This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91118FA/9842449C40EA11EABB01BD42C4F9AE02/YDUU_FCDUUDwM--oQ87pOWOWol0.mft File: YDUU_FCDUUDwM--oQ87pOWOWol0.mft (raw, json) Hash identifier: aVeGPYgFTtG9Us+P7+Do7bGLCGhSwe/YmG5QUCqrYq0= Subject key identifier: 60:9F:02:3E:18:D4:3E:9A:3A:82:92:17:05:BE:B8:5E:1F:1F:6B:57 Authority key identifier: 60:35:14:FC:50:83:51:40:F0:33:EF:A8:43:CE:E9:39:63:96:A2:5D Certificate issuer: /CN=A91118FA/serialNumber=603514FC50835140F033EFA843CEE9396396A25D Certificate serial: 0B77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDUU_FCDUUDwM--oQ87pOWOWol0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91118FA/9842449C40EA11EABB01BD42C4F9AE02/YDUU_FCDUUDwM--oQ87pOWOWol0.mft Manifest number: 0B70 Signing time: Sat 06 Dec 2025 18:22:18 +0000 Manifest this update: Sat 06 Dec 2025 18:22:18 +0000 Manifest next update: Sat 13 Dec 2025 18:22:18 +0000 Files and hashes: 1: YDUU_FCDUUDwM--oQ87pOWOWol0.crl (hash: D7CiVl0OvMV9Nt+B4Z9tLfV1ZiKWP1YNGGchieKEsWo=) 2: 42EE36A240EC11EA875BC545C4F9AE02.roa (hash: oB4ONhIoOVHFLHE+zKePSEzncY8zQatFoaGKjLj9U3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91118FA/9842449C40EA11EABB01BD42C4F9AE02/YDUU_FCDUUDwM--oQ87pOWOWol0.crl rsync://rpki.apnic.net/member_repository/A91118FA/9842449C40EA11EABB01BD42C4F9AE02/YDUU_FCDUUDwM--oQ87pOWOWol0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDUU_FCDUUDwM--oQ87pOWOWol0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2935 (0xb77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91118FA, serialNumber=603514FC50835140F033EFA843CEE9396396A25D Validity Not Before: Dec 6 18:22:18 2025 GMT Not After : Dec 13 18:22:18 2025 GMT Subject: CN=6934745a-5cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:08:f4:4c:dd:de:f1:ab:2b:bc:4b:ae:0f:94: 36:ab:29:fa:fd:e3:bd:55:9b:cf:80:d7:fb:94:aa: 93:ab:ec:07:b3:90:e5:53:28:bf:0e:6e:52:9d:ac: 3d:73:be:6d:85:0a:f9:53:48:e9:a7:71:9f:a2:b1: 70:0d:b5:6a:f0:27:fb:a3:a6:f8:53:dc:95:27:29: b6:79:99:be:6e:f5:47:26:f4:94:a6:29:3e:42:17: 46:50:22:bf:9c:7b:a1:0d:37:70:3b:24:a3:49:e2: ca:e0:a3:39:28:8d:40:0a:c9:1f:c7:ff:18:a5:13: 63:2e:bb:eb:cb:79:cf:32:0a:e2:8c:28:1c:0c:f6: 3f:dd:5e:6e:8e:2e:d6:b1:32:73:95:c8:6b:e1:95: 51:ea:dc:6f:31:54:53:d9:e9:6b:e7:0f:9e:06:72: 82:1d:12:54:26:d1:69:34:d8:08:8e:8a:8a:5d:52: 0d:4c:0b:c8:b9:4c:53:d8:51:6f:9a:e4:80:26:a1: a9:1e:c4:46:8b:a1:25:62:f2:44:32:85:30:0a:77: dc:3e:ee:7a:8d:39:b1:1c:5c:51:cc:6c:ae:05:cf: 5a:8f:7e:7f:a1:50:f5:fe:4f:d3:17:d8:3d:17:7f: f9:2c:0f:fb:68:3b:54:bb:67:a7:e1:fa:1b:1c:6d: d2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:9F:02:3E:18:D4:3E:9A:3A:82:92:17:05:BE:B8:5E:1F:1F:6B:57 X509v3 Authority Key Identifier: