This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft File: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft (raw, json) Hash identifier: C+xrWJPb2ZRBRVMTjrWL3hVQzixoCesIt3px0A3su2o= Subject key identifier: 22:5C:52:41:3A:54:C9:11:CE:96:F9:DC:21:DA:59:F9:AA:0F:7C:F3 Authority key identifier: 1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C Certificate issuer: /CN=A91F7BE4/serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C Certificate serial: 1043 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft Manifest number: 1039 Signing time: Thu 04 Dec 2025 17:00:06 +0000 Manifest this update: Thu 04 Dec 2025 17:00:05 +0000 Manifest next update: Thu 11 Dec 2025 17:00:05 +0000 Files and hashes: 1: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl (hash: QopY95HfKdqjejzXigm++68rrAwAzFerw7IjkYlMBEU=) 2: DB63DD0C511311E998B6E814C4F9AE02.roa (hash: C6D3XzDSLt3OsrdqaJczrZOT46rffzR9T87fEcqPayY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4163 (0x1043) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7BE4, serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C Validity Not Before: Dec 4 17:00:05 2025 GMT Not After : Dec 11 17:00:05 2025 GMT Subject: CN=6931be16-0937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:fb:4f:dd:39:dd:87:54:92:66:17:fa:1e: a7:77:0d:89:b7:23:64:dd:4a:68:b8:71:b9:6e:8d: 38:16:95:02:96:4a:89:0b:ed:02:d0:e0:0e:c9:85: b7:53:47:a0:cd:ab:65:49:43:70:41:2f:c2:d4:13: 7b:8a:92:d2:d0:28:97:30:5c:7f:42:68:88:36:23: 21:b0:f0:89:a8:78:0b:a0:46:88:20:92:b0:01:b0: 00:ae:37:22:45:68:f7:6d:58:82:ff:07:31:92:ec: 6f:e0:b0:c0:5f:cf:a6:68:f6:8b:c1:f2:f6:6b:0b: e9:5b:b7:4e:1a:ee:58:d6:23:81:69:c0:8e:e6:7e: 87:31:44:e7:9b:6b:69:23:e1:c4:ad:f2:5f:87:14: af:10:53:b8:3d:92:9b:41:16:bc:2a:cf:e6:4a:a3: d1:46:39:81:e1:ab:1a:e6:a2:84:ac:15:61:71:35: 7a:c3:70:d1:6c:75:4d:31:d5:1b:c9:4b:91:89:80: 2a:8c:24:3e:a7:74:0b:4a:b4:62:6b:a3:d2:74:b2: 66:55:22:1c:61:76:d0:cb:e0:4b:79:f0:21:ff:8b: ee:91:36:6d:28:61:8e:46:e5:f7:9a:12:80:95:0e: 08:1c:7f:1e:85:50:bb:04:68:fa:39:89:93:e1:b8: 8a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5C:52:41:3A:54:C9:11:CE:96:F9:DC:21:DA:59:F9:AA:0F:7C:F3 X509v3 Authority Key Identifier: keyid:1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:94:55:4e:97:f6:89:97:6e:61:5c:50:28:67:43:fc:8a:a2: 53:c8:93:d1:89:49:d2:b4:29:d2:98:72:97:07:55:9b:c5:d8: b3:7d:18:d8:7a:d6:d3:31:46:23:65:71:1d:00:48:64:2f:5f: 7f:ac:5d:2d:43:2d:69:4e:30:1c:00:dc:51:e2:2b:0f:58:4b: 48:fb:63:70:8f:86:4a:2d:b7:dc:d9:df:e2:64:10:06:05:cf: 81:1c:95:dd:54:5f:26:b2:3a:b5:52:18:d4:50:a5:e6:f9:85: b5:11:f3:d5:e0:80:5a:ae:98:6e:4c:8d:3b:ff:39:7b:bc:2a: eb:38:4f:67:d7:3e:2d:4a:ed:c0:b4:b0:7c:43:2c:59:4f:c4: ac:da:c7:b2:6e:fd:e6:0c:0b:c9:bb:d1:62:45:76:a8:4e:23: e3:41:c3:35:02:ac:01:04:0c:cb:10:4b:2c:41:34:aa:21:ce: b7:d3:92:16:15:b6:60:49:c1:08:1a:73:e0:1f:e8:a6:d7:54: 64:64:18:c9:f0:fe:18:72:07:0a:4d:3b:88:04:4b:c2:ac:c1: 99:4d:da:60:d1:e9:83:2d:b4:b3:42:02:66:b0:34:e0:2a:3b: 09:41:d6:1b:4c:dd:e9:5b:2d:e4:14:94:e3:cd:1c:d5:47:f4: 7a:41:7a:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdCRTQxMTAvBgNVBAUTKDFFNkIzOTQ0QjY3ODhFOTBFOTk3RDhBOEU4MDY3QzU5 NjlCODg5OEMwHhcNMjUxMjA0MTcwMDA1WhcNMjUxMjExMTcwMDA1WjAYMRYwFAYD VQQDEw02OTMxYmUxNi0wOTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJf7T9053YdUkmYX+h6ndw2JtyNk3UpouHG5bo04FpUClkqJC+0C0OAOyYW3 U0egzatlSUNwQS/C1BN7ipLS0CiXMFx/QmiINiMhsPCJqHgLoEaIIJKwAbAArjci RWj3bViC/wcxkuxv4LDAX8+maPaLwfL2awvpW7dOGu5Y1iOBacCO5n6HMUTnm2tp I+HErfJfhxSvEFO4PZKbQRa8Ks/mSqPRRjmB4asa5qKErBVhcTV6w3DRbHVNMdUb yUuRiYAqjCQ+p3QLSrRia6PSdLJmVSIcYXbQy+BLefAh/4vukTZtKGGORuX3mhKA lQ4IHH8ehVC7BGj6OYmT4biKtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJcUkE6 VMkRzpb53CHaWfmqD3zzMB8GA1UdIwQYMBaAFB5rOUS2eI6Q6ZfYqOgGfFlpuImM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0JFNC9BMDYzMDVDMjUx MTExMUU5OEM0QkYxMEZDNEY5QUUwMi9IbXM1UkxaNGpwRHBsOWlvNkFaOFdXbTRp WXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htczVSTFo0anBEcGw5aW82QVo4V1dtNGlZdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0JFNC9BMDYzMDVDMjUxMTExMUU5OEM0QkYxMEZDNEY5QUUwMi9IbXM1UkxaNGpw RHBsOWlvNkFaOFdXbTRpWXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCklFVOl/aJl25hXFAoZ0P8iqJTyJPRiUnStCnSmHKXB1WbxdizfRjY etbTMUYjZXEdAEhkL19/rF0tQy1pTjAcANxR4isPWEtI+2Nwj4ZKLbfc2d/iZBAG Bc+BHJXdVF8msjq1UhjUUKXm+YW1EfPV4IBarphuTI07/zl7vCrrOE9n1z4tSu3A tLB8QyxZT8Ss2seybv3mDAvJu9FiRXaoTiPjQcM1AqwBBAzLEEssQTSqIc6305IW FbZgScEIGnPgH+im11RkZBjJ8P4YcgcKTTuIBEvCrMGZTdpg0emDLbSzQgJmsDTg KjsJQdYbTN3pWy3kFJTjzRzVR/R6QXri -----END CERTIFICATE-----Generated at Sat Dec 6 14:50:05 2025 by rpki-client