This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft File: hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft (raw, json) Hash identifier: MjsLnX4yvh16obrYp2ArSYHLMkFUNJ7t3w9pcngxs5g= Subject key identifier: 86:DF:B9:4F:8B:34:6C:10:FF:B7:1B:96:C6:83:3E:AE:DB:A6:E8:B8 Authority key identifier: 85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB Certificate issuer: /CN=A91958BE/serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB Certificate serial: 0208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft Manifest number: 0202 Signing time: Sun 07 Dec 2025 00:55:32 +0000 Manifest this update: Sun 07 Dec 2025 00:55:32 +0000 Manifest next update: Sun 14 Dec 2025 00:55:32 +0000 Files and hashes: 1: hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl (hash: RW3Lpy3PXubFUm6vQ1rnnol+4i9ndt6UMmwdA9Ly8ag=) 2: 54FB2C8CD61711EEB983D919C4F9AE02.roa (hash: JeP8VoOcpiutGG7hGzbyaQvIgNDCVBOYu3S0WeuVu3E=) 3: 5576D030D61711EEB983D919C4F9AE02.roa (hash: UaaSyqLY1EU1feMuBNb93HrMgg8A6BJd78TyE8+TiZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91958BE, serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB Validity Not Before: Dec 7 00:55:32 2025 GMT Not After : Dec 14 00:55:32 2025 GMT Subject: CN=6934d084-7cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:00:ab:bd:0c:b0:ee:19:28:79:a5:1e:53:79: 77:b4:0d:d8:85:9e:25:73:13:3a:01:7f:6c:5e:fc: 0c:18:b8:59:ed:63:9a:84:fc:60:78:7a:3f:32:2f: d1:a5:24:c1:7a:5e:bd:de:2f:2b:45:c3:89:58:dc: 90:0a:0b:52:cd:01:88:43:7b:8d:ad:07:72:02:ee: 14:7e:b6:7b:cf:a2:37:b3:46:07:de:35:f1:6c:4d: 95:5f:df:75:a0:67:1f:70:e7:c2:c2:57:6d:9f:53: e6:ff:66:bb:1c:67:d9:7f:38:fb:40:64:08:9d:2f: af:38:f0:91:20:73:3b:ce:9d:ca:4d:af:f6:ad:db: 15:03:f3:b7:12:b2:29:5e:20:63:65:55:df:06:bb: a6:63:5c:46:3c:d2:78:32:e3:0c:73:0f:5f:fd:80: 53:78:ea:22:67:3b:e0:19:9b:9b:2a:cd:38:3c:f0: 42:93:28:21:77:9f:3c:64:b2:5d:45:93:f0:0f:20: b2:24:3b:69:62:bd:9a:1c:77:3a:d3:d5:fe:9b:47: 29:83:39:80:d5:4f:fd:d4:5e:2e:c6:3e:bd:06:90: 6d:eb:e9:b7:d9:53:ba:04:b5:3f:98:7a:fb:25:40: dc:4c:60:c9:e8:1a:3e:f4:42:01:89:d6:67:d8:be: d9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DF:B9:4F:8B:34:6C:10:FF:B7:1B:96:C6:83:3E:AE:DB:A6:E8:B8 X509v3 Authority Key Identifier: keyid:85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:65:58:d1:bd:b2:e9:28:1b:53:92:c1:e3:77:a6:80:46:bb: 37:85:0f:bf:2e:d0:72:e6:15:1f:03:f9:c7:29:ae:a6:43:72: 1a:76:22:4d:b2:ec:32:6e:e2:fb:bb:43:5b:00:17:09:06:aa: ef:c4:ee:f4:e7:c5:84:16:2c:bc:de:c6:2c:fd:5f:b6:d8:cc: 9f:fd:6c:e3:ee:4d:b5:94:70:a1:20:4b:75:f9:90:f9:1f:1b: 8a:cb:7b:27:df:51:b0:a7:c9:f1:7a:1e:bd:be:b7:95:61:e3: 2b:78:dd:8a:af:19:c3:d2:78:ec:ae:e9:a0:b6:42:4f:4d:77: 7e:93:6b:fd:d6:0d:92:f8:a2:7f:62:1a:05:e9:9b:03:b9:35: 9d:ce:19:ac:e5:86:43:dc:06:cf:5b:0d:e0:4f:1a:72:10:eb: 23:a6:3f:42:4e:1b:82:3c:9c:a8:1f:25:e9:bf:1e:71:21:4e: e5:e8:29:73:a6:66:cd:d6:b4:d1:dc:d1:59:00:de:18:fe:04: 7e:03:4e:4b:3c:c0:64:02:7f:20:d7:0c:18:c1:ed:d5:06:c6: 85:1f:61:e4:61:39:8a:9b:d2:ac:e9:fe:f1:34:da:f4:ff:4d: 19:dc:79:df:4e:46:75:1d:32:dd:01:5f:70:f7:cf:8e:b4:d0: ff:1f:e2:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU4QkUxMTAvBgNVBAUTKDg1NEZFNzI3NTM2MEQwNzgxMEFGRkJBNkMyOEZGRjIz NTgyQTIwRUIwHhcNMjUxMjA3MDA1NTMyWhcNMjUxMjE0MDA1NTMyWjAYMRYwFAYD VQQDEw02OTM0ZDA4NC03Y2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5wCrvQyw7hkoeaUeU3l3tA3YhZ4lcxM6AX9sXvwMGLhZ7WOahPxgeHo/Mi/R pSTBel693i8rRcOJWNyQCgtSzQGIQ3uNrQdyAu4UfrZ7z6I3s0YH3jXxbE2VX991 oGcfcOfCwldtn1Pm/2a7HGfZfzj7QGQInS+vOPCRIHM7zp3KTa/2rdsVA/O3ErIp XiBjZVXfBrumY1xGPNJ4MuMMcw9f/YBTeOoiZzvgGZubKs04PPBCkyghd588ZLJd RZPwDyCyJDtpYr2aHHc609X+m0cpgzmA1U/91F4uxj69BpBt6+m32VO6BLU/mHr7 JUDcTGDJ6Bo+9EIBidZn2L7ZEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbfuU+L NGwQ/7cblsaDPq7bpui4MB8GA1UdIwQYMBaAFIVP5ydTYNB4EK/7psKP/yNYKiDr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NThCRS83QzdGQjJGRUMy MTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBIZ1FyX3Vtd29fX0kxZ3FJ T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hVX25KMU5nMEhnUXJfdW13b19fSTFncUlPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NThCRS83QzdGQjJGRUMyMTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBI Z1FyX3Vtd29fX0kxZ3FJT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjZVjRvbLpKBtTksHjd6aARrs3hQ+/LtBy5hUfA/nHKa6mQ3IadiJN suwybuL7u0NbABcJBqrvxO7058WEFiy83sYs/V+22Myf/Wzj7k21lHChIEt1+ZD5 HxuKy3sn31Gwp8nxeh69vreVYeMreN2KrxnD0njsrumgtkJPTXd+k2v91g2S+KJ/ YhoF6ZsDuTWdzhms5YZD3AbPWw3gTxpyEOsjpj9CThuCPJyoHyXpvx5xIU7l6Clz pmbN1rTR3NFZAN4Y/gR+A05LPMBkAn8g1wwYwe3VBsaFH2HkYTmKm9Ks6f7xNNr0 /00Z3HnfTkZ1HTLdAV9w98+OtND/H+LZ -----END CERTIFICATE-----Generated at Mon Dec 8 06:09:26 2025 by rpki-client