This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft File: HtdycKSBilV07-7Kyvt0g812iCE.mft (raw, json) Hash identifier: 6Bv2REYHdOpbYbyRVNwWG4Iw2W3Ff/2ogPN06uB+AXU= Subject key identifier: 49:2F:EF:1D:51:54:4B:E6:B3:B5:09:C2:46:FA:C6:B1:C6:64:CF:92 Authority key identifier: 1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 Certificate issuer: /CN=A91CFE58/serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Certificate serial: 0AC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft Manifest number: 0ABB Signing time: Mon 22 Dec 2025 18:56:31 +0000 Manifest this update: Mon 22 Dec 2025 18:56:30 +0000 Manifest next update: Mon 29 Dec 2025 18:56:30 +0000 Files and hashes: 1: HtdycKSBilV07-7Kyvt0g812iCE.crl (hash: 6Y4FmO5bYaA9/VqQGqAD9kDjHkimTmkPaUFwGB5qHJU=) 2: 7C29A45A669A11EA9A11434FC4F9AE02.roa (hash: zKN4F2avq+xJ9yq6Og5mmKvaFyZB2rEl8x2OZ87RL7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:56:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2754 (0xac2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE58, serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Validity Not Before: Dec 22 18:56:30 2025 GMT Not After : Dec 29 18:56:30 2025 GMT Subject: CN=6949945f-4158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e8:68:89:6c:99:ff:62:b0:85:e9:43:fd:dc: 06:78:c6:e0:63:f7:0a:6e:8f:2d:45:d5:7e:b3:db: 5b:38:f2:50:5d:15:8f:96:d5:31:03:85:77:25:10: c0:11:5a:1b:02:3b:a2:a7:fd:94:21:bb:0f:ab:ce: ef:81:8e:53:57:b3:4e:24:32:4e:f6:33:5c:42:07: 48:63:0b:3e:85:26:ea:46:bb:43:3e:25:84:0a:46: a6:18:bd:e4:77:b2:3b:6f:68:cd:5c:be:37:a1:1c: ad:7c:26:86:d8:b0:4f:e3:99:6a:ed:ef:b5:e0:f7: a6:84:3a:04:2b:ad:fa:e0:ab:a9:93:89:c6:18:32: 76:da:eb:f2:3d:3b:84:7b:b4:c3:c5:dc:bd:61:3b: f9:d8:6d:0d:0d:e0:f0:e5:c0:2f:92:7e:c1:bb:8f: 01:8c:35:76:0f:80:53:45:fb:72:b6:6d:14:69:6a: 5b:28:89:23:fb:01:87:59:72:6e:30:b5:df:a1:19: ce:5f:fc:e1:56:40:cb:e2:45:65:27:8f:94:e7:77: 1f:b1:04:4e:c5:a7:ad:0b:42:56:f9:05:b6:33:1c: 71:ca:99:5d:37:90:6c:a2:ce:33:b1:14:d5:6b:ee: 11:3f:9a:13:4a:cc:a7:14:b2:7c:46:d1:38:77:2a: 0e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2F:EF:1D:51:54:4B:E6:B3:B5:09:C2:46:FA:C6:B1:C6:64:CF:92 X509v3 Authority Key Identifier: keyid:1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:1c:1a:33:84:ed:1c:6b:e7:fc:14:4f:73:65:b2:42:08:29: 95:ea:1f:41:a1:f6:ef:5a:d7:22:c5:eb:f1:d4:ff:74:cd:71: bb:f8:8b:69:d2:97:58:4f:c2:d7:27:24:06:b2:1c:89:f6:44: 7f:fb:d4:2d:75:09:45:c9:a8:03:fb:95:02:82:4f:b2:cf:85: 00:3e:73:a7:3e:36:9a:c8:dc:b0:10:d2:66:22:43:3f:71:a8: 4a:da:5c:be:17:28:ce:0e:2b:cd:90:1c:d3:b4:3f:9d:49:72: dc:71:3d:6a:89:0c:42:39:f8:51:f7:70:9d:9f:c3:66:32:78: 54:a3:9c:78:01:15:55:9f:1d:da:ba:88:9c:c6:43:52:b0:d9: 7f:3d:63:b0:49:40:f0:0c:9d:14:37:a2:fa:79:0d:e6:81:20: aa:b3:fe:8c:bb:50:f9:39:42:bf:b4:de:6e:f4:e7:57:61:d2: 46:00:8f:98:36:6f:7a:b4:41:3d:c0:78:fb:7f:06:10:e6:07: cd:40:73:a1:97:5c:cf:43:ce:2e:a9:6b:06:02:1b:c6:e4:8a: 05:0d:ca:ba:4f:70:d9:1a:80:85:1a:ab:b4:23:20:03:cd:b0: bb:13:c1:0e:fa:56:9d:50:96:7c:26:24:81:a4:bd:ae:2a:5b: 08:e1:6d:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZFNTgxMTAvBgNVBAUTKDFFRDc3MjcwQTQ4MThBNTU3NEVGRUVDQUNBRkI3NDgz Q0Q3Njg4MjEwHhcNMjUxMjIyMTg1NjMwWhcNMjUxMjI5MTg1NjMwWjAYMRYwFAYD VQQDDA02OTQ5OTQ1Zi00MTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+hoiWyZ/2KwhelD/dwGeMbgY/cKbo8tRdV+s9tbOPJQXRWPltUxA4V3JRDA EVobAjuip/2UIbsPq87vgY5TV7NOJDJO9jNcQgdIYws+hSbqRrtDPiWECkamGL3k d7I7b2jNXL43oRytfCaG2LBP45lq7e+14PemhDoEK6364Kupk4nGGDJ22uvyPTuE e7TDxdy9YTv52G0NDeDw5cAvkn7Bu48BjDV2D4BTRftytm0UaWpbKIkj+wGHWXJu MLXfoRnOX/zhVkDL4kVlJ4+U53cfsQROxaetC0JW+QW2MxxxypldN5Bsos4zsRTV a+4RP5oTSsynFLJ8RtE4dyoOKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkv7x1R VEvms7UJwkb6xrHGZM+SMB8GA1UdIwQYMBaAFB7XcnCkgYpVdO/uysr7dIPNdogh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkU1OC82MDMzQ0Y2QTY2 OTkxMUVBQkYxM0M5NERDNEY5QUUwMi9IdGR5Y0tTQmlsVjA3LTdLeXZ0MGc4MTJp Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZHljS1NCaWxWMDctN0t5dnQwZzgxMmlDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkU1OC82MDMzQ0Y2QTY2OTkxMUVBQkYxM0M5NERDNEY5QUUwMi9IdGR5Y0tTQmls VjA3LTdLeXZ0MGc4MTJpQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtHBozhO0ca+f8FE9zZbJCCCmV6h9BofbvWtcixevx1P90zXG7+Itp 0pdYT8LXJyQGshyJ9kR/+9QtdQlFyagD+5UCgk+yz4UAPnOnPjaayNywENJmIkM/ cahK2ly+FyjODivNkBzTtD+dSXLccT1qiQxCOfhR93Cdn8NmMnhUo5x4ARVVnx3a uoicxkNSsNl/PWOwSUDwDJ0UN6L6eQ3mgSCqs/6Mu1D5OUK/tN5u9OdXYdJGAI+Y Nm96tEE9wHj7fwYQ5gfNQHOhl1zPQ84uqWsGAhvG5IoFDcq6T3DZGoCFGqu0IyAD zbC7E8EO+ladUJZ8JiSBpL2uKlsI4W0R -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:08 2025 by rpki-client