This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft File: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft (raw, json) Hash identifier: YjIA/S9y2oEe5KU45UmrveVIXOz+bx1+5Xr+tlX4ZSQ= Subject key identifier: 66:8F:BC:C7:3D:AA:43:A7:76:F3:CB:3C:EB:FE:7D:38:67:89:37:45 Authority key identifier: 1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12 Certificate issuer: /CN=A91FDD2C/serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412 Certificate serial: 07C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft Manifest number: 07BF Signing time: Mon 22 Dec 2025 20:39:25 +0000 Manifest this update: Mon 22 Dec 2025 20:39:24 +0000 Manifest next update: Mon 29 Dec 2025 20:39:24 +0000 Files and hashes: 1: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl (hash: BpoAdsAfm6YFmhuFwiJd/1GJYWGjlxE6ZGOyvye3MOc=) 2: D9BD904224B611EBAE734152C4F9AE02.roa (hash: KZro3pgOeUHIq7UlI8pVpaWLtUDP+zywuDR46T5LBrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:39:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1991 (0x7c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD2C, serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412 Validity Not Before: Dec 22 20:39:24 2025 GMT Not After : Dec 29 20:39:24 2025 GMT Subject: CN=6949ac7c-7be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1c:11:4d:b5:5f:b3:9e:7a:e9:74:53:d3:2b: 35:fa:c8:2c:4f:98:1a:62:a2:91:bb:cd:13:2c:7e: 5b:c2:d9:06:cb:71:93:f0:37:b3:8f:4e:e5:7b:17: 1c:9b:cb:61:31:d5:c0:de:0d:91:a3:fc:85:d5:54: 5c:8a:7f:68:10:3b:b5:f8:2f:68:7a:9d:f9:36:f5: 23:ce:a2:a3:fd:c1:d7:6f:d2:5a:67:2b:46:f9:ab: 7e:2a:9d:41:0a:ef:cc:cb:1a:de:f6:1c:07:53:1d: ea:53:20:7b:c2:85:18:6a:5a:82:17:66:4e:94:fa: 64:61:82:53:f5:a7:04:c3:22:dd:b8:98:7d:a1:dd: 96:ca:bb:5e:e5:14:29:a7:9b:84:38:2c:f9:c2:93: b7:c8:0f:59:d3:69:e0:f3:32:df:1b:98:e6:48:d2: 83:cd:a3:5a:f1:70:55:37:95:51:1d:d4:9e:c5:8e: e4:d5:14:3f:bd:9c:eb:99:b2:a0:32:00:91:e6:45: f1:21:56:2a:4d:a6:bb:3c:f1:35:9e:df:a2:8b:3e: 7a:27:e7:0e:b7:49:90:47:f7:5d:95:1f:cb:76:3b: 6c:72:48:12:20:21:d9:23:89:48:11:df:74:09:10: bf:39:ba:0f:16:8c:20:9a:66:a6:8b:a0:e1:00:ed: 24:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8F:BC:C7:3D:AA:43:A7:76:F3:CB:3C:EB:FE:7D:38:67:89:37:45 X509v3 Authority Key Identifier: keyid:1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:d9:7a:b0:3e:36:44:72:03:67:bd:31:49:0a:8c:72:36:4c: ac:67:16:f2:ca:70:98:c1:05:56:44:2f:99:04:b6:3d:3e:a9: 5e:b0:d8:3a:14:e4:f6:cd:1c:de:e4:41:aa:cb:2c:c9:db:66: 5b:0e:1e:96:e1:96:89:76:80:c4:32:04:d0:5d:14:8c:00:a2: 81:66:df:6b:fb:b1:af:75:d3:4a:fd:36:41:de:21:62:01:a9: bf:f7:23:0a:0e:9c:d3:16:e8:c1:48:97:e2:1c:fa:fd:63:95: 08:68:36:cc:70:4b:b5:17:eb:dc:79:10:41:eb:62:97:62:31: c8:a0:96:9c:1f:62:c1:87:f0:de:9a:3d:79:37:fd:ae:6f:2e: 27:12:4f:ff:04:5b:a8:49:c0:47:7b:fd:19:0c:70:b7:fe:88: a7:09:95:da:75:d9:3f:cc:4f:4f:44:7b:00:7b:09:aa:b2:0c: 05:84:b5:5f:b8:28:95:43:4c:0e:d6:75:5c:b9:69:13:ee:d1: c1:93:96:8e:33:44:8c:69:ae:63:72:36:6d:da:e4:38:16:c3: ec:5f:76:56:11:aa:6d:93:a2:d0:71:cf:62:7b:b7:c0:0b:d1: 22:76:44:44:fa:a0:25:e6:91:fb:ed:e7:d8:98:1d:8f:3c:46: 93:e6:da:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkREMkMxMTAvBgNVBAUTKDFGMTJFQzJENDM5NUY5NUFBQ0M2MEM2MkVDREQ4Mjg1 N0VEMzA0MTIwHhcNMjUxMjIyMjAzOTI0WhcNMjUxMjI5MjAzOTI0WjAYMRYwFAYD VQQDDA02OTQ5YWM3Yy03YmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnxwRTbVfs5566XRT0ys1+sgsT5gaYqKRu80TLH5bwtkGy3GT8Dezj07lexcc m8thMdXA3g2Ro/yF1VRcin9oEDu1+C9oep35NvUjzqKj/cHXb9JaZytG+at+Kp1B Cu/Myxre9hwHUx3qUyB7woUYalqCF2ZOlPpkYYJT9acEwyLduJh9od2Wyrte5RQp p5uEOCz5wpO3yA9Z02ng8zLfG5jmSNKDzaNa8XBVN5VRHdSexY7k1RQ/vZzrmbKg MgCR5kXxIVYqTaa7PPE1nt+iiz56J+cOt0mQR/ddlR/LdjtsckgSICHZI4lIEd90 CRC/OboPFowgmmami6DhAO0kGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaPvMc9 qkOndvPLPOv+fThniTdFMB8GA1UdIwQYMBaAFB8S7C1DlflarMYMYuzdgoV+0wQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQyQy80OENFNTE2MjI0 QjUxMUVCQTI4NzhGNTBDNEY5QUUwMi9IeExzTFVPVi1WcXN4Z3hpN04yQ2hYN1RC QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4THNMVU9WLVZxc3hneGk3TjJDaFg3VEJCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQyQy80OENFNTE2MjI0QjUxMUVCQTI4NzhGNTBDNEY5QUUwMi9IeExzTFVPVi1W cXN4Z3hpN04yQ2hYN1RCQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA02XqwPjZEcgNnvTFJCoxyNkysZxbyynCYwQVWRC+ZBLY9PqlesNg6 FOT2zRze5EGqyyzJ22ZbDh6W4ZaJdoDEMgTQXRSMAKKBZt9r+7GvddNK/TZB3iFi Aam/9yMKDpzTFujBSJfiHPr9Y5UIaDbMcEu1F+vceRBB62KXYjHIoJacH2LBh/De mj15N/2uby4nEk//BFuoScBHe/0ZDHC3/oinCZXaddk/zE9PRHsAewmqsgwFhLVf uCiVQ0wO1nVcuWkT7tHBk5aOM0SMaa5jcjZt2uQ4FsPsX3ZWEaptk6LQcc9ie7fA C9EidkRE+qAl5pH77efYmB2PPEaT5tpE -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:46 2025 by rpki-client