This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft File: HVvjkVLqbW3wn52ErGmpYbfIOG4.mft (raw, json) Hash identifier: 1nywdovpYg+BA25WshBtIKKuk0F123trucefBdNG2L8= Subject key identifier: E3:5E:E3:23:43:0F:9A:C0:0F:DB:25:66:EE:F2:0B:24:14:43:E4:6D Authority key identifier: 1D:5B:E3:91:52:EA:6D:6D:F0:9F:9D:84:AC:69:A9:61:B7:C8:38:6E Certificate issuer: /CN=A91F43F2/serialNumber=1D5BE39152EA6D6DF09F9D84AC69A961B7C8386E Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft Manifest number: 54 Signing time: Tue 23 Dec 2025 06:05:55 +0000 Manifest this update: Tue 23 Dec 2025 06:05:55 +0000 Manifest next update: Tue 30 Dec 2025 06:05:55 +0000 Files and hashes: 1: HVvjkVLqbW3wn52ErGmpYbfIOG4.crl (hash: LAswBCeD65rQ42Xr6PKxhfus5K7H8TuCZ+syDRc60Kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.crl rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F43F2, serialNumber=1D5BE39152EA6D6DF09F9D84AC69A961B7C8386E Validity Not Before: Dec 23 06:05:55 2025 GMT Not After : Dec 30 06:05:55 2025 GMT Subject: CN=694a3143-b4f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f9:01:62:13:3d:a6:df:e0:b0:18:b2:fb:35: b7:cf:2a:74:91:16:24:57:bc:b8:6b:91:08:30:8d: 7b:96:93:34:c1:f4:1e:c8:12:b3:99:5b:7f:95:dd: 9e:22:a1:81:17:0b:e9:db:62:59:57:16:55:ac:63: 04:90:40:c5:07:5b:fc:90:1b:04:9f:60:f8:a3:72: a3:c2:2c:a3:c0:b5:75:d1:ce:af:8b:d9:f2:1b:0f: 47:c3:0d:d1:b6:5c:00:f0:63:75:72:fa:48:e5:c1: ee:16:bd:c3:eb:d0:5d:c3:db:26:f8:01:41:c6:7c: 15:47:3b:c1:e9:d2:6d:14:05:54:8d:61:37:f7:48: fc:a1:4a:08:60:3f:9b:e8:6f:13:01:b0:03:02:0b: c3:44:90:c1:e7:dc:a3:2b:5b:9f:de:3d:e6:31:75: e5:a1:58:77:c5:4b:7b:9a:11:e5:7c:9c:e2:51:58: e8:ce:da:e4:2b:98:fc:98:a5:20:1e:d5:76:83:20: 98:f0:a4:f7:94:29:94:4e:70:84:97:dd:c3:c2:5f: cd:33:ca:8a:a4:cc:30:e2:7c:e8:0c:e3:3e:99:db: a7:64:e9:fa:e3:17:9e:6e:8a:ba:a7:04:a6:c6:13: 90:3b:72:08:07:db:d5:4b:fa:6d:99:a3:d9:f9:8c: 45:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:5E:E3:23:43:0F:9A:C0:0F:DB:25:66:EE:F2:0B:24:14:43:E4:6D X509v3 Authority Key Identifier: keyid:1D:5B:E3:91:52:EA:6D:6D:F0:9F:9D:84:AC:69:A9:61:B7:C8:38:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:7d:e0:bb:99:50:8c:94:d3:97:92:0f:38:5b:46:fb:91:6c: 65:36:d8:be:a2:4d:cb:a1:6b:f5:e5:08:43:f8:50:2c:27:6d: 