This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft File: _h1b-QL6kS1-C16YDPkdvf0rtk8.mft (raw, json) Hash identifier: kv29+0F1Eox5+4GvtBz1OQTgjvJu3VJSsG1C+1kuS5g= Subject key identifier: A3:19:F8:2E:FC:7A:1F:FD:A6:69:CA:5B:18:9B:F4:EE:E8:40:11:2F Authority key identifier: FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F Certificate issuer: /CN=A91F8534/serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F Certificate serial: 2148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft Manifest number: 2136 Signing time: Thu 04 Dec 2025 15:43:08 +0000 Manifest this update: Thu 04 Dec 2025 15:43:08 +0000 Manifest next update: Thu 11 Dec 2025 15:43:08 +0000 Files and hashes: 1: _h1b-QL6kS1-C16YDPkdvf0rtk8.crl (hash: 4kvsilS3xFkK/Q+NrTcJsQYLr1foRA5bq0J6iDvUgVY=) 2: 173CA1AABCA011ED914D176DC4F9AE02.roa (hash: hUdH/uVzYkF0LtRZr5OEyKuVBZZQ6yEh3YtiBoLV0Iw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.crl rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 15:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8520 (0x2148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8534, serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F Validity Not Before: Dec 4 15:43:08 2025 GMT Not After : Dec 11 15:43:08 2025 GMT Subject: CN=6931ac0c-421b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e1:e2:58:27:18:a7:e0:e6:c4:29:e9:3b:f0: 89:73:6e:3f:75:92:f4:b3:ac:7b:90:5c:a4:96:c0: cc:08:36:0a:1e:e5:aa:a8:34:e1:12:c5:ca:c2:d3: bc:60:b4:5b:6b:74:9a:ce:73:60:3f:25:d4:7e:c9: 57:47:8e:88:f4:bd:74:df:cc:35:08:8b:73:32:4c: 8c:80:c3:b8:c7:b6:05:69:8b:b2:34:5c:6d:a1:8a: 1c:be:79:ed:a2:7f:88:2b:d6:32:76:8c:d1:48:ba: 06:67:20:71:19:32:93:cf:18:6a:ea:6e:07:38:7f: f9:d4:3d:18:66:7c:fe:4f:af:d0:69:2d:4d:59:50: cc:dd:d8:4f:18:e0:5d:35:4b:0f:ef:34:21:6f:0b: 82:6a:25:fa:16:f7:87:3c:85:0d:66:0d:9f:d7:99: bb:a0:c5:e3:28:82:09:82:d4:bd:e5:02:58:ea:d7: 8c:13:4b:78:d3:53:1c:96:22:12:c9:73:b0:b9:16: 79:ec:d3:ff:b4:d9:be:dd:03:a1:1c:1c:43:6e:21: 26:41:17:f8:c4:7b:86:f8:38:b3:d1:e2:d8:01:6a: 1e:e9:1a:76:ef:7b:e2:cc:e8:4e:7d:b9:35:15:79: 8c:35:59:1b:22:39:73:4d:26:86:d5:d4:7e:7d:04: 90:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:19:F8:2E:FC:7A:1F:FD:A6:69:CA:5B:18:9B:F4:EE:E8:40:11:2F X509v3 Authority Key Identifier: keyid:FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:86:23:99:ec:b0:00:97:59:9f:76:ba:38:5e:d3:a2:a9:69: 