This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft File: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft (raw, json) Hash identifier: B90ag+WEs+y9A96gAbQ9Zf+QlQ+xqkYhSLrmoiipn04= Subject key identifier: AF:52:F0:35:6C:09:47:60:9D:52:9D:2E:2B:D7:6D:77:BB:B6:08:D3 Authority key identifier: FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE Certificate issuer: /CN=A91D2A6D/serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Certificate serial: 02EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft Manifest number: 02E5 Signing time: Tue 23 Dec 2025 00:18:25 +0000 Manifest this update: Tue 23 Dec 2025 00:18:25 +0000 Manifest next update: Tue 30 Dec 2025 00:18:25 +0000 Files and hashes: 1: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl (hash: 09NfHiI4PXXat9QKd8OHCLObH9kvMQVq+/2UNuYxOi4=) 2: 7B18C5B40CCE11ED97C94316C4F9AE02.roa (hash: goaKWUv5rRzy+se4DCphxh+KiAGhLohPjMAfli+5ur8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 746 (0x2ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2A6D, serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Validity Not Before: Dec 23 00:18:25 2025 GMT Not After : Dec 30 00:18:25 2025 GMT Subject: CN=6949dfd1-c8f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:58:c5:27:c1:2d:e0:d0:ae:b4:5c:38:55:a4: da:e1:8c:8c:69:73:a2:1b:6d:d6:d1:f9:08:f9:be: 0a:2b:6f:0d:cb:0d:9d:81:e8:aa:84:d3:40:8a:c8: 32:e4:b1:43:c2:71:8e:3a:6f:8f:14:31:b2:42:31: 0f:40:79:b8:2b:63:0c:c4:5b:8d:32:02:45:ca:4d: 3d:7e:c6:3f:e2:a1:16:85:06:ff:01:c7:c2:6a:8c: 60:cc:03:13:7c:5f:dd:0e:da:9f:df:17:9b:3a:8f: f7:a6:b0:e4:28:91:d2:f5:4f:5f:b9:21:5a:9a:f1: f4:bf:a9:bc:94:23:54:a3:c1:9d:4f:68:a5:92:f2: 98:ba:d3:47:71:11:82:92:fb:9c:32:d4:e1:86:6c: 82:41:8d:3b:d5:b6:3f:cf:d2:4a:8c:d5:6b:39:36: d9:c5:0a:43:03:45:7b:e7:8d:d3:db:6f:77:d1:a9: 6f:ca:13:58:fb:6c:56:7d:8d:bf:6c:a6:f3:ff:e7: 44:f4:55:3c:f5:bc:00:b3:02:63:61:eb:0b:f8:38: 2a:a6:b9:30:f3:4a:a4:70:82:75:bd:06:8f:cb:59: c4:4c:03:0c:55:84:c0:0c:52:48:96:87:c9:a8:f2: a9:2a:dd:4a:a5:2a:4c:3a:e3:cb:8d:f5:24:9b:c6: b7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:52:F0:35:6C:09:47:60:9D:52:9D:2E:2B:D7:6D:77:BB:B6:08:D3 X509v3 Authority Key Identifier: keyid:FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a8:b6:73:a6:12:d7:35:a7:d1:45:b3:12:0d:e3:f2:81:3c: 21:bd:86:65:5a:4e:28:20:e1:28:d2:a3:e1:3c:ba:10:12:27: 5d:b4:14:e4:d7:d9:82:f9:fb:86:20:2b:60:9c:ba:c4:ab:1b: 06:3e:10:00:3c:7b:b8:31:f5:b8:c3:d0:1d:4f:81:8f:36:3e: 7d:d1:d5:11:3e:06:c2:6e:4b:cc:a6:90:b4:1e:43:5d:c2:50: 4c:48:9d:14:6b:95:2e:cc:d5:ee:d1:0e:98:7c:5c:75:f4:60: c9:16:80:82:dc:e3:79:a9:90:3b:34:8d:2d:36:c0:cf:5d:5a: fe:96:43:7d:3d:0f:bc:7a:1b:44:ad:c6:87:6f:71:e9:03:75: 21:b0:fa:d4:ac:f3:bf:cf:8d:5b:8a:e4:5d:cf:36:90:54:69: 87:bc:c4:f5:bb:be:eb:76:4f:57:ca:d1:e9:c6:42:47:1a:58: 4a:ae:4d:af:67:32:8b:60:64:df:8d:d4:d0:48:d8:98:31:16: da:6f:42:97:19:22:ef:00:66:d9:3b:22:73:0e:a4:31:8c:a4: f2:1a:31:c4:91:bd:85:3f:1d:93:bb:cf:b6:b3:bf:58:dd:fb: 83:65:84:44:a6:cf:fa:fc:8c:4d:8d:e8:e8:03:f7:0a:fe:8d: 4b:06:62:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBNkQxMTAvBgNVBAUTKEZDN0IzOTRGOEY5Q0JGOUNERDIwOTNDMjcyNkRERkU5 MTNGQUE5Q0UwHhcNMjUxMjIzMDAxODI1WhcNMjUxMjMwMDAxODI1WjAYMRYwFAYD VQQDDA02OTQ5ZGZkMS1jOGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ljFJ8Et4NCutFw4VaTa4YyMaXOiG23W0fkI+b4KK28Nyw2dgeiqhNNAisgy 5LFDwnGOOm+PFDGyQjEPQHm4K2MMxFuNMgJFyk09fsY/4qEWhQb/AcfCaoxgzAMT fF/dDtqf3xebOo/3prDkKJHS9U9fuSFamvH0v6m8lCNUo8GdT2ilkvKYutNHcRGC kvucMtThhmyCQY071bY/z9JKjNVrOTbZxQpDA0V7543T22930alvyhNY+2xWfY2/ bKbz/+dE9FU89bwAswJjYesL+Dgqprkw80qkcIJ1vQaPy1nETAMMVYTADFJIlofJ qPKpKt1KpSpMOuPLjfUkm8a3pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9S8DVs CUdgnVKdLivXbXe7tgjTMB8GA1UdIwQYMBaAFPx7OU+PnL+c3SCTwnJt3+kT+qnO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkE2RC83RjhENjNCNDBD Q0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1emRJSlBDY20zZjZSUDZx YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19IczVUNC1jdjV6ZElKUENjbTNmNlJQNnFjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkE2RC83RjhENjNCNDBDQ0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1 emRJSlBDY20zZjZSUDZxYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNqLZzphLXNafRRbMSDePygTwhvYZlWk4oIOEo0qPhPLoQEiddtBTk 19mC+fuGICtgnLrEqxsGPhAAPHu4MfW4w9AdT4GPNj590dURPgbCbkvMppC0HkNd wlBMSJ0Ua5UuzNXu0Q6YfFx19GDJFoCC3ON5qZA7NI0tNsDPXVr+lkN9PQ+8ehtE rcaHb3HpA3UhsPrUrPO/z41biuRdzzaQVGmHvMT1u77rdk9XytHpxkJHGlhKrk2v ZzKLYGTfjdTQSNiYMRbab0KXGSLvAGbZOyJzDqQxjKTyGjHEkb2FPx2Tu8+2s79Y 3fuDZYREps/6/IxNjejoA/cK/o1LBmJO -----END CERTIFICATE-----Generated at Wed Dec 24 14:08:51 2025 by rpki-client