This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft File: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft (raw, json) Hash identifier: pdSJC6tLra060r9dsrYZP4V840PgaIqRbkZY9nhlGi8= Subject key identifier: 06:5E:07:F5:DE:B9:7A:1B:73:3F:9D:5D:7B:37:40:2A:06:A3:C7:6A Authority key identifier: 1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C Certificate issuer: /CN=A91F7BE4/serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C Certificate serial: 104C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft Manifest number: 1042 Signing time: Mon 22 Dec 2025 17:05:50 +0000 Manifest this update: Mon 22 Dec 2025 17:05:50 +0000 Manifest next update: Mon 29 Dec 2025 17:05:50 +0000 Files and hashes: 1: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl (hash: o5OOXRa8lPDbqNfvsoluQAKqrITXgilKsxFcBVpIxLk=) 2: DB63DD0C511311E998B6E814C4F9AE02.roa (hash: C6D3XzDSLt3OsrdqaJczrZOT46rffzR9T87fEcqPayY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:05:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4172 (0x104c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7BE4, serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C Validity Not Before: Dec 22 17:05:50 2025 GMT Not After : Dec 29 17:05:50 2025 GMT Subject: CN=69497a6e-13aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:47:64:81:d5:87:d7:ef:b5:2d:70:21:22:74: d6:e0:ad:82:2b:7a:3e:b4:67:af:4b:d7:e6:34:f6: e9:24:35:b5:82:53:7e:9f:3b:a3:94:fe:c9:b9:66: 4c:f4:d8:37:1f:ac:86:04:fa:90:a4:e5:68:2e:5d: d4:2f:47:c0:46:b1:3e:f7:3f:d6:45:82:b2:71:92: bc:9f:3f:42:6c:13:00:d4:d0:ce:0a:cd:a2:3c:5b: 5a:e8:70:88:d8:44:f7:aa:36:62:7c:35:d4:39:be: 65:e3:1e:f7:b8:43:c2:0d:5b:9a:5e:26:cd:e6:5e: 5f:91:e8:3e:c2:28:8a:3e:2a:5f:b5:8e:e9:18:fd: dc:d3:ed:ee:4c:27:23:f4:04:33:2b:c7:c8:b1:91: 11:48:61:79:25:15:6c:93:7b:4d:d8:0c:2b:24:83: 6b:70:bc:4b:61:ed:6b:c2:6c:6d:26:e4:dc:1a:d7: 23:84:99:59:0d:b1:d0:ad:44:fb:c7:c5:30:a8:99: c6:a4:a2:3d:57:e3:00:27:4d:be:5f:f1:f5:69:57: 76:a2:74:8b:d0:a4:6c:21:57:bf:12:50:1c:7a:33: e7:60:ba:66:e5:53:a5:5b:be:8d:3d:6d:72:3c:3b: a2:87:95:bc:2f:a6:9b:e5:a6:9a:9d:24:14:5a:2a: 72:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5E:07:F5:DE:B9:7A:1B:73:3F:9D:5D:7B:37:40:2A:06:A3:C7:6A X509v3 Authority Key Identifier: keyid:1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:0e:65:51:c4:60:52:c0:29:14:cd:e6:6c:49:2a:a9:80:84: 12:f6:70:df:a0:28:34:d9:45:f1:9e:b2:c7:5c:ad:39:e6:cc: 7f:c9:ff:fe:66:ef:8a:6b:f2:69:b9:1e:9c:93:36:45:e2:52: 68:7c:a1:7c:47:53:40:78:f3:2a:c6:5d:99:5f:35:dd:3c:33: 88:97:25:b5:0e:c3:d7:2b:d7:47:7c:00:66:2c:e5:fc:45:f5: fc:3d:ad:24:58:a7:25:a6:11:d3:9f:b1:cf:49:eb:ef:bf:19: 06:06:11:61:de:fe:46:84:11:e6:5a:80:27:ba:7f:6c:82:c2: 6b:b4:3e:ef:1f:47:63:95:73:13:b2:10:0d:3f:fa:ff:0e:2f: 35:17:a3:53:d5:62:4b:c2:43:d0:fe:9f:9b:b1:66:e9:ac:3e: 47:f6:26:65:18:57:12:e2:2f:83:02:67:73:f9:09:1f:d6:12: 7a:aa:ed:59:4d:84:8c:93:ef:88:f3:62:bb:e0:ae:96:44:19: fd:8e:b1:04:71:d6:07:96:a8:ce:32:61:96:33:b4:44:19:ed: 66:ad:b9:76:5e:54:b9:d6:03:52:cd:eb:f1:0a:bb:a1:14:d1: 1f:f0:bf:2c:b6:c8:59:f0:e2:0d:39:3a:11:e3:06:48:86:b1: ef:97:2d:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdCRTQxMTAvBgNVBAUTKDFFNkIzOTQ0QjY3ODhFOTBFOTk3RDhBOEU4MDY3QzU5 NjlCODg5OEMwHhcNMjUxMjIyMTcwNTUwWhcNMjUxMjI5MTcwNTUwWjAYMRYwFAYD VQQDDA02OTQ5N2E2ZS0xM2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUdkgdWH1++1LXAhInTW4K2CK3o+tGevS9fmNPbpJDW1glN+nzujlP7JuWZM 9Ng3H6yGBPqQpOVoLl3UL0fARrE+9z/WRYKycZK8nz9CbBMA1NDOCs2iPFta6HCI 2ET3qjZifDXUOb5l4x73uEPCDVuaXibN5l5fkeg+wiiKPipftY7pGP3c0+3uTCcj 9AQzK8fIsZERSGF5JRVsk3tN2AwrJINrcLxLYe1rwmxtJuTcGtcjhJlZDbHQrUT7 x8UwqJnGpKI9V+MAJ02+X/H1aVd2onSL0KRsIVe/ElAcejPnYLpm5VOlW76NPW1y PDuih5W8L6ab5aaanSQUWipy0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZeB/Xe uXobcz+dXXs3QCoGo8dqMB8GA1UdIwQYMBaAFB5rOUS2eI6Q6ZfYqOgGfFlpuImM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0JFNC9BMDYzMDVDMjUx MTExMUU5OEM0QkYxMEZDNEY5QUUwMi9IbXM1UkxaNGpwRHBsOWlvNkFaOFdXbTRp WXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htczVSTFo0anBEcGw5aW82QVo4V1dtNGlZdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0JFNC9BMDYzMDVDMjUxMTExMUU5OEM0QkYxMEZDNEY5QUUwMi9IbXM1UkxaNGpw RHBsOWlvNkFaOFdXbTRpWXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGDmVRxGBSwCkUzeZsSSqpgIQS9nDfoCg02UXxnrLHXK055sx/yf/+ Zu+Ka/JpuR6ckzZF4lJofKF8R1NAePMqxl2ZXzXdPDOIlyW1DsPXK9dHfABmLOX8 RfX8Pa0kWKclphHTn7HPSevvvxkGBhFh3v5GhBHmWoAnun9sgsJrtD7vH0djlXMT shANP/r/Di81F6NT1WJLwkPQ/p+bsWbprD5H9iZlGFcS4i+DAmdz+Qkf1hJ6qu1Z TYSMk++I82K74K6WRBn9jrEEcdYHlqjOMmGWM7REGe1mrbl2XlS51gNSzevxCruh FNEf8L8stshZ8OINOToR4wZIhrHvly1X -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:44 2025 by rpki-client