This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft File: hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft (raw, json) Hash identifier: alOJGEB23mFg9VE+JKih4wSSNnQ8KVzhHDzFpPhG5ds= Subject key identifier: 1B:06:23:6A:B7:51:AA:13:02:0D:7B:94:EB:AB:F8:B6:5E:9F:24:99 Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 Certificate issuer: /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Certificate serial: 14FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft Manifest number: 14E6 Signing time: Mon 22 Dec 2025 16:35:32 +0000 Manifest this update: Mon 22 Dec 2025 16:35:31 +0000 Manifest next update: Mon 29 Dec 2025 16:35:31 +0000 Files and hashes: 1: hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl (hash: rm4vlsg+B44OiReyljSdLRx36/iZEhnEBWiH5u7bUZM=) 2: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (hash: sssgK3vIBFp/UdQrFapnnIl7ysOjPiidhJgxP2Ewfsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5374 (0x14fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193F75, serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Validity Not Before: Dec 22 16:35:31 2025 GMT Not After : Dec 29 16:35:31 2025 GMT Subject: CN=69497353-d5c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a4:f4:34:d8:32:73:ff:44:d5:cf:85:68:94: 6a:96:31:cb:92:60:d2:0d:03:b0:70:54:98:53:14: f3:f6:91:47:23:0c:fc:18:f7:12:e5:b4:d9:88:fd: 15:02:b0:b7:b8:7c:a9:7b:63:8c:91:89:43:ba:e4: 6b:f5:e0:16:31:da:7d:cc:08:e2:f4:05:34:be:43: 7f:aa:43:8b:17:2b:1e:c0:72:a7:fb:5c:9f:86:47: 9d:22:92:18:08:27:39:cc:04:2d:78:6f:9a:ac:da: 24:5b:83:7c:d7:45:d7:1c:97:0d:cb:ba:d2:de:61: 86:7a:03:7b:58:eb:c2:3c:36:26:ac:9c:db:18:b9: 56:1e:c5:5e:f0:1e:a3:93:f6:20:e8:1f:69:e2:62: 3c:7a:07:b5:f1:50:45:b2:bc:7c:af:9a:d3:db:bc: 12:25:01:b2:3b:bb:98:12:39:e4:a8:4f:43:97:12: 97:60:89:1a:2f:87:1e:dd:8d:dc:e4:28:f1:b7:c6: 8c:e9:62:a3:be:17:64:3d:64:9c:fc:43:aa:59:9a: 57:9f:e4:a8:bf:a5:1c:c7:a2:7b:61:1f:e6:25:72: 4e:64:83:f4:32:64:8b:db:8e:d0:98:e5:ec:ae:a5: 84:40:83:0d:c3:5d:0b:42:ef:83:39:b8:12:68:31: 6a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:06:23:6A:B7:51:AA:13:02:0D:7B:94:EB:AB:F8:B6:5E:9F:24:99 X509v3 Authority Key Identifier: keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:d5:98:bd:6c:2c:b1:ae:8b:87:66:5a:7d:02:91:46:c5:92: e5:a8:7d:a5:49:0c:09:39:32:61:3f:8f:f2:a0:09:5c:fc:d2: 9b:ef:9f:01:5f:17:e5:08:a5:93:8a:a3:87:ec:69:e7:4f:f7: b3:6a:ab:33:fd:bd:89:d8:c7:89:a6:d1:5f:85:86:e3:ee:19: 18:ac:6a:5d:b6:bd:d0:d4:55:a0:97:3c:0f:6e:46:22:d5:eb: 2e:c3:d3:b2:46:08:ff:c8:10:86:20:ff:dd:37:56:24:9a:c7: 13:ad:2a:d0:96:c9:10:3c:b8:0a:7c:e8:ae:3f:b4:52:f1:ea: b7:05:cb:a6:02:df:89:79:e6:d1:81:08:e9:76:36:87:73:e9: c0:23:c8:2b:bb:72:36:2f:71:22:59:08:48:3f:1d:93:c6:0e: c2:29:3f:8d:8f:2a:84:24:31:c4:45:4f:eb:85:24:32:ec:e0: 07:c8:90:79:b2:a2:a2:56:2d:8a:a6:3f:1f:3d:d2:9f:80:34: 73:1b:e0:99:43:7a:23:dc:cd:67:65:d6:96:7c:ad:df:b9:8a: 5f:b3:af:32:6f:ea:82:2a:66:34:d9:1e:e8:2e:a0:65:6d:13: fa:d2:b3:4e:13:1b:a9:9c:46:a6:35:d0:39:1a:00:78:ca:44: 51:10:a0:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNGNzUxMTAvBgNVBAUTKDg2N0M5NTFBQTY4Q0MxODdFNDI2QkQxRjU2MUMwQzlE QTk1ODFEMjQwHhcNMjUxMjIyMTYzNTMxWhcNMjUxMjI5MTYzNTMxWjAYMRYwFAYD VQQDDA02OTQ5NzM1My1kNWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqT0NNgyc/9E1c+FaJRqljHLkmDSDQOwcFSYUxTz9pFHIwz8GPcS5bTZiP0V ArC3uHype2OMkYlDuuRr9eAWMdp9zAji9AU0vkN/qkOLFysewHKn+1yfhkedIpIY CCc5zAQteG+arNokW4N810XXHJcNy7rS3mGGegN7WOvCPDYmrJzbGLlWHsVe8B6j k/Yg6B9p4mI8ege18VBFsrx8r5rT27wSJQGyO7uYEjnkqE9DlxKXYIkaL4ce3Y3c 5Cjxt8aM6WKjvhdkPWSc/EOqWZpXn+Sov6Ucx6J7YR/mJXJOZIP0MmSL247QmOXs rqWEQIMNw10LQu+DObgSaDFqywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsGI2q3 UaoTAg17lOur+LZenySZMB8GA1UdIwQYMBaAFIZ8lRqmjMGH5Ca9H1YcDJ2pWB0k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Y3NS83MjA2RDZGNDZD NkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZZmtKcjBmVmh3TW5hbFlI U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hueVZHcWFNd1lma0pyMGZWaHdNbmFsWUhTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0Y3NS83MjA2RDZGNDZDNkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZ ZmtKcjBmVmh3TW5hbFlIU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW1Zi9bCyxrouHZlp9ApFGxZLlqH2lSQwJOTJhP4/yoAlc/NKb758B XxflCKWTiqOH7GnnT/ezaqsz/b2J2MeJptFfhYbj7hkYrGpdtr3Q1FWglzwPbkYi 1esuw9OyRgj/yBCGIP/dN1YkmscTrSrQlskQPLgKfOiuP7RS8eq3BcumAt+JeebR gQjpdjaHc+nAI8gru3I2L3EiWQhIPx2Txg7CKT+NjyqEJDHERU/rhSQy7OAHyJB5 sqKiVi2Kpj8fPdKfgDRzG+CZQ3oj3M1nZdaWfK3fuYpfs68yb+qCKmY02R7oLqBl bRP60rNOExupnEamNdA5GgB4ykRREKDg -----END CERTIFICATE-----Generated at Tue Dec 23 00:24:03 2025 by rpki-client