This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft File: he6QOP_DVBq9-33Z7TPyquNy54w.mft (raw, json) Hash identifier: xgxcfUpNiNSQptncu1zw8ggk+q/sSHDKFu//kmWgUto= Subject key identifier: A3:13:09:23:95:53:5D:6B:DB:39:F0:DF:15:33:83:58:9A:00:24:1C Authority key identifier: 85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C Certificate issuer: /CN=A91FF5E4/serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C Certificate serial: 05E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft Manifest number: 05D6 Signing time: Thu 04 Dec 2025 21:44:46 +0000 Manifest this update: Thu 04 Dec 2025 21:44:46 +0000 Manifest next update: Thu 11 Dec 2025 21:44:46 +0000 Files and hashes: 1: he6QOP_DVBq9-33Z7TPyquNy54w.crl (hash: ++LdsVYTOg1yEPe9aY6pHt2xxQGjZNVoW36KQTutzE4=) 2: 09182D38084E11EF89D29620C4F9AE02.roa (hash: Mr4cvAF99YsJ9vM3bpplyr/XjV6Oh9dCkUlGWW3glRM=) 3: A6EF097068F911F092D77151C4F9AE02.roa (hash: CVgVNZzRg+yoeNSO5TmorciwKychjnQza4bd4ni3W/0=) 4: 07FBA006084E11EF89D29620C4F9AE02.roa (hash: olIQCCewOfkMwGkHHOS/5ivD24pRNNt8XVcMGE/8pfs=) 5: 7AFCC818E38611EB8BC17765C4F9AE02.roa (hash: yhFTvnQ9OnQm5YRLzb7trt3j3jJDg72T+yloJnYuUVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:44:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1511 (0x5e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5E4, serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C Validity Not Before: Dec 4 21:44:46 2025 GMT Not After : Dec 11 21:44:46 2025 GMT Subject: CN=693200ce-eb27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:53:7a:78:04:4c:9d:5d:68:37:26:2d:5e:72: 2f:d2:8c:e6:fe:cd:13:7f:fd:14:be:10:00:b3:2f: 5c:ad:a9:80:3b:d7:3e:f8:b2:35:ba:74:15:91:d5: 53:58:07:29:8a:25:cc:d4:a7:ca:60:f2:12:99:46: 81:16:3a:e5:c8:e7:e7:df:e3:99:40:93:4f:16:21: aa:48:8f:79:43:b2:80:c0:b0:21:5a:5d:89:b9:11: d5:f9:65:cb:c2:cf:4b:16:68:5c:fe:91:78:05:87: 49:ff:8c:2e:72:6d:f8:33:c7:86:70:a1:ef:b2:69: eb:55:0d:0f:91:56:26:1e:4d:3c:92:38:91:dc:c7: f2:c4:f5:2e:7b:22:34:57:3a:bd:b2:e8:14:ba:b9: 63:a7:ea:8d:5e:5a:35:ca:8e:0e:c5:aa:5d:24:a6: 53:31:66:ee:20:89:98:6b:f3:9d:1f:fc:d5:df:9d: c5:d4:b9:4f:5b:d1:57:83:d9:9e:64:1a:2b:2d:ee: 52:81:5d:63:fd:e0:d2:56:15:ed:5d:3d:94:3c:87: 4f:54:72:9c:1e:8d:a7:3c:79:f8:40:76:be:97:da: ff:e9:66:b7:78:33:eb:84:f8:4f:f7:73:f1:13:fb: b5:73:2d:c8:ab:b8:c2:d5:2f:7c:5a:8e:f5:e2:40: cb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:13:09:23:95:53:5D:6B:DB:39:F0:DF:15:33:83:58:9A:00:24:1C