This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft File: HtdycKSBilV07-7Kyvt0g812iCE.mft (raw, json) Hash identifier: mBuy8Ro/c23yqbQcint8osS2mBpqiVuYwV+wxjtXyvg= Subject key identifier: 31:A4:46:B4:88:9C:64:FD:61:17:05:6F:D7:6D:13:94:26:87:AA:D6 Authority key identifier: 1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 Certificate issuer: /CN=A91CFE58/serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Certificate serial: 0AC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft Manifest number: 0ABE Signing time: Sun 28 Dec 2025 18:57:22 +0000 Manifest this update: Sun 28 Dec 2025 18:57:21 +0000 Manifest next update: Sun 04 Jan 2026 18:57:21 +0000 Files and hashes: 1: HtdycKSBilV07-7Kyvt0g812iCE.crl (hash: NQt8TK2GZ+W/wkEcWfd+1An/waIDVOpiTZyjCUbNLkQ=) 2: 7C29A45A669A11EA9A11434FC4F9AE02.roa (hash: zKN4F2avq+xJ9yq6Og5mmKvaFyZB2rEl8x2OZ87RL7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 18:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2757 (0xac5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE58, serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Validity Not Before: Dec 28 18:57:21 2025 GMT Not After : Jan 4 18:57:21 2026 GMT Subject: CN=69517d92-338f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:65:bb:d4:ea:4d:12:2a:16:f3:f7:78:e6:61: 8a:cf:a1:bf:61:ed:8f:26:b5:1e:8a:61:8f:69:b3: 14:a6:6e:c9:05:3d:bc:8e:80:e8:13:fe:aa:30:2f: 9a:70:0f:c4:27:5b:f0:85:a4:8b:cc:c7:da:f8:6d: b4:42:5e:16:53:83:d9:55:59:62:bc:9b:9a:c9:18: dc:81:4e:42:a3:37:12:e6:e6:2f:46:0c:6c:53:b3: b8:21:2d:3d:06:5b:92:80:1e:99:15:52:b8:2f:3e: 57:12:6c:4b:a1:73:7d:c4:7e:bc:d4:77:5b:6c:08: 8f:27:63:f5:3c:eb:45:88:06:07:f7:f9:14:4f:92: 63:7a:93:0a:ee:80:3f:f3:a1:04:68:5a:f9:84:64: 5a:e4:7d:bb:59:2e:8e:06:11:70:95:69:d2:2c:92: d1:c1:64:1b:f6:fe:1f:ba:b6:6e:78:92:4e:d0:26: dd:3b:43:98:ec:f6:3a:6b:d7:7a:ca:f3:bd:67:11: 83:19:7f:8f:36:45:ce:99:1e:97:30:e0:77:14:84: c6:64:83:0b:b8:ce:ce:1f:d5:9e:40:98:e7:d3:d6: f8:7a:6d:67:a3:ca:11:74:99:72:05:52:e6:b3:97: 81:ff:4c:af:a8:d2:8c:fa:45:cd:0b:0e:aa:68:f0: 6d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A4:46:B4:88:9C:64:FD:61:17:05:6F:D7:6D:13:94:26:87:AA:D6 X509v3 Authority Key Identifier: keyid:1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:e2:44:9d:c6:58:9b:51:da:75:ee:29:12:f1:0b:26:51:65: e1:8f:b8:e9:93:a1:5d:2a:d4:d7:24:93:45:62:45:d1:03:ab: b5:ea:69:4c:b8:d3:1c:f6:10:2a:9c:96:d0:ab:54:36:8f:f7: 77:33:e4:dd:1e:69:c9:fa:1b:88:ba:47:fa:0d:37:6a:59:0d: e6:58:fa:35:82:bd:af:84:80:80:01:62:15:c7:1e:b2:3e:d9: bf:6f:ca:b3:83:24:92:81:8d:cf:ef:49:75:7b:0f:4e:26:22: 48:84:8d:a9:bd:47:11:4e:dc:92:2e:9c:7d:e2:d1:cb:db:14: 96:f1:e6:63:94:6c:bd:82:87:49:52:bd:74:f3:9c:71:3a:b2: af:e3:61:1c:0a:e7:64:ea:62:73:1b:a8:4b:d7:2e:1d:df:4e: b6:ce:b0:8e:c8:d7:c3:55:8c:d5:ca:d7:e4:c1:72:88:00:20: 14:c5:c9:c9:36:34:a9:c5:c1:e1:16:a9:43:28:79:ce:79:ef: 69:7e:88:e5:86:73:cf:fa:73:ed:a9:b0:52:7f:14:20:ac:49: c3:de:6d:57:12:14:71:81:8e:58:56:ce:d2:7f:9a:21:b5:62: 51:4e:d2:2f:de:8c:29:bf:9f:9b:60:d1:3d:4a:3e:04:0d:2c: 5e:58:16:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZFNTgxMTAvBgNVBAUTKDFFRDc3MjcwQTQ4MThBNTU3NEVGRUVDQUNBRkI3NDgz Q0Q3Njg4MjEwHhcNMjUxMjI4MTg1NzIxWhcNMjYwMTA0MTg1NzIxWjAYMRYwFAYD VQQDDA02OTUxN2Q5Mi0zMzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumW71OpNEioW8/d45mGKz6G/Ye2PJrUeimGPabMUpm7JBT28joDoE/6qMC+a cA/EJ1vwhaSLzMfa+G20Ql4WU4PZVVlivJuayRjcgU5CozcS5uYvRgxsU7O4IS09 BluSgB6ZFVK4Lz5XEmxLoXN9xH681HdbbAiPJ2P1POtFiAYH9/kUT5JjepMK7oA/ 86EEaFr5hGRa5H27WS6OBhFwlWnSLJLRwWQb9v4furZueJJO0CbdO0OY7PY6a9d6 yvO9ZxGDGX+PNkXOmR6XMOB3FITGZIMLuM7OH9WeQJjn09b4em1no8oRdJlyBVLm s5eB/0yvqNKM+kXNCw6qaPBtyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGkRrSI nGT9YRcFb9dtE5Qmh6rWMB8GA1UdIwQYMBaAFB7XcnCkgYpVdO/uysr7dIPNdogh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkU1OC82MDMzQ0Y2QTY2 OTkxMUVBQkYxM0M5NERDNEY5QUUwMi9IdGR5Y0tTQmlsVjA3LTdLeXZ0MGc4MTJp Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZHljS1NCaWxWMDctN0t5dnQwZzgxMmlDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkU1OC82MDMzQ0Y2QTY2OTkxMUVBQkYxM0M5NERDNEY5QUUwMi9IdGR5Y0tTQmls VjA3LTdLeXZ0MGc4MTJpQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ4kSdxlibUdp17ikS8QsmUWXhj7jpk6FdKtTXJJNFYkXRA6u16mlM uNMc9hAqnJbQq1Q2j/d3M+TdHmnJ+huIukf6DTdqWQ3mWPo1gr2vhICAAWIVxx6y Ptm/b8qzgySSgY3P70l1ew9OJiJIhI2pvUcRTtySLpx94tHL2xSW8eZjlGy9godJ Ur1085xxOrKv42EcCudk6mJzG6hL1y4d3062zrCOyNfDVYzVytfkwXKIACAUxcnJ NjSpxcHhFqlDKHnOee9pfojlhnPP+nPtqbBSfxQgrEnD3m1XEhRxgY5YVs7Sf5oh tWJRTtIv3owpv5+bYNE9Sj4EDSxeWBbS -----END CERTIFICATE-----Generated at Tue Dec 30 07:05:40 2025 by rpki-client