This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft File: hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft (raw, json) Hash identifier: jPlE0T27TMG+23mbpGWhAavtAQCeRBQV0eXsUSKK6s4= Subject key identifier: A9:69:EA:FE:BC:FE:4B:67:E1:9E:92:85:FD:95:66:39:1E:14:59:38 Authority key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 Certificate issuer: /CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft Manifest number: 0151 Signing time: Wed 03 Dec 2025 02:44:55 +0000 Manifest this update: Wed 03 Dec 2025 02:44:55 +0000 Manifest next update: Wed 10 Dec 2025 02:44:55 +0000 Files and hashes: 1: hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl (hash: QgP0LIAzLC0ogmQ0nHVlYKRggpEm5VeF+C13uNn9rhQ=) 2: BF886C00D26A11EEAF76482BC4F9AE02.roa (hash: w6qwhTkmhaSB3ncvO8yCXadiw5lkWAA4VBrSx+fRpEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 02:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Validity Not Before: Dec 3 02:44:55 2025 GMT Not After : Dec 10 02:44:55 2025 GMT Subject: CN=692fa427-1d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:78:61:8c:57:6c:3a:dc:14:91:22:10:f3:be: c9:1f:ef:71:4d:dc:3d:35:14:49:f0:2f:0d:11:99: 3d:27:7b:86:c6:57:1d:7e:af:54:58:c2:8d:00:3b: d7:93:a1:b6:20:04:87:19:50:a0:01:fa:29:f4:31: 4f:02:21:a0:4b:48:dd:f7:ba:a2:48:a5:a7:75:ce: 10:01:89:ee:c7:dd:f0:40:13:b3:21:ed:16:b6:19: 05:5c:4f:ba:0f:a6:b6:94:45:41:2b:30:cc:77:f4: ba:ae:cc:5a:eb:8c:f4:e8:14:4c:08:30:74:0b:fe: 47:34:bd:48:93:a3:49:62:56:ec:d4:e3:5b:80:69: 8f:0e:d5:5d:fb:23:cf:f6:b1:e9:d9:44:5d:c5:b0: 7c:d6:e1:00:7d:df:43:84:12:3c:4c:91:fa:eb:1e: be:a9:0c:de:a8:8c:b2:2e:8e:bd:9d:7c:47:e1:d0: 1a:75:65:e3:6e:94:5b:17:d7:c2:52:f0:8e:f7:b8: 4a:06:3b:3c:a2:41:c3:da:0d:a1:64:e3:6a:99:e1: d9:3f:4d:99:fb:cf:e4:e4:03:dc:01:3e:10:1d:4b: db:2a:93:4e:b3:d6:2c:62:9f:31:97:0f:f7:bc:eb: 8b:84:e3:58:1b:f3:35:cc:20:fa:06:79:cc:20:c7: a9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:69:EA:FE:BC:FE:4B:67:E1:9E:92:85:FD:95:66:39:1E:14:59:38 X509v3 Authority Key Identifier: keyid:87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:d2:bd:04:ef:63:c0:16:77:29:05:a9:f3:23:37:54:bd:97: eb:85:bd:b8:36:ff:80:24:ae:36:54:69:24:6a:16:a7:d4:f9: 41:7c:da:ba:cf:d8:63:8a:66:8c:90:ac:65:93:c4:c4:af:cd: e7:65:db:49:43:dc:0a:75:77:61:e0:e6:31:07:03:3c:7e:52: 21:dd:a0:f9:29:04:ca:49:03:74:e8:62:3c:b0:a8:02:2e:e1: b1:db:4b:5b:5c:d4:f6:64:22:62:b3:8e:83:bc:ab:94:9d:19: ac:a1:ae:6b:a2:46:50:f1:ce:01:19:c3:ab:ea:d5:14:e0:ce: 2b:e1:8b:58:90:62:51:d6:7b:75:77:55:cf:e7:0f:e3:55:9b: 0e:01:a8:ba:e7:93:79:88:44:db:4d:df:17:2c:9d:8f:ff:09: c0:2c:6d:a7:fd:a3:c3:28:19:c1:02:53:d1:2c:d4:67:3d:3b: 17:e2:a4:35:cd:f6:59:e4:15:93:80:6d:b7:56:c8:9e:9a:7a: f8:50:23:ba:b3:12:95:d3:9f:7d:b6:9b:ae:3b:d7:53:b7:9a: c7:68:20:b1:1a:5a:f6:1a:97:df:a8:9c:42:a8:3d:ac:e6:0a: 7a:ba:68:f4:a1:31:82:05:ba:02:f7:5e:2f:49:c1:5c:13:73: 92:77:bf:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDg3MkM5MzY4NjU2Qzc3ODM1N0MyQTVBOTlCRUNGRkY2 Nzc1NTBBQzgwHhcNMjUxMjAzMDI0NDU1WhcNMjUxMjEwMDI0NDU1WjAYMRYwFAYD VQQDEw02OTJmYTQyNy0xZDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHhhjFdsOtwUkSIQ877JH+9xTdw9NRRJ8C8NEZk9J3uGxlcdfq9UWMKNADvX k6G2IASHGVCgAfop9DFPAiGgS0jd97qiSKWndc4QAYnux93wQBOzIe0WthkFXE+6 D6a2lEVBKzDMd/S6rsxa64z06BRMCDB0C/5HNL1Ik6NJYlbs1ONbgGmPDtVd+yPP 9rHp2URdxbB81uEAfd9DhBI8TJH66x6+qQzeqIyyLo69nXxH4dAadWXjbpRbF9fC UvCO97hKBjs8okHD2g2hZONqmeHZP02Z+8/k5APcAT4QHUvbKpNOs9YsYp8xlw/3 vOuLhONYG/M1zCD6BnnMIMeplQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlp6v68 /ktn4Z6Shf2VZjkeFFk4MB8GA1UdIwQYMBaAFIcsk2hlbHeDV8KlqZvs//Z3VQrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83NUEwQ0QxNEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0Tlh3cVdwbS16XzluZFZD c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2h5eVRhR1ZzZDROWHdxV3BtLXpfOW5kVkNzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83NUEwQ0QxNEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0 Tlh3cVdwbS16XzluZFZDc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC0r0E72PAFncpBanzIzdUvZfrhb24Nv+AJK42VGkkahan1PlBfNq6 z9hjimaMkKxlk8TEr83nZdtJQ9wKdXdh4OYxBwM8flIh3aD5KQTKSQN06GI8sKgC LuGx20tbXNT2ZCJis46DvKuUnRmsoa5rokZQ8c4BGcOr6tUU4M4r4YtYkGJR1nt1 d1XP5w/jVZsOAai655N5iETbTd8XLJ2P/wnALG2n/aPDKBnBAlPRLNRnPTsX4qQ1 zfZZ5BWTgG23Vsiemnr4UCO6sxKV0599tpuuO9dTt5rHaCCxGlr2GpffqJxCqD2s 5gp6umj0oTGCBboC914vScFcE3OSd7/k -----END CERTIFICATE-----Generated at Wed Dec 3 15:32:18 2025 by rpki-client