This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft File: Hy55yPeszIoD-1tKOvzF9pMbN4I.mft (raw, json) Hash identifier: u29DIIPCK/ml/JBHewJY+Km8uUYEHswetMB+3i3ejJU= Subject key identifier: 9C:C0:91:A8:90:B6:26:6B:84:4F:31:E8:1E:AE:B6:95:43:3A:3D:D3 Authority key identifier: 1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82 Certificate issuer: /CN=A91BB09C/serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782 Certificate serial: 179D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft Manifest number: 1793 Signing time: Mon 22 Dec 2025 16:20:10 +0000 Manifest this update: Mon 22 Dec 2025 16:20:09 +0000 Manifest next update: Mon 29 Dec 2025 16:20:09 +0000 Files and hashes: 1: Hy55yPeszIoD-1tKOvzF9pMbN4I.crl (hash: pFP3c42dTF1DJUrKQiV1KAlrXCsr+0MYkaVEyIxRQ9Q=) 2: 02181C4CE13511E7B0D71C83C4F9AE02.roa (hash: kYdi56Vh70Qo/SN0C8R4CSPhNox0X9SfOcU95n5XzCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6045 (0x179d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB09C, serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782 Validity Not Before: Dec 22 16:20:09 2025 GMT Not After : Dec 29 16:20:09 2025 GMT Subject: CN=69496fba-4cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:06:1e:2e:24:4b:01:2d:53:a9:d4:e4:0d:f4: 4b:c3:f1:cc:22:9b:0f:b8:e4:76:0b:d0:25:e6:74: cc:61:34:3e:21:71:0a:21:da:c5:54:0e:2f:9d:c0: 9d:8e:d5:8f:a1:b7:58:33:78:78:f6:1d:48:3b:f9: 5a:e2:96:ac:92:c1:8a:8a:31:91:38:6a:4f:00:e4: ca:36:9b:59:5c:4e:b3:77:a5:f6:0e:49:ef:a0:75: 76:80:92:07:bc:e4:ba:be:21:63:82:3f:c3:16:75: a1:f4:4d:9b:22:08:36:ae:7e:f2:4c:b7:b2:df:f1: 7f:cc:5d:84:3a:d4:08:e4:bb:c2:3a:25:6d:6b:b6: 23:89:8f:e0:7b:d1:cc:fd:34:d7:b5:96:28:e9:d6: 27:62:6f:b8:08:1a:c0:73:19:61:76:00:e2:96:da: 5d:9e:53:81:29:f9:db:2c:e4:b1:6f:a8:a2:85:c8: 12:6b:d5:ec:2e:86:91:4f:40:92:41:0b:42:84:2a: 03:80:f1:c2:df:8a:50:d8:a3:ec:5c:28:a9:33:00: 8f:f9:2c:81:6d:b5:db:a2:cc:51:85:dd:b9:1e:12: 93:de:ce:59:9d:86:2e:78:db:15:46:1f:d5:00:5d: 5c:8a:f9:d2:0f:44:18:86:6f:42:48:6d:01:bb:cf: 1c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C0:91:A8:90:B6:26:6B:84:4F:31:E8:1E:AE:B6:95:43:3A:3D:D3 X509v3 Authority Key Identifier: keyid:1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:cb:9c:fc:7b:d0:34:20:60:ae:c2:c8:e5:38:b4:22:ab:e9: 4c:84:04:79:c1:76:ad:fd:90:9e:12:5b:ea:8a:ac:6f:c5:d4: 37:50:1a:cb:d9:48:b7:f0:9f:f8:23:fd:51:cc:0d:a0:e4:52: aa:21:ab:2e:0a:b8:1c:41:18:1b:5c:3c:c6:b0:c0:fc:18:bd: 55:47:b7:28:1c:fa:24:7a:bb:d1:96:b6:c2:6b:17:e3:8b:59: 65:d7:a0:04:f2:37:80:46:43:4f:53:f6:d0:a0:e8:5b:30:f5: 9a:b5:0f:8f:b8:ad:18:4e:76:94:10:8b:30:23:2e:fa:f2:30: d6:af:ff:18:50:33:68:d5:6b:ad:49:ce:e1:0f:81:3e:69:6d: ee:e0:f6:d4:90:f2:12:e3:5b:a2:50:f5:f3:8d:4e:69:ec:16: 5f:f4:70:83:9a:c1:8a:a5:f5:28:21:7f:7c:77:94:3b:fa:8a: b0:9a:f4:06:74:d8:1f:ed:7b:3d:a1:22:4f:8b:96:0e:ab:3b: 6a:1e:61:32:67:52:2f:44:32:d4:a1:bf:3a:d6:5d:94:a8:a3: e5:94:7d:16:60:20:0e:a0:92:6a:4e:6b:6d:ae:3a:85:40:90: 54:74:a5:cd:de:b2:07:49:ad:d8:32:99:49:b4:17:96:37:1c: ad:87:22:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIwOUMxMTAvBgNVBAUTKDFGMkU3OUM4RjdBQ0NDOEEwM0ZCNUI0QTNBRkNDNUY2 OTMxQjM3ODIwHhcNMjUxMjIyMTYyMDA5WhcNMjUxMjI5MTYyMDA5WjAYMRYwFAYD VQQDDA02OTQ5NmZiYS00Y2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwYeLiRLAS1TqdTkDfRLw/HMIpsPuOR2C9Al5nTMYTQ+IXEKIdrFVA4vncCd jtWPobdYM3h49h1IO/la4pasksGKijGROGpPAOTKNptZXE6zd6X2DknvoHV2gJIH vOS6viFjgj/DFnWh9E2bIgg2rn7yTLey3/F/zF2EOtQI5LvCOiVta7YjiY/ge9HM /TTXtZYo6dYnYm+4CBrAcxlhdgDiltpdnlOBKfnbLOSxb6iihcgSa9XsLoaRT0CS QQtChCoDgPHC34pQ2KPsXCipMwCP+SyBbbXbosxRhd25HhKT3s5ZnYYueNsVRh/V AF1civnSD0QYhm9CSG0Bu88ciQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzAkaiQ tiZrhE8x6B6utpVDOj3TMB8GA1UdIwQYMBaAFB8uecj3rMyKA/tbSjr8xfaTGzeC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjA5Qy8xRkNEMTVFMEUx MzQxMUU3ODI1MzEwODJDNEY5QUUwMi9IeTU1eVBlc3pJb0QtMXRLT3Z6RjlwTWJO NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h5NTV5UGVzeklvRC0xdEtPdnpGOXBNYk40SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjA5Qy8xRkNEMTVFMEUxMzQxMUU3ODI1MzEwODJDNEY5QUUwMi9IeTU1eVBlc3pJ b0QtMXRLT3Z6RjlwTWJONEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJy5z8e9A0IGCuwsjlOLQiq+lMhAR5wXat/ZCeElvqiqxvxdQ3UBrL 2Ui38J/4I/1RzA2g5FKqIasuCrgcQRgbXDzGsMD8GL1VR7coHPokervRlrbCaxfj i1ll16AE8jeARkNPU/bQoOhbMPWatQ+PuK0YTnaUEIswIy768jDWr/8YUDNo1Wut Sc7hD4E+aW3u4PbUkPIS41uiUPXzjU5p7BZf9HCDmsGKpfUoIX98d5Q7+oqwmvQG dNgf7Xs9oSJPi5YOqztqHmEyZ1IvRDLUob861l2UqKPllH0WYCAOoJJqTmttrjqF QJBUdKXN3rIHSa3YMplJtBeWNxythyKs -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:12 2025 by rpki-client