This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft File: _hniRte_DjbyHipWt8mvtJ1Z1tQ.mft (raw, json) Hash identifier: zrBbCBMbY2sRjkIX9zRSxjXN1w1/KIoRXe6x8D8ej7M= Subject key identifier: CE:6E:C2:91:F1:61:3B:48:FF:5B:2D:2D:AA:EC:DA:A3:CF:0E:37:7E Authority key identifier: FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4 Certificate issuer: /CN=A91F30C0/serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4 Certificate serial: 0499 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft Manifest number: 0494 Signing time: Mon 22 Dec 2025 23:07:24 +0000 Manifest this update: Mon 22 Dec 2025 23:07:23 +0000 Manifest next update: Mon 29 Dec 2025 23:07:23 +0000 Files and hashes: 1: _hniRte_DjbyHipWt8mvtJ1Z1tQ.crl (hash: NPhVXU8BjlxoeIe+IEFUJiUgRPfr2rF/Nlz8H7r6yv4=) 2: 5DB5AFEE635C11ECB7C65C23C4F9AE02.roa (hash: fQ0lOTp636B6JzhaI+qZOzSOhRz2bX5jQhxvsBKg2Ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1177 (0x499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F30C0, serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4 Validity Not Before: Dec 22 23:07:23 2025 GMT Not After : Dec 29 23:07:23 2025 GMT Subject: CN=6949cf2c-bc13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9d:70:34:44:a5:1c:ae:77:a6:85:9e:a1:d0: 6d:1a:40:6f:db:29:98:43:fe:ad:77:6a:53:79:c9: f3:c5:50:f8:cf:ae:59:a4:0f:1e:ac:c2:13:e7:8c: e0:08:9e:43:b2:fc:22:18:fe:2a:d6:75:b5:1f:1b: 5b:53:6b:79:c8:0b:e9:09:fd:c2:f5:eb:77:64:c8: fb:62:7e:f2:d7:0b:ff:5c:01:71:70:06:4a:58:b8: 2e:33:5c:bf:95:2d:fc:68:18:39:3b:25:b8:22:26: d9:29:95:f1:2f:d8:cc:c8:b3:6f:0b:04:9b:2e:19: 83:fe:38:e6:61:69:4e:2d:ba:94:da:7b:e6:8d:09: fa:3d:61:f5:62:b2:12:f8:03:a8:6b:f0:ab:c2:41: cc:55:4d:17:a4:53:59:0f:2b:87:be:15:19:9d:2f: d2:6d:08:4b:aa:3e:be:99:10:59:17:c4:b6:da:c6: 0a:b0:e4:79:bf:99:4b:70:32:e8:f1:90:0c:7b:54: 72:7a:7f:ab:0b:87:1f:7e:12:c6:4a:a4:e2:eb:7e: 5a:19:b4:39:32:79:65:6b:95:47:3c:0f:1e:74:61: da:04:5e:e1:46:e0:a0:02:cc:ce:51:6f:89:d8:1a: a1:fd:2b:c1:9d:30:84:04:4d:ea:a2:33:28:1f:d0: 04:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6E:C2:91:F1:61:3B:48:FF:5B:2D:2D:AA:EC:DA:A3:CF:0E:37:7E X509v3 Authority Key Identifier: keyid:FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:4e:15:7c:84:9b:92:70:ba:c8:e1:ea:b8:46:87:ce:0f:4c: 