This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft File: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft (raw, json) Hash identifier: URYahYpaIxRXrjF0qvS8ysb7wCuADYu+0VtK+I6xSMo= Subject key identifier: B8:2E:63:BA:87:17:80:0D:FA:5E:A2:9C:99:A9:FD:90:C3:D2:C3:01 Authority key identifier: 87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 Certificate issuer: /CN=A91FFA15/serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Certificate serial: 0C2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft Manifest number: 0C23 Signing time: Sat 06 Dec 2025 18:04:02 +0000 Manifest this update: Sat 06 Dec 2025 18:04:02 +0000 Manifest next update: Sat 13 Dec 2025 18:04:02 +0000 Files and hashes: 1: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl (hash: G9eY1iFfcCj857wD3RJmHbobbFbvlUh2HqLJfdFL/qY=) 2: E5C9B0541B3E11EBBC57067AC4F9AE02.roa (hash: yqFSXrSreAwWsxKHKKypXy96bJWuk7Ta+8Svfir1RMk=) 3: E6D6D72E1B3E11EBBC57067AC4F9AE02.roa (hash: 8S+9u5NejOEqjzyGww6nqkHBEMgMZJI4JwQwHM3xtzk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3119 (0xc2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFA15, serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Validity Not Before: Dec 6 18:04:02 2025 GMT Not After : Dec 13 18:04:02 2025 GMT Subject: CN=69347012-9a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fc:a5:07:bd:ff:78:5a:fe:0b:7c:04:be:20: 7d:48:35:24:8e:d2:f6:2e:07:69:62:78:9c:00:b5: 55:e1:42:95:ab:ea:b3:c7:99:0d:0a:c8:74:fa:0a: db:31:de:7d:fb:31:51:12:a2:c9:3b:35:0b:85:c6: 3d:47:4b:42:07:8a:6e:9f:c0:3d:e8:6a:d5:f7:b6: 76:8c:60:d7:15:71:9f:ae:60:b2:48:16:6b:24:da: 5f:43:eb:4e:04:ea:50:46:91:7d:da:d4:59:ab:32: 03:56:01:36:a2:4d:bc:ec:85:4f:cf:d9:7a:15:f0: c0:39:02:d3:91:66:db:a8:5e:44:2d:75:d4:62:bd: b8:40:63:71:f1:37:de:8c:a2:46:3d:22:fe:0d:92: e4:e5:77:2c:35:48:56:d9:8f:dc:7a:79:7c:8d:6b: 86:df:0f:df:54:bc:cc:e0:d5:15:dd:1e:d9:ac:2c: b3:02:a6:4d:95:d0:52:96:ce:5f:eb:90:da:22:ad: 5d:b6:b1:5e:67:ae:0e:c9:d2:cd:fa:f3:8d:fc:62: 37:69:7b:ef:a6:09:90:02:58:70:84:69:46:c1:0f: 2a:43:45:c6:9d:d6:ec:3a:61:20:5e:7d:bb:1a:71: b9:0c:04:57:3d:29:37:20:bf:3a:c7:5f:23:59:02: 72:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2E:63:BA:87:17:80:0D:FA:5E:A2:9C:99:A9:FD:90:C3:D2:C3:01 X509v3 Authority Key Identifier: keyid:87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c7:58:84:a1:23:fc:b1:68:a0:d8:1d:05:6e:7e:cb:08:91: 0d:40:14:4e:3b:40:35:0f:72:28:4e:ef:c5:ce:26:ef:82:e1: 6a:8a:4b:26:48:c8:b4:77:39:85:6b:78:47:b6:25:29:af:f9: 06:41:d3:2b:15:77:84:f2:4d:20:db:64:b4:43:9f:b3:66:3d: b7:3b:ca:13:0f:b9:a2:4b:e1:9e:e6:66:a5:ed:65:5c:14:4a: e4:6b:48:8d:6e:44:3d:95:e9:31:12:d8:44:a4:4b:57:77:48: ba:1c:64:69:4b:b0:64:2d:d3:70:9b:2b:d8:16:71:65:4b:0c: 90:66:8d:c7:e9:4d:1e:c0:ed:e3:3b:6a:1f:60:29:4b:0e:34: 00:48:91:46:28:2f:98:9c:2c:cf:27:93:bb:01:bc:bf:d3:de: a0:fb:57:ff:3f:af:21:8c:f3:1d:07:64:22:c6:c8:52:fa:e2: f9:8f:16:bd:a5:51:3f:68:b8:f0:a7:b3:92:24:14:93:ca:49: d8:fc:58:82:9a:28:5c:fa:67:79:69:8e:09:ac:b4:88:8e:d1: 50:2b:da:e7:aa:88:28:98:63:28:f4:8a:74:8e:e4:5f:bb:3e: 06:16:da:d3:59:38:dc:4a:0a:36:00:ee:82:f0:7d:53:fe:cd: a8:90:f7:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZBMTUxMTAvBgNVBAUTKDg3MjM3RkY2ODkwMjREOTRGREI0OUVDMjVDNUIxMjBE MEJCOTQyOTcwHhcNMjUxMjA2MTgwNDAyWhcNMjUxMjEzMTgwNDAyWjAYMRYwFAYD VQQDEw02OTM0NzAxMi05YTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPylB73/eFr+C3wEviB9SDUkjtL2LgdpYnicALVV4UKVq+qzx5kNCsh0+grb Md59+zFREqLJOzULhcY9R0tCB4pun8A96GrV97Z2jGDXFXGfrmCySBZrJNpfQ+tO BOpQRpF92tRZqzIDVgE2ok287IVPz9l6FfDAOQLTkWbbqF5ELXXUYr24QGNx8Tfe jKJGPSL+DZLk5XcsNUhW2Y/cenl8jWuG3w/fVLzM4NUV3R7ZrCyzAqZNldBSls5f 65DaIq1dtrFeZ64OydLN+vON/GI3aXvvpgmQAlhwhGlGwQ8qQ0XGndbsOmEgXn27 GnG5DARXPSk3IL86x18jWQJyKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLguY7qH F4AN+l6inJmp/ZDD0sMBMB8GA1UdIwQYMBaAFIcjf/aJAk2U/bSewlxbEg0LuUKX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkExNS83MDFGNTNEMjFE ODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1RaVDl0SjdDWEZzU0RRdTVR cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5Tl85b2tDVFpUOXRKN0NYRnNTRFF1NVFwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkExNS83MDFGNTNEMjFEODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1Ra VDl0SjdDWEZzU0RRdTVRcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfx1iEoSP8sWig2B0Fbn7LCJENQBROO0A1D3IoTu/FzibvguFqiksm SMi0dzmFa3hHtiUpr/kGQdMrFXeE8k0g22S0Q5+zZj23O8oTD7miS+Ge5mal7WVc FErka0iNbkQ9lekxEthEpEtXd0i6HGRpS7BkLdNwmyvYFnFlSwyQZo3H6U0ewO3j O2ofYClLDjQASJFGKC+YnCzPJ5O7Aby/096g+1f/P68hjPMdB2QixshS+uL5jxa9 pVE/aLjwp7OSJBSTyknY/FiCmihc+md5aY4JrLSIjtFQK9rnqogomGMo9Ip0juRf uz4GFtrTWTjcSgo2AO6C8H1T/s2okPd3 -----END CERTIFICATE-----Generated at Sun Dec 7 00:58:06 2025 by rpki-client