This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft File: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft (raw, json) Hash identifier: kxg1Hi4Hz51eXrLGls2pJMscXCtdndsxX2ppgeLLbFA= Subject key identifier: FC:F6:2D:D0:B8:CC:BA:A9:FC:80:BF:B1:91:D0:B9:D0:6F:27:12:F1 Authority key identifier: 85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 Certificate issuer: /CN=A91E9EBA/serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft Manifest number: FF Signing time: Wed 17 Dec 2025 04:38:45 +0000 Manifest this update: Wed 17 Dec 2025 04:38:45 +0000 Manifest next update: Wed 24 Dec 2025 04:38:45 +0000 Files and hashes: 1: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl (hash: CHbqfey0cYfUML0WGuw0yfnI+66aMkMXmpyoVlvPErs=) 2: 06F73C70ABD011F0977C9F10C4F9AE02.roa (hash: qVJeghg9xFTUN1CD6PkiZIjv0lu5fKKjik0h1AgrzM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 04:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EBA, serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Validity Not Before: Dec 17 04:38:45 2025 GMT Not After : Dec 24 04:38:45 2025 GMT Subject: CN=694233d5-7731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:07:29:f8:eb:b0:e6:0f:8c:60:0b:d6:6d:1f: d3:4a:99:22:d2:c8:c4:c5:e5:85:77:6c:12:28:47: 61:9d:04:17:d1:16:0d:98:a7:be:2e:df:81:6d:2e: d4:a9:60:f3:74:40:5f:e8:a3:68:b0:29:5c:89:55: 7d:97:7e:6d:46:c1:ce:42:f4:2b:2e:81:c4:ba:1e: f8:2d:47:6d:f3:72:81:bc:f9:dd:9d:3f:bd:7f:9a: 2a:e2:b7:82:6f:c0:21:e4:35:e9:43:9e:74:1f:f0: 44:9e:ba:48:ee:78:97:1c:6f:83:c0:35:e2:3a:21: c3:3f:4e:dd:e8:25:f7:0e:b5:4f:8c:9b:3a:74:d6: 96:72:dd:ad:37:cf:84:1d:34:5e:7c:25:f8:a7:82: 42:e8:ae:f3:6b:59:49:33:1d:cf:88:df:75:90:0c: b8:2a:1d:89:4c:40:e7:ea:89:d4:a9:7e:9d:b4:13: 1b:8c:59:c9:e7:96:25:ee:8c:db:e9:50:4d:ab:a1: c5:e6:9c:7b:48:ce:0e:1b:81:04:33:f2:96:62:e2: dd:4d:a2:95:1d:38:74:84:10:3f:8c:4b:30:49:ef: 92:b5:88:70:c7:ab:94:9b:99:2d:f5:e9:cb:d4:00: 89:7c:af:7a:71:d8:34:1a:f5:4c:5e:0c:de:2f:42: 43:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F6:2D:D0:B8:CC:BA:A9:FC:80:BF:B1:91:D0:B9:D0:6F:27:12:F1 X509v3 Authority Key Identifier: keyid:85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:c5:6f:01:5d:3c:04:2f:42:8e:5e:0a:f4:3e:b4:e0:bf:e3: 4e:9c:36:9d:01:20:2b:e3:df:81:c3:3b:ee:47:fd:2e:c1:9f: 87:f3:a0:7a:4b:e2:ea:e4:ee:92:79:ad:85:17:a2:eb:d2:49: 55:2e:dd:e6:55:88:d6:0e:c4:bc:df:ad:16:79:9b:da:dd:00: 67:83:1c:68:a8:86:0b:6e:5f:7e:0b:96:94:cb:90:36:72:4f: 8d:f9:24:24:f8:80:65:70:e3:45:71:ec:46:3c:6e:c3:2e:4a: 6a:dd:e8:a1:4f:72:ff:ac:4e:c9:77:c1:37:72:6f:28:90:c5: 28:7d:0b:e9:02:ea:b1:b8:c5:f0:31:06:91:94:57:9a:8f:06: 88:2d:07:27:f0:9e:85:e4:a4:63:29:96:d8:f5:40:45:32:5a: 05:3c:75:ee:81:37:b3:60:3f:2f:1a:98:76:af:3c:90:65:a7: 4d:06:60:34:23:c4:ce:f5:e9:e9:d6:f4:11:72:8c:00:f0:33: 61:67:af:7b:ec:58:48:a1:82:13:9d:05:99:57:ff:4d:84:b5: 1d:e7:77:f2:fb:32:64:84:f1:ba:f7:d9:d8:cb:b6:38:0a:7e: 73:8e:ae:ab:a5:44:b3:11:a9:39:dd:be:39:24:53:f4:b1:c4: ae:58:1f:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQkExMTAvBgNVBAUTKDg1QUU2MjE5Rjg2MjY5NDE0QkUxNzZCNzgyNUYxNkNE REQ0MjQyRDQwHhcNMjUxMjE3MDQzODQ1WhcNMjUxMjI0MDQzODQ1WjAYMRYwFAYD VQQDDA02OTQyMzNkNS03NzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgcp+Ouw5g+MYAvWbR/TSpki0sjExeWFd2wSKEdhnQQX0RYNmKe+Lt+BbS7U qWDzdEBf6KNosClciVV9l35tRsHOQvQrLoHEuh74LUdt83KBvPndnT+9f5oq4reC b8Ah5DXpQ550H/BEnrpI7niXHG+DwDXiOiHDP07d6CX3DrVPjJs6dNaWct2tN8+E HTRefCX4p4JC6K7za1lJMx3PiN91kAy4Kh2JTEDn6onUqX6dtBMbjFnJ55Yl7ozb 6VBNq6HF5px7SM4OG4EEM/KWYuLdTaKVHTh0hBA/jEswSe+StYhwx6uUm5kt9enL 1ACJfK96cdg0GvVMXgzeL0JDwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPz2LdC4 zLqp/IC/sZHQudBvJxLxMB8GA1UdIwQYMBaAFIWuYhn4YmlBS+F2t4JfFs3dQkLU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVCQS9GQTMyMENEQTVB REMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFVRkw0WGEzZ2w4V3pkMUNR dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hhNWlHZmhpYVVGTDRYYTNnbDhXemQxQ1F0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUVCQS9GQTMyMENEQTVBREMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFV Rkw0WGEzZ2w4V3pkMUNRdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgxW8BXTwEL0KOXgr0PrTgv+NOnDadASAr49+BwzvuR/0uwZ+H86B6 S+Lq5O6Sea2FF6Lr0klVLt3mVYjWDsS8360WeZva3QBngxxoqIYLbl9+C5aUy5A2 ck+N+SQk+IBlcONFcexGPG7DLkpq3eihT3L/rE7Jd8E3cm8okMUofQvpAuqxuMXw MQaRlFeajwaILQcn8J6F5KRjKZbY9UBFMloFPHXugTezYD8vGph2rzyQZadNBmA0 I8TO9enp1vQRcowA8DNhZ6977FhIoYITnQWZV/9NhLUd53fy+zJkhPG699nYy7Y4 Cn5zjq6rpUSzEak53b45JFP0scSuWB+H -----END CERTIFICATE-----Generated at Thu Dec 18 00:39:58 2025 by rpki-client