This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft File: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft (raw, json) Hash identifier: v5afu1GnAFz2l2dOxHjGLCy9yvCYb/5yRykg58L2d/c= Subject key identifier: AC:B6:C6:CC:1D:96:73:0F:CF:BF:53:E5:5E:2D:CA:CA:58:35:26:E8 Authority key identifier: 86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0 Certificate issuer: /CN=A91A1EE0/serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0 Certificate serial: 3553 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft Manifest number: 3524 Signing time: Mon 22 Dec 2025 14:32:30 +0000 Manifest this update: Mon 22 Dec 2025 14:32:29 +0000 Manifest next update: Mon 29 Dec 2025 14:32:29 +0000 Files and hashes: 1: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl (hash: t9eRpHtdjdnNDMwyPbxw7SJYituKLmBIWXsJvYrVBN4=) 2: 44E2CCAEBA9811EFBA471E62C4F9AE02.roa (hash: L9XUW5EKcX3N5kGAQjlCulKdYkLxOgguoKHEktNkp/4=) 3: 4EF85CFEEE4211E9B52B674DC4F9AE02.roa (hash: 9cBRSzqf+beBYSiFhP5CgytCZQdt5uKUFHqt/G05Dqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13651 (0x3553) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1EE0, serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0 Validity Not Before: Dec 22 14:32:29 2025 GMT Not After : Dec 29 14:32:29 2025 GMT Subject: CN=6949567e-362a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:59:29:63:5b:50:91:cc:ab:c1:ae:97:b4:82: 2c:df:b9:db:1f:74:73:f1:b4:c1:82:d8:43:99:6d: 4e:78:a3:ed:89:5c:52:20:61:64:85:d7:53:5c:29: 9b:4f:e4:23:9a:33:53:2c:e6:5a:af:43:64:b1:6b: 45:40:40:78:8a:bb:20:d6:95:c9:9a:62:38:24:5e: c3:92:67:f0:17:23:a9:ff:28:b7:4b:88:ab:a7:67: dd:9a:34:70:e6:c6:65:94:27:f8:26:e7:18:b2:85: ea:82:aa:4a:ad:95:5c:c4:d0:75:5c:27:8f:e5:87: 24:9f:b9:d0:df:4e:cb:92:5e:b2:d5:75:5b:77:09: bd:49:dc:c5:a3:3a:81:00:53:cf:7e:4c:f7:1a:51: bc:3a:77:8d:6d:56:f9:e9:c9:16:ac:2d:ba:10:ed: d7:cc:30:82:b1:89:a6:80:18:fd:d7:58:63:3e:98: 92:c2:38:b3:97:75:09:d5:73:43:88:e6:30:91:10: 5d:31:a4:eb:e3:66:e2:f3:bc:cf:b5:65:83:83:56: bf:14:0e:ff:9a:57:1d:d5:ee:70:b0:38:c4:87:a4: 85:eb:b5:2b:58:27:8a:96:44:3c:6a:e3:0f:83:ab: db:f3:01:5d:7e:ab:d2:00:ef:d0:78:e8:ca:12:aa: 94:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B6:C6:CC:1D:96:73:0F:CF:BF:53:E5:5E:2D:CA:CA:58:35:26:E8 X509v3 Authority Key Identifier: keyid:86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:a8:eb:c6:1b:8d:d0:a3:5a:09:d0:aa:88:3a:45:4d:f0:dc: 73:db:a3:9e:6a:fa:f7:e4:16:d9:b1:a4:49:cb:3b:90:c0:3a: 6c:5f:a8:eb:4d:d4:30:8c:80:b0:e8:a0:6f:2b:a9:15:f8:da: 42:e6:a1:b1:d0:54:f5:41:2b:16:6e:55:9d:ac:22:f4:78:70: 3c:6c:e5:4d:1c:d7:12:d1:5d:05:7f:8e:27:77:fe:70:47:5f: 1c:86:a9:6a:dc:8e:58:7f:8d:5a:ed:f1:23:09:5c:80:74:c0: 04:92:ff:ae:b3:36:60:c9:d7:c8:3e:c0:15:1b:09:9d:91:98: bb:fa:51:1b:e9:1c:46:c6:8a:b6:c8:6b:70:4a:bc:06:18:16: 95:94:52:9b:e2:c6:66:21:1c:e4:30:8d:3e:a4:53:78:5a:22: fd:cd:d9:63:be:bb:fe:f3:9c:24:f0:85:2d:c1:6f:b3:93:8f: 9e:20:5f:35:37:08:1d:b1:43:96:2d:47:63:91:a8:82:d2:d2: f4:90:fa:63:fa:70:28:7d:a0:ee:24:7a:7d:d1:54:8a:d0:26: 70:20:c3:96:30:56:6b:c3:85:a6:16:59:06:17:a4:57:dc:cb: e4:76:30:dc:6d:85:16:ce:94:3c:82:1e:f3:f1:84:07:ef:60: a4:61:cf:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFFRTAxMTAvBgNVBAUTKDg2MEMwOTA0Q0VEN0JCMEQxRDk3QjI5MkZEQjY2MkU4 QjlBOEFGRjAwHhcNMjUxMjIyMTQzMjI5WhcNMjUxMjI5MTQzMjI5WjAYMRYwFAYD VQQDDA02OTQ5NTY3ZS0zNjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1kpY1tQkcyrwa6XtIIs37nbH3Rz8bTBgthDmW1OeKPtiVxSIGFkhddTXCmb T+QjmjNTLOZar0NksWtFQEB4irsg1pXJmmI4JF7DkmfwFyOp/yi3S4irp2fdmjRw 5sZllCf4JucYsoXqgqpKrZVcxNB1XCeP5Yckn7nQ307Lkl6y1XVbdwm9SdzFozqB AFPPfkz3GlG8OneNbVb56ckWrC26EO3XzDCCsYmmgBj911hjPpiSwjizl3UJ1XND iOYwkRBdMaTr42bi87zPtWWDg1a/FA7/mlcd1e5wsDjEh6SF67UrWCeKlkQ8auMP g6vb8wFdfqvSAO/QeOjKEqqUgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKy2xswd lnMPz79T5V4tyspYNSboMB8GA1UdIwQYMBaAFIYMCQTO17sNHZeykv22Yui5qK/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUVFMC9EMjM2MzQ0NjFE OEExMUUyODIwRjA0RTUwOEIwMkNEMi9oZ3dKQk03WHV3MGRsN0tTX2JaaTZMbW9y X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hnd0pCTTdYdXcwZGw3S1NfYlppNkxtb3JfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUVFMC9EMjM2MzQ0NjFEOEExMUUyODIwRjA0RTUwOEIwMkNEMi9oZ3dKQk03WHV3 MGRsN0tTX2JaaTZMbW9yX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJqOvGG43Qo1oJ0KqIOkVN8Nxz26Oeavr35BbZsaRJyzuQwDpsX6jr TdQwjICw6KBvK6kV+NpC5qGx0FT1QSsWblWdrCL0eHA8bOVNHNcS0V0Ff44nd/5w R18chqlq3I5Yf41a7fEjCVyAdMAEkv+uszZgydfIPsAVGwmdkZi7+lEb6RxGxoq2 yGtwSrwGGBaVlFKb4sZmIRzkMI0+pFN4WiL9zdljvrv+85wk8IUtwW+zk4+eIF81 NwgdsUOWLUdjkaiC0tL0kPpj+nAofaDuJHp90VSK0CZwIMOWMFZrw4WmFlkGF6RX 3MvkdjDcbYUWzpQ8gh7z8YQH72CkYc+d -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:12 2025 by rpki-client