This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft File: HT2u99J4g3Pt38sa1cTCNWxXre0.mft (raw, json) Hash identifier: dgNtFLZJFSwWxFL0AmHLU7IFFjmPC3ptZlSPBJb7FYU= Subject key identifier: 0E:0F:44:E5:2B:A4:32:42:A7:F9:30:0D:59:44:50:F2:97:90:AC:DD Authority key identifier: 1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED Certificate issuer: /CN=A91F0578/serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft Manifest number: B7 Signing time: Tue 23 Dec 2025 05:02:08 +0000 Manifest this update: Tue 23 Dec 2025 05:02:07 +0000 Manifest next update: Tue 30 Dec 2025 05:02:07 +0000 Files and hashes: 1: HT2u99J4g3Pt38sa1cTCNWxXre0.crl (hash: 8CChfmQLghgEGlEordsZXeuoxms2lVpjHqSPjQX3oRo=) 2: A22E9E42CF3D11EFB2075D13C4F9AE02.roa (hash: vLRSLWwCPlw1XgMXqIwjNZRh5iifhLT67LBNrNkXRO0=) 3: 8B349526E61B11EFA5CFAA1CC4F9AE02.roa (hash: ne8tUgudan5gCr0Fj4AbK9IugW5sTtsGHmdJgQPhqp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0578, serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED Validity Not Before: Dec 23 05:02:07 2025 GMT Not After : Dec 30 05:02:07 2025 GMT Subject: CN=694a2250-3755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3e:51:00:58:44:08:5a:c3:53:55:53:48:a1: 93:7b:d6:e7:22:3f:d5:b4:23:b4:a6:c5:61:62:51: e9:3d:86:8f:ed:b9:51:a0:ee:28:3c:d3:1e:3e:46: 2f:26:69:94:89:87:15:20:29:6a:d4:4e:92:ee:94: 27:96:15:4c:53:79:c3:12:91:58:7a:57:5b:02:f7: e0:0b:48:7f:3b:80:20:28:08:75:83:f8:e1:e8:33: 3e:d5:d1:5d:e1:78:70:ef:e8:b4:95:6c:c1:ea:9f: c6:96:1f:a6:16:58:d5:24:6a:9c:fd:da:56:d3:cc: 11:0a:b7:e4:6a:54:28:21:a2:5f:92:8f:e1:f5:52: a7:af:9f:d3:22:ec:50:c1:9a:12:f0:6a:64:5f:a2: a2:68:1c:33:f7:c0:0a:99:58:ad:cf:2d:7b:32:78: 70:18:8d:10:bf:d0:07:7b:ce:92:1c:a5:d3:73:71: 0c:8b:f0:27:bd:cd:5b:a3:34:2e:ff:ed:d0:5e:1a: ad:f0:1b:2b:f1:40:f9:05:e5:73:63:9d:0c:d8:16: 07:3b:c1:f7:c6:4d:64:06:73:2b:78:99:de:63:3e: 0e:6c:98:c9:3e:20:44:ae:cd:17:0a:a8:9c:50:9e: 9a:7a:3d:7e:79:16:38:46:9d:15:a0:bc:b8:30:77: 3c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0F:44:E5:2B:A4:32:42:A7:F9:30:0D:59:44:50:F2:97:90:AC:DD X509v3 Authority Key Identifier: keyid:1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:4b:a0:24:e8:ee:fe:08:79:8e:ea:5a:0a:1c:e1:ac:c3:33: e7:57:62:be:56:6a:34:ae:4a:10:49:ef:de:48:c4:58:4d:70: 