This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft File: s-hiKkEGGf2XI_nR28U1fhX6fcw.mft (raw, json) Hash identifier: DCqKK7Mrz8R32xO332Ei31bKExq/fzkXxB3B1YL2gSs= Subject key identifier: E4:DD:12:60:C0:0A:66:67:A6:A8:3F:58:2D:B7:29:91:24:BF:78:73 Authority key identifier: B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC Certificate issuer: /CN=A91A85CF/serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft Manifest number: B4 Signing time: Tue 23 Dec 2025 04:58:35 +0000 Manifest this update: Tue 23 Dec 2025 04:58:34 +0000 Manifest next update: Tue 30 Dec 2025 04:58:34 +0000 Files and hashes: 1: s-hiKkEGGf2XI_nR28U1fhX6fcw.crl (hash: 7pQVdR/rT8wv9081xZobdlEOlJcDSJNdOWCxK0ohHVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A85CF, serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC Validity Not Before: Dec 23 04:58:34 2025 GMT Not After : Dec 30 04:58:34 2025 GMT Subject: CN=694a217b-0af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:81:ae:36:61:25:3e:49:70:f2:c1:44:1a: 98:f1:65:1f:a9:c9:fa:1e:e3:82:7d:a8:f1:7b:72: 13:00:bd:aa:7a:da:e8:dd:7f:04:d0:c6:06:22:aa: 70:83:62:ee:17:e5:42:3f:d7:8b:ff:52:17:8c:36: 5e:f8:93:bd:d5:05:5f:58:c7:f3:40:8c:6c:b6:ba: 4a:a3:a0:db:c9:16:31:b0:c1:70:26:42:3d:ad:84: a0:33:7a:20:12:17:6a:f6:d9:52:ca:e7:59:12:36: 9d:67:06:8a:b0:0d:5c:e4:b1:74:84:84:f2:1c:2c: 77:bf:16:df:35:6a:e7:b4:55:f9:59:d1:bb:5d:f1: f7:94:fc:c9:04:a2:81:e5:c2:f9:7f:0a:e7:4e:61: cc:14:af:72:d6:84:24:10:6c:3c:07:95:a7:ec:0f: 01:64:5b:27:bf:e9:74:06:9e:ac:01:c0:ea:d2:da: f0:17:c3:9c:9d:fd:d4:c1:03:4b:7a:c4:08:c7:c9: c9:cf:ce:00:58:64:82:71:80:d1:26:06:85:15:33: ec:fb:d1:0b:06:4f:bb:51:3f:76:f6:23:33:ab:82: 59:dd:58:6b:bc:05:9b:bd:40:ff:0e:02:f6:94:1f: c6:40:23:ef:25:6b:c8:ba:04:d0:24:39:c3:cb:9e: 3e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DD:12:60:C0:0A:66:67:A6:A8:3F:58:2D:B7:29:91:24:BF:78:73 X509v3 Authority Key Identifier: keyid:B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:9c:2c:16:e8:12:d7:e1:40:bb:3a:40:94:10:7a:cd:39:9a: 79:dd:67:85:8a:cc:c8:a7:ac:f6:0d:42:00:e2:1d:15:eb:5c: 96:28:e3:a4:d4:19:69:1d:66:29:2d:a6:ed:9c:f2:b8:b7:67: 85:9f:c8:f4:55:1d:a4:26:4f:00:a5:a6:ef:12:56:70:69:bd: 3c:e7:ed:f9:78:05:b2:48:c2:b1:f4:a8:b4:3d:a7:79:17:b6: 8c:5f:1a:bd:38:9b:e7:41:1f:72:eb:08:31:33:fe:fa:7d:e3: c5:a8:ef:25:9d:e2:e4:b4:6f:0c:52:e6:f0:47:22:7b:50:ea: 2c:8c:5b:17:0f:ce:7d:5f:02:88:6d:63:0f:d9:f7:3b:9f:63: 51:15:40:e0:3f:b6:91:fa:1d:97:be:e7:97:0b:4f:d8:c6:1f: 4a:bc:f7:25:dd:30:0d:f5:4a:4b:c6:2a:ae:46:5a:70:d3:3c: 35:70:da:02:fc:84:4f:2f:1a:df:2f:3e:58:4d:68:a6:c9:2e: a0:1d:f3:84:13:9a:b6:2c:f0:9c:46:cd:30:45:a3:8e:3d:b6: df:12:5b:47:01:aa:80:74:d5:ff:f6:fa:82:4d:28:04:23:17: 53:68:15:1e:60:f8:f8:c7:b4:4a:24:9a:c8:4c:33:51:90:e3: b9:ff:df:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg1Q0YxMTAvBgNVBAUTKEIzRTg2MjJBNDEwNjE5RkQ5NzIzRjlEMURCQzUzNTdF MTVGQTdEQ0MwHhcNMjUxMjIzMDQ1ODM0WhcNMjUxMjMwMDQ1ODM0WjAYMRYwFAYD VQQDDA02OTRhMjE3Yi0wYWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscCBrjZhJT5JcPLBRBqY8WUfqcn6HuOCfajxe3ITAL2qetro3X8E0MYGIqpw g2LuF+VCP9eL/1IXjDZe+JO91QVfWMfzQIxstrpKo6DbyRYxsMFwJkI9rYSgM3og Ehdq9tlSyudZEjadZwaKsA1c5LF0hITyHCx3vxbfNWrntFX5WdG7XfH3lPzJBKKB 5cL5fwrnTmHMFK9y1oQkEGw8B5Wn7A8BZFsnv+l0Bp6sAcDq0trwF8Ocnf3UwQNL esQIx8nJz84AWGSCcYDRJgaFFTPs+9ELBk+7UT929iMzq4JZ3VhrvAWbvUD/DgL2 lB/GQCPvJWvIugTQJDnDy54+/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTdEmDA CmZnpqg/WC23KZEkv3hzMB8GA1UdIwQYMBaAFLPoYipBBhn9lyP50dvFNX4V+n3M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODVDRi9GMDAwOTc3NENB RTIxMUVGQUY4RjEwMTFDNEY5QUUwMi9zLWhpS2tFR0dmMlhJX25SMjhVMWZoWDZm Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MtaGlLa0VHR2YyWElfblIyOFUxZmhYNmZjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODVDRi9GMDAwOTc3NENBRTIxMUVGQUY4RjEwMTFDNEY5QUUwMi9zLWhpS2tFR0dm MlhJX25SMjhVMWZoWDZmY3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEnCwW6BLX4UC7OkCUEHrNOZp53WeFiszIp6z2DUIA4h0V61yWKOOk 1BlpHWYpLabtnPK4t2eFn8j0VR2kJk8ApabvElZwab085+35eAWySMKx9Ki0Pad5 F7aMXxq9OJvnQR9y6wgxM/76fePFqO8lneLktG8MUubwRyJ7UOosjFsXD859XwKI bWMP2fc7n2NRFUDgP7aR+h2XvueXC0/Yxh9KvPcl3TAN9UpLxiquRlpw0zw1cNoC /IRPLxrfLz5YTWimyS6gHfOEE5q2LPCcRs0wRaOOPbbfEltHAaqAdNX/9vqCTSgE IxdTaBUeYPj4x7RKJJrITDNRkOO5/98/ -----END CERTIFICATE-----Generated at Wed Dec 24 16:00:45 2025 by rpki-client