This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft File: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft (raw, json) Hash identifier: CbZQbKZNJQEz2OKuyZkK1Nd4BdXTGFl9/y/EoQs0Mls= Subject key identifier: 35:24:78:ED:76:B8:DC:24:4C:24:79:D5:60:83:D7:BC:62:DB:7D:E3 Authority key identifier: 85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94 Certificate issuer: /CN=A91BF5C0/serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694 Certificate serial: 0331 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft Manifest number: 0326 Signing time: Fri 19 Dec 2025 00:19:13 +0000 Manifest this update: Fri 19 Dec 2025 00:19:12 +0000 Manifest next update: Fri 26 Dec 2025 00:19:12 +0000 Files and hashes: 1: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl (hash: pEO1l/tSZrp4A5tRdGBdRdWKdkPjkIrwkQpGDWsJC/Y=) 2: 5B6AD2DCF1C811ECBBC34549C4F9AE02.roa (hash: rCIHZh9wUruVRZk/2Wl+iO0bQmypaGymRp+P5pHJgrc=) 3: 5AD85A56F1C811ECBBC34549C4F9AE02.roa (hash: WLqs4EYDGZGhgsTcvZkB1qzpm9zeqwQq3iz4UzKMW3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 817 (0x331) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF5C0, serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694 Validity Not Before: Dec 19 00:19:12 2025 GMT Not After : Dec 26 00:19:12 2025 GMT Subject: CN=69449a01-c94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:50:4e:12:21:98:64:29:92:d8:01:77:c2:8b: fa:7e:0b:4a:04:b5:1c:a2:ef:51:f8:cc:43:13:e2: 6b:e3:85:c6:5d:ef:e1:5b:02:db:d3:c5:57:35:67: eb:d0:59:f2:62:8f:4e:38:16:df:fc:2a:a1:01:22: bd:5a:61:f6:e7:01:32:56:71:15:66:69:6e:99:de: fb:ee:ad:71:be:1d:2e:00:f8:be:98:d2:34:28:b1: 57:53:dc:f8:9a:7d:6d:b9:62:58:0a:f4:38:86:d8: 38:21:d4:38:ba:9a:d8:02:e7:a1:aa:f4:11:c5:a8: f2:f0:ec:d1:97:d5:57:65:3d:94:14:6b:6a:e8:e7: 20:f0:4e:ee:6b:21:06:f7:db:03:1b:8e:08:a4:7d: a4:85:59:3a:03:9b:51:b6:66:86:a8:73:8b:26:a8: 8a:c5:e5:2f:dc:1b:d3:d1:f4:6a:d1:7f:72:c1:b5: 06:76:3c:b9:32:e3:3d:b6:c1:9b:2c:72:38:33:f2: df:31:48:a4:3e:e9:ea:ac:3c:42:47:9a:14:7b:1d: 68:cf:df:14:fe:21:48:94:16:e3:ce:d9:40:98:1b: a9:ec:69:99:da:2a:fb:7b:10:45:3c:54:7f:c1:6b: 0e:3f:f9:85:34:a2:f8:ab:8a:01:ae:7b:96:4e:a0: d1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:24:78:ED:76:B8:DC:24:4C:24:79:D5:60:83:D7:BC:62:DB:7D:E3 X509v3 Authority Key Identifier: keyid:85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:b8:84:7f:3e:c6:90:a2:54:9c:07:86:dc:ca:79:29:00:c1: 5e:f3:6d:88:f0:06:cb:c8:1a:06:52:59:c3:0b:83:15:10:ed: f0:b7:5d:1f:7d:60:d7:cc:15:85:7e:1e:5a:72:84:c2:56:c4: e2:af:7a:08:9b:4d:91:54:9a:0b:d9:9a:de:82:68:98:fd:a7: 29:cd:30:29:4f:e6:70:e6:8b:11:12:93:ee:c9:65:59:8e:41: 07:30:d7:49:46:ac:a8:d6:fc:0d:32:b8:cd:7e:4b:e7:59:4f: 9b:d9:d9:86:a9:35:3a:7b:91:91:87:5e:ca:8a:a8:1c:99:38: dd:06:cb:4b:a5:24:ed:c5:af:19:77:ad:56:43:74:cb:25:fb: 60:e7:c4:18:df:b6:47:91:13:b9:33:70:5b:46:06:3e:59:f6: 56:74:19:11:80:2e:f9:f7:aa:d2:5a:47:47:c3:cd:6d:dc:86: f7:c3:21:c7:50:b0:6e:54:62:2b:ac:a9:96:a4:b2:da:9e:82: 30:d3:b5:08:53:5b:da:b6:e8:9d:57:53:51:89:a8:60:e4:15: 5d:fb:f0:cb:5c:ff:ec:f2:95:09:bd:27:00:35:86:27:e8:40: 0e:92:5a:35:37:cf:b3:22:55:c4:e0:88:82:e6:fa:23:45:6b: 63:b6:ed:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY1QzAxMTAvBgNVBAUTKDg1NzkzNzcyNjFDQTI3OUYxQzJGRjJFQkM0NDI5NzQz N0RENkU2OTQwHhcNMjUxMjE5MDAxOTEyWhcNMjUxMjI2MDAxOTEyWjAYMRYwFAYD VQQDDA02OTQ0OWEwMS1jOTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm1BOEiGYZCmS2AF3wov6fgtKBLUcou9R+MxDE+Jr44XGXe/hWwLb08VXNWfr 0FnyYo9OOBbf/CqhASK9WmH25wEyVnEVZmlumd777q1xvh0uAPi+mNI0KLFXU9z4 mn1tuWJYCvQ4htg4IdQ4uprYAuehqvQRxajy8OzRl9VXZT2UFGtq6Ocg8E7uayEG 99sDG44IpH2khVk6A5tRtmaGqHOLJqiKxeUv3BvT0fRq0X9ywbUGdjy5MuM9tsGb LHI4M/LfMUikPunqrDxCR5oUex1oz98U/iFIlBbjztlAmBup7GmZ2ir7exBFPFR/ wWsOP/mFNKL4q4oBrnuWTqDRDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUkeO12 uNwkTCR51WCD17xi233jMB8GA1UdIwQYMBaAFIV5N3JhyiefHC/y68RCl0N91uaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjVDMC9CQ0JENEZCNkYx QzIxMUVDQTE2M0ZENDJDNEY5QUUwMi9oWGszY21IS0o1OGNMX0xyeEVLWFEzM1c1 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hYazNjbUhLSjU4Y0xfTHJ4RUtYUTMzVzVwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjVDMC9CQ0JENEZCNkYxQzIxMUVDQTE2M0ZENDJDNEY5QUUwMi9oWGszY21IS0o1 OGNMX0xyeEVLWFEzM1c1cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0uIR/PsaQolScB4bcynkpAMFe822I8AbLyBoGUlnDC4MVEO3wt10f fWDXzBWFfh5acoTCVsTir3oIm02RVJoL2ZregmiY/acpzTApT+Zw5osREpPuyWVZ jkEHMNdJRqyo1vwNMrjNfkvnWU+b2dmGqTU6e5GRh17KiqgcmTjdBstLpSTtxa8Z d61WQ3TLJftg58QY37ZHkRO5M3BbRgY+WfZWdBkRgC7596rSWkdHw81t3Ib3wyHH ULBuVGIrrKmWpLLanoIw07UIU1vatuidV1NRiahg5BVd+/DLXP/s8pUJvScANYYn 6EAOklo1N8+zIlXE4IiC5vojRWtjtu1I -----END CERTIFICATE-----Generated at Sun Dec 21 00:44:48 2025 by rpki-client