89:f9:39:1b:01:13:3a:a7:7d:ef:48:ce:56:ea:48:c2:53:70: 2c:f4:ec:26:c7:50:9d:e2:46:92:5d:bd:f8:dd:f5:a4:aa:15: 4a:4f:ae:a5:45:44:a4:74:bf:d3:74:de:c3:bf:d6:a6:7d:48: 62:1d:ba:10:9a:0d:30:58:79:db:54:18:10:37:5a:d6:e0:86: 54:40:b6:42:86:86:01:f0:8c:e1:c4:77:13:ff:dc:66:88:9e: f5:a3:7f:e9:4e:6d:99:32:e9:27:ed:4d:b7:17:36:ad:fa:cf: 75:a7:c3:a1:20:94:4e:d9:df:c9:32:86:45:88:14:60:d3:b6: 94:40:ed:f3:d0:5b:1c:d6:2e:f4:f0:e6:26:62:d0:b6:c1:80: 44:a4:b7:5f:74:23:b0:63:70:28:49:94:ad:8f:7a:7a:b7:ef: 4b:61:77:01:9e:5a:a0:f2:26:ca:5f:b5:fa:0a:ff:2f:08:69: d3:f6:3e:7c:df:51:3d:9f:03:dc:7d:f8:e4:e9:86:db:2d:41: 8c:85:41:03:e1:a0:05:84:fa:9c:e3:a7:89:4d:1d:c7:4f:f8: e3:d1:18:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1NzgxMTAvBgNVBAUTKDFEM0RBRUY3RDI3ODgzNzNFRERGQ0IxQUQ1QzRDMjM1 NkM1N0FERUQwHhcNMjUxMjIzMDUwMjA3WhcNMjUxMjMwMDUwMjA3WjAYMRYwFAYD VQQDDA02OTRhMjI1MC0zNzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyz5RAFhECFrDU1VTSKGTe9bnIj/VtCO0psVhYlHpPYaP7blRoO4oPNMePkYv JmmUiYcVIClq1E6S7pQnlhVMU3nDEpFYeldbAvfgC0h/O4AgKAh1g/jh6DM+1dFd 4Xhw7+i0lWzB6p/Glh+mFljVJGqc/dpW08wRCrfkalQoIaJfko/h9VKnr5/TIuxQ wZoS8GpkX6KiaBwz98AKmVitzy17MnhwGI0Qv9AHe86SHKXTc3EMi/Anvc1bozQu /+3QXhqt8Bsr8UD5BeVzY50M2BYHO8H3xk1kBnMreJneYz4ObJjJPiBErs0XCqic UJ6aej1+eRY4Rp0VoLy4MHc8fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4PROUr pDJCp/kwDVlEUPKXkKzdMB8GA1UdIwQYMBaAFB09rvfSeINz7d/LGtXEwjVsV63t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDU3OC8wMDNBNzlEQUNG M0QxMUVGOTEzODBFMTFDNEY5QUUwMi9IVDJ1OTlKNGczUHQzOHNhMWNUQ05XeFhy ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hUMnU5OUo0ZzNQdDM4c2ExY1RDTld4WHJlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDU3OC8wMDNBNzlEQUNGM0QxMUVGOTEzODBFMTFDNEY5QUUwMi9IVDJ1OTlKNGcz UHQzOHNhMWNUQ05XeFhyZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPS6Ak6O7+CHmO6loKHOGswzPnV2K+Vmo0rkoQSe/eSMRYTXCJ+Tkb ARM6p33vSM5W6kjCU3As9Owmx1Cd4kaSXb343fWkqhVKT66lRUSkdL/TdN7Dv9am fUhiHboQmg0wWHnbVBgQN1rW4IZUQLZChoYB8IzhxHcT/9xmiJ71o3/pTm2ZMukn 7U23Fzat+s91p8OhIJRO2d/JMoZFiBRg07aUQO3z0Fsc1i708OYmYtC2wYBEpLdf dCOwY3AoSZStj3p6t+9LYXcBnlqg8ibKX7X6Cv8vCGnT9j5831E9nwPcffjk6Ybb LUGMhUED4aAFhPqc46eJTR3HT/jj0Rjz -----END CERTIFICATE-----Generated at Tue Dec 23 14:40:10 2025 by rpki-client