This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft File: hkuImlN4cQmFJlQfDrkSVv2vp7E.mft (raw, json) Hash identifier: u65DnluiaaKAz3CcwxNPvOKnjmDHUfUWv4xUe4xX/cg= Subject key identifier: F8:92:B0:67:C6:92:3B:D6:83:FC:47:47:CA:91:18:56:EF:53:88:99 Authority key identifier: 86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1 Certificate issuer: /CN=A91DB53B/serialNumber=864B889A537871098526541F0EB91256FDAFA7B1 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft Manifest number: 03 Signing time: Wed 24 Dec 2025 07:29:53 +0000 Manifest this update: Wed 24 Dec 2025 07:29:52 +0000 Manifest next update: Wed 31 Dec 2025 07:29:52 +0000 Files and hashes: 1: hkuImlN4cQmFJlQfDrkSVv2vp7E.crl (hash: uhgdGdI0jSd6lcUm2SxDGHjZzyMnf9ywr08ehDUPWcI=) 2: 53F3631AE09A11F0A599D036446F56BC.roa (hash: cen/2QQHHB2Ce/BPby3zzwtq3/K2nBJUeNhySuETspw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 07:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB53B, serialNumber=864B889A537871098526541F0EB91256FDAFA7B1 Validity Not Before: Dec 24 07:29:52 2025 GMT Not After : Dec 31 07:29:52 2025 GMT Subject: CN=694b9670-5491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c3:16:92:4b:3b:ab:3d:77:ad:07:06:36:09: 25:01:ed:2b:1f:bf:fd:b3:21:56:28:dc:64:15:51: dd:c5:35:3c:3c:a9:68:52:dc:17:22:7a:59:7f:fe: bf:e3:cb:a8:dd:ab:17:ff:8c:09:1a:48:83:bf:af: 7e:b8:6a:bc:01:7c:e4:e2:ec:e8:ae:70:9f:80:3b: 0d:95:cc:fc:e1:66:81:c0:5b:35:9b:d5:71:7b:9c: 8a:3b:8e:33:37:3d:ed:a6:7e:a2:5e:86:55:bc:1b: e3:a0:a9:6a:4c:5c:03:a7:e6:79:e8:5f:6c:bd:ea: 46:74:8e:70:24:ab:11:37:26:bf:38:69:61:0d:4f: 09:bb:b3:ae:30:cb:37:51:4a:1c:20:e2:87:13:69: 13:7e:d6:29:a1:49:e7:d4:39:df:88:00:8b:21:e3: dd:64:56:85:c8:de:31:36:31:2e:b7:32:fd:ca:53: da:7b:e0:96:53:83:55:cd:2c:9e:34:2c:2e:ec:e4: af:63:7f:9d:67:01:01:48:0b:4a:1f:d5:4c:d8:06: b6:5f:f8:3f:ba:84:60:bd:3b:f3:dd:a1:49:1f:58: 5a:bc:91:bd:06:dc:bb:ae:e4:62:0c:fb:31:89:66: 2a:73:ee:a1:d8:00:88:e2:d9:9f:3a:30:e4:63:9b: 08:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:92:B0:67:C6:92:3B:D6:83:FC:47:47:CA:91:18:56:EF:53:88:99 X509v3 Authority Key Identifier: keyid:86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:26:8f:07:9c:a9:f0:de:eb:e4:0f:71:06:ba:71:e4:bb:78: 83:49:4a:b4:ac:c2:07:2c:6c:96:70:12:38:d0:bb:a3:b9:26: 