This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft File: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft (raw, json) Hash identifier: CLpI24MKml3abrqU8qt8R+YwyjQ63pJEPE++Kh7Cp9Q= Subject key identifier: 85:24:B6:E3:11:82:9A:D8:89:0C:02:1A:2C:EE:EB:A7:0B:83:1E:5C Authority key identifier: 1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB Certificate issuer: /CN=A91B727C/serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Certificate serial: 11F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft Manifest number: 11E2 Signing time: Mon 22 Dec 2025 16:53:08 +0000 Manifest this update: Mon 22 Dec 2025 16:53:08 +0000 Manifest next update: Mon 29 Dec 2025 16:53:08 +0000 Files and hashes: 1: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl (hash: 8iVt6BpowBDnpyifTs/lGA6Kkc6dOxqNr3lRVE+jY8o=) 2: B58038B838FF11EAB8D91529C4F9AE02.roa (hash: IU4SG15xY5pa/IoW3wwDCZ3o/ZxiWKB5Df2NzHDteOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4599 (0x11f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B727C, serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Validity Not Before: Dec 22 16:53:08 2025 GMT Not After : Dec 29 16:53:08 2025 GMT Subject: CN=69497774-bcfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:32:46:d4:38:7e:c5:f4:24:62:26:d9:0b:51: 48:a7:6b:8f:51:f9:f6:c6:a6:49:31:de:51:63:0a: 99:9e:f0:54:d1:4a:82:c6:b7:13:f5:98:19:60:d8: ee:c3:5c:aa:12:9b:d7:8d:ca:0d:30:f3:54:0e:a0: 86:c3:46:96:37:91:3e:16:5e:fd:3f:01:88:ed:9c: 17:f1:ea:62:cd:1b:76:cf:3a:c1:dc:9b:9a:a1:d4: c8:45:c1:98:d3:a1:41:44:cb:06:2c:38:f6:4a:52: f5:20:76:a8:31:64:c6:4f:27:2c:f9:77:5c:dc:f5: 03:cf:4a:80:ea:4b:02:d7:3a:06:6b:dd:32:8f:db: c0:bc:a3:f4:9e:ab:16:ab:48:f4:8b:48:d6:6f:f6: f8:27:af:bb:73:ec:25:04:a8:a0:f2:4b:c6:c3:46: 69:d2:e6:9a:d3:24:9f:65:14:fe:df:f6:7b:eb:f4: 34:c0:e9:2d:3a:1d:1e:73:01:6a:33:35:0d:3b:dc: 11:63:91:07:f2:ce:5f:aa:f9:cc:63:b0:4d:a8:0e: 42:09:f8:95:40:6a:a0:bb:25:6f:d0:cd:86:c9:3d: 7c:56:b0:72:dd:94:dc:99:8f:d3:cf:52:2d:37:1c: 85:2b:8c:2b:dd:03:61:e7:94:73:48:fd:ec:2e:1c: b3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:24:B6:E3:11:82:9A:D8:89:0C:02:1A:2C:EE:EB:A7:0B:83:1E:5C X509v3 Authority Key Identifier: keyid:1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:bc:f5:75:bc:a0:29:f2:ad:db:b9:65:e9:1b:65:6c:72:c0: 6f:da:eb:39:91:53:17:a9:ef:4e:71:63:76:bc:fe:6a:b5:80: 11:0a:cc:1c:66:c3:24:81:e5:24:15:50:8e:c4:37:41:4d:59: d1:da:bf:0c:1d:20:c4:f8:e0:e3:1e:45:dc:f5:b6:68:30:c7: 89:12:49:6d:19:47:f2:09:69:bc:c9:7c:15:e8:36:28:e3:36: ef:3b:27:09:60:f5:d0:9e:47:2f:1c:3d:cc:03:7d:21:a5:86: 21:2f:97:54:95:8c:9f:78:c7:88:39:f5:1b:73:9e:c5:de:ff: 66:27:36:bd:c4:a5:1c:a1:1c:f9:50:29:f4:21:9d:6c:a5:dc: 7b:c7:e0:76:a6:5f:c7:be:8e:f9:70:ad:61:35:1d:dc:47:3f: 26:80:17:a6:6d:7c:ea:45:cb:ff:83:b0:37:3d:75:83:cf:b2: 47:26:4d:4d:ef:61:e6:3b:8a:7f:dc:96:4e:fc:9f:80:4c:65: a9:df:19:6c:07:ed:a0:98:4c:54:58:90:9a:a9:54:bb:e1:51: 1b:f5:b5:3e:9a:12:35:49:91:42:cb:b4:f7:d7:ea:fe:03:4e: f2:7f:60:24:b8:a4:c4:8f:df:da:42:b9:da:57:f3:b4:8d:c1: 49:59:d9:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyN0MxMTAvBgNVBAUTKDFEODgyQzhDRjI0MzRDQzlCQkZENzkxOTFEQzJDNjk4 MjkyNkU4QUIwHhcNMjUxMjIyMTY1MzA4WhcNMjUxMjI5MTY1MzA4WjAYMRYwFAYD VQQDDA02OTQ5Nzc3NC1iY2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmDJG1Dh+xfQkYibZC1FIp2uPUfn2xqZJMd5RYwqZnvBU0UqCxrcT9ZgZYNju w1yqEpvXjcoNMPNUDqCGw0aWN5E+Fl79PwGI7ZwX8epizRt2zzrB3JuaodTIRcGY 06FBRMsGLDj2SlL1IHaoMWTGTycs+Xdc3PUDz0qA6ksC1zoGa90yj9vAvKP0nqsW q0j0i0jWb/b4J6+7c+wlBKig8kvGw0Zp0uaa0ySfZRT+3/Z76/Q0wOktOh0ecwFq MzUNO9wRY5EH8s5fqvnMY7BNqA5CCfiVQGqguyVv0M2GyT18VrBy3ZTcmY/Tz1It NxyFK4wr3QNh55RzSP3sLhyzcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUktuMR gprYiQwCGizu66cLgx5cMB8GA1UdIwQYMBaAFB2ILIzyQ0zJu/15GR3CxpgpJuir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzI3Qy85RDc3QzZENDAy OEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRNbTdfWGtaSGNMR21Da202 S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hZZ3NqUEpEVE1tN19Ya1pIY0xHbUNrbTZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzI3Qy85RDc3QzZENDAyOEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRN bTdfWGtaSGNMR21Da202S3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKvPV1vKAp8q3buWXpG2VscsBv2us5kVMXqe9OcWN2vP5qtYARCswc ZsMkgeUkFVCOxDdBTVnR2r8MHSDE+ODjHkXc9bZoMMeJEkltGUfyCWm8yXwV6DYo 4zbvOycJYPXQnkcvHD3MA30hpYYhL5dUlYyfeMeIOfUbc57F3v9mJza9xKUcoRz5 UCn0IZ1spdx7x+B2pl/Hvo75cK1hNR3cRz8mgBembXzqRcv/g7A3PXWDz7JHJk1N 72HmO4p/3JZO/J+ATGWp3xlsB+2gmExUWJCaqVS74VEb9bU+mhI1SZFCy7T31+r+ A07yf2AkuKTEj9/aQrnaV/O0jcFJWdmF -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:28 2025 by rpki-client