This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft File: hbfttaaEvj2aYpdZkKcdmY3vUYs.mft (raw, json) Hash identifier: SubFK+CU7Xpaw8rlC511rdyJDaqjF9YpbG9oVty39Zk= Subject key identifier: 49:DB:C3:A1:35:B4:A8:77:11:5F:79:34:F1:B2:3E:F7:02:D6:87:55 Authority key identifier: 85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B Certificate issuer: /CN=A91B62E1/serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft Manifest number: 07 Signing time: Fri 05 Dec 2025 05:52:24 +0000 Manifest this update: Fri 05 Dec 2025 05:52:23 +0000 Manifest next update: Fri 12 Dec 2025 05:52:23 +0000 Files and hashes: 1: hbfttaaEvj2aYpdZkKcdmY3vUYs.crl (hash: VNKRv5L36565uTt+VtzLD+NxuExJFH8VUBVX83Aax+A=) 2: 146F4288C8E711F0A7C33B4CC4F9AE02.roa (hash: xY4rHh4Ml46b2MxKK+6/FOJjmg0oXpkZR7eYA4dh1tk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62E1, serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B Validity Not Before: Dec 5 05:52:23 2025 GMT Not After : Dec 12 05:52:23 2025 GMT Subject: CN=69327318-767e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1c:d4:fb:2a:03:3d:c9:bc:63:e4:e2:ec:cf: 21:bc:3a:d7:8f:a2:9c:97:bc:de:c4:cf:d2:87:1f: b0:6c:fa:d4:8b:86:b8:7c:59:32:67:5c:a3:b8:f5: 6b:9c:9a:fa:23:b2:96:a1:2e:3b:93:a7:6c:69:f2: 02:36:9b:b2:8f:4d:8b:23:1f:d4:b2:8f:0a:c1:3c: 6c:f0:dc:cb:d6:c6:d3:23:ad:fe:81:7c:76:82:52: 9b:49:ed:aa:31:7d:12:49:06:66:91:2c:e0:4d:00: 44:12:f7:4f:c1:85:39:35:2f:39:43:18:e8:39:9e: 85:5e:37:e5:f0:60:3d:4d:a2:28:db:dc:44:ba:bb: 35:e6:3f:2b:e7:6a:01:a4:10:b0:35:27:0f:c0:00: cf:aa:4e:6d:14:c1:2e:02:51:23:be:4b:24:4c:41: 14:c2:b2:8a:23:1d:8c:d7:5d:9f:3f:52:31:53:43: a7:82:17:9a:97:8d:b1:33:68:33:b8:28:34:8e:65: 46:20:c8:48:15:d3:b2:c7:d3:bc:db:2c:04:96:26: a6:6f:75:e4:2c:dd:9c:28:cb:16:f4:ae:af:73:37: 03:87:70:6f:d9:45:66:70:c5:9f:98:85:94:2a:c7: fd:33:bd:f6:fa:9b:92:7b:93:66:16:fb:54:a4:51: 79:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DB:C3:A1:35:B4:A8:77:11:5F:79:34:F1:B2:3E:F7:02:D6:87:55 X509v3 Authority Key Identifier: keyid:85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:11:3b:63:44:c5:bb:04:1f:11:0e:70:5e:49:28:94:a1:43: a0:b0:da:fd:a6:1d:88:ae:11:8c:97:c7:68:3a:8c:c4:98:27: e6:1e:4b:2a:7b:5d:d2:f0:29:92:ac:4a:20:c1:da:a6:7d:e2: ff:6c:58:14:37:5a:17:31:98:04:a4:22:bd:ec:3a:15:76:2f: e7:46:fd:c5:d6:fd:28:21:4c:1f:15:93:a5:79:69:f6:1a:7a: d6:71:d8:57:45:ca:ba:81:d5:82:71:a2:d4:51:bf:9c:09:43: 85:97:a2:ba:64:80:c8:95:95:9a:ac:e6:26:31:06:df:fd:e8: 8d:14:10:e6:79:e7:44:2e:a8:b5:aa:e1:25:75:ca:e4:d5:00: 84:65:95:14:72:ce:5a:0b:aa:f9:98:bd:0e:68:c3:5f:e0:75: 33:20:e1:86:71:7b:cd:33:a6:64:36:a3:50:aa:2d:12:f0:8f: 2c:5f:85:7d:5a:55:24:fe:62:e0:88:12:e9:35:5d:90:5a:0f: 16:da:b2:fa:87:6a:75:ec:86:6e:c8:83:cc:97:6d:de:4d:02: 2f:69:d2:71:9d:28:30:65:7d:dc:86:26:f9:66:18:05:09:1c: 44:8c:46:3d:67:c2:f3:9f:ca:cd:e6:52:bf:db:29:88:35:f1: b2:81:9b:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjJFMTExMC8GA1UEBRMoODVCN0VEQjVBNjg0QkUzRDlBNjI5NzU5OTBBNzFEOTk4 REVGNTE4QjAeFw0yNTEyMDUwNTUyMjNaFw0yNTEyMTIwNTUyMjNaMBgxFjAUBgNV BAMTDTY5MzI3MzE4LTc2N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqHNT7KgM9ybxj5OLszyG8OtePopyXvN7Ez9KHH7Bs+tSLhrh8WTJnXKO49Wuc mvojspahLjuTp2xp8gI2m7KPTYsjH9SyjwrBPGzw3MvWxtMjrf6BfHaCUptJ7aox fRJJBmaRLOBNAEQS90/BhTk1LzlDGOg5noVeN+XwYD1Noijb3ES6uzXmPyvnagGk ELA1Jw/AAM+qTm0UwS4CUSO+SyRMQRTCsoojHYzXXZ8/UjFTQ6eCF5qXjbEzaDO4 KDSOZUYgyEgV07LH07zbLASWJqZvdeQs3Zwoyxb0rq9zNwOHcG/ZRWZwxZ+YhZQq x/0zvfb6m5J7k2YW+1SkUXnBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSdvDoTW0 qHcRX3k08bI+9wLWh1UwHwYDVR0jBBgwFoAUhbfttaaEvj2aYpdZkKcdmY3vUYsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2MkUxLzBBQkIzNTY4QzhF NjExRjBBQTBDNUI0N0M0RjlBRTAyL2hiZnR0YWFFdmoyYVlwZFprS2NkbVkzdlVZ cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGJmdHRhYUV2ajJhWXBkWmtLY2RtWTN2VVlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 MkUxLzBBQkIzNTY4QzhFNjExRjBBQTBDNUI0N0M0RjlBRTAyL2hiZnR0YWFFdmoy YVlwZFprS2NkbVkzdlVZcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFgRO2NExbsEHxEOcF5JKJShQ6Cw2v2mHYiuEYyXx2g6jMSYJ+YeSyp7 XdLwKZKsSiDB2qZ94v9sWBQ3WhcxmASkIr3sOhV2L+dG/cXW/SghTB8Vk6V5afYa etZx2FdFyrqB1YJxotRRv5wJQ4WXorpkgMiVlZqs5iYxBt/96I0UEOZ550QuqLWq 4SV1yuTVAIRllRRyzloLqvmYvQ5ow1/gdTMg4YZxe80zpmQ2o1CqLRLwjyxfhX1a VST+YuCIEuk1XZBaDxbasvqHanXshm7Ig8yXbd5NAi9p0nGdKDBlfdyGJvlmGAUJ HESMRj1nwvOfys3mUr/bKYg18bKBmzQ= -----END CERTIFICATE-----Generated at Sat Dec 6 16:51:52 2025 by rpki-client