This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft File: HWw-nEchLuSN-fVOZJCpphbUEYk.mft (raw, json) Hash identifier: PsUjfsyirG+Bh9e4/MRpZuDs1K/XmgszW9RDBL8xG1g= Subject key identifier: 8D:64:C2:51:6A:37:9C:DE:E8:75:65:24:90:C7:98:C5:42:CC:8F:02 Authority key identifier: 1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89 Certificate issuer: /CN=A91B6AEE/serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189 Certificate serial: 0249 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft Manifest number: 0244 Signing time: Fri 19 Dec 2025 01:03:33 +0000 Manifest this update: Fri 19 Dec 2025 01:03:32 +0000 Manifest next update: Fri 26 Dec 2025 01:03:32 +0000 Files and hashes: 1: HWw-nEchLuSN-fVOZJCpphbUEYk.crl (hash: UasCBNwddZ7EbvmRxn9lI66c1yNEsVMdw0gulelKWWM=) 2: 3B7794D2664A11EDB095B812C4F9AE02.roa (hash: 3/Fx9zU+/qcgAJraecgoQhxMCpBayBXQ3IM4m/S+gH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6AEE, serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189 Validity Not Before: Dec 19 01:03:32 2025 GMT Not After : Dec 26 01:03:32 2025 GMT Subject: CN=6944a465-316f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:02:8e:3b:ef:19:53:ca:4a:e4:f8:d2:88:d1: 24:1d:f8:32:c8:03:8a:cd:49:9c:20:06:d6:10:ae: 07:13:a5:24:6a:08:a2:e2:f1:a0:7a:d3:10:9a:28: 41:24:df:c0:aa:27:51:6c:4a:2d:c4:1b:d1:e9:9f: f5:91:37:f5:df:2f:5d:4c:5c:56:6d:3c:ae:70:68: bb:76:38:9d:e6:be:be:c1:09:9b:32:50:3c:f0:8d: 44:9c:82:a9:c2:57:f4:b4:ec:22:82:82:14:28:13: 4d:df:5e:5e:c7:c9:22:45:60:fd:84:0c:d2:c2:91: f7:35:8e:8e:a7:66:b8:a9:72:a7:00:84:6f:d4:34: 99:d4:60:e0:e1:69:8a:97:ac:f2:b8:33:42:b9:34: 6a:4e:65:8c:56:4f:cb:15:45:31:3c:7c:ea:cd:56: 78:c2:d7:cb:59:d4:cb:b1:43:ff:54:13:f3:28:dd: 79:2c:17:09:03:51:6b:f7:b8:0c:5a:bd:9a:3a:15: 9a:e6:23:e6:81:0c:3d:70:f0:51:cf:43:8f:c1:a6: 20:ef:43:1f:f3:a4:83:2f:72:6e:af:87:5e:34:d9: 12:7b:bd:2e:61:fe:02:41:bf:ae:3f:b6:59:cb:d5: 43:e1:64:23:bf:3c:71:b1:4a:65:17:ea:5d:8f:30: c0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:64:C2:51:6A:37:9C:DE:E8:75:65:24:90:C7:98:C5:42:CC:8F:02 X509v3 Authority Key Identifier: keyid:1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:9d:a7:f4:e7:8b:c0:96:fd:1f:6a:62:de:e4:f7:e8:38:44: 56:94:3f:fa:a6:9f:d3:3a:25:fe:cf:a5:34:1c:5e:6d:30:a9: cf:97:24:f5:e0:69:db:c0:17:36:31:a8:c0:a2:e9:c6:e5:83: 74:db:f9:d2:da:1c:25:fd:02:c0:de:d5:d1:58:d8:d3:24:24: 5c:6f:00:26:64:d7:ee:47:a3:53:dc:ff:01:bd:04:5d:af:12: ed:65:1d:58:52:bf:3a:ed:a4:86:c5:7c:9d:35:89:9c:92:99: c2:9a:9e:50:0b:a2:c3:62:f5:23:01:a3:50:98:83:4a:06:be: 6a:ad:28:dc:11:a4:f3:71:08:ad:ad:f9:7f:15:31:a4:b4:32: 80:ac:78:6d:14:a3:a9:63:79:d5:16:0c:ed:69:03:c9:00:fd: ba:0b:7d:e0:e6:91:91:2e:fe:f6:b4:80:35:75:73:fe:14:33: 30:d1:dd:87:c6:83:f9:ab:82:ff:1c:0c:3e:21:6f:36:0d:4d: 9b:00:b6:69:84:aa:e4:2a:03:57:a1:a9:6b:5a:34:06:72:37: 5a:01:4a:4e:7a:17:fa:ff:c3:1d:18:88:93:74:bc:fe:18:2a: 8e:8a:60:68:cd:50:ef:ba:67:50:b3:ce:8a:8c:f7:5a:6c:df: 0f:64:3e:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZBRUUxMTAvBgNVBAUTKDFENkMzRTlDNDcyMTJFRTQ4REY5RjU0RTY0OTBBOUE2 MTZENDExODkwHhcNMjUxMjE5MDEwMzMyWhcNMjUxMjI2MDEwMzMyWjAYMRYwFAYD VQQDDA02OTQ0YTQ2NS0zMTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwKOO+8ZU8pK5PjSiNEkHfgyyAOKzUmcIAbWEK4HE6Ukagii4vGgetMQmihB JN/AqidRbEotxBvR6Z/1kTf13y9dTFxWbTyucGi7djid5r6+wQmbMlA88I1EnIKp wlf0tOwigoIUKBNN315ex8kiRWD9hAzSwpH3NY6Op2a4qXKnAIRv1DSZ1GDg4WmK l6zyuDNCuTRqTmWMVk/LFUUxPHzqzVZ4wtfLWdTLsUP/VBPzKN15LBcJA1Fr97gM Wr2aOhWa5iPmgQw9cPBRz0OPwaYg70Mf86SDL3Jur4deNNkSe70uYf4CQb+uP7ZZ y9VD4WQjvzxxsUplF+pdjzDAQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1kwlFq N5ze6HVlJJDHmMVCzI8CMB8GA1UdIwQYMBaAFB1sPpxHIS7kjfn1TmSQqaYW1BGJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkFFRS80RjMzMjg4MjY2 NDYxMUVEOEQyQzc1MEZDNEY5QUUwMi9IV3ctbkVjaEx1U04tZlZPWkpDcHBoYlVF WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXdy1uRWNoTHVTTi1mVk9aSkNwcGhiVUVZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkFFRS80RjMzMjg4MjY2NDYxMUVEOEQyQzc1MEZDNEY5QUUwMi9IV3ctbkVjaEx1 U04tZlZPWkpDcHBoYlVFWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZnaf054vAlv0famLe5PfoOERWlD/6pp/TOiX+z6U0HF5tMKnPlyT1 4GnbwBc2MajAounG5YN02/nS2hwl/QLA3tXRWNjTJCRcbwAmZNfuR6NT3P8BvQRd rxLtZR1YUr867aSGxXydNYmckpnCmp5QC6LDYvUjAaNQmINKBr5qrSjcEaTzcQit rfl/FTGktDKArHhtFKOpY3nVFgztaQPJAP26C33g5pGRLv72tIA1dXP+FDMw0d2H xoP5q4L/HAw+IW82DU2bALZphKrkKgNXoalrWjQGcjdaAUpOehf6/8MdGIiTdLz+ GCqOimBozVDvumdQs86KjPdabN8PZD55 -----END CERTIFICATE-----Generated at Fri Dec 19 21:13:57 2025 by rpki-client