This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft File: HAF157M3En5uwlH0Og0qxhMRv04.mft (raw, json) Hash identifier: SBR4XXEldCDzDbTeq4emQXjLpqi/0Edw/v9mMxBLc+Y= Subject key identifier: F1:34:06:60:A0:BB:53:68:7F:AB:EF:9A:74:CE:09:11:47:DC:0A:01 Authority key identifier: 1C:01:75:E7:B3:37:12:7E:6E:C2:51:F4:3A:0D:2A:C6:13:11:BF:4E Certificate issuer: /CN=A91E3584/serialNumber=1C0175E7B337127E6EC251F43A0D2AC61311BF4E Certificate serial: 34F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft Manifest number: 34ED Signing time: Wed 24 Dec 2025 14:25:18 +0000 Manifest this update: Wed 24 Dec 2025 14:25:18 +0000 Manifest next update: Wed 31 Dec 2025 14:25:18 +0000 Files and hashes: 1: HAF157M3En5uwlH0Og0qxhMRv04.crl (hash: YRmqovhwf+vIfClXojgx6nKhGwB7+NPddCoW5MgItL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.crl rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 14:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13552 (0x34f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3584, serialNumber=1C0175E7B337127E6EC251F43A0D2AC61311BF4E Validity Not Before: Dec 24 14:25:18 2025 GMT Not After : Dec 31 14:25:18 2025 GMT Subject: CN=694bf7ce-1f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:89:28:13:fc:32:c0:35:b3:0c:b0:48:f3:78: f6:86:b3:56:ea:0b:91:c6:e8:55:bf:87:53:ae:96: f6:0b:b0:a9:85:db:e5:a3:07:d2:7c:e7:34:87:c7: 4f:a9:c9:1e:98:95:57:d2:5e:1c:9e:65:62:35:ba: 48:9f:e0:57:2c:ed:72:41:c2:57:90:2a:24:8c:37: 8d:6e:12:2c:a9:5d:13:30:6a:1a:93:4b:dd:99:e0: 80:d3:8b:5b:69:f2:45:50:45:be:f4:10:11:c5:cf: f6:61:29:25:10:a3:9a:03:ca:9d:52:0a:66:8c:91: e5:ca:10:d8:9f:ac:84:b4:17:b9:14:c7:9a:dd:5b: c7:33:4a:ef:33:81:ed:90:79:56:61:f5:7e:b5:b7: 80:3f:e8:7b:ab:6c:06:a1:32:41:78:bf:42:b6:2b: ce:cc:cc:96:79:a9:9b:d6:e6:24:b8:a5:ee:0b:43: 87:47:d4:94:50:64:f0:dc:95:3e:cc:49:af:c6:dc: f2:db:18:f6:e0:fc:ec:d1:4c:16:71:d2:cb:ae:d4: f8:af:14:48:fd:30:8c:52:ac:ec:b9:29:80:3d:42: fb:4f:de:e4:cb:96:15:80:0e:b5:34:f7:c5:b2:48: 6b:39:03:c8:cb:40:7d:99:c9:34:ec:c3:4d:39:55: d9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:34:06:60:A0:BB:53:68:7F:AB:EF:9A:74:CE:09:11:47:DC:0A:01 X509v3 Authority Key Identifier: keyid:1C:01:75:E7:B3:37:12:7E:6E:C2:51:F4:3A:0D:2A:C6:13:11:BF:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:05:b5:b6:e2:2e:9f:d0:2f:17:a3:c2:87:6d:ec:d2:01:7e: 