This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft File: HtdycKSBilV07-7Kyvt0g812iCE.mft (raw, json) Hash identifier: Axaqtg8eU2PuCtStTRdTnaUzbpiem8hzSdfCeD//TWQ= Subject key identifier: 25:7B:CD:AC:E0:D8:B0:AE:05:27:AC:ED:E7:7D:42:D4:5B:F3:2F:1A Authority key identifier: 1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 Certificate issuer: /CN=A91CFE58/serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Certificate serial: 0AB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft Manifest number: 0AB2 Signing time: Thu 04 Dec 2025 18:48:47 +0000 Manifest this update: Thu 04 Dec 2025 18:48:46 +0000 Manifest next update: Thu 11 Dec 2025 18:48:46 +0000 Files and hashes: 1: HtdycKSBilV07-7Kyvt0g812iCE.crl (hash: xRY7CZFXfxk3WdO4k0H2iMNYAYMRNaRRRWkH64UAxyQ=) 2: 7C29A45A669A11EA9A11434FC4F9AE02.roa (hash: zKN4F2avq+xJ9yq6Og5mmKvaFyZB2rEl8x2OZ87RL7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2745 (0xab9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE58, serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Validity Not Before: Dec 4 18:48:46 2025 GMT Not After : Dec 11 18:48:46 2025 GMT Subject: CN=6931d78f-21eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ff:d3:6d:5e:91:cb:48:3d:57:fa:f5:95:3f: 6b:5d:69:1b:16:8e:3e:5b:0f:e2:ec:7d:5d:86:ca: 44:15:56:2f:3e:fe:df:67:2c:b9:38:c3:7a:64:16: 11:15:c4:ba:b7:1f:3f:e6:e2:da:e9:f2:91:02:ed: c3:53:5f:f5:61:02:11:e2:81:26:7d:20:25:a9:39: d0:50:a6:69:43:39:09:64:96:25:50:20:95:d4:e7: a7:f9:74:bc:87:d7:10:9d:e8:c8:4d:d4:3c:c0:10: 87:ae:cd:60:93:f3:ab:fa:80:01:70:35:ae:5a:f1: 74:06:41:10:df:af:40:fc:a8:50:d8:e3:a7:66:3a: 7f:56:2b:ed:bd:ca:63:06:68:73:e9:37:75:37:83: 61:6a:69:fa:aa:c4:b8:96:60:ae:8a:f9:4b:92:6f: ba:84:4f:48:84:05:30:e4:35:2f:15:eb:bb:c8:72: d3:44:c1:f9:ea:f5:2f:f1:a3:4a:62:9b:02:de:06: b7:d9:7c:5a:72:f3:a9:e7:11:b7:74:7a:75:89:b2: 33:73:04:f7:01:fb:a9:cb:12:5f:ad:1b:ea:cc:73: 81:f4:65:10:1b:58:66:d2:16:70:b4:f6:96:a3:e4: a1:fa:f2:7d:15:55:25:45:85:22:d7:44:23:83:7c: ec:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7B:CD:AC:E0:D8:B0:AE:05:27:AC:ED:E7:7D:42:D4:5B:F3:2F:1A X509v3 Authority Key Identifier: keyid:1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:6f:51:ff:7e:a7:23:f2:e4:be:94:33:e3:a8:d7:8d:3d:52: d3:34:35:03:d6:74:a1:9f:cb:a8:72:c1:89:52:b3:c2:18:7a: 50:f9:9a:93:39:93:8a:13:a1:c6:2e:8a:76:46:bf:7f:c5:42: ba:65:5e:11:53:8c:e7:ce:4c:c6:7d:26:99:4d:b1:e1:c7:63: 2a:f5:c4:3a:86:8f:68:35:92:f9:82:8c:ac:d2:95:ac:95:65: 0a:2d:c8:a3:e8:91:68:53:53:3a:27:2f:69:d2:77:97:80:3f: 6f:ba:22:b1:a0:e8:eb:e4:06:2b:9f:bd:cf:99:14:1d:1b:8e: f7:93:8f:12:38:de:a1:aa:1b:71:5f:1e:06:74:0e:a5:aa:e2: 7e:87:6c:81:82:df:f0:1f:00:b2:30:8e:4c:93:3b:43:62:30: d8:98:b4:29:64:ed:9b:ba:55:e4:7f:fd:50:6a:0b:d0:9b:10: b5:04:55:7b:e4:37:bd:9d:85:2e:68:32:64:bc:3a:11:da:7a: 45:46:db:55:51:b9:bb:ca:be:4b:fc:8f:47:a8:e3:8a:af:31: 17:b7:18:f4:79:1f:ec:b1:78:40:7b:c6:69:c9:a8:6d:a6:16: e3:3b:07:86:69:10:7f:79:08:0e:3d:f8:dc:f2:36:73:1c:26: b6:6d:c9:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZFNTgxMTAvBgNVBAUTKDFFRDc3MjcwQTQ4MThBNTU3NEVGRUVDQUNBRkI3NDgz Q0Q3Njg4MjEwHhcNMjUxMjA0MTg0ODQ2WhcNMjUxMjExMTg0ODQ2WjAYMRYwFAYD VQQDEw02OTMxZDc4Zi0yMWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxv/TbV6Ry0g9V/r1lT9rXWkbFo4+Ww/i7H1dhspEFVYvPv7fZyy5OMN6ZBYR FcS6tx8/5uLa6fKRAu3DU1/1YQIR4oEmfSAlqTnQUKZpQzkJZJYlUCCV1Oen+XS8 h9cQnejITdQ8wBCHrs1gk/Or+oABcDWuWvF0BkEQ369A/KhQ2OOnZjp/Vivtvcpj Bmhz6Td1N4Nhamn6qsS4lmCuivlLkm+6hE9IhAUw5DUvFeu7yHLTRMH56vUv8aNK YpsC3ga32XxacvOp5xG3dHp1ibIzcwT3AfupyxJfrRvqzHOB9GUQG1hm0hZwtPaW o+Sh+vJ9FVUlRYUi10Qjg3zswwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCV7zazg 2LCuBSes7ed9QtRb8y8aMB8GA1UdIwQYMBaAFB7XcnCkgYpVdO/uysr7dIPNdogh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkU1OC82MDMzQ0Y2QTY2 OTkxMUVBQkYxM0M5NERDNEY5QUUwMi9IdGR5Y0tTQmlsVjA3LTdLeXZ0MGc4MTJp Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZHljS1NCaWxWMDctN0t5dnQwZzgxMmlDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkU1OC82MDMzQ0Y2QTY2OTkxMUVBQkYxM0M5NERDNEY5QUUwMi9IdGR5Y0tTQmls VjA3LTdLeXZ0MGc4MTJpQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIb1H/fqcj8uS+lDPjqNeNPVLTNDUD1nShn8uocsGJUrPCGHpQ+ZqT OZOKE6HGLop2Rr9/xUK6ZV4RU4znzkzGfSaZTbHhx2Mq9cQ6ho9oNZL5goys0pWs lWUKLcij6JFoU1M6Jy9p0neXgD9vuiKxoOjr5AYrn73PmRQdG473k48SON6hqhtx Xx4GdA6lquJ+h2yBgt/wHwCyMI5MkztDYjDYmLQpZO2bulXkf/1QagvQmxC1BFV7 5De9nYUuaDJkvDoR2npFRttVUbm7yr5L/I9HqOOKrzEXtxj0eR/ssXhAe8Zpyaht phbjOweGaRB/eQgOPfjc8jZzHCa2bcn8 -----END CERTIFICATE-----Generated at Sat Dec 6 13:55:44 2025 by rpki-client