This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft File: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft (raw, json) Hash identifier: d0lPdO3bkiS/0xO060XSlwod8zdUnzRLReeSiwU5YUU= Subject key identifier: 70:D3:E4:8E:98:57:BA:62:ED:77:07:E0:34:C9:18:6F:AC:96:60:54 Authority key identifier: 1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12 Certificate issuer: /CN=A91FDD2C/serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412 Certificate serial: 07BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft Manifest number: 07B7 Signing time: Sat 06 Dec 2025 20:24:40 +0000 Manifest this update: Sat 06 Dec 2025 20:24:39 +0000 Manifest next update: Sat 13 Dec 2025 20:24:39 +0000 Files and hashes: 1: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl (hash: uQQEaUDclUCkGBP9XjETyjg3nH5DleeE2Y9RQ8Rrn2Y=) 2: D9BD904224B611EBAE734152C4F9AE02.roa (hash: KZro3pgOeUHIq7UlI8pVpaWLtUDP+zywuDR46T5LBrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1983 (0x7bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD2C, serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412 Validity Not Before: Dec 6 20:24:39 2025 GMT Not After : Dec 13 20:24:39 2025 GMT Subject: CN=69349108-2689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8d:aa:63:a9:d9:ee:f9:47:37:84:d1:c9:b3: 01:93:8e:21:37:f5:6f:ee:fc:fc:a2:90:4c:ee:d7: e8:1d:3c:d4:ac:ae:c4:7a:14:32:a1:8e:0e:80:00: ef:21:7e:e7:74:e4:1f:07:a9:a1:32:f2:7b:72:c4: 46:7f:e1:b7:36:1e:eb:dd:f6:b7:7f:f3:cf:1f:91: d5:29:d6:1c:7e:b0:ac:cd:18:7f:d8:5f:22:15:45: 56:32:b6:2b:aa:2c:e4:25:28:dd:cc:d2:3a:fa:b0: dc:1f:2d:59:34:0a:79:aa:f6:1c:99:8c:47:ca:47: 76:40:32:60:d3:87:a5:c8:2d:07:48:7f:d2:09:43: b5:39:ee:ac:4e:f7:99:2c:38:a6:94:99:89:45:32: 25:13:bb:c9:65:1c:a7:2c:a6:92:e1:11:a5:a6:b1: 29:4b:a8:c7:2a:df:25:0b:4e:12:f3:e6:2e:d0:55: 74:cc:b2:08:60:99:7d:f9:9d:8d:ba:e9:7d:f3:59: 88:e3:be:82:32:61:b2:0e:31:eb:90:b7:3f:25:13: c5:22:8b:8a:03:17:38:ac:76:b8:99:91:c5:2d:98: 9f:6f:36:65:ac:ea:96:0c:f6:53:33:28:e5:ee:61: 9c:fc:86:20:91:24:45:88:7c:4e:95:29:7d:40:68: e1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D3:E4:8E:98:57:BA:62:ED:77:07:E0:34:C9:18:6F:AC:96:60:54 X509v3 Authority Key Identifier: keyid:1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:51:be:bb:ce:23:45:1a:fb:5b:9a:fe:07:1c:ce:4c:21:07: 13:fa:c9:6a:83:37:43:f7:94:b0:b3:70:16:64:2e:c8:83:4e: 22:20:05:08:f1:bc:3a:58:a3:59:26:ea:4a:88:ac:86:ea:bb: a4:3a:87:eb:6a:93:41:e3:14:01:f8:0d:1e:b2:de:7c:5a:ca: 2a:fd:2f:bd:c5:b8:83:7d:42:41:34:55:15:3d:56:f4:5a:89: f7:ba:d8:bf:cb:e6:9a:43:0e:75:bd:84:2d:5e:07:28:2f:31: 4d:0c:56:c7:55:d3:45:92:99:77:c6:ca:5a:db:f7:18:db:58: 1f:6f:ad:58:3f:f1:7a:8d:5e:27:79:c1:4e:ec:c3:08:e6:42: 38:fc:df:b3:0b:ae:6b:4b:4f:eb:05:0a:52:43:0c:cc:6c:7d: 85:e4:c2:f3:48:6e:70:0b:91:22:94:5a:d6:c3:6e:cf:d1:03: 1f:e9:35:cf:2c:12:35:3a:4f:0f:99:c6:f3:db:de:c7:b4:9e: 17:08:3a:a3:cf:d2:3e:ab:29:43:7f:d4:68:72:86:05:3b:64: 15:5d:22:80:b0:0b:40:94:c5:8c:88:39:c0:71:1d:f2:e2:2f: 8b:28:b7:a1:a4:a1:89:35:5c:26:08:3d:27:e5:65:cc:f9:05: d2:01:7a:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkREMkMxMTAvBgNVBAUTKDFGMTJFQzJENDM5NUY5NUFBQ0M2MEM2MkVDREQ4Mjg1 N0VEMzA0MTIwHhcNMjUxMjA2MjAyNDM5WhcNMjUxMjEzMjAyNDM5WjAYMRYwFAYD VQQDEw02OTM0OTEwOC0yNjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzY2qY6nZ7vlHN4TRybMBk44hN/Vv7vz8opBM7tfoHTzUrK7EehQyoY4OgADv IX7ndOQfB6mhMvJ7csRGf+G3Nh7r3fa3f/PPH5HVKdYcfrCszRh/2F8iFUVWMrYr qizkJSjdzNI6+rDcHy1ZNAp5qvYcmYxHykd2QDJg04elyC0HSH/SCUO1Oe6sTveZ LDimlJmJRTIlE7vJZRynLKaS4RGlprEpS6jHKt8lC04S8+Yu0FV0zLIIYJl9+Z2N uul981mI476CMmGyDjHrkLc/JRPFIouKAxc4rHa4mZHFLZifbzZlrOqWDPZTMyjl 7mGc/IYgkSRFiHxOlSl9QGjhPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDT5I6Y V7pi7XcH4DTJGG+slmBUMB8GA1UdIwQYMBaAFB8S7C1DlflarMYMYuzdgoV+0wQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQyQy80OENFNTE2MjI0 QjUxMUVCQTI4NzhGNTBDNEY5QUUwMi9IeExzTFVPVi1WcXN4Z3hpN04yQ2hYN1RC QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4THNMVU9WLVZxc3hneGk3TjJDaFg3VEJCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQyQy80OENFNTE2MjI0QjUxMUVCQTI4NzhGNTBDNEY5QUUwMi9IeExzTFVPVi1W cXN4Z3hpN04yQ2hYN1RCQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmUb67ziNFGvtbmv4HHM5MIQcT+slqgzdD95Sws3AWZC7Ig04iIAUI 8bw6WKNZJupKiKyG6rukOofrapNB4xQB+A0est58Wsoq/S+9xbiDfUJBNFUVPVb0 Won3uti/y+aaQw51vYQtXgcoLzFNDFbHVdNFkpl3xspa2/cY21gfb61YP/F6jV4n ecFO7MMI5kI4/N+zC65rS0/rBQpSQwzMbH2F5MLzSG5wC5EilFrWw27P0QMf6TXP LBI1Ok8Pmcbz297HtJ4XCDqjz9I+qylDf9RocoYFO2QVXSKAsAtAlMWMiDnAcR3y 4i+LKLehpKGJNVwmCD0n5WXM+QXSAXra -----END CERTIFICATE-----Generated at Sat Dec 6 22:44:01 2025 by rpki-client