This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft File: HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft (raw, json) Hash identifier: 1hQMnTJj4vMEMzZ7N9xrNXLtsFj8RsYHr/ZqtJfH7MM= Subject key identifier: 03:2A:AE:F9:E6:43:2E:C8:2D:E8:51:B0:66:67:B9:41:3B:D8:9E:83 Authority key identifier: 1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A Certificate issuer: /CN=A91707D0/serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft Manifest number: 91 Signing time: Tue 23 Dec 2025 05:26:02 +0000 Manifest this update: Tue 23 Dec 2025 05:26:02 +0000 Manifest next update: Tue 30 Dec 2025 05:26:02 +0000 Files and hashes: 1: HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl (hash: 43gsb5FxxTfZMUGXDBEO2DsVazapnIUWYa8IhSDypeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91707D0, serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A Validity Not Before: Dec 23 05:26:02 2025 GMT Not After : Dec 30 05:26:02 2025 GMT Subject: CN=694a27ea-8442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:96:38:10:a7:3d:17:94:31:21:58:14:87:1c: 37:59:a5:e5:ba:0f:41:e1:dd:36:6d:8a:dc:3e:9d: c5:b3:15:73:85:fd:38:4c:ec:8c:1b:4a:de:84:fb: 27:e3:73:f9:44:16:cf:9c:4e:d2:9e:f2:88:28:a5: 89:27:73:33:0e:da:46:62:47:67:f1:73:d9:6f:42: 92:58:80:06:81:91:13:9f:21:88:97:7d:64:08:e5: 95:1a:7c:bb:82:aa:63:fa:ef:4e:22:3d:d8:e0:0a: 41:c9:22:46:0a:c7:29:6b:a6:46:0d:64:6d:30:e1: 37:5f:b7:a3:b7:e9:91:3c:e2:06:d8:41:a8:50:8b: 17:1c:88:c8:18:27:e3:36:8c:e7:d5:c1:2d:9e:17: 91:f1:72:8e:b4:c3:52:c5:76:8a:55:ed:4b:0d:c3: 66:ea:66:40:59:b1:79:5e:82:ed:0b:ac:2d:e5:9f: 8f:cc:71:3c:e6:0c:ef:0c:16:e6:b3:73:81:b1:d7: 2d:5d:f8:05:79:37:1a:a9:f6:f3:86:78:e5:16:12: 7d:31:35:42:38:07:4b:eb:b9:f6:d6:61:2f:6b:99: 0d:65:50:34:3d:62:7a:67:7b:b0:6a:2c:ab:f3:15: f7:54:b0:b2:99:d3:ad:a0:a8:07:29:50:c9:60:72: cf:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2A:AE:F9:E6:43:2E:C8:2D:E8:51:B0:66:67:B9:41:3B:D8:9E:83 X509v3 Authority Key Identifier: keyid:1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:e1:95:bd:3c:fd:88:1d:b2:ab:f9:39:ba:96:8c:bc:bc:27: d4:49:29:25:97:56:71:03:41:9a:87:b4:62:21:95:bc:b2:48: 47:62:43:4f:75:4c:a7:5c:4b:e1:a2:7b:a8:ec:91:41:44:db: 00:71:4e:43:bd:91:7e:d7:1a:1c:2a:89:3c:f0:d9:0f:56:00: 16:50:b7:e2:a3:80:38:ad:ce:7f:60:06:cf:f1:37:d8:13:e7: 47:2a:4e:43:19:9c:68:0e:b4:5d:19:8a:c1:06:f8:35:7a:53: 07:b1:b0:f8:43:8b:53:5d:08:e9:b0:3e:05:5d:f6:39:36:3f: 8d:b8:72:54:7b:60:2e:74:61:5d:9f:d2:9f:71:aa:fa:dc:12: f9:f2:5f:b7:d5:5e:04:0c:77:fa:43:3a:6f:69:f5:0e:00:42: 9e:71:48:2f:9c:60:60:71:fd:de:e6:5b:cd:ab:09:e5:65:d5: d7:c3:47:d7:68:c7:46:00:7f:22:7c:0a:81:1e:39:46:8f:19: 99:19:b8:6f:39:63:36:63:2b:a2:d0:c5:e6:ea:ad:1c:54:98: e0:cc:1b:b8:91:4e:cd:6e:ce:31:e1:32:fd:06:6e:fa:06:27: 63:07:92:d7:82:1f:a6:e3:29:b4:53:20:10:73:f0:e9:bf:b4: 33:65:55:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA3RDAxMTAvBgNVBAUTKDFENjM0MTZDNDczQjBDMDkxMkJEQUIzNzEwMjcwMTA5 NUZDNkMzNUEwHhcNMjUxMjIzMDUyNjAyWhcNMjUxMjMwMDUyNjAyWjAYMRYwFAYD VQQDDA02OTRhMjdlYS04NDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJY4EKc9F5QxIVgUhxw3WaXlug9B4d02bYrcPp3FsxVzhf04TOyMG0rehPsn 43P5RBbPnE7SnvKIKKWJJ3MzDtpGYkdn8XPZb0KSWIAGgZETnyGIl31kCOWVGny7 gqpj+u9OIj3Y4ApBySJGCscpa6ZGDWRtMOE3X7ejt+mRPOIG2EGoUIsXHIjIGCfj Nozn1cEtnheR8XKOtMNSxXaKVe1LDcNm6mZAWbF5XoLtC6wt5Z+PzHE85gzvDBbm s3OBsdctXfgFeTcaqfbzhnjlFhJ9MTVCOAdL67n21mEva5kNZVA0PWJ6Z3uwaiyr 8xX3VLCymdOtoKgHKVDJYHLP+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMqrvnm Qy7ILehRsGZnuUE72J6DMB8GA1UdIwQYMBaAFB1jQWxHOwwJEr2rNxAnAQlfxsNa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDdEMC82NUI2OEU5NjAw NzIxMUYwQjM2M0RGNUVDNEY5QUUwMi9IV05CYkVjN0RBa1N2YXMzRUNjQkNWX0d3 MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXTkJiRWM3REFrU3ZhczNFQ2NCQ1ZfR3cxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDdEMC82NUI2OEU5NjAwNzIxMUYwQjM2M0RGNUVDNEY5QUUwMi9IV05CYkVjN0RB a1N2YXMzRUNjQkNWX0d3MW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA4ZW9PP2IHbKr+Tm6loy8vCfUSSkll1ZxA0Gah7RiIZW8skhHYkNP dUynXEvhonuo7JFBRNsAcU5DvZF+1xocKok88NkPVgAWULfio4A4rc5/YAbP8TfY E+dHKk5DGZxoDrRdGYrBBvg1elMHsbD4Q4tTXQjpsD4FXfY5Nj+NuHJUe2AudGFd n9Kfcar63BL58l+31V4EDHf6QzpvafUOAEKecUgvnGBgcf3e5lvNqwnlZdXXw0fX aMdGAH8ifAqBHjlGjxmZGbhvOWM2Yyui0MXm6q0cVJjgzBu4kU7Nbs4x4TL9Bm76 BidjB5LXgh+m4ym0UyAQc/Dpv7QzZVVU -----END CERTIFICATE-----Generated at Wed Dec 24 19:26:57 2025 by rpki-client