This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft File: hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft (raw, json) Hash identifier: DU5DA61+nG4UnhEa+ldoqMUVTzNe8aIb38YEi4MrrEM= Subject key identifier: 6F:D6:11:40:F0:C5:9D:F9:3D:7B:6A:0B:81:9D:4C:1B:C9:A5:19:68 Authority key identifier: 84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 Certificate issuer: /CN=A91F4091/serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft Manifest number: 0124 Signing time: Tue 23 Dec 2025 03:39:44 +0000 Manifest this update: Tue 23 Dec 2025 03:39:44 +0000 Manifest next update: Tue 30 Dec 2025 03:39:44 +0000 Files and hashes: 1: hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl (hash: D74OceeREz/qpHAQaW04Wq/j/LNTqeM0olBzHSpwVS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4091, serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Validity Not Before: Dec 23 03:39:44 2025 GMT Not After : Dec 30 03:39:44 2025 GMT Subject: CN=694a0f00-0f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:34:bc:6e:e8:53:03:44:43:91:21:a0:e9:9a: 27:e8:2f:79:5b:a9:8d:77:cd:a4:4d:9c:b4:e7:66: 90:0f:2c:76:d2:c7:fe:94:04:82:09:2f:61:90:fa: 7f:9b:c1:d8:f9:8c:61:bf:1d:4a:d6:49:c6:cf:3e: be:0d:65:34:37:b9:94:ee:7b:b3:4a:6c:fa:9f:b1: 86:a0:9a:33:e0:e7:a3:6d:15:11:b7:e5:4c:14:67: d9:2d:6d:db:0e:53:02:b4:4d:2e:b9:2c:51:7e:df: 41:25:7f:77:bc:6f:aa:51:16:dc:1b:ef:16:45:ad: 09:7e:a7:1a:91:ec:58:22:e9:59:17:5a:5f:f2:31: 70:7e:8f:b1:e3:7e:48:5c:24:0e:e4:af:d9:d6:01: d2:f3:ff:ac:ed:1e:19:52:79:75:23:e0:66:14:05: 67:c1:48:b8:59:89:94:85:c6:a5:80:6a:66:4e:7d: c8:52:00:6d:b7:c8:42:0b:f9:c5:3d:d2:83:dd:65: 1f:77:2b:bc:ed:0f:50:72:59:b2:3c:da:bf:62:b1: 35:77:9c:13:68:62:be:8a:32:7a:c5:14:ac:bf:5f: 33:e3:fc:f5:77:fa:d5:9c:15:14:52:a4:09:7d:a9: 5a:8a:f9:49:85:b2:74:eb:32:9f:5d:0e:cb:27:3a: d4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D6:11:40:F0:C5:9D:F9:3D:7B:6A:0B:81:9D:4C:1B:C9:A5:19:68 X509v3 Authority Key Identifier: keyid:84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:69:64:82:bb:75:75:e6:93:35:24:e4:a7:cc:1e:50:d6:1e: 8f:af:d7:e3:74:db:de:6e:fb:83:fc:aa:f1:01:f1:df:87:2b: 7f:01:eb:1e:85:f5:a5:6d:7d:8a:ae:c5:21:e7:cb:c5:1c:bb: 41:c1:99:c9:56:51:cd:af:d2:f2:ad:3f:0c:cf:e9:ea:f8:10: f6:74:a9:16:9c:d8:ce:33:14:3f:11:ba:55:c0:2d:09:9b:4d: e9:c3:b4:40:21:94:80:07:d5:c4:3e:d4:7b:76:81:81:a9:65: 78:81:14:db:d7:b5:82:cf:52:14:3e:aa:91:47:f8:30:83:9e: 49:31:5c:a2:5e:60:bc:78:06:9c:cf:63:da:36:a2:d0:f8:0a: c6:3c:8f:ce:d0:d8:a9:9d:0b:d0:01:ab:3c:d6:bb:05:11:83: 90:06:52:b1:46:33:22:40:94:e0:bb:43:23:36:b8:88:68:8a: 8f:52:84:76:f5:03:a6:e2:95:f3:77:9d:e1:15:06:ff:85:de: b6:2b:13:69:9d:2e:56:de:f1:bc:1c:2a:3f:3d:1b:f1:a2:eb: 82:c7:ed:73:5a:74:db:cd:7a:86:ae:dd:13:c9:54:3d:49:9c: e9:b5:be:a3:65:4a:31:90:7e:a1:ab:03:34:61:79:26:db:16: 07:8d:56:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQwOTExMTAvBgNVBAUTKDg0NTlGQjcyOTBENzRBOUJDRTI2MEUzRkFCNjA1RDdG RDgzMjQ5MzEwHhcNMjUxMjIzMDMzOTQ0WhcNMjUxMjMwMDMzOTQ0WjAYMRYwFAYD VQQDDA02OTRhMGYwMC0wZjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTS8buhTA0RDkSGg6Zon6C95W6mNd82kTZy052aQDyx20sf+lASCCS9hkPp/ m8HY+Yxhvx1K1knGzz6+DWU0N7mU7nuzSmz6n7GGoJoz4OejbRURt+VMFGfZLW3b DlMCtE0uuSxRft9BJX93vG+qURbcG+8WRa0JfqcakexYIulZF1pf8jFwfo+x435I XCQO5K/Z1gHS8/+s7R4ZUnl1I+BmFAVnwUi4WYmUhcalgGpmTn3IUgBtt8hCC/nF PdKD3WUfdyu87Q9QclmyPNq/YrE1d5wTaGK+ijJ6xRSsv18z4/z1d/rVnBUUUqQJ falaivlJhbJ06zKfXQ7LJzrUlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/WEUDw xZ35PXtqC4GdTBvJpRloMB8GA1UdIwQYMBaAFIRZ+3KQ10qbziYOP6tgXX/YMkkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDA5MS82NTIxQTBGMDFE OUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNwdk9KZzRfcTJCZGY5Z3lT VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hGbjdjcERYU3B2T0pnNF9xMkJkZjlneVNURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDA5MS82NTIxQTBGMDFEOUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNw dk9KZzRfcTJCZGY5Z3lTVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAraWSCu3V15pM1JOSnzB5Q1h6Pr9fjdNvebvuD/KrxAfHfhyt/Aese hfWlbX2KrsUh58vFHLtBwZnJVlHNr9LyrT8Mz+nq+BD2dKkWnNjOMxQ/EbpVwC0J m03pw7RAIZSAB9XEPtR7doGBqWV4gRTb17WCz1IUPqqRR/gwg55JMVyiXmC8eAac z2PaNqLQ+ArGPI/O0NipnQvQAas81rsFEYOQBlKxRjMiQJTgu0MjNriIaIqPUoR2 9QOm4pXzd53hFQb/hd62KxNpnS5W3vG8HCo/PRvxouuCx+1zWnTbzXqGrt0TyVQ9 SZzptb6jZUoxkH6hqwM0YXkm2xYHjVZB -----END CERTIFICATE-----Generated at Wed Dec 24 15:45:05 2025 by rpki-client