keyid:60:35:14:FC:50:83:51:40:F0:33:EF:A8:43:CE:E9:39:63:96:A2:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91118FA/9842449C40EA11EABB01BD42C4F9AE02/YDUU_FCDUUDwM--oQ87pOWOWol0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDUU_FCDUUDwM--oQ87pOWOWol0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91118FA/9842449C40EA11EABB01BD42C4F9AE02/YDUU_FCDUUDwM--oQ87pOWOWol0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:03:c0:5c:68:a4:7d:4f:f7:35:ac:bd:88:05:39:37:5b:ad: 6e:fe:f2:ea:04:10:9d:25:57:80:c7:55:48:9b:79:37:e8:11: 38:ae:e0:44:1b:7a:c7:8d:7b:7a:b1:41:68:97:0d:11:57:28: 78:72:e5:57:17:d1:1c:d3:9a:b6:5d:0d:8f:2d:8c:4b:0f:6c: e9:30:af:7f:51:22:14:51:b7:9f:2c:9e:55:c0:03:b8:80:b7: 10:57:61:8a:81:6b:80:fa:6a:33:07:09:d9:5d:68:50:b4:f6: 4f:8b:6b:b7:8b:da:42:c9:76:6c:fc:e8:f3:01:e1:5f:99:d2: 34:55:5e:e7:48:88:88:38:13:7e:db:8f:43:ca:ef:ae:11:fa: 0e:9a:99:6a:52:7d:ed:23:a1:05:e3:12:05:2e:c3:f4:b2:a9: 81:fe:cf:a8:a2:79:4b:33:f6:0e:40:19:33:09:33:0d:70:a9: e0:a7:5b:80:08:a3:b5:4f:f2:b6:ad:69:84:76:15:9c:8c:78: 99:d8:ad:b0:3c:6a:2f:b9:2d:49:44:19:50:f4:a7:ad:12:37: d9:e5:9c:bf:64:02:06:74:bf:1f:f5:a1:78:a5:47:74:12:23: 53:40:ec:3f:13:a3:98:c6:a2:92:dc:ba:8f:56:d7:57:fb:ff: 07:9f:c0:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE4RkExMTAvBgNVBAUTKDYwMzUxNEZDNTA4MzUxNDBGMDMzRUZBODQzQ0VFOTM5 NjM5NkEyNUQwHhcNMjUxMjA2MTgyMjE4WhcNMjUxMjEzMTgyMjE4WjAYMRYwFAYD VQQDEw02OTM0NzQ1YS01Y2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAj0TN3e8asrvEuuD5Q2qyn6/eO9VZvPgNf7lKqTq+wHs5DlUyi/Dm5Snaw9 c75thQr5U0jpp3GforFwDbVq8Cf7o6b4U9yVJym2eZm+bvVHJvSUpik+QhdGUCK/ nHuhDTdwOySjSeLK4KM5KI1ACskfx/8YpRNjLrvry3nPMgrijCgcDPY/3V5uji7W sTJzlchr4ZVR6txvMVRT2elr5w+eBnKCHRJUJtFpNNgIjoqKXVINTAvIuUxT2FFv muSAJqGpHsRGi6ElYvJEMoUwCnfcPu56jTmxHFxRzGyuBc9aj35/oVD1/k/TF9g9 F3/5LA/7aDtUu2en4fobHG3SvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCfAj4Y 1D6aOoKSFwW+uF4fH2tXMB8GA1UdIwQYMBaAFGA1FPxQg1FA8DPvqEPO6TljlqJd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMThGQS85ODQyNDQ5QzQw RUExMUVBQkIwMUJENDJDNEY5QUUwMi9ZRFVVX0ZDRFVVRHdNLS1vUTg3cE9XT1dv bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lEVVVfRkNEVVVEd00tLW9RODdwT1dPV29sMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MThGQS85ODQyNDQ5QzQwRUExMUVBQkIwMUJENDJDNEY5QUUwMi9ZRFVVX0ZDRFVV RHdNLS1vUTg3cE9XT1dvbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzA8BcaKR9T/c1rL2IBTk3W61u/vLqBBCdJVeAx1VIm3k36BE4ruBE G3rHjXt6sUFolw0RVyh4cuVXF9Ec05q2XQ2PLYxLD2zpMK9/USIUUbefLJ5VwAO4 gLcQV2GKgWuA+mozBwnZXWhQtPZPi2u3i9pCyXZs/OjzAeFfmdI0VV7nSIiIOBN+ 249Dyu+uEfoOmplqUn3tI6EF4xIFLsP0sqmB/s+oonlLM/YOQBkzCTMNcKngp1uA CKO1T/K2rWmEdhWcjHiZ2K2wPGovuS1JRBlQ9KetEjfZ5Zy/ZAIGdL8f9aF4pUd0 EiNTQOw/E6OYxqKS3LqPVtdX+/8Hn8CJ -----END CERTIFICATE-----Generated at Sun Dec 7 10:50:51 2025 by rpki-client