X509v3 Authority Key Identifier: keyid:85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:56:a0:47:85:24:28:b6:43:ef:1c:cf:12:27:7b:37:bd:3a: c9:71:e0:3f:f2:66:a3:8a:90:d1:e7:11:9e:49:2a:42:3c:52: 2e:91:a3:9c:0b:3e:79:41:25:52:fc:52:6f:c7:eb:ba:81:f9: 10:92:b8:39:6c:bd:d1:06:9c:dd:37:a6:75:ce:10:64:b5:cc: 16:cf:1d:8c:bd:be:c5:e7:56:75:30:cf:48:e2:a0:af:2c:67: 3c:59:12:c2:42:1e:c7:7d:9e:81:92:ef:05:dc:83:6f:1c:81: dc:09:3d:55:89:12:b9:77:c1:46:70:45:14:6d:ca:f6:5d:3e: bf:d5:90:6b:4c:9e:ea:44:53:c8:86:59:95:09:bd:ab:14:bc: b5:bc:8a:d5:68:8e:5a:75:68:6c:61:77:47:34:5d:18:94:0b: 82:e6:0c:73:62:6b:8b:29:9d:f2:40:46:41:75:44:68:cf:6d: 09:ca:29:7e:2d:87:aa:b4:45:3d:0e:24:56:db:54:15:89:6b: f0:d7:4e:83:89:c1:d6:d5:d1:6c:87:f1:c7:b5:a6:ba:6a:7f: ce:05:fd:70:9f:90:d1:cb:5c:39:e6:52:2d:94:99:1c:98:a2: 28:62:bb:2c:6b:e0:0b:3f:b2:6f:bc:16:16:85:cc:e8:cc:7a: c8:61:7c:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1RTQxMTAvBgNVBAUTKDg1RUU5MDM4RkZDMzU0MUFCREZCN0REOUVEMzNGMkFB RTM3MkU3OEMwHhcNMjUxMjA0MjE0NDQ2WhcNMjUxMjExMjE0NDQ2WjAYMRYwFAYD VQQDEw02OTMyMDBjZS1lYjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVN6eARMnV1oNyYtXnIv0ozm/s0Tf/0UvhAAsy9cramAO9c++LI1unQVkdVT WAcpiiXM1KfKYPISmUaBFjrlyOfn3+OZQJNPFiGqSI95Q7KAwLAhWl2JuRHV+WXL ws9LFmhc/pF4BYdJ/4wucm34M8eGcKHvsmnrVQ0PkVYmHk08kjiR3MfyxPUueyI0 Vzq9sugUurljp+qNXlo1yo4OxapdJKZTMWbuIImYa/OdH/zV353F1LlPW9FXg9me ZBorLe5SgV1j/eDSVhXtXT2UPIdPVHKcHo2nPHn4QHa+l9r/6Wa3eDPrhPhP93Px E/u1cy3Iq7jC1S98Wo714kDLRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMTCSOV U11r2znw3xUzg1iaACQcMB8GA1UdIwQYMBaAFIXukDj/w1Qavft92e0z8qrjcueM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVFNC9FRDA3OURGRUUz ODQxMUVCQTg1OTNCNjVDNEY5QUUwMi9oZTZRT1BfRFZCcTktMzNaN1RQeXF1Tnk1 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNlFPUF9EVkJxOS0zM1o3VFB5cXVOeTU0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVFNC9FRDA3OURGRUUzODQxMUVCQTg1OTNCNjVDNEY5QUUwMi9oZTZRT1BfRFZC cTktMzNaN1RQeXF1Tnk1NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXVqBHhSQotkPvHM8SJ3s3vTrJceA/8majipDR5xGeSSpCPFIukaOc Cz55QSVS/FJvx+u6gfkQkrg5bL3RBpzdN6Z1zhBktcwWzx2Mvb7F51Z1MM9I4qCv LGc8WRLCQh7HfZ6Bku8F3INvHIHcCT1ViRK5d8FGcEUUbcr2XT6/1ZBrTJ7qRFPI hlmVCb2rFLy1vIrVaI5adWhsYXdHNF0YlAuC5gxzYmuLKZ3yQEZBdURoz20Jyil+ LYeqtEU9DiRW21QViWvw106DicHW1dFsh/HHtaa6an/OBf1wn5DRy1w55lItlJkc mKIoYrssa+ALP7JvvBYWhczozHrIYXyx -----END CERTIFICATE-----Generated at Sat Dec 6 18:25:39 2025 by rpki-client