This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft File: HSQuN7enRsN-RUFFarAJiztXPPw.mft (raw, json) Hash identifier: eL123Rzf5b2A1wAKuB8Iwr19F0y1DiasX48d3ybf1WU= Subject key identifier: 92:09:26:BD:1E:61:F3:BD:5C:11:AD:29:64:84:52:F0:76:2F:CB:4D Authority key identifier: 1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC Certificate issuer: /CN=A9142EA4/serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft Manifest number: 52 Signing time: Sun 21 Dec 2025 06:18:15 +0000 Manifest this update: Sun 21 Dec 2025 06:18:14 +0000 Manifest next update: Sun 28 Dec 2025 06:18:14 +0000 Files and hashes: 1: HSQuN7enRsN-RUFFarAJiztXPPw.crl (hash: VlPvhHM801Sz6YxfLMHXlL+qbVKyJxsANjVeGkrGt2U=) 2: 96E040E063B211F09B18DA38C4F9AE02.roa (hash: RBJCVf8Vhn27huQa1u7FR3jz192DVTd/ur20Jj+Crn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142EA4, serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC Validity Not Before: Dec 21 06:18:14 2025 GMT Not After : Dec 28 06:18:14 2025 GMT Subject: CN=69479127-c39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:25:02:4b:a0:f3:55:57:0d:35:4a:eb:fb:86: eb:74:bf:fc:fa:29:72:f6:be:e9:34:b6:97:5d:5e: 47:fb:78:63:ce:98:5c:4e:a7:a4:3e:ed:96:45:7e: 45:9b:93:57:17:57:6e:da:6a:66:f9:b4:56:34:2f: ac:20:41:83:81:98:2c:8c:19:42:68:d9:41:15:f8: f9:c4:77:84:3a:35:8f:40:91:b1:44:90:c8:f4:a7: 65:88:54:f4:e5:de:fc:57:ec:76:1a:1f:9a:f2:ca: bd:3c:33:a6:16:9e:ad:fb:7c:e5:ad:51:3a:5e:76: 47:58:d3:91:4b:42:9b:7e:0e:a3:25:99:24:9d:77: da:93:1d:58:fa:8a:92:65:30:a8:c2:1f:08:75:d6: 8f:ed:2a:d2:4c:34:fe:b7:92:e4:e2:01:00:b5:e0: ec:ac:74:62:7a:51:34:d5:c6:f8:f2:33:9b:ab:8c: 14:8a:c6:d9:70:ae:5d:e9:ae:9f:35:ca:77:16:1b: c5:6d:52:82:cc:f3:45:95:6e:7c:3c:be:7d:b2:e4: 48:b8:25:a6:e8:13:ec:b9:cd:2f:aa:95:18:89:4d: ba:9a:73:b3:bf:6a:92:89:c7:bc:8d:1c:18:1a:87: e1:bc:85:41:88:97:20:cd:9a:3d:11:0b:14:a0:c5: 95:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:09:26:BD:1E:61:F3:BD:5C:11:AD:29:64:84:52:F0:76:2F:CB:4D X509v3 Authority Key Identifier: keyid:1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:1d:bb:a0:b4:27:20:b7:84:c9:0f:b5:1d:4c:6e:70:43:71: 10:53:cf:74:67:25:07:4e:71:23:d2:65:44:24:ef:76:0a:59: a0:d6:70:27:9c:98:53:cd:40:9f:c9:d3:82:c7:b1:7f:71:be: 01:9d:4f:b5:83:44:5f:0e:1c:1c:d7:0b:44:ae:27:0a:a3:0a: 52:c7:f6:a5:9f:b1:54:46:9b:5e:80:28:cc:2a:d1:3f:c6:8d: dd:0c:37:0b:02:6d:a2:ea:0b:ff:57:6c:ff:6a:6b:2e:b7:d9: a0:1d:2e:78:4e:ce:12:d3:31:fc:da:a1:01:8d:3c:d1:ff:c7: 4a:2f:3a:98:74:c6:d9:3a:a9:86:53:f1:54:f3:b7:82:e1:0e: d7:90:6b:dd:b7:eb:65:43:9d:a6:94:ba:e8:bf:1e:45:ca:e4: 37:d6:23:ab:bd:5f:6d:1f:c7:88:0e:ae:79:3b:f2:33:13:18: 6f:e0:9a:b1:61:f8:1f:69:10:71:13:8a:38:6d:d7:44:c2:91: 86:5c:15:af:92:32:ae:5b:67:2f:e4:2c:80:5b:4a:6c:9e:fe: 18:23:3b:41:df:ae:e1:5c:23:d1:c4:f3:fb:5c:5e:06:f3:a7: de:ed:95:96:d5:94:ca:e0:07:8e:7b:a7:2f:ee:65:e3:b3:68: 8e:5f:c8:ff -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkVBNDExMC8GA1UEBRMoMUQyNDJFMzdCN0E3NDZDMzdFNDU0MTQ1NkFCMDA5OEIz QjU3M0NGQzAeFw0yNTEyMjEwNjE4MTRaFw0yNTEyMjgwNjE4MTRaMBgxFjAUBgNV BAMMDTY5NDc5MTI3LWMzOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOJQJLoPNVVw01Suv7hut0v/z6KXL2vuk0tpddXkf7eGPOmFxOp6Q+7ZZFfkWb k1cXV27aamb5tFY0L6wgQYOBmCyMGUJo2UEV+PnEd4Q6NY9AkbFEkMj0p2WIVPTl 3vxX7HYaH5ryyr08M6YWnq37fOWtUTpedkdY05FLQpt+DqMlmSSdd9qTHVj6ipJl MKjCHwh11o/tKtJMNP63kuTiAQC14OysdGJ6UTTVxvjyM5urjBSKxtlwrl3prp81 yncWG8VtUoLM80WVbnw8vn2y5Ei4JaboE+y5zS+qlRiJTbqac7O/apKJx7yNHBga h+G8hUGIlyDNmj0RCxSgxZV1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkgkmvR5h 871cEa0pZIRS8HYvy00wHwYDVR0jBBgwFoAUHSQuN7enRsN+RUFFarAJiztXPPww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyRUE0LzI2NERDRjFDNjNB RjExRjA4RTAwMkI0Q0M0RjlBRTAyL0hTUXVON2VuUnNOLVJVRkZhckFKaXp0WFBQ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFNRdU43ZW5Sc04tUlVGRmFyQUppenRYUFB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy RUE0LzI2NERDRjFDNjNBRjExRjA4RTAwMkI0Q0M0RjlBRTAyL0hTUXVON2VuUnNO LVJVRkZhckFKaXp0WFBQdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMwdu6C0JyC3hMkPtR1MbnBDcRBTz3RnJQdOcSPSZUQk73YKWaDWcCec mFPNQJ/J04LHsX9xvgGdT7WDRF8OHBzXC0SuJwqjClLH9qWfsVRGm16AKMwq0T/G jd0MNwsCbaLqC/9XbP9qay632aAdLnhOzhLTMfzaoQGNPNH/x0ovOph0xtk6qYZT 8VTzt4LhDteQa92362VDnaaUuui/HkXK5DfWI6u9X20fx4gOrnk78jMTGG/gmrFh +B9pEHETijht10TCkYZcFa+SMq5bZy/kLIBbSmye/hgjO0HfruFcI9HE8/tcXgbz p97tlZbVlMrgB457py/uZeOzaI5fyP8= -----END CERTIFICATE-----Generated at Mon Dec 22 16:12:32 2025 by rpki-client