This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft File: ypDU0hJfAza1OY7gmXcpby5AkrQ.mft (raw, json) Hash identifier: t7nCboRZHW2GaLlirWYOSHz0Go60rgdJM56v4uc9/tw= Subject key identifier: 2B:C2:B7:55:5F:49:2D:59:A3:A5:8A:22:2D:5B:9D:22:74:E3:15:E9 Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Certificate serial: 0304 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft Manifest number: 02E3 Signing time: Sun 21 Dec 2025 00:38:30 +0000 Manifest this update: Sun 21 Dec 2025 00:38:29 +0000 Manifest next update: Sun 28 Dec 2025 00:38:29 +0000 Files and hashes: 1: ypDU0hJfAza1OY7gmXcpby5AkrQ.crl (hash: lhgdDMPdLfO4GzceQw4XQVr79+SYesaGaPvEsNKJ2WE=) 2: 4D608CC0800211EF81167A23C4F9AE02.roa (hash: LzylPXm23vwSZhDjGZSMxqVNBZhHuc0qqCM5OUudeV8=) 3: 61A03234B57C11F0B3EF6D44C4F9AE02.roa (hash: A1vIWfjVNDBFpOaLGkypJkWaMIQtma4uqJwQ3KAhcB8=) 4: 39FCB4EC4F4E11EDB169BF33C4F9AE02.roa (hash: 0XukXktPi06t2s/u4nG7O8A1Hjoe9Ve3TUYqOPy+qoM=) 5: 69F7328030A611F0BBA4642EC4F9AE02.roa (hash: pRX1aAjREIQhsq5Tkyea2GP0jBJzjLDx/TwdfJT+O2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 772 (0x304) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580D2, serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Validity Not Before: Dec 21 00:38:29 2025 GMT Not After : Dec 28 00:38:29 2025 GMT Subject: CN=69474185-5e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e7:fc:a3:01:06:e1:55:c3:74:3e:35:c2:1a: ae:d8:ef:1c:93:2e:8e:58:7e:15:43:29:4b:9f:06: 18:8a:7e:88:11:36:85:38:a4:fe:12:9c:2e:a6:0d: 67:0b:42:13:c8:45:1e:cf:24:61:d8:d2:4f:11:7f: 8c:f8:94:ee:9c:f9:8b:d0:63:ea:16:ec:5e:be:f8: fb:95:d2:dd:73:bc:b6:60:0e:1d:3f:a6:1e:64:6d: da:6c:8d:68:13:f6:10:0d:a0:04:01:72:5d:b2:3b: c2:0c:04:da:f4:e8:02:69:ef:70:80:75:9a:dd:a7: e6:5a:ac:e7:b2:4e:cb:fb:db:1d:46:68:4f:41:dd: 0c:db:a1:ac:9a:67:bb:bb:84:90:c0:31:f8:24:54: 70:7b:e3:f9:e8:13:44:c6:9c:ed:fd:e0:86:5b:15: c2:8c:bb:82:57:98:0f:f0:8b:fa:05:44:80:2e:05: 51:b6:e7:bd:73:b5:ed:c4:57:b5:ea:6f:cb:04:7f: 26:fc:35:4a:39:e0:a7:41:ce:2a:2f:d8:57:13:8a: ca:1f:fb:1d:34:cc:84:e3:3f:a3:b8:36:f7:d5:55: c6:bb:7d:b5:4d:27:fe:7e:ad:e0:2e:77:dc:46:ba: 7f:88:e4:e7:f8:d1:fe:3d:c0:5f:72:48:59:d0:4b: a6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C2:B7:55:5F:49:2D:59:A3:A5:8A:22:2D:5B:9D:22:74:E3:15:E9 X509v3 Authority Key Identifier: keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:d6:58:03:1b:03:2a:e8:7a:63:b5:98:98:94:b4:53:cf:51: 