60:9b:3c:5d:d6:20:6f:5a:55:b8:53:92:30:0b:6a:38:b1:54: 73:64:5d:ed:58:d3:cb:87:53:d3:d0:f6:58:44:3a:26:b4:31: 94:12:ea:12:22:f3:55:a4:ce:c1:90:cc:ba:53:94:f5:0d:65: fb:92:a8:5c:29:ad:6c:df:24:30:b9:5f:aa:87:34:00:87:53: 4b:b8:ba:be:49:db:58:d9:e8:c8:fe:c2:eb:cd:9f:3a:32:1c: 1d:4e:66:8e:60:41:58:70:66:cf:80:ae:33:fc:17:b1:c7:21: c4:1d:52:2e:ee:89:d1:50:33:c4:db:75:c5:34:fb:dc:bf:8f: 1e:dc:8f:ce:fb:12:1e:ec:10:2c:33:7f:29:02:ef:4b:2a:05: 68:70:12:16:68:81:3b:fc:46:e2:94:2c:f2:30:f7:c5:24:a2: de:0b:85:c5:4a:f7:dd:5d:93:ed:d8:6c:8a:00:36:f4:95:5f: 21:7b:b8:e3:70:23:49:1c:90:ac:eb:ed:79:db:f3:cf:55:66: 0b:5e:c7:dd:01:2f:05:7e:2b:bd:46:52:0d:cd:5b:ec:32:2b: 8c:4f:48:77:fa:ee:51:4b:77:d6:d4:47:9d:a7:68:fb:e6:2a: 70:65:25:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM1ODQxMTAvBgNVBAUTKDFDMDE3NUU3QjMzNzEyN0U2RUMyNTFGNDNBMEQyQUM2 MTMxMUJGNEUwHhcNMjUxMjI0MTQyNTE4WhcNMjUxMjMxMTQyNTE4WjAYMRYwFAYD VQQDDA02OTRiZjdjZS0xZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIkoE/wywDWzDLBI83j2hrNW6guRxuhVv4dTrpb2C7CphdvlowfSfOc0h8dP qckemJVX0l4cnmViNbpIn+BXLO1yQcJXkCokjDeNbhIsqV0TMGoak0vdmeCA04tb afJFUEW+9BARxc/2YSklEKOaA8qdUgpmjJHlyhDYn6yEtBe5FMea3VvHM0rvM4Ht kHlWYfV+tbeAP+h7q2wGoTJBeL9CtivOzMyWeamb1uYkuKXuC0OHR9SUUGTw3JU+ zEmvxtzy2xj24Pzs0UwWcdLLrtT4rxRI/TCMUqzsuSmAPUL7T97ky5YVgA61NPfF skhrOQPIy0B9mck07MNNOVXZTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPE0BmCg u1Nof6vvmnTOCRFH3AoBMB8GA1UdIwQYMBaAFBwBdeezNxJ+bsJR9DoNKsYTEb9O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzU4NC9EMUExMjk0NjFE ODUxMUUyQkI0RkE0REMwOEIwMkNEMi9IQUYxNTdNM0VuNXV3bEgwT2cwcXhoTVJ2 MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hBRjE1N00zRW41dXdsSDBPZzBxeGhNUnYwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzU4NC9EMUExMjk0NjFEODUxMUUyQkI0RkE0REMwOEIwMkNEMi9IQUYxNTdNM0Vu NXV3bEgwT2cwcXhoTVJ2MDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDBbW24i6f0C8Xo8KHbezSAX5gmzxd1iBvWlW4U5IwC2o4sVRzZF3t WNPLh1PT0PZYRDomtDGUEuoSIvNVpM7BkMy6U5T1DWX7kqhcKa1s3yQwuV+qhzQA h1NLuLq+SdtY2ejI/sLrzZ86MhwdTmaOYEFYcGbPgK4z/BexxyHEHVIu7onRUDPE 23XFNPvcv48e3I/O+xIe7BAsM38pAu9LKgVocBIWaIE7/EbilCzyMPfFJKLeC4XF SvfdXZPt2GyKADb0lV8he7jjcCNJHJCs6+152/PPVWYLXsfdAS8Ffiu9RlINzVvs MiuMT0h3+u5RS3fW1Eedp2j75ipwZSWc -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:35 2025 by rpki-client