2d:5f:04:7e:cb:35:d1:77:55:cb:d0:4c:de:ae:b9:5c:54:61: 7b:52:99:07:2c:57:a8:ac:68:b1:fe:bb:1c:60:d5:ee:63:3e: 76:3e:c8:2e:2d:c3:da:e0:76:52:d5:d2:85:34:a1:d1:5f:ab: ff:cc:9c:07:87:40:b8:fb:fb:e1:84:6d:40:8a:ba:e7:5a:f2: a1:4d:a1:59:66:d9:4c:cb:4d:3c:97:96:cb:33:01:f7:37:e5: dd:74:c1:41:42:2f:fe:b2:33:2c:2f:e0:b1:46:ee:d5:8f:77: 64:33:e1:bc:1f:96:fb:7e:a3:87:f8:0f:d7:89:38:4c:de:d0: ac:df:e0:fe:76:58:37:2d:cb:14:1a:ad:da:8a:a6:cb:1a:cb: 46:ef:10:e6:a9:0c:45:8c:ac:4e:67:39:4c:22:49:ee:6b:5f: d3:a7:de:2d:1e:31:e9:58:8d:a0:48:d1:08:22:30:bd:92:c9: 79:d1:c3:31:4a:45:a4:ec:6e:67:ee:24:60:be:fd:fa:5d:4a: 81:e8:9e:9a:14:bc:e4:bc:72:df:d1:50:27:fb:c9:d9:2e:da: b0:58:32:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NDNGMjExMC8GA1UEBRMoMUQ1QkUzOTE1MkVBNkQ2REYwOUY5RDg0QUM2OUE5NjFC N0M4Mzg2RTAeFw0yNTEyMjMwNjA1NTVaFw0yNTEyMzAwNjA1NTVaMBgxFjAUBgNV BAMMDTY5NGEzMTQzLWI0ZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7+QFiEz2m3+CwGLL7NbfPKnSRFiRXvLhrkQgwjXuWkzTB9B7IErOZW3+V3Z4i oYEXC+nbYllXFlWsYwSQQMUHW/yQGwSfYPijcqPCLKPAtXXRzq+L2fIbD0fDDdG2 XADwY3Vy+kjlwe4WvcPr0F3D2yb4AUHGfBVHO8Hp0m0UBVSNYTf3SPyhSghgP5vo bxMBsAMCC8NEkMHn3KMrW5/ePeYxdeWhWHfFS3uaEeV8nOJRWOjO2uQrmPyYpSAe 1XaDIJjwpPeUKZROcISX3cPCX80zyoqkzDDifOgM4z6Z26dk6frjF55uirqnBKbG E5A7cggH29VL+m2Zo9n5jEUrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU417jI0MP msAP2yVm7vILJBRD5G0wHwYDVR0jBBgwFoAUHVvjkVLqbW3wn52ErGmpYbfIOG4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0M0YyLzRDMDRGMDZBNjBD MDExRjBBRkI0NTcyQkM0RjlBRTAyL0hWdmprVkxxYlczd241MkVyR21wWWJmSU9H NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFZ2amtWTHFiVzN3bjUyRXJHbXBZYmZJT0c0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0 M0YyLzRDMDRGMDZBNjBDMDExRjBBRkI0NTcyQkM0RjlBRTAyL0hWdmprVkxxYlcz d241MkVyR21wWWJmSU9HNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKx94LuZUIyU05eSDzhbRvuRbGU22L6iTcuha/XlCEP4UCwnbS1fBH7L NdF3VcvQTN6uuVxUYXtSmQcsV6isaLH+uxxg1e5jPnY+yC4tw9rgdlLV0oU0odFf q//MnAeHQLj7++GEbUCKuuda8qFNoVlm2UzLTTyXlsszAfc35d10wUFCL/6yMywv 4LFG7tWPd2Qz4bwflvt+o4f4D9eJOEze0Kzf4P52WDctyxQardqKpssay0bvEOap DEWMrE5nOUwiSe5rX9On3i0eMelYjaBI0QgiML2SyXnRwzFKRaTsbmfuJGC+/fpd SoHonpoUvOS8ct/RUCf7ydku2rBYMlY= -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:40 2025 by rpki-client