24:ab:5e:44:3b:44:e0:0e:c3:bc:75:7e:6d:f1:a0:ec:d9:17: c6:bd:6c:c6:0d:28:05:6f:84:5c:c0:54:6a:62:5e:f5:c7:32: b7:d8:5a:66:3e:26:91:bc:fb:94:34:ba:92:a6:ca:97:3b:7b: 4f:27:c3:ec:64:e6:89:03:c7:18:f7:37:ee:25:03:4d:92:7e: 6c:95:20:64:02:c4:0a:8c:c0:ca:24:6b:34:44:d3:c4:ab:85: 2c:fb:b6:a9:e4:ad:9e:51:a1:8f:3b:e2:38:54:f2:e4:b9:44: 19:86:8e:3f:e7:6e:44:cf:26:03:7f:8e:8d:35:f1:c4:f3:84: fb:b2:70:78:8b:0a:63:e2:f8:79:ac:06:97:7f:3a:82:94:42: 57:f7:d1:29:b5:b1:d0:d5:e2:3d:30:35:6f:71:d7:ae:2d:bb: 4c:c1:c7:e9:fa:89:fd:8f:98:fa:76:60:a6:e2:f7:d0:5c:f7: 40:f4:9b:35:5f:7e:5d:ce:83:01:d7:3c:5f:59:1e:4d:f2:74: fe:44:f2:72:bb:06:44:f7:b2:d8:81:c0:26:2b:f1:3a:00:82: 0a:b2:8f:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFE QjUzQjExMC8GA1UEBRMoODY0Qjg4OUE1Mzc4NzEwOTg1MjY1NDFGMEVCOTEyNTZG REFGQTdCMTAeFw0yNTEyMjQwNzI5NTJaFw0yNTEyMzEwNzI5NTJaMBgxFjAUBgNV BAMMDTY5NGI5NjcwLTU0OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCQwxaSSzurPXetBwY2CSUB7Ssfv/2zIVYo3GQVUd3FNTw8qWhS3Bciell//r/j y6jdqxf/jAkaSIO/r364arwBfOTi7OiucJ+AOw2VzPzhZoHAWzWb1XF7nIo7jjM3 Pe2mfqJehlW8G+OgqWpMXAOn5nnoX2y96kZ0jnAkqxE3Jr84aWENTwm7s64wyzdR Shwg4ocTaRN+1imhSefUOd+IAIsh491kVoXI3jE2MS63Mv3KU9p74JZTg1XNLJ40 LC7s5K9jf51nAQFIC0of1UzYBrZf+D+6hGC9O/PdoUkfWFq8kb0G3Luu5GIM+zGJ Zipz7qHYAIji2Z86MORjmwifAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+JKwZ8aS O9aD/EdHypEYVu9TiJkwHwYDVR0jBBgwFoAUhkuImlN4cQmFJlQfDrkSVv2vp7Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCNTNCLzAwREE5RDY4RTAx QTExRjA4QUQzRUI4RDYyNkY1NkJDL2hrdUltbE40Y1FtRkpsUWZEcmtTVnYydnA3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGt1SW1sTjRjUW1GSmxRZkRya1NWdjJ2cDdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC NTNCLzAwREE5RDY4RTAxQTExRjA4QUQzRUI4RDYyNkY1NkJDL2hrdUltbE40Y1Ft RkpsUWZEcmtTVnYydnA3RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC8mjwecqfDe6+QPcQa6ceS7eINJSrSswgcsbJZwEjjQu6O5JiSrXkQ7 ROAOw7x1fm3xoOzZF8a9bMYNKAVvhFzAVGpiXvXHMrfYWmY+JpG8+5Q0upKmypc7 e08nw+xk5okDxxj3N+4lA02SfmyVIGQCxAqMwMokazRE08SrhSz7tqnkrZ5RoY87 4jhU8uS5RBmGjj/nbkTPJgN/jo018cTzhPuycHiLCmPi+HmsBpd/OoKUQlf30Sm1 sdDV4j0wNW9x164tu0zBx+n6if2PmPp2YKbi99Bc90D0mzVffl3OgwHXPF9ZHk3y dP5E8nK7BkT3stiBwCYr8ToAggqyjxc= -----END CERTIFICATE-----Generated at Wed Dec 24 14:05:04 2025 by rpki-client