This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.mft File: _HSyXA2tiT4Z5SLa2dnAEuuC9Yk.mft (raw, json) Hash identifier: 12STH4ZQosFMwdPjsgoeq5eKQ4klESmwrb4rbWJmVfo= Subject key identifier: B4:29:30:5D:BB:E4:C3:6E:E2:A6:01:B3:DA:3E:E4:A8:89:9B:B1:69 Authority key identifier: FC:74:B2:5C:0D:AD:89:3E:19:E5:22:DA:D9:D9:C0:12:EB:82:F5:89 Certificate issuer: /CN=A91316B0/serialNumber=FC74B25C0DAD893E19E522DAD9D9C012EB82F589 Certificate serial: 04C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.mft Manifest number: 05E2 Signing time: Thu 18 Dec 2025 23:22:53 +0000 Manifest this update: Thu 18 Dec 2025 23:22:52 +0000 Manifest next update: Thu 25 Dec 2025 23:22:52 +0000 Files and hashes: 1: _HSyXA2tiT4Z5SLa2dnAEuuC9Yk.crl (hash: hEksh7iuySRq4PxjZl6Hc8Q22qpmT5kloMj7BCfqL8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.crl rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1216 (0x4c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91316B0, serialNumber=FC74B25C0DAD893E19E522DAD9D9C012EB82F589 Validity Not Before: Dec 18 23:22:52 2025 GMT Not After : Dec 25 23:22:52 2025 GMT Subject: CN=69448ccc-e84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:99:e7:33:a3:6a:34:d3:61:09:44:dc:51:cb: 47:7b:c8:fc:d5:2c:f8:24:9d:1b:fb:ba:e9:38:36: bb:52:d6:a6:88:a1:d2:23:52:e5:82:86:0c:da:e1: 1d:b8:c1:6e:db:be:85:c8:13:3a:97:09:c3:16:f6: db:4d:e4:27:8d:29:3f:1c:79:c9:bf:8a:43:35:c5: a1:75:a8:16:e8:46:a5:ff:3e:e8:9c:65:d8:89:b9: 04:14:b8:76:68:a5:ed:8f:d3:98:9a:7c:3e:cb:d4: 97:b2:5e:ea:05:0e:7f:e9:28:a3:cf:02:a6:d4:d1: de:57:d9:a9:2f:84:5b:2e:eb:3b:aa:40:d3:25:9f: 3e:19:44:a5:71:16:62:ed:60:05:7d:e5:48:f2:69: ac:06:ff:b5:57:64:f0:6c:aa:4f:c7:67:10:a4:2a: c1:16:fb:98:ab:49:7b:80:9a:0d:23:19:1f:67:75: b8:58:57:0b:e7:bd:5a:fb:52:bc:8b:8f:f2:f8:7f: 89:73:6d:c2:e2:fe:83:1c:22:00:79:51:86:62:14: 3f:ae:27:78:31:d3:97:b8:21:cc:ca:7c:d6:88:4c: 9e:1d:b7:e7:24:3f:3e:63:a5:bd:b6:27:c5:50:e6: 6e:33:f2:48:59:4a:fe:bd:aa:ea:24:92:b3:69:5e: 0b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:29:30:5D:BB:E4:C3:6E:E2:A6:01:B3:DA:3E:E4:A8:89:9B:B1:69 X509v3 Authority Key Identifier: keyid:FC:74:B2:5C:0D:AD:89:3E:19:E5:22:DA:D9:D9:C0:12:EB:82:F5:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:8d:40:c6:b3:39:04:09:87:fa:e2:db:e3:5d:da:86:13:ef: 