This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft File: HFloWGy0x-KD8UGfWFBGjtpVloI.mft (raw, json) Hash identifier: NnPHBZnxzJJhFD1hVij8UlOiahsPrxywK7d80+w0unA= Subject key identifier: 29:25:03:A8:1F:A1:BA:18:EE:87:2D:C2:AF:B1:69:F3:77:19:E3:EE Authority key identifier: 1C:59:68:58:6C:B4:C7:E2:83:F1:41:9F:58:50:46:8E:DA:55:96:82 Certificate issuer: /CN=A91C78A7/serialNumber=1C5968586CB4C7E283F1419F5850468EDA559682 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft Manifest number: 1A Signing time: Wed 03 Dec 2025 06:04:48 +0000 Manifest this update: Wed 03 Dec 2025 06:04:48 +0000 Manifest next update: Wed 10 Dec 2025 06:04:48 +0000 Files and hashes: 1: HFloWGy0x-KD8UGfWFBGjtpVloI.crl (hash: +ZT6OC84LH0Q6nd2z56IP4Jbzsho+lgR4M6WKfJ30jQ=) 2: 9DB152BEBAE311F0A6981134C4F9AE02.roa (hash: Yie6R1tMSTTJ1xr/2FaX5Nl172a/1lK4icTSFxQ0j4I=) 3: 886DFB52BE4711F0A5FBDC5FC4F9AE02.roa (hash: ypcepGzARLWbouWGE3k73Jk0jJnQAUjY1dbnZc9nuLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.crl rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C78A7, serialNumber=1C5968586CB4C7E283F1419F5850468EDA559682 Validity Not Before: Dec 3 06:04:48 2025 GMT Not After : Dec 10 06:04:48 2025 GMT Subject: CN=692fd300-3f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f8:08:91:70:fd:7f:96:28:e2:36:2e:d2:7f: ed:64:f1:17:9f:44:fb:7c:1d:5e:f2:1f:c0:59:47: 59:e6:44:34:87:bb:3b:0f:f4:e8:f5:7d:38:6f:3a: 6c:bb:ab:98:52:85:b6:4b:40:7d:c5:b8:d6:98:f6: ae:30:9f:c5:1f:18:ac:05:9f:dc:dc:14:43:5a:21: ac:70:5e:56:4a:48:59:1c:ce:58:48:f2:eb:d5:0c: 81:04:cd:c0:6b:e2:5d:7e:7c:7c:70:b4:2e:d7:9c: ad:ca:50:2b:1c:ee:19:7c:52:eb:9e:7f:b8:f1:98: 94:1e:5d:4d:f9:ce:b7:01:cf:f2:0a:6c:89:fa:d2: b0:02:5a:94:7f:9c:ee:c2:cc:63:15:cb:3a:bc:8e: f5:08:5b:fe:fb:0b:a5:a1:0b:05:89:ad:2f:70:a8: d7:3e:a4:12:fa:54:a1:b5:95:29:b4:11:2b:43:b0: d6:65:0b:e8:fb:8f:06:70:d7:46:91:a8:2b:12:90: 2d:94:38:d2:24:a7:26:23:f9:f0:d3:54:41:7c:89: 43:f7:e0:21:4a:d1:7f:09:a1:48:9c:dc:d1:22:dc: 77:03:af:2a:ae:30:eb:b4:3e:cc:f2:63:af:a4:6d: 90:f5:db:b4:e5:e2:ce:5f:32:ff:33:b2:ef:55:c0: 81:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:25:03:A8:1F:A1:BA:18:EE:87:2D:C2:AF:B1:69:F3:77:19:E3:EE X509v3 Authority Key Identifier: keyid:1C:59:68:58:6C:B4:C7:E2:83:F1:41:9F:58:50:46:8E:DA:55:96:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e6:74:28:45:95:24:0a:dc:09:eb:ae:16:aa:52:5c:c1:e9:e3: