This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft File: C-AoY1W14laYjORU35P8D8p_YEA.mft (raw, json) Hash identifier: g5KxObFhAUWv7wjCoqCUc3IbAhHL4v9syw90D9bLHso= Subject key identifier: C0:C1:2E:B6:26:7D:8A:1A:20:11:41:A2:C9:90:E1:FE:75:93:1E:F1 Authority key identifier: 0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40 Certificate issuer: /CN=A91A1D43/serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040 Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft Manifest number: 01E4 Signing time: Fri 05 Dec 2025 00:55:43 +0000 Manifest this update: Fri 05 Dec 2025 00:55:42 +0000 Manifest next update: Fri 12 Dec 2025 00:55:42 +0000 Files and hashes: 1: C-AoY1W14laYjORU35P8D8p_YEA.crl (hash: yZiunS8h40IMOL9I2URbrM+7QfiBCthfwASWsKKV8Vw=) 2: 8BCB2CFAEA3911EDB91E190BC4F9AE02.roa (hash: Gn3bl+JlcAfK7NlSkgTYoj+Bsl8m7KISn3HM2ix+w34=) 3: 8B1BDC14EA3911EDB91E190BC4F9AE02.roa (hash: +iPaNHR0I7CGA19//oU6de8PSF7FBlMHBTXC8ZhTdUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1D43, serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040 Validity Not Before: Dec 5 00:55:42 2025 GMT Not After : Dec 12 00:55:42 2025 GMT Subject: CN=69322d8e-6bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6d:7c:36:0a:1d:57:06:a9:9c:64:39:05:92: c3:66:5e:eb:06:a6:fc:e9:4e:18:a0:44:e9:a1:2f: 3d:13:a1:c4:72:9b:e6:ac:f1:f5:12:2d:0f:d3:73: e9:23:1c:c5:7b:9a:3b:c3:fd:a7:f3:cf:0a:52:50: 5b:e5:a7:4a:24:94:85:9b:49:24:08:f8:0b:bb:a1: b7:b3:e4:13:40:d8:f9:7a:fa:c1:4e:5a:be:74:d7: 51:1a:19:1a:bc:8e:55:5c:71:4c:79:91:95:9c:bb: 10:71:33:af:e5:52:cb:20:d5:93:32:14:95:2f:85: 07:14:0a:9d:2e:a7:8d:6e:90:5b:42:c5:ec:d8:bb: 42:8e:8b:7a:9a:d7:3a:55:d6:af:22:d4:5d:0e:1c: 8e:33:b8:ff:a0:8e:0d:68:20:9c:8c:d7:04:f2:f1: af:a8:22:52:28:58:ce:18:48:cf:eb:f3:cb:ed:b9: d8:9e:42:30:23:93:2f:1d:cd:86:e7:c1:42:ac:b0: 8d:fc:93:b0:b6:89:6c:23:c5:40:6f:32:b8:0c:78: 54:2f:6b:3d:3a:ed:64:cd:f6:c0:cc:19:b8:c4:e2: 71:0a:ea:e8:a9:12:7e:d7:d3:1b:1d:fa:30:38:55: 27:e5:83:ff:66:7a:da:55:15:41:30:6f:3c:6c:8d: 67:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C1:2E:B6:26:7D:8A:1A:20:11:41:A2:C9:90:E1:FE:75:93:1E:F1 X509v3 Authority Key Identifier: keyid:0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:71:f9:bc:3c:d9:a3:5f:e8:d2:17:ff:e1:d5:a9:b8:7f:63: 