This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft File: HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft (raw, json) Hash identifier: xOXyOQJxeO0D7jrIypiXlFGZK27MiYXkvYojoSH4hOI= Subject key identifier: 87:21:AC:94:F9:9C:ED:86:50:07:8B:D6:16:E4:A5:9E:1E:B6:41:F7 Authority key identifier: 1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3 Certificate issuer: /CN=A91F3805/serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft Manifest number: 08 Signing time: Fri 05 Dec 2025 05:57:36 +0000 Manifest this update: Fri 05 Dec 2025 05:57:36 +0000 Manifest next update: Fri 12 Dec 2025 05:57:36 +0000 Files and hashes: 1: HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl (hash: sKx1LPM00Tg2uH49MrgZNoyzCMN+M6/Yq5Go5EY1zZw=) 2: C673BB1AD0EB11F088F8F063C4F9AE02.roa (hash: diqgpUQTbZfPnisy8N8gpRTy+mMN5Jc9y1vSbe6yr1U=) 3: C598E8DCD0EB11F08228F063C4F9AE02.roa (hash: Z4quZZ4AjBNcwf+Xgudk1obpLQYlCRMBDjouQM28P8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3805, serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3 Validity Not Before: Dec 5 05:57:36 2025 GMT Not After : Dec 12 05:57:36 2025 GMT Subject: CN=69327450-5d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:df:2a:39:b9:65:b3:3a:47:06:ba:1f:8e:63: 42:3a:5e:a7:14:88:52:a4:a7:11:d1:f6:bf:e7:03: 81:79:dd:2a:9f:df:90:51:4f:d3:d6:1e:13:08:4e: b2:47:04:8d:39:dc:f2:e2:7c:ef:86:ce:eb:67:12: 3e:a0:30:eb:c1:a9:cd:5e:3d:11:74:32:30:f7:32: 52:f6:71:43:68:f3:80:69:79:44:ff:91:db:8b:56: 82:21:3a:ce:34:27:59:8c:e9:b2:3d:f1:09:85:b7: 0c:7f:38:b9:2b:11:78:58:da:0e:96:ba:de:7c:b7: 72:e1:c5:cc:a4:57:33:ec:ea:fb:54:cb:51:31:90: 52:6c:65:02:64:ae:97:99:84:b1:65:f1:98:c9:65: 6c:84:c3:f9:53:fe:9e:e0:06:bc:0d:c9:47:c2:4a: 33:c3:b7:96:d6:62:0b:34:06:37:cf:6e:fd:bc:bb: ef:c2:f4:5b:4e:cf:e2:00:d0:8e:71:5b:35:b4:ab: 72:b4:26:a7:96:8a:0e:30:fb:b8:f7:3e:31:55:f1: 12:18:19:62:7e:4d:c6:2a:9e:6b:7f:5d:5b:a4:7d: 40:bd:ca:fb:90:91:65:af:b9:66:eb:fb:63:9a:6f: 97:a6:9d:e0:76:9e:5e:dd:19:db:b2:85:20:42:d8: 8d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:21:AC:94:F9:9C:ED:86:50:07:8B:D6:16:E4:A5:9E:1E:B6:41:F7 X509v3 Authority Key Identifier: keyid:1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:91:81:0e:53:39:24:7f:8f:31:80:ba:1b:ee:cf:9d:1c:f2: 