54:8d:17:f4:72:2d:c4:8f:fe:42:3c:79:b3:a5:eb:a7:b2:90: 65:f1:3f:b4:28:1a:18:ef:b9:f5:78:19:4f:f2:b7:57:7c:c8: 5d:07:ee:a7:d7:92:0e:91:5a:b4:c0:34:4c:2f:19:33:fa:02: 80:9d:68:1e:c6:58:fb:de:16:3f:e5:c3:e9:bb:01:47:fa:16: c9:77:d4:c8:70:19:aa:31:37:64:7a:fb:6e:e0:ba:f0:d4:b6: 42:7d:c2:87:97:73:cc:16:e2:84:22:e7:1a:23:a8:9e:7d:66: 13:34:2e:4b:be:22:c4:09:02:1d:28:33:7d:5c:63:f4:32:ff: da:14:51:ca:e8:25:a0:ec:7e:54:8c:ed:1a:09:3d:9b:7b:c2: 60:c3:66:32:a7:4f:39:5c:23:f8:f2:9f:46:16:1e:f3:fe:5b: 2a:e1:7f:c7:c3:b0:26:e8:02:0b:f0:c9:34:9c:db:4c:74:27: 74:19:3b:1f:25:7d:3a:d3:f0:6b:09:b5:ff:34:44:ad:bf:bf: 5d:d2:fe:0c:94:2e:81:0c:03:9a:8a:0c:3f:d1:23:69:1d:84: d9:f5:37:5b:22:82:b3:dc:ee:81:44:e0:08:4c:bb:cf:dc:79: 96:d8:c0:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg1MzQxMTAvBgNVBAUTKEZFMUQ1QkY5MDJGQTkxMkQ3RTBCNUU5ODBDRjkxREJE RkQyQkI2NEYwHhcNMjUxMjA0MTU0MzA4WhcNMjUxMjExMTU0MzA4WjAYMRYwFAYD VQQDEw02OTMxYWMwYy00MjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzeHiWCcYp+DmxCnpO/CJc24/dZL0s6x7kFyklsDMCDYKHuWqqDThEsXKwtO8 YLRba3SaznNgPyXUfslXR46I9L1038w1CItzMkyMgMO4x7YFaYuyNFxtoYocvnnt on+IK9YydozRSLoGZyBxGTKTzxhq6m4HOH/51D0YZnz+T6/QaS1NWVDM3dhPGOBd NUsP7zQhbwuCaiX6FveHPIUNZg2f15m7oMXjKIIJgtS95QJY6teME0t401McliIS yXOwuRZ57NP/tNm+3QOhHBxDbiEmQRf4xHuG+Diz0eLYAWoe6Rp273vizOhOfbk1 FXmMNVkbIjlzTSaG1dR+fQSQrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMZ+C78 eh/9pmnKWxib9O7oQBEvMB8GA1UdIwQYMBaAFP4dW/kC+pEtfgtemAz5Hb39K7ZP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODUzNC82RTZBNDYyQ0ZF REQxMUU1QjQ5MDVEN0NDNEY5QUUwMi9faDFiLVFMNmtTMS1DMTZZRFBrZHZmMHJ0 azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19oMWItUUw2a1MxLUMxNllEUGtkdmYwcnRrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODUzNC82RTZBNDYyQ0ZFREQxMUU1QjQ5MDVEN0NDNEY5QUUwMi9faDFiLVFMNmtT MS1DMTZZRFBrZHZmMHJ0azgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1hiOZ7LAAl1mfdro4XtOiqWlUjRf0ci3Ej/5CPHmzpeunspBl8T+0 KBoY77n1eBlP8rdXfMhdB+6n15IOkVq0wDRMLxkz+gKAnWgexlj73hY/5cPpuwFH +hbJd9TIcBmqMTdkevtu4Lrw1LZCfcKHl3PMFuKEIucaI6iefWYTNC5LviLECQId KDN9XGP0Mv/aFFHK6CWg7H5UjO0aCT2be8Jgw2Yyp085XCP48p9GFh7z/lsq4X/H w7Am6AIL8Mk0nNtMdCd0GTsfJX060/BrCbX/NEStv79d0v4MlC6BDAOaigw/0SNp HYTZ9TdbIoKz3O6BROAITLvP3HmW2MCV -----END CERTIFICATE-----Generated at Sat Dec 6 13:28:54 2025 by rpki-client