This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft File: hXm-LYNFaC8nrucGK71O92ZOVxs.mft (raw, json) Hash identifier: MJ7rGOOqG4UvlXAjoVdaiZ6AcpFibH50MP3a5msrkcM= Subject key identifier: 98:68:74:23:54:E3:AA:AF:90:37:00:4C:33:DC:8E:87:E3:F7:E4:9C Authority key identifier: 85:79:BE:2D:83:45:68:2F:27:AE:E7:06:2B:BD:4E:F7:66:4E:57:1B Certificate issuer: /CN=A91D0B6B/serialNumber=8579BE2D8345682F27AEE7062BBD4EF7664E571B Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft Manifest number: 95 Signing time: Tue 23 Dec 2025 05:24:43 +0000 Manifest this update: Tue 23 Dec 2025 05:24:42 +0000 Manifest next update: Tue 30 Dec 2025 05:24:42 +0000 Files and hashes: 1: hXm-LYNFaC8nrucGK71O92ZOVxs.crl (hash: GXHRl2jOX1Vtfm/tv+pj9JAUHg8Y6yrm8YxkgOZaPJc=) 2: 73DC435A39F511F09F296862C4F9AE02.roa (hash: v8UVd7Qbh3NtEsQhX1pG9Dfe5py3W8ZuLzV2zz17/Cc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.crl rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B6B, serialNumber=8579BE2D8345682F27AEE7062BBD4EF7664E571B Validity Not Before: Dec 23 05:24:42 2025 GMT Not After : Dec 30 05:24:42 2025 GMT Subject: CN=694a279b-0f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:67:db:16:a9:79:07:90:db:db:dd:08:5b:f9: 60:fb:f7:95:97:72:33:33:72:33:93:96:d7:e2:aa: 6d:ca:77:81:31:89:cf:85:f7:12:32:93:d4:21:df: b2:fa:29:a9:10:5e:15:15:70:d0:d9:bc:5d:24:f5: 35:b5:ea:ca:82:d4:91:d1:e3:e2:69:73:53:95:ba: 85:c1:2e:1c:af:51:32:fd:2d:fb:1d:82:ab:74:c3: a4:ae:5f:02:b0:aa:c7:2c:36:07:93:18:26:1c:68: 72:f0:e4:79:76:59:6a:9f:46:48:85:35:ce:be:62: 36:38:81:18:f8:7a:ac:6b:29:be:14:5c:d9:6b:73: f9:fd:6c:b7:6f:2a:91:5c:a7:42:bc:92:e1:05:7a: 96:5d:6b:7f:18:de:04:9a:f8:05:15:a6:0d:34:17: b3:05:02:3a:76:bc:77:d7:0d:91:ca:ab:f2:d1:ce: ea:23:3b:d0:c1:36:db:65:2e:6c:7f:d0:d1:91:0c: 88:11:c7:bb:65:d7:1e:05:bd:c6:76:b8:00:a2:78: e1:e3:30:83:38:7d:df:50:ca:30:fb:e8:6c:79:b8: 46:5d:ac:9f:8c:50:c3:20:9a:5b:81:16:a3:c3:b9: e3:2d:2b:64:88:6d:c1:db:aa:d3:99:25:38:2a:8c: 83:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:68:74:23:54:E3:AA:AF:90:37:00:4C:33:DC:8E:87:E3:F7:E4:9C X509v3 Authority Key Identifier: keyid:85:79:BE:2D:83:45:68:2F:27:AE:E7:06:2B:BD:4E:F7:66:4E:57:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:1e:85:c2:a1:43:dd:0f:92:93:69:ed:86:de:6c:0e:c3:a5: 