4a:d3:58:da:3a:91:7e:9b:09:69:40:4b:f8:c6:22:d4:66:a0: 9d:6b:f3:50:c0:41:eb:d0:44:36:fc:82:87:72:1d:da:63:71: aa:fa:f5:75:51:dd:ae:93:76:5c:c6:ae:f9:ec:b7:eb:ad:2d: 35:d3:bd:02:54:05:53:3a:55:95:e2:c4:3c:b9:0a:33:7a:0f: 91:da:94:61:b1:3c:76:96:10:5e:4a:29:50:1a:72:e0:53:38: a1:b3:c3:bb:e5:85:5e:5c:95:a0:15:9e:53:00:45:13:74:a8: d4:f8:b3:ba:73:a6:00:90:94:a5:b1:23:67:df:75:94:52:1b: bc:b7:1a:e4:88:2e:3f:ea:58:0b:16:61:f5:12:01:3e:b3:fb: a6:be:0e:32:4a:42:fc:9b:12:bd:d7:cb:42:c4:44:58:47:49: 51:b4:14:02:e5:98:69:d0:7f:66:0f:6b:00:a6:82:e3:22:f7: 35:b7:65:99:37:9d:99:00:7f:be:af:06:08:1e:7c:d4:13:ff: 55:b2:76:c3:68:db:ee:52:85:d1:2a:9f:f9:5a:51:a2:71:99: 85:0c:d3:02:04:c5:c5:28:6e:8b:ad:04:99:cb:8e:9a:cf:9c: a6:d7:83:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwRDIxMTAvBgNVBAUTKENBOTBENEQyMTI1RjAzMzZCNTM5OEVFMDk5NzcyOTZG MkU0MDkyQjQwHhcNMjUxMjIxMDAzODI5WhcNMjUxMjI4MDAzODI5WjAYMRYwFAYD VQQDDA02OTQ3NDE4NS01ZTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOf8owEG4VXDdD41whqu2O8cky6OWH4VQylLnwYYin6IETaFOKT+Epwupg1n C0ITyEUezyRh2NJPEX+M+JTunPmL0GPqFuxevvj7ldLdc7y2YA4dP6YeZG3abI1o E/YQDaAEAXJdsjvCDATa9OgCae9wgHWa3afmWqznsk7L+9sdRmhPQd0M26Gsmme7 u4SQwDH4JFRwe+P56BNExpzt/eCGWxXCjLuCV5gP8Iv6BUSALgVRtue9c7XtxFe1 6m/LBH8m/DVKOeCnQc4qL9hXE4rKH/sdNMyE4z+juDb31VXGu321TSf+fq3gLnfc Rrp/iOTn+NH+PcBfckhZ0EumqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvCt1Vf SS1Zo6WKIi1bnSJ04xXpMB8GA1UdIwQYMBaAFMqQ1NISXwM2tTmO4Jl3KW8uQJK0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBEMi9FQkMxQUMyQzE4 NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6YTFPWTdnbVhjcGJ5NUFr clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lwRFUwaEpmQXphMU9ZN2dtWGNwYnk1QWtyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBEMi9FQkMxQUMyQzE4NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6 YTFPWTdnbVhjcGJ5NUFrclEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF1lgDGwMq6HpjtZiYlLRTz1FK01jaOpF+mwlpQEv4xiLUZqCda/NQ wEHr0EQ2/IKHch3aY3Gq+vV1Ud2uk3Zcxq757LfrrS01070CVAVTOlWV4sQ8uQoz eg+R2pRhsTx2lhBeSilQGnLgUzihs8O75YVeXJWgFZ5TAEUTdKjU+LO6c6YAkJSl sSNn33WUUhu8txrkiC4/6lgLFmH1EgE+s/umvg4ySkL8mxK918tCxERYR0lRtBQC 5Zhp0H9mD2sApoLjIvc1t2WZN52ZAH++rwYIHnzUE/9VsnbDaNvuUoXRKp/5WlGi cZmFDNMCBMXFKG6LrQSZy46az5ym14N0 -----END CERTIFICATE-----Generated at Sun Dec 21 22:40:02 2025 by rpki-client