This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft File: _YASv-mRKe-ci7ekYDIUQvbSZWI.mft (raw, json) Hash identifier: OBpg3Wv0oXyff8w6B/TJSr/UXXEv5dfT0tXAkgL7doo= Subject key identifier: D5:43:91:D2:50:3B:FD:60:29:DB:EA:C3:8F:C4:BD:59:A7:FA:92:80 Authority key identifier: FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62 Certificate issuer: /CN=A91807BB/serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft Manifest number: DF Signing time: Fri 05 Dec 2025 03:32:14 +0000 Manifest this update: Fri 05 Dec 2025 03:32:14 +0000 Manifest next update: Fri 12 Dec 2025 03:32:14 +0000 Files and hashes: 1: _YASv-mRKe-ci7ekYDIUQvbSZWI.crl (hash: lPxeoy1Jgh8UusxkumuFb79qO7qpsoyd3hjVGp4j1HU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91807BB, serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562 Validity Not Before: Dec 5 03:32:14 2025 GMT Not After : Dec 12 03:32:14 2025 GMT Subject: CN=6932523e-6b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:55:58:34:3d:99:75:30:b2:c4:eb:2d:e0:fe: 5d:94:ce:ad:04:a5:24:32:37:bb:cd:ee:72:a7:d8: 2b:0a:b2:4a:0f:2e:70:76:5d:80:ce:27:c7:74:7b: 33:1c:0f:aa:4a:91:22:15:dd:5c:b0:c0:99:ae:91: d2:a9:10:92:ba:5f:41:27:68:72:d0:ef:f4:4f:a1: 48:81:fb:5e:8c:43:91:bd:05:cc:4f:42:24:6a:c1: 68:ee:fa:07:bf:e0:68:23:4f:c3:64:3b:f2:1a:59: 7c:7e:dc:cc:d3:66:25:9d:56:df:45:ff:36:db:ef: 36:8f:df:d9:78:d6:af:19:11:ae:5e:81:13:46:47: ef:9c:dc:5c:ce:14:35:d7:32:43:b0:00:16:38:94: 62:f5:c6:4d:78:1a:8c:d2:1f:af:14:75:87:45:86: f5:a2:55:68:59:27:67:bc:f0:92:ce:65:71:aa:b6: ba:f5:7e:03:67:c4:6c:cb:d7:e9:8a:04:51:3e:01: bd:35:f6:1f:e2:e7:62:10:66:67:9a:d3:32:e7:0e: d0:98:f4:ba:85:a0:86:9f:14:15:bf:51:fd:6c:02: f2:7a:e3:24:ba:a9:86:68:4d:fc:b1:b9:9e:83:c7: d3:8a:54:e0:03:c6:94:ca:8a:af:dc:d6:52:a8:67: 5b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:43:91:D2:50:3B:FD:60:29:DB:EA:C3:8F:C4:BD:59:A7:FA:92:80 X509v3 Authority Key Identifier: keyid:FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:27:39:c3:43:64:0a:95:89:d8:fc:a4:6e:d3:78:df:cd:0e: 9e:f9:7c:49:73:c2:3b:cc:88:2f:0f:6f:07:e0:31:5b:aa:e5: cc:39:af:4f:6b:69:9b:54:bf:67:e7:df:53:d3:04:44:91:86: fd:b1:25:ea:07:46:77:94:f7:d5:b0:0c:ac:17:cc:57:63:b2: a1:1c:74:0f:e1:6f:78:ba:0d:d4:4e:ea:1b:e9:18:52:3f:0c: 5b:d9:d1:35:b5:8d:63:88:e5:ec:54:00:ea:9a:f1:93:b1:5c: f7:93:80:bf:f7:3a:dd:fc:93:f2:a3:cb:7f:87:9d:53:1e:2c: 8b:61:9c:b1:b9:46:58:b9:e8:15:09:a1:69:4f:46:7b:f3:6c: 05:98:d9:07:68:a9:13:26:ba:5c:99:a7:0f:cc:a8:00:86:5e: f9:07:d8:02:8c:60:7c:db:63:ae:b7:46:1a:e0:12:0d:24:27: 35:c8:aa:87:b5:4d:00:c3:4d:01:bf:21:6f:6f:ba:79:de:c7: c3:c4:c4:86:e4:03:6b:e3:16:77:57:c0:43:53:ee:33:f3:ad: a2:f9:bc:f9:b2:97:7e:36:71:f6:90:ce:42:c0:95:29:4a:6e: aa:a9:28:80:28:0f:47:31:ca:4d:2c:ff:90:4a:aa:21:73:39: 77:b7:51:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA3QkIxMTAvBgNVBAUTKEZEODAxMkJGRTk5MTI5RUY5QzhCQjdBNDYwMzIxNDQy RjZEMjY1NjIwHhcNMjUxMjA1MDMzMjE0WhcNMjUxMjEyMDMzMjE0WjAYMRYwFAYD VQQDEw02OTMyNTIzZS02YjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FVYND2ZdTCyxOst4P5dlM6tBKUkMje7ze5yp9grCrJKDy5wdl2AzifHdHsz HA+qSpEiFd1csMCZrpHSqRCSul9BJ2hy0O/0T6FIgftejEORvQXMT0IkasFo7voH v+BoI0/DZDvyGll8ftzM02YlnVbfRf822+82j9/ZeNavGRGuXoETRkfvnNxczhQ1 1zJDsAAWOJRi9cZNeBqM0h+vFHWHRYb1olVoWSdnvPCSzmVxqra69X4DZ8Rsy9fp igRRPgG9NfYf4udiEGZnmtMy5w7QmPS6haCGnxQVv1H9bALyeuMkuqmGaE38sbme g8fTilTgA8aUyoqv3NZSqGdbIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVDkdJQ O/1gKdvqw4/EvVmn+pKAMB8GA1UdIwQYMBaAFP2AEr/pkSnvnIu3pGAyFEL20mVi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDdCQi8wMUQyMzlBNDdD QjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9fWUFTdi1tUktlLWNpN2VrWURJVVF2YlNa V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19ZQVN2LW1SS2UtY2k3ZWtZRElVUXZiU1pXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDdCQi8wMUQyMzlBNDdDQjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9fWUFTdi1tUktl LWNpN2VrWURJVVF2YlNaV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6JznDQ2QKlYnY/KRu03jfzQ6e+XxJc8I7zIgvD28H4DFbquXMOa9P a2mbVL9n599T0wREkYb9sSXqB0Z3lPfVsAysF8xXY7KhHHQP4W94ug3UTuob6RhS Pwxb2dE1tY1jiOXsVADqmvGTsVz3k4C/9zrd/JPyo8t/h51THiyLYZyxuUZYuegV CaFpT0Z782wFmNkHaKkTJrpcmacPzKgAhl75B9gCjGB822Out0Ya4BINJCc1yKqH tU0Aw00BvyFvb7p53sfDxMSG5ANr4xZ3V8BDU+4z862i+bz5spd+NnH2kM5CwJUp Sm6qqSiAKA9HMcpNLP+QSqohczl3t1Hi -----END CERTIFICATE-----Generated at Sat Dec 6 16:06:46 2025 by rpki-client