This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft File: Hy55yPeszIoD-1tKOvzF9pMbN4I.mft (raw, json) Hash identifier: fWKzxJXlabSEDotxq1mbLU7M5FEdkzOQTB2iLLjWDL0= Subject key identifier: FB:8E:AF:AF:13:11:4C:FE:E7:82:23:93:25:01:2C:22:FD:8F:40:98 Authority key identifier: 1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82 Certificate issuer: /CN=A91BB09C/serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782 Certificate serial: 179C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft Manifest number: 1792 Signing time: Sat 20 Dec 2025 16:21:46 +0000 Manifest this update: Sat 20 Dec 2025 16:21:45 +0000 Manifest next update: Sat 27 Dec 2025 16:21:45 +0000 Files and hashes: 1: Hy55yPeszIoD-1tKOvzF9pMbN4I.crl (hash: JFcUSr80/mwGG2W3EVNWQK5arDJszC7xnvH1G2riDu8=) 2: 02181C4CE13511E7B0D71C83C4F9AE02.roa (hash: kYdi56Vh70Qo/SN0C8R4CSPhNox0X9SfOcU95n5XzCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:21:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6044 (0x179c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB09C, serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782 Validity Not Before: Dec 20 16:21:45 2025 GMT Not After : Dec 27 16:21:45 2025 GMT Subject: CN=6946cd1a-460a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:35:be:e8:f1:b3:e2:28:24:66:c3:5e:70:ea: e8:9c:d7:fe:03:0f:44:e4:aa:54:78:a1:c7:95:b1: 7a:c7:28:7a:3f:f0:99:15:38:29:de:69:d9:b6:83: 3c:c0:de:65:f0:59:e6:bd:26:9a:45:e0:3e:e7:fb: 05:a6:d5:e2:5a:88:4d:c4:fa:86:6b:44:58:c1:c9: 5b:2e:68:24:d9:a5:a6:03:58:d1:fb:bd:1b:15:e1: 07:0c:fa:74:5a:6a:46:2e:ea:2d:7b:03:f8:80:1c: e4:67:10:38:e4:bc:e7:19:e1:73:c8:b1:3d:34:06: d9:a6:8e:15:8f:ec:db:b4:81:2d:f5:63:b3:8c:15: 23:66:c0:c3:1c:24:20:bc:15:d9:03:d1:e4:b8:51: 7c:50:69:0b:c4:be:f1:68:1a:04:99:3a:3d:f1:d2: 61:c5:29:1c:29:68:5b:24:3e:2e:84:88:d5:e0:8f: f4:71:3f:b1:de:22:90:7d:2a:50:0f:47:e7:2c:21: da:f9:16:2a:8e:ee:19:27:38:6e:3c:4c:99:df:42: 67:0f:7e:29:e3:04:92:82:1c:d6:df:e5:33:3d:c4: 41:36:be:de:fb:91:04:ec:73:ee:dd:53:ec:9d:4f: c3:31:ec:f6:66:f0:39:79:4a:05:de:60:a6:ad:25: 16:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8E:AF:AF:13:11:4C:FE:E7:82:23:93:25:01:2C:22:FD:8F:40:98 X509v3 Authority Key Identifier: keyid:1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:27:aa:98:ba:14:be:64:c4:0c:d3:85:1a:ce:ff:d4:0b:42: 