-client