59:d2:83:5f:74:41:61:50:15:e5:28:06:6d:7f:4f:32:34:4b: 2a:60:4e:57:61:a7:96:30:17:b2:0a:52:81:10:07:46:bb:52: 65:b1:b2:9e:bb:14:12:48:f7:b2:16:aa:3f:f2:f4:96:bd:53: 18:aa:2c:71:fc:75:f1:21:11:6f:3c:50:81:60:ae:17:4f:d5: 20:5e:b4:ff:97:f7:ec:90:cf:33:89:87:7f:73:d6:7b:ff:78: e2:2b:34:e6:96:fc:66:9a:27:09:48:c0:2d:bd:b9:27:c6:7f: 35:a7:5b:16:a0:49:a6:25:e9:b4:4d:64:8a:a5:ab:44:b8:13: fd:eb:28:a4:11:08:a5:21:af:2b:5e:ff:35:86:ab:bc:6e:b2: 97:55:5a:ad:d6:9e:27:b2:92:c7:6a:d6:0e:fe:da:d3:b9:3d: 87:70:97:67:bb:48:ea:ac:24:ca:af:36:ed:04:27:b7:22:21: 8f:44:61:f1:e5:05:af:c2:b5:a4:ce:25:ba:9c:51:29:26:29: f1:b4:74:88:ba:35:6d:b8:b3:60:44:2d:82:2e:c8:f5:73:90: 15:db:82:b2:a6:d0:6c:0d:fa:cb:a7:8f:e0:1e:73:f3:33:3d: 9a:5d:f6:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFENDMxMTAvBgNVBAUTKDBCRTAyODYzNTVCNUUyNTY5ODhDRTQ1NERGOTNGQzBG Q0E3RjYwNDAwHhcNMjUxMjA1MDA1NTQyWhcNMjUxMjEyMDA1NTQyWjAYMRYwFAYD VQQDEw02OTMyMmQ4ZS02YmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqG18NgodVwapnGQ5BZLDZl7rBqb86U4YoETpoS89E6HEcpvmrPH1Ei0P03Pp IxzFe5o7w/2n888KUlBb5adKJJSFm0kkCPgLu6G3s+QTQNj5evrBTlq+dNdRGhka vI5VXHFMeZGVnLsQcTOv5VLLINWTMhSVL4UHFAqdLqeNbpBbQsXs2LtCjot6mtc6 VdavItRdDhyOM7j/oI4NaCCcjNcE8vGvqCJSKFjOGEjP6/PL7bnYnkIwI5MvHc2G 58FCrLCN/JOwtolsI8VAbzK4DHhUL2s9Ou1kzfbAzBm4xOJxCuroqRJ+19MbHfow OFUn5YP/ZnraVRVBMG88bI1nzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDBLrYm fYoaIBFBosmQ4f51kx7xMB8GA1UdIwQYMBaAFAvgKGNVteJWmIzkVN+T/A/Kf2BA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUQ0My84OTI5REZERUVB MjgxMUVEQjdERDAxMThDNEY5QUUwMi9DLUFvWTFXMTRsYVlqT1JVMzVQOEQ4cF9Z RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MtQW9ZMVcxNGxhWWpPUlUzNVA4RDhwX1lFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUQ0My84OTI5REZERUVBMjgxMUVEQjdERDAxMThDNEY5QUUwMi9DLUFvWTFXMTRs YVlqT1JVMzVQOEQ4cF9ZRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2cfm8PNmjX+jSF//h1am4f2NZ0oNfdEFhUBXlKAZtf08yNEsqYE5X YaeWMBeyClKBEAdGu1JlsbKeuxQSSPeyFqo/8vSWvVMYqixx/HXxIRFvPFCBYK4X T9UgXrT/l/fskM8ziYd/c9Z7/3jiKzTmlvxmmicJSMAtvbknxn81p1sWoEmmJem0 TWSKpatEuBP96yikEQilIa8rXv81hqu8brKXVVqt1p4nspLHatYO/trTuT2HcJdn u0jqrCTKrzbtBCe3IiGPRGHx5QWvwrWkziW6nFEpJinxtHSIujVtuLNgRC2CLsj1 c5AV24KyptBsDfrLp4/gHnPzMz2aXfbC -----END CERTIFICATE-----Generated at Sat Dec 6 19:26:37 2025 by rpki-client