This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft File: ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft (raw, json) Hash identifier: WPoMKEMoaZFHUigtm0lZyUUGfv1iib5MispoUVCVufY= Subject key identifier: 7D:1D:42:26:F9:B6:6C:80:9D:E8:49:78:DB:3D:CE:AA:59:32:EE:23 Authority key identifier: C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC Certificate issuer: /CN=A91597E8/serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC Certificate serial: 34F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft Manifest number: 34F0 Signing time: Sat 06 Dec 2025 14:39:38 +0000 Manifest this update: Sat 06 Dec 2025 14:39:38 +0000 Manifest next update: Sat 13 Dec 2025 14:39:38 +0000 Files and hashes: 1: ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl (hash: RGVBBBZ7pczG4PNQTTq86GuNrywLmTDhAV8KYaANDVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13552 (0x34f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91597E8, serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC Validity Not Before: Dec 6 14:39:38 2025 GMT Not After : Dec 13 14:39:38 2025 GMT Subject: CN=6934402a-a1a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a6:70:02:4a:56:79:48:53:f5:22:97:6b:db: 99:c4:6c:84:da:f6:98:dc:55:65:86:0e:30:45:18: 39:f0:59:b6:04:31:31:b7:88:dc:3a:1d:1e:16:87: 8d:c7:30:e0:bd:5a:4c:e0:ba:68:4e:be:ef:2b:56: 56:03:02:a3:6b:b7:15:b0:e7:80:84:a6:3a:dd:b6: 0f:54:b9:ea:76:7a:ce:be:3e:b6:50:73:f4:c2:54: 79:ff:a9:0b:b8:56:7c:b3:b9:55:cc:2c:a8:69:2f: fa:09:85:b7:e0:b0:2f:05:ae:21:e4:df:18:03:c3: b3:5e:a2:5e:a4:32:f0:a4:29:62:9a:75:f2:07:d1: b7:4a:47:b4:a0:36:b3:4d:33:d7:8b:b0:ca:c4:2a: 02:f3:88:67:29:04:1e:09:90:23:9d:a0:66:04:0d: cd:07:7e:48:01:9a:d6:8e:1e:b0:df:56:e4:f1:99: 3d:7f:b8:f5:fc:4a:ce:88:14:81:f7:ce:74:fa:02: 6b:a2:46:2e:ef:72:3d:d1:96:dd:05:ad:c4:f9:0d: b8:6a:41:af:d4:f8:c5:1a:b8:47:34:1b:2a:77:eb: 57:8d:29:3a:fa:02:2f:81:a1:78:66:9f:8a:90:bf: e5:d3:bf:8e:29:eb:df:06:a1:46:39:9c:c5:83:05: 88:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1D:42:26:F9:B6:6C:80:9D:E8:49:78:DB:3D:CE:AA:59:32:EE:23 X509v3 Authority Key Identifier: keyid:C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:9a:7b:04:06:aa:a8:fd:7e:62:5d:7e:ec:9c:13:f1:3a:0c: b0:b6:65:72:3a:93:b5:9c:3e:07:92:44:a7:0d:d9:df:a7:c3: 48:14:74:8a:14:39:a0:75:89:f3:d3:e6:4f:f1:ca:b1:0d:d3: b2:84:7f:64:7a:df:3c:26:b4:3d:cf:7e:6a:9e:7c:9a:78:28: ce:84:52:e4:30:39:21:11:10:a5:d3:46:7e:da:e9:58:9c:d4: 96:68:d4:fe:6c:1b:c1:cc:c7:d5:94:92:53:dd:f3:2e:32:9c: 5b:05:0a:d7:e0:cb:73:20:ba:f7:7c:06:37:9f:83:48:7f:9b: 72:2b:47:e2:42:ae:2b:c1:56:e3:ed:2d:f3:76:cb:99:fb:32: df:64:e8:65:ec:92:98:43:5b:35:fd:f2:34:40:61:eb:7f:f5: 59:fc:0b:a2:f0:35:08:aa:0a:0a:d2:63:15:76:e0:eb:6b:4f: de:3f:71:8c:f5:fc:37:ec:06:69:7d:ba:c7:1f:32:af:d0:16: 09:9f:ff:f6:38:71:7b:f2:2b:f2:c1:69:35:87:66:54:15:4c: 49:f2:06:41:c8:b7:c3:6e:66:14:0b:fa:ce:68:39:8a:17:af: fa:9f:0f:e7:29:8d:41:22:c3:dc:cf:4c:7d:1f:15:7e:d6:e7: 4f:04:62:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk3RTgxMTAvBgNVBAUTKEM5QzI4Rjk5MEI2Mjc0MTJDOTdDMkRDRUM3QzkwNkU2 MUFEMzI1QUMwHhcNMjUxMjA2MTQzOTM4WhcNMjUxMjEzMTQzOTM4WjAYMRYwFAYD VQQDEw02OTM0NDAyYS1hMWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKZwAkpWeUhT9SKXa9uZxGyE2vaY3FVlhg4wRRg58Fm2BDExt4jcOh0eFoeN xzDgvVpM4LpoTr7vK1ZWAwKja7cVsOeAhKY63bYPVLnqdnrOvj62UHP0wlR5/6kL uFZ8s7lVzCyoaS/6CYW34LAvBa4h5N8YA8OzXqJepDLwpClimnXyB9G3Ske0oDaz TTPXi7DKxCoC84hnKQQeCZAjnaBmBA3NB35IAZrWjh6w31bk8Zk9f7j1/ErOiBSB 9850+gJrokYu73I90ZbdBa3E+Q24akGv1PjFGrhHNBsqd+tXjSk6+gIvgaF4Zp+K kL/l07+OKevfBqFGOZzFgwWIIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0dQib5 tmyAnehJeNs9zqpZMu4jMB8GA1UdIwQYMBaAFMnCj5kLYnQSyXwtzsfJBuYa0yWs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTdFOC83QTBGRTdGQTFE OTIxMUUyQjVCQzc0RjUwOEIwMkNEMi95Y0tQbVF0aWRCTEpmQzNPeDhrRzVoclRK YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ljS1BtUXRpZEJMSmZDM094OGtHNWhyVEphdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTdFOC83QTBGRTdGQTFEOTIxMUUyQjVCQzc0RjUwOEIwMkNEMi95Y0tQbVF0aWRC TEpmQzNPeDhrRzVoclRKYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSmnsEBqqo/X5iXX7snBPxOgywtmVyOpO1nD4HkkSnDdnfp8NIFHSK FDmgdYnz0+ZP8cqxDdOyhH9ket88JrQ9z35qnnyaeCjOhFLkMDkhERCl00Z+2ulY nNSWaNT+bBvBzMfVlJJT3fMuMpxbBQrX4MtzILr3fAY3n4NIf5tyK0fiQq4rwVbj 7S3zdsuZ+zLfZOhl7JKYQ1s1/fI0QGHrf/VZ/Aui8DUIqgoK0mMVduDra0/eP3GM 9fw37AZpfbrHHzKv0BYJn//2OHF78ivywWk1h2ZUFUxJ8gZByLfDbmYUC/rOaDmK F6/6nw/nKY1BIsPcz0x9HxV+1udPBGJj -----END CERTIFICATE-----Generated at Sat Dec 6 21:18:39 2025 by rpki-client