This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft File: hypmcnatRHCKRH_b6IHxYueQ3WM.mft (raw, json) Hash identifier: YAXeHvA9GGInwLt+kjGD4nxIVbYlSTyPmnVHWaqeZWw= Subject key identifier: 61:C5:82:7F:43:A3:69:6F:C2:8A:A5:A8:B3:B8:14:B7:E4:D3:0C:FA Authority key identifier: 87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63 Certificate issuer: /CN=A91C5153/serialNumber=872A667276AD44708A447FDBE881F162E790DD63 Certificate serial: 06B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft Manifest number: 06AB Signing time: Sat 20 Dec 2025 21:39:19 +0000 Manifest this update: Sat 20 Dec 2025 21:39:18 +0000 Manifest next update: Sat 27 Dec 2025 21:39:18 +0000 Files and hashes: 1: hypmcnatRHCKRH_b6IHxYueQ3WM.crl (hash: Irn6zjCZINNzMhcWUFqnqWmjYYt9J4YbAfaiF7NUT5s=) 2: 5B194E5EDFF311EBBC814169C4F9AE02.roa (hash: bolwxGi/eUOKWmqsmWqcMpF1AWqbvnFw3vWt3JpNOcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1715 (0x6b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5153, serialNumber=872A667276AD44708A447FDBE881F162E790DD63 Validity Not Before: Dec 20 21:39:18 2025 GMT Not After : Dec 27 21:39:18 2025 GMT Subject: CN=69471786-2a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cb:c4:9a:28:7d:9b:31:f9:8f:ae:ee:1e:21: e9:01:a1:d9:f8:91:31:3c:31:80:36:ec:8c:5b:32: 00:33:d6:0d:38:11:b8:e7:a5:75:1c:74:61:e6:d4: 48:eb:e0:63:27:00:2c:7b:27:fe:f1:71:51:56:74: 57:be:25:4d:87:a2:9b:c4:72:0a:bb:9f:f0:16:9b: e1:42:2f:d5:27:25:f2:fe:36:e4:a2:02:97:bb:14: 08:51:3e:7b:3a:d1:22:cc:a6:a6:26:65:66:e7:39: f9:6a:15:94:29:5f:10:52:52:c6:90:fa:ec:34:a8: 20:5d:86:37:6d:7e:7a:e6:48:06:53:88:d3:84:1e: 79:e7:f7:bb:91:d0:ac:82:b3:95:ff:7f:dd:e4:6a: ef:c6:7c:ce:31:ba:c0:fd:ef:ad:e7:23:d8:12:d1: 30:78:cc:c7:3d:02:98:1f:4f:87:71:f2:d0:cb:c1: db:df:8f:20:df:ed:27:a1:e6:ff:3f:8f:a0:96:1b: d0:5e:e6:a9:47:95:0c:5c:e7:db:b5:1c:54:c3:6e: c8:bb:b8:c6:89:af:f6:50:63:5b:8b:f2:a2:59:c0: f2:20:c3:0b:e3:8c:3e:23:a3:85:d2:69:d9:9b:92: 03:61:c7:1a:91:f0:8f:78:cb:c9:8d:5b:4b:87:67: 24:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C5:82:7F:43:A3:69:6F:C2:8A:A5:A8:B3:B8:14:B7:E4:D3:0C:FA X509v3 Authority Key Identifier: keyid:87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:bd:9c:ee:31:24:87:3d:1e:d1:dd:ff:48:2d:4c:8b:92:d9: