This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft File: hbfttaaEvj2aYpdZkKcdmY3vUYs.mft (raw, json) Hash identifier: p7bu53LPcDWIvV1VNOsTr0Dw37iTZYT4q6/oofMpHzI= Subject key identifier: C5:C7:BF:D4:87:64:7C:D4:D3:C0:44:3A:EE:95:2E:82:3A:18:2A:95 Authority key identifier: 85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B Certificate issuer: /CN=A91B62E1/serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft Manifest number: 10 Signing time: Tue 23 Dec 2025 06:47:39 +0000 Manifest this update: Tue 23 Dec 2025 06:47:39 +0000 Manifest next update: Tue 30 Dec 2025 06:47:39 +0000 Files and hashes: 1: hbfttaaEvj2aYpdZkKcdmY3vUYs.crl (hash: p7NHvqtLWxLQVNO9DoOtckXDcbV3tYl8TjG96fNKUWE=) 2: 146F4288C8E711F0A7C33B4CC4F9AE02.roa (hash: xY4rHh4Ml46b2MxKK+6/FOJjmg0oXpkZR7eYA4dh1tk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62E1, serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B Validity Not Before: Dec 23 06:47:39 2025 GMT Not After : Dec 30 06:47:39 2025 GMT Subject: CN=694a3b0b-a475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:74:1c:7b:c7:5f:10:20:de:88:54:12:71:54: bd:b4:9a:a8:24:4e:a6:1b:2d:72:41:d9:dc:67:47: a3:bb:56:08:7f:8e:27:b2:9a:f3:4c:b2:5f:48:5c: a7:9c:6f:36:6e:18:ee:8d:c5:60:cf:63:93:87:64: 8d:6c:4a:ab:43:15:e3:17:b5:26:59:5b:e3:8e:8b: f0:28:d8:2d:63:a9:b0:49:f8:83:a9:3a:1c:85:03: 0b:26:b0:09:a2:1a:1c:56:0c:1b:75:bb:61:4d:a5: 7d:7b:29:28:57:b7:df:7f:77:39:52:60:71:bf:e3: b9:72:38:11:2f:c1:8b:a9:69:f4:67:50:cb:31:82: 16:ca:f9:54:1d:c8:08:fa:4f:e3:ad:16:69:09:86: f3:a8:a2:4e:0a:3a:5e:16:4b:df:d9:24:1e:dd:c9: 09:1b:ea:00:cb:f7:aa:42:e1:77:76:4d:cf:7b:0d: 13:ef:c7:cd:10:b0:60:2a:1e:89:9e:83:59:22:20: 37:e9:d6:14:07:48:d6:f4:9c:ae:45:84:aa:7c:07: b3:46:a7:2f:06:f6:8b:d0:b1:b5:6d:a9:62:15:8a: 99:2f:5b:f7:96:48:30:fe:ac:d8:20:81:e9:e6:0c: f0:0d:e5:c9:5c:e6:cc:85:0f:70:90:c0:36:37:0a: e9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C7:BF:D4:87:64:7C:D4:D3:C0:44:3A:EE:95:2E:82:3A:18:2A:95 X509v3 Authority Key Identifier: keyid:85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:27:d7:6a:c0:46:7e:c4:c5:74:8e:d1:3e:16:68:27:11:f8: 11:fd:ab:80:e1:85:a3:4a:18:02:50:19:4d:ac:b6:8f:c5:ff: 12:9d:4d:1a:5c:88:26:ce:75:b2:99:ef:55:ad:5f:b0:e8:c8: 59:9e:f5:99:b8:ce:c7:78:16:4a:61:3a:14:83:0a:cf:6d:16: 2e:1e:96:f6:25:22:b5:80:de:96:16:a6:3a:87:b5:c0:fb:14: e0:58:03:e0:9f:21:f5:36:06:cf:8f:ff:4e:cd:0e:73:36:cb: 71:70:dd:59:6d:1d:84:3e:d6:b1:1b:ac:a6:a9:4d:0c:2e:9d: f9:ed:3f:71:a1:ad:6c:7c:14:d9:be:88:2f:ad:9c:cd:8d:91: 90:e2:6f:66:05:54:7b:72:16:f3:04:f1:ce:3e:87:66:08:da: ca:b3:d8:2a:99:8f:d5:5d:80:0c:27:c5:c8:37:00:f3:36:43: ef:d4:80:7e:7a:19:a2:66:3b:6b:d6:90:a4:ff:e4:a5:f1:bc: 5f:47:e9:5a:63:d7:43:26:e0:be:03:6c:cd:e8:c6:2a:31:8c: f0:45:9b:75:b5:a3:c0:fe:99:5e:21:d3:a9:63:1f:db:94:83: 70:8c:29:0f:12:37:b5:3f:7e:d0:e6:12:80:76:c8:1d:d2:38: c2:31:3f:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjJFMTExMC8GA1UEBRMoODVCN0VEQjVBNjg0QkUzRDlBNjI5NzU5OTBBNzFEOTk4 REVGNTE4QjAeFw0yNTEyMjMwNjQ3MzlaFw0yNTEyMzAwNjQ3MzlaMBgxFjAUBgNV BAMMDTY5NGEzYjBiLWE0NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/dBx7x18QIN6IVBJxVL20mqgkTqYbLXJB2dxnR6O7Vgh/jieymvNMsl9IXKec bzZuGO6NxWDPY5OHZI1sSqtDFeMXtSZZW+OOi/Ao2C1jqbBJ+IOpOhyFAwsmsAmi GhxWDBt1u2FNpX17KShXt99/dzlSYHG/47lyOBEvwYupafRnUMsxghbK+VQdyAj6 T+OtFmkJhvOook4KOl4WS9/ZJB7dyQkb6gDL96pC4Xd2Tc97DRPvx80QsGAqHome g1kiIDfp1hQHSNb0nK5FhKp8B7NGpy8G9ovQsbVtqWIVipkvW/eWSDD+rNgggenm DPAN5clc5syFD3CQwDY3CunxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxce/1Idk fNTTwEQ67pUugjoYKpUwHwYDVR0jBBgwFoAUhbfttaaEvj2aYpdZkKcdmY3vUYsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2MkUxLzBBQkIzNTY4QzhF NjExRjBBQTBDNUI0N0M0RjlBRTAyL2hiZnR0YWFFdmoyYVlwZFprS2NkbVkzdlVZ cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGJmdHRhYUV2ajJhWXBkWmtLY2RtWTN2VVlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 MkUxLzBBQkIzNTY4QzhFNjExRjBBQTBDNUI0N0M0RjlBRTAyL2hiZnR0YWFFdmoy YVlwZFprS2NkbVkzdlVZcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC0n12rARn7ExXSO0T4WaCcR+BH9q4DhhaNKGAJQGU2sto/F/xKdTRpc iCbOdbKZ71WtX7DoyFme9Zm4zsd4FkphOhSDCs9tFi4elvYlIrWA3pYWpjqHtcD7 FOBYA+CfIfU2Bs+P/07NDnM2y3Fw3VltHYQ+1rEbrKapTQwunfntP3GhrWx8FNm+ iC+tnM2NkZDib2YFVHtyFvME8c4+h2YI2sqz2CqZj9VdgAwnxcg3APM2Q+/UgH56 GaJmO2vWkKT/5KXxvF9H6Vpj10Mm4L4DbM3oxioxjPBFm3W1o8D+mV4h06ljH9uU g3CMKQ8SN7U/ftDmEoB2yB3SOMIxP50= -----END CERTIFICATE-----Generated at Wed Dec 24 14:05:06 2025 by rpki-client