09:a7:03:62:a6:dd:c3:d2:0b:e1:de:70:ad:a3:d7:ea:0f:af: c4:2e:ba:60:0d:06:1b:51:a9:c4:31:c4:65:57:32:5c:3f:7a: 9a:64:5e:98:83:f9:b2:ab:cc:b0:07:6f:6f:16:6e:c9:1f:ff: 1f:ae:9c:86:78:18:36:19:75:c3:b8:33:9b:a6:84:0e:4a:8e: 97:4f:7c:dc:e4:49:42:ae:48:51:c9:2a:6f:e1:d9:9e:47:69: 2d:74:97:a7:cd:d9:b6:4f:d8:cf:3a:44:2d:dc:ca:a6:8e:ef: 95:de:e8:53:98:0b:f6:bd:cc:e8:57:78:c2:eb:72:db:7d:23: 08:4e:0e:eb:e5:99:f1:f3:8f:e9:7f:74:94:93:a1:78:8c:3a: 9a:74:41:66:45:79:9c:8f:8f:8d:8e:42:f9:b0:0e:6c:86:33: 53:ef:47:82:2c:98:81:b4:20:64:71:d9:1e:80:11:40:13:ed: 9f:8a:5d:af:c1:19:fb:e2:9c:db:c7:7f:1e:a6:f5:76:96:af: d0:8b:e2:53:a3:0d:06:26:56:8e:69:19:f3:ff:a8:58:b9:9b: a8:07:96:20:24:13:29:9f:f4:7f:da:87:de:44:ec:0e:29:bc: 54:d0:d9:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RjMwQzAxMTAvBgNVBAUTKEZFMTlFMjQ2RDdCRjBFMzZGMjFFMkE1NkI3QzlBRkI0 OUQ1OUQ2RDQwHhcNMjUxMjIyMjMwNzIzWhcNMjUxMjI5MjMwNzIzWjAYMRYwFAYD VQQDDA02OTQ5Y2YyYy1iYzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsp1wNESlHK53poWeodBtGkBv2ymYQ/6td2pTecnzxVD4z65ZpA8erMIT54zg CJ5DsvwiGP4q1nW1HxtbU2t5yAvpCf3C9et3ZMj7Yn7y1wv/XAFxcAZKWLguM1y/ lS38aBg5OyW4IibZKZXxL9jMyLNvCwSbLhmD/jjmYWlOLbqU2nvmjQn6PWH1YrIS +AOoa/CrwkHMVU0XpFNZDyuHvhUZnS/SbQhLqj6+mRBZF8S22sYKsOR5v5lLcDLo 8ZAMe1Ryen+rC4cffhLGSqTi635aGbQ5Mnlla5VHPA8edGHaBF7hRuCgAszOUW+J 2Bqh/SvBnTCEBE3qojMoH9AEswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM5uwpHx YTtI/1stLars2qPPDjd+MB8GA1UdIwQYMBaAFP4Z4kbXvw428h4qVrfJr7SdWdbU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzBDMC8zODdFODYzQzYz NTgxMUVDQjgyRTNCNENDNEY5QUUwMi9faG5pUnRlX0RqYnlIaXBXdDhtdnRKMVox dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19obmlSdGVfRGpieUhpcFd0OG12dEoxWjF0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzBDMC8zODdFODYzQzYzNTgxMUVDQjgyRTNCNENDNEY5QUUwMi9faG5pUnRlX0Rq YnlIaXBXdDhtdnRKMVoxdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvThV8hJuScLrI4eq4RofOD0wJpwNipt3D0gvh3nCto9fqD6/ELrpg DQYbUanEMcRlVzJcP3qaZF6Yg/myq8ywB29vFm7JH/8frpyGeBg2GXXDuDObpoQO So6XT3zc5ElCrkhRySpv4dmeR2ktdJenzdm2T9jPOkQt3Mqmju+V3uhTmAv2vczo V3jC63LbfSMITg7r5Znx84/pf3SUk6F4jDqadEFmRXmcj4+NjkL5sA5shjNT70eC LJiBtCBkcdkegBFAE+2fil2vwRn74pzbx38epvV2lq/Qi+JTow0GJlaOaRnz/6hY uZuoB5YgJBMpn/R/2ofeROwOKbxU0Nmv -----END CERTIFICATE-----Generated at Tue Dec 23 10:06:07 2025 by rpki-client