This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft File: he6QOP_DVBq9-33Z7TPyquNy54w.mft (raw, json) Hash identifier: 73CP0nU+uPpzrRHJEzs+yF4hReKjpLNBVMfSx56sBGg= Subject key identifier: 83:CB:91:1F:B8:D6:C2:AB:4D:5D:87:FE:6A:75:AE:D3:4E:DC:87:8B Authority key identifier: 85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C Certificate issuer: /CN=A91FF5E4/serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C Certificate serial: 05ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft Manifest number: 05DC Signing time: Tue 16 Dec 2025 22:27:50 +0000 Manifest this update: Tue 16 Dec 2025 22:27:50 +0000 Manifest next update: Tue 23 Dec 2025 22:27:50 +0000 Files and hashes: 1: he6QOP_DVBq9-33Z7TPyquNy54w.crl (hash: nchWHaorKFBJsq+saMiUy2daPtXEian65UJKQu4p+vE=) 2: 07FBA006084E11EF89D29620C4F9AE02.roa (hash: olIQCCewOfkMwGkHHOS/5ivD24pRNNt8XVcMGE/8pfs=) 3: A6EF097068F911F092D77151C4F9AE02.roa (hash: CVgVNZzRg+yoeNSO5TmorciwKychjnQza4bd4ni3W/0=) 4: 7AFCC818E38611EB8BC17765C4F9AE02.roa (hash: yhFTvnQ9OnQm5YRLzb7trt3j3jJDg72T+yloJnYuUVI=) 5: 09182D38084E11EF89D29620C4F9AE02.roa (hash: Mr4cvAF99YsJ9vM3bpplyr/XjV6Oh9dCkUlGWW3glRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 22:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1517 (0x5ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5E4, serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C Validity Not Before: Dec 16 22:27:50 2025 GMT Not After : Dec 23 22:27:50 2025 GMT Subject: CN=6941dce6-08f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c0:5e:d9:1a:b9:27:06:ac:2c:54:29:48:59: 29:70:45:81:30:10:c1:c5:d0:19:7e:c9:0b:da:1f: 4f:a5:fb:68:18:a4:a7:b7:17:83:6b:46:fa:e9:99: a1:d5:41:d0:a4:4c:30:aa:3a:43:12:2c:c1:e7:ea: b8:05:eb:68:9c:07:f5:db:a2:3a:60:6a:3a:d2:39: c1:76:a3:df:d6:25:24:d3:10:bc:c8:91:8f:dc:aa: 90:ea:2a:e1:ce:f1:c1:9c:9d:02:0e:23:0f:e1:0f: 1b:0a:0b:61:fd:ed:10:f9:ba:42:d1:6d:63:e2:03: 59:ce:9c:7e:17:42:97:70:9e:ca:08:a6:c1:36:50: ed:0b:af:bb:20:84:d0:e4:19:57:7d:a5:d7:04:65: 56:66:60:03:e3:e7:fd:86:28:9c:4e:17:31:3d:29: 60:22:1e:5c:81:66:21:30:a5:33:17:ec:dd:77:ea: 38:09:f8:a0:90:66:b5:65:5b:5d:72:85:5f:22:db: 9e:80:74:d0:94:d4:78:57:15:11:22:ac:59:cd:fc: 2c:ab:ff:92:72:85:0d:a1:30:0d:18:7c:91:ec:a4: 69:44:d5:3f:f7:9b:1f:79:a2:18:84:cb:32:e1:03: 9e:c0:44:4d:17:71:e3:b2:e1:74:1d:cc:96:00:2e: 58:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CB:91:1F:B8:D6:C2:AB:4D:5D:87:FE:6A:75:AE:D3:4E:DC:87:8B