This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft File: hHdPRraSCgXa3UJHe6qzbucka5Q.mft (raw, json) Hash identifier: v+bFzuR7zwyvPfnL0tVcRBmRSl5lbTF8DzLeYzCTsXI= Subject key identifier: 41:8C:A3:C6:A9:4F:13:01:F8:47:53:BE:BB:98:87:89:5F:F4:E9:16 Authority key identifier: 84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94 Certificate issuer: /CN=A91D9162/serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94 Certificate serial: 0D7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft Manifest number: 0D76 Signing time: Sat 20 Dec 2025 17:38:14 +0000 Manifest this update: Sat 20 Dec 2025 17:38:13 +0000 Manifest next update: Sat 27 Dec 2025 17:38:13 +0000 Files and hashes: 1: hHdPRraSCgXa3UJHe6qzbucka5Q.crl (hash: 9SVvOyk7nEuvBrE2sMxTTJlS3cCFUs4cwQw/WetfsKc=) 2: E727A05600FD11EB9286115AC4F9AE02.roa (hash: MzWbilqvJU/bA0pbUK90+TSc+f/XjXTcVvnJOFhs0gQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3455 (0xd7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9162, serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94 Validity Not Before: Dec 20 17:38:13 2025 GMT Not After : Dec 27 17:38:13 2025 GMT Subject: CN=6946df05-2d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ca:3b:a0:ff:5e:e9:9f:59:59:d2:b6:d0:8e: 9b:b8:3d:f8:03:c4:90:21:b1:f7:60:00:d8:99:ec: cc:cb:87:a6:13:67:23:7e:4c:a5:56:91:bb:5f:1b: 3c:ce:8d:f5:07:d9:20:f2:69:a2:49:c6:be:15:e7: 15:b4:cf:0c:cc:b3:72:65:72:0f:f7:6d:4d:d3:b5: 38:a2:79:ae:c6:13:63:00:46:bc:a9:11:d7:89:97: 6b:15:5d:75:39:34:12:bd:fb:81:9b:be:8c:22:bd: 45:a7:d2:82:42:82:96:1e:28:c1:a5:ab:45:b4:04: 82:af:7f:7a:0b:6b:92:b8:94:10:b4:c1:ba:c9:70: e5:5e:b4:e2:de:ee:6d:d5:60:70:b9:ba:c5:22:b6: 75:89:03:30:4f:1e:4d:3d:2c:27:4a:d4:6d:c4:d8: 91:0c:b8:c2:2f:63:1a:23:a7:ef:f3:a3:ac:c2:98: 00:cc:56:3a:3c:2f:b0:65:94:97:cb:21:3f:70:0b: 6d:ba:56:7d:b3:67:ff:f0:0b:0f:24:e6:f5:78:79: 06:a7:ce:9b:c0:5b:4c:bf:d9:e6:1f:29:0e:2f:fb: eb:6d:da:cd:1b:fa:14:e8:a5:99:28:47:4b:74:e3: 71:b9:38:86:b4:e3:88:c1:24:46:b8:a7:da:8d:21: 42:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8C:A3:C6:A9:4F:13:01:F8:47:53:BE:BB:98:87:89:5F:F4:E9:16 X509v3 Authority Key Identifier: keyid:84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:24:36:5d:32:46:41:f8:44:ee:36:a9:14:e5:ae:27:1e:19: 23:e2:aa:a3:94:bb:e3:62:5e:07:11:46:31:cc:b6:58:ce:da: 6e:6c:03:90:b9:9c:7b:06:7f:ee:b0:b0:e3:b9:e7:43:87:ac: cf:d6:7f:10:34:ba:8f:cc:50:c1:8f:73:33:7d:78:33:b6:d1: ca:68:39:a4:a7:0e:0f:c8:4f:db:22:f3:d6:40:69:ff:29:c1: 75:05:12:08:f4:bc:e5:4e:b8:7a:95:28:2f:8b:f9:52:fa:88: 57:fd:c0:f5:32:d1:9e:1e:03:8e:85:2c:e8:bf:29:01:43:2a: 5a:7e:85:fa:9a:1b:f2:ef:e3:3f:dd:59:49:9a:2f:b4:26:6c: 41:7b:e6:21:93:c4:cc:12:68:12:37:5b:44:b8:ac:f6:b9:50: 38:41:58:05:aa:1f:48:7c:8c:ee:99:45:be:f0:be:10:73:67: f8:a2:9b:32:b6:f1:2f:af:a3:e7:e1:50:67:ed:74:d2:71:d0: ac:4c:92:c2:a0:83:1d:29:5f:d7:2d:6d:20:be:59:fb:02:38: d6:d8:9d:82:ed:2e:22:89:aa:0b:1f:a3:69:c9:13:d0:fd:65: 70:c2:9b:a5:4f:cd:44:95:d6:df:c1:6e:55:61:1c:c0:01:2d: 07:e8:ac:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkxNjIxMTAvBgNVBAUTKDg0Nzc0RjQ2QjY5MjBBMDVEQURENDI0NzdCQUFCMzZF RTcyNDZCOTQwHhcNMjUxMjIwMTczODEzWhcNMjUxMjI3MTczODEzWjAYMRYwFAYD VQQDDA02OTQ2ZGYwNS0yZDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA58o7oP9e6Z9ZWdK20I6buD34A8SQIbH3YADYmezMy4emE2cjfkylVpG7Xxs8 zo31B9kg8mmiSca+FecVtM8MzLNyZXIP921N07U4onmuxhNjAEa8qRHXiZdrFV11 OTQSvfuBm76MIr1Fp9KCQoKWHijBpatFtASCr396C2uSuJQQtMG6yXDlXrTi3u5t 1WBwubrFIrZ1iQMwTx5NPSwnStRtxNiRDLjCL2MaI6fv86OswpgAzFY6PC+wZZSX yyE/cAttulZ9s2f/8AsPJOb1eHkGp86bwFtMv9nmHykOL/vrbdrNG/oU6KWZKEdL dONxuTiGtOOIwSRGuKfajSFCnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGMo8ap TxMB+EdTvruYh4lf9OkWMB8GA1UdIwQYMBaAFIR3T0a2kgoF2t1CR3uqs27nJGuU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTE2Mi8yNkE4MkUwQURE QzExMUU5OTg0REU4MTFDNEY5QUUwMi9oSGRQUnJhU0NnWGEzVUpIZTZxemJ1Y2th NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hIZFBScmFTQ2dYYTNVSkhlNnF6YnVja2E1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTE2Mi8yNkE4MkUwQUREQzExMUU5OTg0REU4MTFDNEY5QUUwMi9oSGRQUnJhU0Nn WGEzVUpIZTZxemJ1Y2thNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLJDZdMkZB+ETuNqkU5a4nHhkj4qqjlLvjYl4HEUYxzLZYztpubAOQ uZx7Bn/usLDjuedDh6zP1n8QNLqPzFDBj3MzfXgzttHKaDmkpw4PyE/bIvPWQGn/ KcF1BRII9LzlTrh6lSgvi/lS+ohX/cD1MtGeHgOOhSzovykBQypafoX6mhvy7+M/ 3VlJmi+0JmxBe+Yhk8TMEmgSN1tEuKz2uVA4QVgFqh9IfIzumUW+8L4Qc2f4opsy tvEvr6Pn4VBn7XTScdCsTJLCoIMdKV/XLW0gvln7AjjW2J2C7S4iiaoLH6NpyRPQ /WVwwpulT81EldbfwW5VYRzAAS0H6KxC -----END CERTIFICATE-----Generated at Sat Dec 20 21:58:16 2025 by rpki-client