This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft File: hYtkVOIiRseB5RNSswVkEJhoV34.mft (raw, json) Hash identifier: +4d2P0Aw/EUrURl7gmBFPxE1uW7XNpBqHHNYXPGmEsE= Subject key identifier: 69:C4:10:C8:90:F7:23:D5:D1:CB:59:F1:29:34:CA:4C:09:5B:C5:95 Authority key identifier: 85:8B:64:54:E2:22:46:C7:81:E5:13:52:B3:05:64:10:98:68:57:7E Certificate issuer: /CN=A91F65C7/serialNumber=858B6454E22246C781E51352B30564109868577E Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft Manifest number: 0154 Signing time: Fri 05 Dec 2025 02:17:23 +0000 Manifest this update: Fri 05 Dec 2025 02:17:22 +0000 Manifest next update: Fri 12 Dec 2025 02:17:22 +0000 Files and hashes: 1: hYtkVOIiRseB5RNSswVkEJhoV34.crl (hash: cDe7hsExEhn06K/S624/tXP+Qc+GXXK2KF7mCFl1E5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.crl rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65C7, serialNumber=858B6454E22246C781E51352B30564109868577E Validity Not Before: Dec 5 02:17:22 2025 GMT Not After : Dec 12 02:17:22 2025 GMT Subject: CN=693240b2-24c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:83:88:4c:82:26:7f:cd:e8:02:a0:3b:e7:f1: 63:56:a5:73:b8:24:ec:f5:8f:ce:8b:13:2f:f8:54: 25:82:65:50:7b:1d:e6:81:b4:1c:da:ed:c6:21:59: cc:70:f5:cb:f0:96:91:70:cf:61:30:fa:46:b4:e6: ee:8b:89:e6:8d:90:7c:80:d5:f8:b3:30:2f:8f:0e: b8:6a:39:ed:e2:36:32:51:25:3b:57:fb:fa:c5:03: c9:da:73:d3:88:9f:44:c9:64:c2:58:90:3e:6f:4f: 10:b2:21:ab:c2:e6:4b:c0:65:dc:6b:ac:47:f4:35: 77:49:77:3a:60:b3:68:2c:c5:0f:81:e7:d7:fe:6a: 2f:2f:d1:74:fc:4d:1b:30:f7:22:86:c3:7c:0b:33: bb:fb:c7:ec:27:a3:fc:7e:36:73:3f:85:e2:56:d9: b6:d2:5a:64:53:4c:4f:a4:cf:ff:24:f4:89:23:85: 79:be:f8:7a:55:15:10:88:86:13:a8:a1:a1:7a:f8: 04:e2:91:79:54:27:44:b3:dd:4f:a1:7e:e0:2b:90: bf:3d:31:6d:d8:04:31:c3:67:f5:d8:ab:a6:6e:68: 13:03:27:f9:34:74:c0:c3:1a:7e:5f:de:cf:cf:98: 49:81:52:39:56:35:cc:d4:52:42:b8:1a:65:9d:c6: f5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C4:10:C8:90:F7:23:D5:D1:CB:59:F1:29:34:CA:4C:09:5B:C5:95 X509v3 Authority Key Identifier: keyid:85:8B:64:54:E2:22:46:C7:81:E5:13:52:B3:05:64:10:98:68:57:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:08:cf:5c:ac:29:7b:33:df:17:c8:8e:2f:82:25:d3:4f:8e: 4b:50:8c:18:e2:9a:be:76:bf:70:75:ea:5f:72:f0:29:4d:e7: f9:7a:df:47:b6:ef:60:50:16:04:ae:35:4b:cb:dd:d6:42:15: fc:ac:9d:f8:8e:b2:4c:74:b4:10:cc:eb:3f:4a:a0:0b:f8:e2: 39:a8:3e:6d:74:df:00:21:e4:a4:89:09:76:8b:2d:a6:73:77: 85:31:1b:a2:19:64:09:e0:d0:e8:5b:fb:5a:ca:9f:8f:bb:02: f4:da:05:42:a8:2d:82:45:ab:0c:07:78:08:8e:49:fa:fa:39: 73:b5:3c:56:73:f0:71:e1:fc:f4:2f:63:38:6e:c7:3c:fa:6d: d4:d8:02:24:c3:16:55:4a:12:11:b1:21:af:1f:42:4d:82:81: 47:c3:2f:50:14:e8:a1:0d:36:0b:4d:14:b9:ae:18:04:6d:81: 75:68:df:c1:3d:e6:4c:c8:cd:c8:af:15:5a:1a:7c:94:5b:fd: 53:b8:e8:6b:e9:2d:18:e3:a0:21:c1:12:5d:8b:5d:25:de:a1: b6:e8:ee:ce:8b:ab:bd:50:95:f8:0b:cd:e3:e5:5a:4a:6c:98: d5:d3:3c:00:f3:b4:55:33:b3:cf:29:52:40:1a:3f:93:96:95: c5:91:c5:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY1QzcxMTAvBgNVBAUTKDg1OEI2NDU0RTIyMjQ2Qzc4MUU1MTM1MkIzMDU2NDEw OTg2ODU3N0UwHhcNMjUxMjA1MDIxNzIyWhcNMjUxMjEyMDIxNzIyWjAYMRYwFAYD VQQDEw02OTMyNDBiMi0yNGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoOITIImf83oAqA75/FjVqVzuCTs9Y/OixMv+FQlgmVQex3mgbQc2u3GIVnM cPXL8JaRcM9hMPpGtObui4nmjZB8gNX4szAvjw64ajnt4jYyUSU7V/v6xQPJ2nPT iJ9EyWTCWJA+b08QsiGrwuZLwGXca6xH9DV3SXc6YLNoLMUPgefX/movL9F0/E0b MPcihsN8CzO7+8fsJ6P8fjZzP4XiVtm20lpkU0xPpM//JPSJI4V5vvh6VRUQiIYT qKGhevgE4pF5VCdEs91PoX7gK5C/PTFt2AQxw2f12KumbmgTAyf5NHTAwxp+X97P z5hJgVI5VjXM1FJCuBplncb1iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnEEMiQ 9yPV0ctZ8Sk0ykwJW8WVMB8GA1UdIwQYMBaAFIWLZFTiIkbHgeUTUrMFZBCYaFd+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVDNy9FRDBGQjY4NkMz RTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9oWXRrVk9JaVJzZUI1Uk5Tc3dWa0VKaG9W MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hZdGtWT0lpUnNlQjVSTlNzd1ZrRUpob1YzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjVDNy9FRDBGQjY4NkMzRTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9oWXRrVk9JaVJz ZUI1Uk5Tc3dWa0VKaG9WMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAICM9crCl7M98XyI4vgiXTT45LUIwY4pq+dr9wdepfcvApTef5et9H tu9gUBYErjVLy93WQhX8rJ34jrJMdLQQzOs/SqAL+OI5qD5tdN8AIeSkiQl2iy2m c3eFMRuiGWQJ4NDoW/tayp+PuwL02gVCqC2CRasMB3gIjkn6+jlztTxWc/Bx4fz0 L2M4bsc8+m3U2AIkwxZVShIRsSGvH0JNgoFHwy9QFOihDTYLTRS5rhgEbYF1aN/B PeZMyM3IrxVaGnyUW/1TuOhr6S0Y46AhwRJdi10l3qG26O7Oi6u9UJX4C83j5VpK bJjV0zwA87RVM7PPKVJAGj+TlpXFkcWM -----END CERTIFICATE-----Generated at Sat Dec 6 13:44:49 2025 by rpki-client