3e:ee:32:a3:7b:93:52:3b:a1:6a:fe:39:e5:98:d5:a6:bc:f1: 18:8e:68:29:4a:0b:51:5a:f2:3b:c9:bf:9e:a2:ae:0a:d0:65: 26:56:e8:fc:05:04:74:5e:53:7f:06:7c:0a:cb:44:bb:d2:0e: 34:f7:3f:78:a3:f9:51:ed:e3:c4:e7:4a:64:9d:71:64:63:2d: 15:8e:c5:bc:b1:93:c7:88:ee:80:7c:3a:7f:dc:30:a0:72:37: e4:e0:40:a4:74:ee:b0:22:7c:3c:fd:49:ad:ce:c2:93:0c:1f: da:33:86:89:4b:ce:30:c7:50:05:95:f9:6b:d8:41:d0:16:50: 1c:08:a2:48:c0:f1:52:3e:a1:f1:65:84:3b:0a:d6:e2:11:e8: 3a:12:8d:d4:10:70:85:e6:a5:1e:14:ad:0f:1a:1d:be:3b:b0: 3d:8b:e9:c3:61:25:fb:ee:5b:3c:44:b2:d4:f5:2c:3e:31:eb: d3:f7:c8:17:3b:e4:34:b9:31:7d:85:24:b3:9e:c7:52:d4:5a: bc:83:f2:72:14:0d:d5:35:c6:00:fd:02:a4:90:3e:df:7e:5b: 7f:76:c3:97:7d:ea:10:38:70:7c:8c:39:60:22:8d:8b:d4:a0: e8:f6:0e:5c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzgwNTExMC8GA1UEBRMoMUU1MzBGQTlGNjYwQThEQzE3MzhDN0FBMEM4QUZDNzdG NEYwQkJCMzAeFw0yNTEyMDUwNTU3MzZaFw0yNTEyMTIwNTU3MzZaMBgxFjAUBgNV BAMTDTY5MzI3NDUwLTVkNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCv3yo5uWWzOkcGuh+OY0I6XqcUiFKkpxHR9r/nA4F53Sqf35BRT9PWHhMITrJH BI053PLifO+GzutnEj6gMOvBqc1ePRF0MjD3MlL2cUNo84BpeUT/kduLVoIhOs40 J1mM6bI98QmFtwx/OLkrEXhY2g6Wut58t3LhxcykVzPs6vtUy1ExkFJsZQJkrpeZ hLFl8ZjJZWyEw/lT/p7gBrwNyUfCSjPDt5bWYgs0BjfPbv28u+/C9FtOz+IA0I5x WzW0q3K0JqeWig4w+7j3PjFV8RIYGWJ+TcYqnmt/XVukfUC9yvuQkWWvuWbr+2Oa b5emneB2nl7dGduyhSBC2I1/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhyGslPmc 7YZQB4vWFuSlnh62QfcwHwYDVR0jBBgwFoAUHlMPqfZgqNwXOMeqDIr8d/Twu7Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzODA1LzQwMEM1REVDRDAx MDExRjA5RjBERDgxQ0M0RjlBRTAyL0hsTVBxZlpncU53WE9NZXFESXI4ZF9Ud3U3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSGxNUHFmWmdxTndYT01lcURJcjhkX1R3dTdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz ODA1LzQwMEM1REVDRDAxMDExRjA5RjBERDgxQ0M0RjlBRTAyL0hsTVBxZlpncU53 WE9NZXFESXI4ZF9Ud3U3TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAN2RgQ5TOSR/jzGAuhvuz50c8j7uMqN7k1I7oWr+OeWY1aa88RiOaClK C1Fa8jvJv56irgrQZSZW6PwFBHReU38GfArLRLvSDjT3P3ij+VHt48TnSmSdcWRj LRWOxbyxk8eI7oB8On/cMKByN+TgQKR07rAifDz9Sa3OwpMMH9ozholLzjDHUAWV +WvYQdAWUBwIokjA8VI+ofFlhDsK1uIR6DoSjdQQcIXmpR4UrQ8aHb47sD2L6cNh JfvuWzxEstT1LD4x69P3yBc75DS5MX2FJLOex1LUWryD8nIUDdU1xgD9AqSQPt9+ W392w5d96hA4cHyMOWAijYvUoOj2Dlw= -----END CERTIFICATE-----Generated at Fri Dec 5 20:11:33 2025 by rpki-client