This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft File: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft (raw, json) Hash identifier: K0fkJ2GisunMl21kaaVBMZsJ96TiuyAj7AjXRR297Nc= Subject key identifier: A7:C5:8F:6E:2A:91:24:70:F3:D0:39:58:C7:C0:A3:3B:96:25:BC:01 Authority key identifier: 1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB Certificate issuer: /CN=A91B727C/serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Certificate serial: 11F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft Manifest number: 11E3 Signing time: Wed 24 Dec 2025 16:56:01 +0000 Manifest this update: Wed 24 Dec 2025 16:56:01 +0000 Manifest next update: Wed 31 Dec 2025 16:56:01 +0000 Files and hashes: 1: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl (hash: 44NB1FRfh5NrAN/a4Oq2LDb+oT9dAZKjHuGJM5lFhdY=) 2: B58038B838FF11EAB8D91529C4F9AE02.roa (hash: IU4SG15xY5pa/IoW3wwDCZ3o/ZxiWKB5Df2NzHDteOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 16:56:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4600 (0x11f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B727C, serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Validity Not Before: Dec 24 16:56:01 2025 GMT Not After : Dec 31 16:56:01 2025 GMT Subject: CN=694c1b21-de99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c3:71:f8:16:e2:c4:53:01:e7:4e:f6:41:47: 56:d6:9d:ff:b6:3b:57:73:9d:af:fb:26:d1:db:6a: 75:60:cf:0b:ee:91:02:07:72:e8:9d:79:14:9d:10: 4b:07:c3:f6:31:44:3e:d8:fd:12:af:5d:e1:00:aa: 40:5d:ce:f9:c4:d7:31:ee:0c:09:78:ac:99:b2:6f: 55:b0:ca:86:02:16:53:bd:35:d2:96:4d:7a:bf:82: 41:91:83:f2:23:a0:19:f7:32:6c:7c:59:26:6f:c9: eb:05:78:11:2d:55:ea:17:c5:7f:e1:ef:67:34:f9: b1:c6:b3:0c:3d:80:82:10:16:0e:5a:01:75:2d:df: 99:24:b9:ac:c9:ab:08:55:47:ac:83:6d:dc:48:2e: b3:62:56:0c:3c:56:5c:97:66:a2:ec:2d:38:7e:e4: b2:f6:01:0c:5b:1a:95:af:93:da:59:04:13:36:81: 7b:10:81:1e:1e:6a:7d:e2:3b:8a:4b:4c:07:6c:7b: 9b:a6:d6:0a:e9:3d:d5:38:b5:ae:46:62:a0:7c:9c: 7f:57:e2:48:cd:69:17:51:4e:c0:1d:25:ae:48:bd: 68:40:13:7f:93:92:57:46:9d:f0:06:d0:fb:ab:cc: 5d:14:c3:87:ba:53:f1:cd:86:0b:e3:65:9e:8b:bd: 0e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C5:8F:6E:2A:91:24:70:F3:D0:39:58:C7:C0:A3:3B:96:25:BC:01 X509v3 Authority Key Identifier: keyid:1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:75:88:aa:b1:64:0b:9f:4f:f9:68:d1:34:74:47:e1:54:ab: 64:f3:14:2c:3e:83:4c:35:f8:de:26:44:fe:ec:d2:9d:02:56: e2:f8:a0:2a:47:28:12:f2:0b:c7:f1:8d:e5:01:e2:c5:5f:1d: a6:83:21:72:8b:83:eb:b0:eb:db:6c:d2:ad:2e:fb:b0:02:f5: 2a:b0:e3:22:41:0d:dc:59:e0:bc:61:47:74:89:7f:9b:eb:ad: 60:1e:07:5a:d3:21:2b:44:20:ff:b9:50:0d:62:88:91:34:1e: 93:c4:8f:80:77:b4:0d:3f:4f:c7:8d:58:ed:e1:74:68:61:07: e9:ae:0d:ce:6a:c7:e1:32:29:e0:db:97:b2:25:ab:53:0b:c0: 5a:8a:64:a3:d7:7f:d4:fa:32:c7:7f:8f:53:db:9a:1d:da:5d: 7e:70:1b:c0:c9:42:af:41:54:26:33:54:42:9d:34:d5:f0:96: 48:d5:bf:38:41:f3:97:17:4c:db:a5:00:cc:7b:31:90:5c:03: 31:ca:d8:39:35:b4:10:c1:e7:72:95:ed:8c:a4:82:49:aa:e7: f3:8e:8f:72:14:46:cf:ff:06:7a:f3:ba:2b:17:c1:8d:04:14: c5:6c:86:ee:2e:54:4b:3f:5d:53:4b:e4:5f:8d:16:1d:be:8e: 2e:0c:a5:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyN0MxMTAvBgNVBAUTKDFEODgyQzhDRjI0MzRDQzlCQkZENzkxOTFEQzJDNjk4 MjkyNkU4QUIwHhcNMjUxMjI0MTY1NjAxWhcNMjUxMjMxMTY1NjAxWjAYMRYwFAYD VQQDDA02OTRjMWIyMS1kZTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApcNx+BbixFMB5072QUdW1p3/tjtXc52v+ybR22p1YM8L7pECB3LonXkUnRBL B8P2MUQ+2P0Sr13hAKpAXc75xNcx7gwJeKyZsm9VsMqGAhZTvTXSlk16v4JBkYPy I6AZ9zJsfFkmb8nrBXgRLVXqF8V/4e9nNPmxxrMMPYCCEBYOWgF1Ld+ZJLmsyasI VUesg23cSC6zYlYMPFZcl2ai7C04fuSy9gEMWxqVr5PaWQQTNoF7EIEeHmp94juK S0wHbHubptYK6T3VOLWuRmKgfJx/V+JIzWkXUU7AHSWuSL1oQBN/k5JXRp3wBtD7 q8xdFMOHulPxzYYL42Wei70OqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfFj24q kSRw89A5WMfAozuWJbwBMB8GA1UdIwQYMBaAFB2ILIzyQ0zJu/15GR3CxpgpJuir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzI3Qy85RDc3QzZENDAy OEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRNbTdfWGtaSGNMR21Da202 S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hZZ3NqUEpEVE1tN19Ya1pIY0xHbUNrbTZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzI3Qy85RDc3QzZENDAyOEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRN bTdfWGtaSGNMR21Da202S3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5dYiqsWQLn0/5aNE0dEfhVKtk8xQsPoNMNfjeJkT+7NKdAlbi+KAq RygS8gvH8Y3lAeLFXx2mgyFyi4PrsOvbbNKtLvuwAvUqsOMiQQ3cWeC8YUd0iX+b 661gHgda0yErRCD/uVANYoiRNB6TxI+Ad7QNP0/HjVjt4XRoYQfprg3OasfhMing 25eyJatTC8BaimSj13/U+jLHf49T25od2l1+cBvAyUKvQVQmM1RCnTTV8JZI1b84 QfOXF0zbpQDMezGQXAMxytg5NbQQwedyle2MpIJJqufzjo9yFEbP/wZ687orF8GN BBTFbIbuLlRLP11TS+RfjRYdvo4uDKWc -----END CERTIFICATE-----Generated at Fri Dec 26 03:02:03 2025 by rpki-client