bc:30:2f:55:27:d3:5a:e3:e8:02:af:9f:ac:14:85:b0:f7:45: 11:94:54:10:60:4d:6c:d7:13:22:3e:26:20:39:89:5e:3a:fc: 1a:e8:86:24:b4:41:d3:72:56:1c:6c:17:83:86:8b:6c:3b:ba: 21:dc:34:bd:6a:97:33:dc:25:86:4a:60:4d:2f:95:a1:dd:f8: 40:a9:d3:b9:d8:65:e0:06:64:62:d6:cb:43:55:f0:ff:2b:02: 8f:fc:61:7b:b3:c9:20:4f:69:00:b2:9f:61:f1:10:d5:70:e7: bf:bb:d2:4d:2f:eb:c5:5f:3c:9d:46:9f:d5:c6:e2:78:3e:d3: f7:d1:e7:d9:f2:29:2c:c7:47:71:1e:37:7e:1e:70:dd:80:82: f2:79:ae:71:a1:07:90:12:41:18:51:2e:12:d5:aa:e8:e3:97: 9b:fb:ef:71:ec:fd:49:e2:a3:97:2c:1a:59:7d:40:50:14:1a: 55:c8:65:c7:a5:34:81:0a:3e:03:ae:88:8d:d6:bc:fa:99:b0: 31:a9:e9:db:26:1f:3a:d6:5e:48:7e:c7:f7:c4:d8:97:79:b6: 1a:8c:20:44:da:ff:b0:a4:08:24:d5:1c:91:c5:36:47:7c:f9: 4d:cc:30:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUxNTMxMTAvBgNVBAUTKDg3MkE2NjcyNzZBRDQ0NzA4QTQ0N0ZEQkU4ODFGMTYy RTc5MERENjMwHhcNMjUxMjIwMjEzOTE4WhcNMjUxMjI3MjEzOTE4WjAYMRYwFAYD VQQDDA02OTQ3MTc4Ni0yYTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn8vEmih9mzH5j67uHiHpAaHZ+JExPDGANuyMWzIAM9YNOBG456V1HHRh5tRI 6+BjJwAseyf+8XFRVnRXviVNh6KbxHIKu5/wFpvhQi/VJyXy/jbkogKXuxQIUT57 OtEizKamJmVm5zn5ahWUKV8QUlLGkPrsNKggXYY3bX565kgGU4jThB555/e7kdCs grOV/3/d5GrvxnzOMbrA/e+t5yPYEtEweMzHPQKYH0+HcfLQy8Hb348g3+0noeb/ P4+glhvQXuapR5UMXOfbtRxUw27Iu7jGia/2UGNbi/KiWcDyIMML44w+I6OF0mnZ m5IDYccakfCPeMvJjVtLh2ckgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHFgn9D o2lvwoqlqLO4FLfk0wz6MB8GA1UdIwQYMBaAFIcqZnJ2rURwikR/2+iB8WLnkN1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTE1My85NTQyODFDMjkw NDgxMUVCQTQ4RTk2MzBDNEY5QUUwMi9oeXBtY25hdFJIQ0tSSF9iNklIeFl1ZVEz V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5cG1jbmF0UkhDS1JIX2I2SUh4WXVlUTNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTE1My85NTQyODFDMjkwNDgxMUVCQTQ4RTk2MzBDNEY5QUUwMi9oeXBtY25hdFJI Q0tSSF9iNklIeFl1ZVEzV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArvZzuMSSHPR7R3f9ILUyLktm8MC9VJ9Na4+gCr5+sFIWw90URlFQQ YE1s1xMiPiYgOYleOvwa6IYktEHTclYcbBeDhotsO7oh3DS9apcz3CWGSmBNL5Wh 3fhAqdO52GXgBmRi1stDVfD/KwKP/GF7s8kgT2kAsp9h8RDVcOe/u9JNL+vFXzyd Rp/VxuJ4PtP30efZ8iksx0dxHjd+HnDdgILyea5xoQeQEkEYUS4S1aro45eb++9x 7P1J4qOXLBpZfUBQFBpVyGXHpTSBCj4DroiN1rz6mbAxqenbJh861l5Ifsf3xNiX ebYajCBE2v+wpAgk1RyRxTZHfPlNzDAn -----END CERTIFICATE-----Generated at Mon Dec 22 10:53:11 2025 by rpki-client