8c:20:c4:c9:9a:69:d0:84:8b:84:f7:e8:6e:01:51:07:ec:02: ab:d4:8c:73:3d:30:ab:b0:3a:c4:94:7e:34:66:c9:f1:3a:84: 1b:46:f7:02:e8:7c:6b:97:54:7e:67:85:34:35:37:e0:09:c5: ed:73:5b:4f:d0:c1:95:ff:e0:75:5c:a1:42:65:ef:52:a7:93: 32:09:8c:0c:f8:6a:59:9a:c8:99:7e:5c:e3:26:0a:bb:83:fa: f5:c9:dc:9b:87:80:99:0e:f3:43:b6:84:41:9c:12:52:5b:04: a3:c7:9b:4b:0d:eb:e2:c2:56:5d:8e:2f:3e:94:69:10:22:bd: c3:c3:c4:c8:55:d3:18:4f:e0:a5:2c:a1:fa:68:4b:74:d3:1b: f1:a6:41:6c:f0:54:90:85:a8:00:a1:86:6d:8a:c4:70:80:0e: d4:a1:07:63:6e:ff:b0:fc:d3:1f:a5:e6:e4:8d:64:ca:18:0f: 90:a7:54:3f:a3:fb:b7:1b:2d:99:44:36:2c:92:3e:d0:62:cf: 67:49:e6:f8:97:41:2c:11:51:1f:ce:b5:2b:78:63:5c:18:1d: ef:96:d7:3d:8c:01:3a:56:e8:cb:2d:65:f3:2a:6f:eb:be:b7: 4b:8b:88:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCNkIxMTAvBgNVBAUTKDg1NzlCRTJEODM0NTY4MkYyN0FFRTcwNjJCQkQ0RUY3 NjY0RTU3MUIwHhcNMjUxMjIzMDUyNDQyWhcNMjUxMjMwMDUyNDQyWjAYMRYwFAYD VQQDDA02OTRhMjc5Yi0wZjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGfbFql5B5Db290IW/lg+/eVl3IzM3Izk5bX4qptyneBMYnPhfcSMpPUId+y +impEF4VFXDQ2bxdJPU1terKgtSR0ePiaXNTlbqFwS4cr1Ey/S37HYKrdMOkrl8C sKrHLDYHkxgmHGhy8OR5dllqn0ZIhTXOvmI2OIEY+Hqsaym+FFzZa3P5/Wy3byqR XKdCvJLhBXqWXWt/GN4EmvgFFaYNNBezBQI6drx31w2Ryqvy0c7qIzvQwTbbZS5s f9DRkQyIEce7ZdceBb3GdrgAonjh4zCDOH3fUMow++hsebhGXayfjFDDIJpbgRaj w7njLStkiG3B26rTmSU4KoyDlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhodCNU 46qvkDcATDPcjofj9+ScMB8GA1UdIwQYMBaAFIV5vi2DRWgvJ67nBiu9TvdmTlcb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI2Qi83RUMwMDc2Q0ZF M0YxMUVGOEZBMjc3NTJDNEY5QUUwMi9oWG0tTFlORmFDOG5ydWNHSzcxTzkyWk9W eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hYbS1MWU5GYUM4bnJ1Y0dLNzFPOTJaT1Z4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEI2Qi83RUMwMDc2Q0ZFM0YxMUVGOEZBMjc3NTJDNEY5QUUwMi9oWG0tTFlORmFD OG5ydWNHSzcxTzkyWk9WeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvHoXCoUPdD5KTae2G3mwOw6WMIMTJmmnQhIuE9+huAVEH7AKr1Ixz PTCrsDrElH40ZsnxOoQbRvcC6Hxrl1R+Z4U0NTfgCcXtc1tP0MGV/+B1XKFCZe9S p5MyCYwM+GpZmsiZflzjJgq7g/r1ydybh4CZDvNDtoRBnBJSWwSjx5tLDeviwlZd ji8+lGkQIr3Dw8TIVdMYT+ClLKH6aEt00xvxpkFs8FSQhagAoYZtisRwgA7UoQdj bv+w/NMfpebkjWTKGA+Qp1Q/o/u3Gy2ZRDYskj7QYs9nSeb4l0EsEVEfzrUreGNc GB3vltc9jAE6VujLLWXzKm/rvrdLi4hK -----END CERTIFICATE-----Generated at Tue Dec 23 12:59:00 2025 by rpki-client