X509v3 Authority Key Identifier: keyid:85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:93:b6:4a:c6:67:1e:c9:34:16:cf:1a:fe:7f:8e:30:fb:df: 3a:3a:a1:e1:d3:a1:dc:73:f4:4f:6f:d0:3f:ee:ab:33:7d:d8: bd:ba:f0:44:b9:c7:9d:ee:6f:a1:a2:dd:44:98:9a:0f:51:ea: ab:8b:ba:9a:ab:02:d6:25:dc:f4:f2:22:0e:50:61:20:cc:2e: bc:6d:8a:9a:a3:6c:60:a7:ee:5f:f1:f0:79:d6:00:c7:71:f9: 3a:ba:a1:35:c5:f0:73:c4:08:17:e8:76:77:ed:2c:9f:60:eb: 0c:b7:19:9d:be:f1:c8:ee:53:bf:51:1c:45:fb:bf:11:35:62: 2f:ee:82:9f:36:ca:c9:52:27:41:c3:14:06:33:ab:c4:c7:05: f8:06:d9:21:cf:e5:78:a0:5b:a9:f7:34:23:ee:1e:f6:1f:af: d8:00:7c:68:55:f3:3f:9c:3d:9e:6d:3c:15:ba:39:05:58:89: 54:8d:ab:f3:5e:19:37:77:ea:ea:d8:86:c4:5b:e2:fd:f4:c8: eb:f2:4d:19:51:04:ab:f1:36:e9:cd:82:f6:59:05:07:3d:1a: 6c:9a:69:b1:aa:b0:10:af:2a:45:84:8e:72:b8:07:92:40:d2: d6:d4:f6:6f:13:80:fd:13:4b:eb:83:32:e6:b0:89:31:35:ff: 48:b8:e8:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1RTQxMTAvBgNVBAUTKDg1RUU5MDM4RkZDMzU0MUFCREZCN0REOUVEMzNGMkFB RTM3MkU3OEMwHhcNMjUxMjE2MjIyNzUwWhcNMjUxMjIzMjIyNzUwWjAYMRYwFAYD VQQDDA02OTQxZGNlNi0wOGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsBe2Rq5JwasLFQpSFkpcEWBMBDBxdAZfskL2h9PpftoGKSntxeDa0b66Zmh 1UHQpEwwqjpDEizB5+q4BetonAf126I6YGo60jnBdqPf1iUk0xC8yJGP3KqQ6irh zvHBnJ0CDiMP4Q8bCgth/e0Q+bpC0W1j4gNZzpx+F0KXcJ7KCKbBNlDtC6+7IITQ 5BlXfaXXBGVWZmAD4+f9hiicThcxPSlgIh5cgWYhMKUzF+zdd+o4CfigkGa1ZVtd coVfItuegHTQlNR4VxURIqxZzfwsq/+ScoUNoTANGHyR7KRpRNU/95sfeaIYhMsy 4QOewERNF3HjsuF0HcyWAC5YnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPLkR+4 1sKrTV2H/mp1rtNO3IeLMB8GA1UdIwQYMBaAFIXukDj/w1Qavft92e0z8qrjcueM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVFNC9FRDA3OURGRUUz ODQxMUVCQTg1OTNCNjVDNEY5QUUwMi9oZTZRT1BfRFZCcTktMzNaN1RQeXF1Tnk1 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNlFPUF9EVkJxOS0zM1o3VFB5cXVOeTU0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVFNC9FRDA3OURGRUUzODQxMUVCQTg1OTNCNjVDNEY5QUUwMi9oZTZRT1BfRFZC cTktMzNaN1RQeXF1Tnk1NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALk7ZKxmceyTQWzxr+f44w+986OqHh06Hcc/RPb9A/7qszfdi9uvBE uced7m+hot1EmJoPUeqri7qaqwLWJdz08iIOUGEgzC68bYqao2xgp+5f8fB51gDH cfk6uqE1xfBzxAgX6HZ37SyfYOsMtxmdvvHI7lO/URxF+78RNWIv7oKfNsrJUidB wxQGM6vExwX4Btkhz+V4oFup9zQj7h72H6/YAHxoVfM/nD2ebTwVujkFWIlUjavz Xhk3d+rq2IbEW+L99Mjr8k0ZUQSr8TbpzYL2WQUHPRpsmmmxqrAQrypFhI5yuAeS QNLW1PZvE4D9E0vrgzLmsIkxNf9IuOjt -----END CERTIFICATE-----Generated at Wed Dec 17 16:41:43 2025 by rpki-client