This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft File: hjLNJWad2HIgIEUXQG4_ay8SklE.mft (raw, json) Hash identifier: 6sZtsPRD3eg8xgVNm0DCKh7DkG6kaeGZVUxbN85YolA= Subject key identifier: 9C:05:FE:BA:64:A3:3C:93:FE:EA:5F:3B:EC:62:93:DC:41:38:32:0D Authority key identifier: 86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51 Certificate issuer: /CN=A91F320A/serialNumber=8632CD25669DD87220204517406E3F6B2F129251 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft Manifest number: D7 Signing time: Tue 23 Dec 2025 04:35:55 +0000 Manifest this update: Tue 23 Dec 2025 04:35:55 +0000 Manifest next update: Tue 30 Dec 2025 04:35:55 +0000 Files and hashes: 1: hjLNJWad2HIgIEUXQG4_ay8SklE.crl (hash: BshfAepSPZDf0JfV2d+DeXi4FZwcyoEyIFaL8Aiyd4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F320A, serialNumber=8632CD25669DD87220204517406E3F6B2F129251 Validity Not Before: Dec 23 04:35:55 2025 GMT Not After : Dec 30 04:35:55 2025 GMT Subject: CN=694a1c2b-86f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:61:12:a5:0a:e9:28:f9:5d:a0:f0:ff:5d:cf: 88:7f:4f:e1:a5:7c:4c:ab:5a:da:b4:d1:7e:08:01: 57:d7:85:ba:39:cc:3b:60:62:cd:d5:f2:fa:67:20: 63:58:db:1f:0a:18:5d:c3:ec:4c:bf:9e:4c:18:45: 38:13:19:bb:81:ae:39:df:0f:a8:92:a9:0b:d8:27: 3e:99:e9:ba:e2:0a:d7:b4:7e:41:90:ff:d6:b7:f5: 38:3a:4d:6a:c2:d9:bd:41:8e:f5:70:12:66:45:31: c7:f7:0c:03:db:f4:80:63:e5:46:97:ce:07:b4:aa: 25:6c:dd:56:6b:04:eb:1f:bd:52:4d:1d:16:77:f8: 86:4f:74:91:c0:3c:99:b5:e0:79:3a:bd:28:eb:d8: cf:ef:49:9c:b6:bf:d2:12:82:aa:6c:e6:f1:9a:21: c0:85:bb:e1:3e:ef:0e:5c:d2:e1:e7:e1:a2:5d:7d: 8a:ca:6c:82:93:34:ee:c4:d9:6b:06:35:27:c9:46: 71:76:ef:ef:83:87:33:b5:81:15:1e:cf:48:62:15: d1:82:25:09:ff:0e:78:5a:b8:5a:e0:d3:f5:c3:0e: 1f:23:d6:ea:fd:9b:da:da:d9:16:d9:03:fa:45:36: ab:b3:53:1d:11:3f:1b:45:58:21:ef:0d:c8:aa:da: 03:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:05:FE:BA:64:A3:3C:93:FE:EA:5F:3B:EC:62:93:DC:41:38:32:0D X509v3 Authority Key Identifier: keyid:86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:96:ff:8f:fc:33:86:4d:3a:1d:5d:84:0c:a1:b8:bb:c1:d1: ce:aa:88:b6:c8:9e:6b:48:4b:0c:f6:2c:9c:6a:e9:9a:75:94: d2:b4:a4:a8:ac:2e:ee:0e:29:58:c6:a3:48:1f:28:c7:b3:76: 36:8c:8c:b0:6b:28:a4:e0:4b:c3:c6:cb:48:01:a1:e2:2c:b8: 50:4c:38:38:77:50:a9:5a:c9:f8:10:9b:0e:85:83:4d:f4:bd: 00:36:d4:d9:96:c3:07:49:d4:8d:f0:98:bd:4d:7c:a0:28:26: 84:13:8a:9d:f1:a2:58:12:65:9e:65:f2:05:a7:68:54:43:cd: 67:5d:e2:09:76:91:71:25:c1:f5:ea:ca:16:45:61:58:a0:61: 74:3b:d9:e2:96:ec:02:c6:53:68:98:8b:ae:0c:c6:91:8a:c8: 2e:fa:e4:53:0f:20:03:ca:88:61:73:f6:b4:fe:cd:e2:05:b9: 87:98:b2:ab:de:a2:13:f7:85:30:d2:55:50:83:7b:d5:26:b1: f5:ea:14:c8:24:2e:f5:ba:06:2b:82:64:05:6a:7f:0d:5a:15: fb:54:1c:70:9e:67:ca:45:99:93:bc:c6:ec:eb:8f:dd:5b:51: 06:47:1e:34:86:bc:ed:a0:49:49:da:cd:35:5b:ed:72:49:d8: 5e:64:6d:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMyMEExMTAvBgNVBAUTKDg2MzJDRDI1NjY5REQ4NzIyMDIwNDUxNzQwNkUzRjZC MkYxMjkyNTEwHhcNMjUxMjIzMDQzNTU1WhcNMjUxMjMwMDQzNTU1WjAYMRYwFAYD VQQDDA02OTRhMWMyYi04NmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGESpQrpKPldoPD/Xc+If0/hpXxMq1ratNF+CAFX14W6Ocw7YGLN1fL6ZyBj WNsfChhdw+xMv55MGEU4Exm7ga453w+okqkL2Cc+mem64grXtH5BkP/Wt/U4Ok1q wtm9QY71cBJmRTHH9wwD2/SAY+VGl84HtKolbN1WawTrH71STR0Wd/iGT3SRwDyZ teB5Or0o69jP70mctr/SEoKqbObxmiHAhbvhPu8OXNLh5+GiXX2KymyCkzTuxNlr BjUnyUZxdu/vg4cztYEVHs9IYhXRgiUJ/w54Wrha4NP1ww4fI9bq/Zva2tkW2QP6 RTars1MdET8bRVgh7w3IqtoD3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwF/rpk ozyT/upfO+xik9xBODINMB8GA1UdIwQYMBaAFIYyzSVmndhyICBFF0BuP2svEpJR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzIwQS84MEFBRUQ4Mjk1 NzQxMUVGODVFMEZCMjBDNEY5QUUwMi9oakxOSldhZDJISWdJRVVYUUc0X2F5OFNr bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hqTE5KV2FkMkhJZ0lFVVhRRzRfYXk4U2tsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzIwQS84MEFBRUQ4Mjk1NzQxMUVGODVFMEZCMjBDNEY5QUUwMi9oakxOSldhZDJI SWdJRVVYUUc0X2F5OFNrbEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtlv+P/DOGTTodXYQMobi7wdHOqoi2yJ5rSEsM9iycaumadZTStKSo rC7uDilYxqNIHyjHs3Y2jIywayik4EvDxstIAaHiLLhQTDg4d1CpWsn4EJsOhYNN 9L0ANtTZlsMHSdSN8Ji9TXygKCaEE4qd8aJYEmWeZfIFp2hUQ81nXeIJdpFxJcH1 6soWRWFYoGF0O9niluwCxlNomIuuDMaRisgu+uRTDyADyohhc/a0/s3iBbmHmLKr 3qIT94Uw0lVQg3vVJrH16hTIJC71ugYrgmQFan8NWhX7VBxwnmfKRZmTvMbs64/d W1EGRx40hrztoElJ2s01W+1ySdheZG1G -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:10 2025 by rpki-client