This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft File: hQh9CO2zN-4B6xruuBLL7jStjmM.mft (raw, json) Hash identifier: ULXjQREggcFmmvnmJIY+gsva7POGyfpvcOzHRsCZ1XI= Subject key identifier: A7:D6:3C:59:6C:AC:E4:E2:6A:DD:06:D1:93:0F:F9:9E:82:03:D5:4C Authority key identifier: 85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63 Certificate issuer: /CN=A91DE01E/serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft Manifest number: 0F Signing time: Sun 07 Dec 2025 05:55:45 +0000 Manifest this update: Sun 07 Dec 2025 05:55:44 +0000 Manifest next update: Sun 14 Dec 2025 05:55:44 +0000 Files and hashes: 1: hQh9CO2zN-4B6xruuBLL7jStjmM.crl (hash: Y+C4IHztc18EkinW7l1zrTkYzUNUv+mvQ0bmkNLsQAE=) 2: F7DB315EBEC811F0A266E40FC4F9AE02.roa (hash: 2X/xAt2NpQgJSrpIK+jQKjbm6p9J7Q5z+jWa7ZqFy0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE01E, serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63 Validity Not Before: Dec 7 05:55:44 2025 GMT Not After : Dec 14 05:55:44 2025 GMT Subject: CN=693516e1-b994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5c:4c:d8:b1:2b:18:01:85:f5:f0:18:2a:f2: a0:b9:f2:57:47:83:a1:68:d3:03:23:f5:f1:60:86: f1:66:6c:1a:97:55:47:02:f4:db:2a:eb:4f:d2:63: 49:ee:83:23:79:1b:92:eb:ba:a4:fd:c3:7e:a6:b0: b2:03:0d:7d:c5:f6:17:92:2e:2f:b4:44:99:fb:fe: 92:9f:66:89:9b:6c:e7:ba:6a:d8:b4:93:70:3f:35: f9:f3:41:a3:0c:4e:93:cd:5e:64:78:f8:68:62:cf: ac:4f:dc:24:db:2d:c4:eb:3c:b6:36:c9:68:56:3c: e3:44:a6:6c:f9:ab:f5:db:c5:1b:7c:b3:fd:7a:05: 99:62:ac:25:03:32:e6:70:7f:9b:c5:45:b4:b3:7b: d7:93:68:95:66:46:cf:60:f9:fd:39:5b:ea:e8:12: db:93:25:74:0f:e8:25:b1:9a:1e:10:89:6c:37:b8: fa:e9:b1:4b:ae:69:2d:27:12:63:4c:4c:40:a5:23: 1a:4c:34:39:16:77:97:6e:79:01:9e:73:73:28:5c: d0:b9:f5:34:bd:ed:f0:64:ee:be:43:d0:d0:da:8d: b1:b8:8a:73:8e:94:35:df:0e:bf:7b:d8:53:82:20: a8:e7:e8:1a:3f:6a:9c:b1:3f:d6:5f:9b:b4:c8:d5: 20:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D6:3C:59:6C:AC:E4:E2:6A:DD:06:D1:93:0F:F9:9E:82:03:D5:4C X509v3 Authority Key Identifier: keyid:85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:a2:ea:5c:0f:7b:c1:de:e3:d5:fe:cf:30:0b:85:15:9f:40: 38:ab:c7:3b:50:b5:73:83:c5:8f:c9:7a:c8:d6:f1:28:ef:33: 64:b6:5c:97:0d:21:30:48:ce:e0:86:3c:4a:9e:12:c6:4a:2c: d2:eb:a5:ae:45:bc:0d:55:6a:18:6e:30:76:f4:78:5e:42:80: 87:cc:1f:d6:70:da:f6:b9:c2:62:41:db:96:fa:f6:ec:f3:57: b9:9d:31:07:2e:47:c8:84:12:dd:7f:1d:42:2e:a9:2d:37:52: 0f:0b:30:61:e7:40:21:64:38:5f:16:ac:61:7a:95:31:e1:35: c2:2a:90:f4:30:82:fc:fd:d7:de:43:34:30:6a:d3:c3:43:dd: 4c:08:8d:59:92:38:5c:0b:bd:87:e0:6a:49:25:21:5c:30:66: 72:64:9f:69:7f:3a:2a:b0:ee:a1:8a:d9:17:94:a0:ed:c9:74: 95:6b:71:2a:ee:b2:18:2b:0b:6f:62:40:66:91:4b:c9:e2:e7: 6f:70:89:db:df:fe:d3:69:1e:ee:00:69:a7:19:86:af:d1:47: a9:7c:b9:c4:c2:bd:6e:d2:99:03:f4:29:fb:36:28:09:7f:e2: f3:09:d4:99:69:cb:48:47:be:e5:fc:00:17:ee:ac:1f:60:74: d4:a0:b9:bf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RTAxRTExMC8GA1UEBRMoODUwODdEMDhFREIzMzdFRTAxRUIxQUVFQjgxMkNCRUUz NEFEOEU2MzAeFw0yNTEyMDcwNTU1NDRaFw0yNTEyMTQwNTU1NDRaMBgxFjAUBgNV BAMTDTY5MzUxNmUxLWI5OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTXEzYsSsYAYX18Bgq8qC58ldHg6Fo0wMj9fFghvFmbBqXVUcC9Nsq60/SY0nu gyN5G5LruqT9w36msLIDDX3F9heSLi+0RJn7/pKfZombbOe6ati0k3A/NfnzQaMM TpPNXmR4+Ghiz6xP3CTbLcTrPLY2yWhWPONEpmz5q/XbxRt8s/16BZlirCUDMuZw f5vFRbSze9eTaJVmRs9g+f05W+roEtuTJXQP6CWxmh4QiWw3uPrpsUuuaS0nEmNM TEClIxpMNDkWd5dueQGec3MoXNC59TS97fBk7r5D0NDajbG4inOOlDXfDr972FOC IKjn6Bo/apyxP9Zfm7TI1SDFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUp9Y8WWys 5OJq3QbRkw/5noID1UwwHwYDVR0jBBgwFoAUhQh9CO2zN+4B6xruuBLL7jStjmMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMDFFLzE0NDdDMEQ4QkVD ODExRjA4MjczNjYwQkM0RjlBRTAyL2hRaDlDTzJ6Ti00QjZ4cnV1QkxMN2pTdGpt TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFFoOUNPMnpOLTRCNnhydXVCTEw3alN0am1NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF MDFFLzE0NDdDMEQ4QkVDODExRjA4MjczNjYwQkM0RjlBRTAyL2hRaDlDTzJ6Ti00 QjZ4cnV1QkxMN2pTdGptTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADSi6lwPe8He49X+zzALhRWfQDirxztQtXODxY/JesjW8SjvM2S2XJcN ITBIzuCGPEqeEsZKLNLrpa5FvA1VahhuMHb0eF5CgIfMH9Zw2va5wmJB25b69uzz V7mdMQcuR8iEEt1/HUIuqS03Ug8LMGHnQCFkOF8WrGF6lTHhNcIqkPQwgvz9195D NDBq08ND3UwIjVmSOFwLvYfgakklIVwwZnJkn2l/Oiqw7qGK2ReUoO3JdJVrcSru shgrC29iQGaRS8ni529widvf/tNpHu4AaacZhq/RR6l8ucTCvW7SmQP0Kfs2KAl/ 4vMJ1Jlpy0hHvuX8ABfurB9gdNSgub8= -----END CERTIFICATE-----Generated at Mon Dec 8 06:12:35 2025 by rpki-client