70:e0:dd:59:13:2a:f4:cf:f2:eb:18:9f:e2:26:15:e4:e3:cc: d5:6b:1d:57:10:34:fe:9a:2a:7f:60:35:3c:fa:06:a1:82:92: bb:7e:f2:fe:9c:8d:65:df:d5:3b:4e:70:f3:3d:da:98:7f:01: 43:c4:3e:05:67:29:33:41:55:43:43:1e:41:87:4a:f3:fa:5e: be:1f:dd:5c:54:21:90:22:7d:d9:7c:01:2e:58:18:7b:b3:dd: 49:e3:d0:ea:4b:1e:94:02:bd:28:e6:63:da:7d:50:65:b8:ec: c5:8c:a9:b4:a8:87:30:67:9a:c4:20:a1:79:cb:87:f2:a8:de: 29:98:e8:1d:61:a3:7a:ce:73:55:af:b3:22:2d:a9:f9:a3:e3: 70:0c:83:35:c8:aa:44:20:37:4a:a4:44:2f:b8:de:9c:1a:a4: 14:88:d8:ea:4f:fe:5a:a3:81:f7:48:fb:22:34:a4:9e:91:8b: 56:3d:e0:6e:46:d9:ec:83:48:8d:ad:ab:3c:ea:1d:f9:94:62: f9:5b:7e:57:f9:01:01:25:27:05:af:c8:13:37:13:1d:42:e6: ad:61:10:b8:2e:ee:99:e3:58:6c:93:17:42:22:6f:e3:35:16: 99:dc:01:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MzE2QjAxMTAvBgNVBAUTKEZDNzRCMjVDMERBRDg5M0UxOUU1MjJEQUQ5RDlDMDEy RUI4MkY1ODkwHhcNMjUxMjE4MjMyMjUyWhcNMjUxMjI1MjMyMjUyWjAYMRYwFAYD VQQDDA02OTQ0OGNjYy1lODRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZnnM6NqNNNhCUTcUctHe8j81Sz4JJ0b+7rpODa7UtamiKHSI1LlgoYM2uEd uMFu276FyBM6lwnDFvbbTeQnjSk/HHnJv4pDNcWhdagW6Eal/z7onGXYibkEFLh2 aKXtj9OYmnw+y9SXsl7qBQ5/6SijzwKm1NHeV9mpL4RbLus7qkDTJZ8+GUSlcRZi 7WAFfeVI8mmsBv+1V2TwbKpPx2cQpCrBFvuYq0l7gJoNIxkfZ3W4WFcL571a+1K8 i4/y+H+Jc23C4v6DHCIAeVGGYhQ/rid4MdOXuCHMynzWiEyeHbfnJD8+Y6W9tifF UOZuM/JIWUr+varqJJKzaV4L7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQpMF27 5MNu4qYBs9o+5KiJm7FpMB8GA1UdIwQYMBaAFPx0slwNrYk+GeUi2tnZwBLrgvWJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZCMC8yMzM3RjIzMjVF M0UxMUVDQTFGRkVCNENDNEY5QUUwMi9fSFN5WEEydGlUNFo1U0xhMmRuQUV1dUM5 WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19IU3lYQTJ0aVQ0WjVTTGEyZG5BRXV1QzlZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTZCMC8yMzM3RjIzMjVFM0UxMUVDQTFGRkVCNENDNEY5QUUwMi9fSFN5WEEydGlU NFo1U0xhMmRuQUV1dUM5WWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGjUDGszkECYf64tvjXdqGE+9w4N1ZEyr0z/LrGJ/iJhXk48zVax1X EDT+mip/YDU8+gahgpK7fvL+nI1l39U7TnDzPdqYfwFDxD4FZykzQVVDQx5Bh0rz +l6+H91cVCGQIn3ZfAEuWBh7s91J49DqSx6UAr0o5mPafVBluOzFjKm0qIcwZ5rE IKF5y4fyqN4pmOgdYaN6znNVr7MiLan5o+NwDIM1yKpEIDdKpEQvuN6cGqQUiNjq T/5ao4H3SPsiNKSekYtWPeBuRtnsg0iNras86h35lGL5W35X+QEBJScFr8gTNxMd QuatYRC4Lu6Z41hskxdCIm/jNRaZ3AEr -----END CERTIFICATE-----Generated at Fri Dec 19 08:10:08 2025 by rpki-client