This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft File: HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft (raw, json) Hash identifier: UAOpZLuXltb4EDlu7o7i6cPaNpXz6GmJGLZ9EY+qEwY= Subject key identifier: B6:E3:6D:85:D9:B3:14:1A:BE:52:E9:1E:2F:DF:8A:58:F6:7E:A3:F2 Authority key identifier: 1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66 Certificate issuer: /CN=A91F2CA8/serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866 Certificate serial: 350C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft Manifest number: 3500 Signing time: Mon 22 Dec 2025 14:51:08 +0000 Manifest this update: Mon 22 Dec 2025 14:51:07 +0000 Manifest next update: Mon 29 Dec 2025 14:51:07 +0000 Files and hashes: 1: HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl (hash: y/cXcGBVJmq46IHUGBZlt3g0GmdY6GZxZbecHCyn55Q=) 2: 08FA1EC60C0911EDBDF8C44FC4F9AE02.roa (hash: kYoJR47X3kVYZwmuVMeLLYOoJYr+wMR5mBYYm9JId0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13580 (0x350c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2CA8, serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866 Validity Not Before: Dec 22 14:51:07 2025 GMT Not After : Dec 29 14:51:07 2025 GMT Subject: CN=69495adc-839c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0e:68:eb:1b:03:b2:94:dd:e8:af:2f:70:57: 79:33:bc:5c:61:10:77:8e:bd:d7:cf:d0:32:85:44: 78:53:ce:52:44:dd:58:7e:52:0d:bc:28:99:12:4a: 06:23:85:39:f4:a2:3e:d6:14:10:ac:b1:66:01:80: fb:ef:d6:77:78:d0:56:68:f2:cd:31:8f:05:47:65: 0f:e8:0e:20:a7:63:46:e0:0f:59:5c:bc:c7:33:4b: 7a:cc:8a:0c:40:04:9d:42:4b:13:92:6c:44:86:4e: 09:8b:e6:a9:e7:3b:71:d3:33:06:3d:84:d7:2d:23: 38:28:39:22:04:5d:af:3a:a6:08:47:68:c2:64:08: f8:53:dc:4e:6b:7f:c4:8f:62:e9:ae:77:ec:8e:90: 33:fb:2e:cc:a2:ea:06:7c:15:0e:eb:b2:6c:90:16: e6:80:ce:39:5e:bc:97:2a:4a:e3:7a:20:e6:e9:c8: 88:58:be:3e:37:27:39:7f:9c:64:e8:f3:d9:36:81: 3d:7e:19:d5:f1:fe:b2:82:99:f3:61:39:bc:60:58: cf:38:e1:4a:42:d5:36:f5:2b:f9:8d:e4:d4:a2:e5: ae:36:0c:6d:46:c4:06:41:81:22:98:e0:63:b9:dd: 78:12:c7:0d:c2:36:ef:99:27:bd:e4:2f:a2:90:ba: 10:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E3:6D:85:D9:B3:14:1A:BE:52:E9:1E:2F:DF:8A:58:F6:7E:A3:F2 X509v3 Authority Key Identifier: keyid:1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c8:e3:57:5d:45:62:4f:db:3c:92:a8:54:f5:c1:d7:6b:29: a2:09:2c:3f:25:b1:cd:20:b3:89:b0:40:c9:98:2e:b5:e8:02: 4c:03:8d:db:0c:0d:0a:98:ed:52:82:b1:26:66:5e:c2:b5:9f: 8f:93:6d:6d:18:9f:35:46:a7:06:74:de:87:8c:e1:a2:ab:cc: 9d:dc:93:48:23:b9:dc:58:38:34:eb:c3:79:69:db:a5:20:45: 70:f3:9e:76:90:b3:d9:fd:0f:a1:2e:e4:67:ca:87:79:52:84: 8f:44:70:18:0c:a1:cf:19:cb:78:26:3b:63:de:5a:57:92:e8: 40:c5:ed:0b:a9:d2:96:7d:ac:fe:53:9e:c5:63:c4:57:2a:66: 58:06:e9:99:f8:4d:f9:9e:bc:02:b1:b0:20:82:b5:fe:3b:d1: 20:30:27:b9:27:bc:b4:8e:e2:10:b7:6b:4c:f9:59:08:b5:b2: 9d:a7:cc:28:b9:69:53:f9:d2:bc:65:05:21:c4:67:60:78:7d: 60:7f:06:25:a9:3b:50:cb:1d:65:24:1e:9f:e1:b8:9a:a8:db: 34:bc:84:6f:3c:af:53:1e:48:40:ac:75:ae:e7:35:62:48:11: b2:86:4d:3b:9e:be:fe:47:81:53:4f:a5:e3:92:79:70:c0:32: af:a0:eb:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJDQTgxMTAvBgNVBAUTKDFFNzUyQzNEMTYwNDhDM0YzRjYzMjNEMkI5MTA3MEJG MjQ3RDY4NjYwHhcNMjUxMjIyMTQ1MTA3WhcNMjUxMjI5MTQ1MTA3WjAYMRYwFAYD VQQDDA02OTQ5NWFkYy04MzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3A5o6xsDspTd6K8vcFd5M7xcYRB3jr3Xz9AyhUR4U85SRN1YflINvCiZEkoG I4U59KI+1hQQrLFmAYD779Z3eNBWaPLNMY8FR2UP6A4gp2NG4A9ZXLzHM0t6zIoM QASdQksTkmxEhk4Ji+ap5ztx0zMGPYTXLSM4KDkiBF2vOqYIR2jCZAj4U9xOa3/E j2LprnfsjpAz+y7MouoGfBUO67JskBbmgM45XryXKkrjeiDm6ciIWL4+Nyc5f5xk 6PPZNoE9fhnV8f6ygpnzYTm8YFjPOOFKQtU29Sv5jeTUouWuNgxtRsQGQYEimOBj ud14EscNwjbvmSe95C+ikLoQRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbjbYXZ sxQavlLpHi/filj2fqPyMB8GA1UdIwQYMBaAFB51LD0WBIw/P2Mj0rkQcL8kfWhm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkNBOC84NzAzMjI1ODFE OUExMUUyQUE4NkMyODcwOEIwMkNEMi9IblVzUFJZRWpEOF9ZeVBTdVJCd3Z5Ujlh R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0huVXNQUllFakQ4X1l5UFN1UkJ3dnlSOWFHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkNBOC84NzAzMjI1ODFEOUExMUUyQUE4NkMyODcwOEIwMkNEMi9IblVzUFJZRWpE OF9ZeVBTdVJCd3Z5UjlhR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOyONXXUViT9s8kqhU9cHXaymiCSw/JbHNILOJsEDJmC616AJMA43b DA0KmO1SgrEmZl7CtZ+Pk21tGJ81RqcGdN6HjOGiq8yd3JNII7ncWDg068N5adul IEVw8552kLPZ/Q+hLuRnyod5UoSPRHAYDKHPGct4Jjtj3lpXkuhAxe0LqdKWfaz+ U57FY8RXKmZYBumZ+E35nrwCsbAggrX+O9EgMCe5J7y0juIQt2tM+VkItbKdp8wo uWlT+dK8ZQUhxGdgeH1gfwYlqTtQyx1lJB6f4biaqNs0vIRvPK9THkhArHWu5zVi SBGyhk07nr7+R4FTT6XjknlwwDKvoOtm -----END CERTIFICATE-----Generated at Tue Dec 23 14:28:46 2025 by rpki-client