a3:56:f3:0d:6f:ea:60:65:55:1c:57:89:9e:e5:18:94:ae:df: ee:19:66:7d:a2:cd:08:a0:ef:b8:5e:05:55:c3:5d:2b:cb:c9: 65:d7:ff:4e:39:65:fb:bc:38:a1:b1:33:3b:a1:a3:94:ae:44: 0f:31:8c:c5:c7:d6:6d:90:48:8d:69:78:85:dd:7b:fc:92:9e: 26:45:60:4a:08:9e:05:89:1b:0c:82:a0:93:13:5b:03:19:a6: 6e:ce:07:d6:43:3a:c5:95:57:4b:4f:bf:d7:fc:ce:33:65:1d: 29:0e:c2:37:65:f5:d4:a7:dd:3e:3c:2d:ff:23:02:41:12:82: 94:c0:17:a6:4c:e5:2b:a8:4f:40:68:e2:16:69:8c:fa:96:36: 85:94:b6:8a:b7:00:67:f0:4d:09:8a:f5:d9:17:72:ae:40:84: 18:da:14:f5:4c:59:ef:d7:01:49:66:5c:af:95:35:92:c7:9d: 23:70:81:cd:3d:c3:1f:ea:7f:d7:4c:d6:5f:a0:63:fd:9b:c0: b0:72:9c:1f:a3:13:e6:20:46:66:44:b5:28:70:a3:af:98:58: f6:47:ba:ad:83:1c:18:08:31:f0:c6:95:02:3a:ac:8a:9f:c3: 0a:c7:5a:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzhBNzExMC8GA1UEBRMoMUM1OTY4NTg2Q0I0QzdFMjgzRjE0MTlGNTg1MDQ2OEVE QTU1OTY4MjAeFw0yNTEyMDMwNjA0NDhaFw0yNTEyMTAwNjA0NDhaMBgxFjAUBgNV BAMTDTY5MmZkMzAwLTNmN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCR+AiRcP1/lijiNi7Sf+1k8RefRPt8HV7yH8BZR1nmRDSHuzsP9Oj1fThvOmy7 q5hShbZLQH3FuNaY9q4wn8UfGKwFn9zcFENaIaxwXlZKSFkczlhI8uvVDIEEzcBr 4l1+fHxwtC7XnK3KUCsc7hl8Uuuef7jxmJQeXU35zrcBz/IKbIn60rACWpR/nO7C zGMVyzq8jvUIW/77C6WhCwWJrS9wqNc+pBL6VKG1lSm0EStDsNZlC+j7jwZw10aR qCsSkC2UONIkpyYj+fDTVEF8iUP34CFK0X8JoUic3NEi3HcDryquMOu0PszyY6+k bZD127Tl4s5fMv8zsu9VwIEDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKSUDqB+h uhjuhy3Cr7Fp83cZ4+4wHwYDVR0jBBgwFoAUHFloWGy0x+KD8UGfWFBGjtpVloIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3OEE3L0ZBRTk2QzRBQjYy MDExRjBBNzQ5MjExRkM0RjlBRTAyL0hGbG9XR3kweC1LRDhVR2ZXRkJHanRwVmxv SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSEZsb1dHeTB4LUtEOFVHZldGQkdqdHBWbG9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 OEE3L0ZBRTk2QzRBQjYyMDExRjBBNzQ5MjExRkM0RjlBRTAyL0hGbG9XR3kweC1L RDhVR2ZXRkJHanRwVmxvSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOZ0KEWVJArcCeuuFqpSXMHp46NW8w1v6mBlVRxXiZ7lGJSu3+4ZZn2i zQig77heBVXDXSvLyWXX/045Zfu8OKGxMzuho5SuRA8xjMXH1m2QSI1peIXde/yS niZFYEoIngWJGwyCoJMTWwMZpm7OB9ZDOsWVV0tPv9f8zjNlHSkOwjdl9dSn3T48 Lf8jAkESgpTAF6ZM5SuoT0Bo4hZpjPqWNoWUtoq3AGfwTQmK9dkXcq5AhBjaFPVM We/XAUlmXK+VNZLHnSNwgc09wx/qf9dM1l+gY/2bwLBynB+jE+YgRmZEtShwo6+Y WPZHuq2DHBgIMfDGlQI6rIqfwwrHWgg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:11 2025 by rpki-client