19:33:45:55:d3:9e:6a:1e:ce:76:b8:a7:3a:45:77:2c:9c:6b: 82:de:e8:fb:15:f4:f7:d8:f1:b3:77:4a:32:f8:4c:78:0d:8d: 0d:43:1a:57:d5:4e:fb:71:00:f8:15:02:4a:b7:a2:ce:81:f2: 9d:31:c2:99:01:2e:66:6c:92:ff:d2:94:a4:52:28:1a:a4:10: 13:86:b6:5d:b6:7c:6c:b5:04:d4:2b:8f:70:c1:e7:1b:8d:0e: a9:2a:64:c5:da:61:4a:e3:8a:14:c5:9c:22:a7:11:bc:fc:80: bb:25:a0:8b:92:2e:d3:0b:c9:34:a4:d4:a3:db:fa:a9:60:d0: 17:38:f5:da:da:40:bb:19:55:72:12:e6:22:73:f3:0f:41:90: bc:7b:5f:3e:5b:bd:c6:0b:53:ee:5e:d0:7b:d6:9c:48:c5:c1: 2c:ee:6b:f3:d7:80:05:8d:1a:ac:f1:7f:d5:94:b5:42:d0:01: ca:00:2f:25:9a:00:ef:3f:54:4e:d3:f6:b3:ee:73:4a:1f:c2: d0:44:83:fc:8d:88:81:98:55:d4:f9:28:e1:96:fe:ad:d6:b0: 3e:23:fe:74:4e:30:47:ac:d5:02:1d:b3:49:af:00:1e:ba:6b: 6b:c3:e3:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIwOUMxMTAvBgNVBAUTKDFGMkU3OUM4RjdBQ0NDOEEwM0ZCNUI0QTNBRkNDNUY2 OTMxQjM3ODIwHhcNMjUxMjIwMTYyMTQ1WhcNMjUxMjI3MTYyMTQ1WjAYMRYwFAYD VQQDDA02OTQ2Y2QxYS00NjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3zW+6PGz4igkZsNecOronNf+Aw9E5KpUeKHHlbF6xyh6P/CZFTgp3mnZtoM8 wN5l8FnmvSaaReA+5/sFptXiWohNxPqGa0RYwclbLmgk2aWmA1jR+70bFeEHDPp0 WmpGLuotewP4gBzkZxA45LznGeFzyLE9NAbZpo4Vj+zbtIEt9WOzjBUjZsDDHCQg vBXZA9HkuFF8UGkLxL7xaBoEmTo98dJhxSkcKWhbJD4uhIjV4I/0cT+x3iKQfSpQ D0fnLCHa+RYqju4ZJzhuPEyZ30JnD34p4wSSghzW3+UzPcRBNr7e+5EE7HPu3VPs nU/DMez2ZvA5eUoF3mCmrSUWMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuOr68T EUz+54IjkyUBLCL9j0CYMB8GA1UdIwQYMBaAFB8uecj3rMyKA/tbSjr8xfaTGzeC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjA5Qy8xRkNEMTVFMEUx MzQxMUU3ODI1MzEwODJDNEY5QUUwMi9IeTU1eVBlc3pJb0QtMXRLT3Z6RjlwTWJO NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h5NTV5UGVzeklvRC0xdEtPdnpGOXBNYk40SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjA5Qy8xRkNEMTVFMEUxMzQxMUU3ODI1MzEwODJDNEY5QUUwMi9IeTU1eVBlc3pJ b0QtMXRLT3Z6RjlwTWJONEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMJ6qYuhS+ZMQM04Uazv/UC0IZM0VV055qHs52uKc6RXcsnGuC3uj7 FfT32PGzd0oy+Ex4DY0NQxpX1U77cQD4FQJKt6LOgfKdMcKZAS5mbJL/0pSkUiga pBAThrZdtnxstQTUK49wwecbjQ6pKmTF2mFK44oUxZwipxG8/IC7JaCLki7TC8k0 pNSj2/qpYNAXOPXa2kC7GVVyEuYic/MPQZC8e18+W73GC1PuXtB71pxIxcEs7mvz 14AFjRqs8X/VlLVC0AHKAC8lmgDvP1RO0/az7nNKH8LQRIP8jYiBmFXU+Sjhlv6t 1rA+I/50TjBHrNUCHbNJrwAeumtrw+Px -----END CERTIFICATE-----Generated at Mon Dec 22 00:52:51 2025 by rpki-client