This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft File: yZNZQ2ka0elTZudBwTkwH7f35ts.mft (raw, json) Hash identifier: Cjur35BGYgtB1cSZQV44tE+kOiqHWqnwTdYkCEcK4eo= Subject key identifier: 34:12:D0:F6:69:51:3B:4B:DA:87:D5:26:A8:63:8F:FA:89:F8:3F:88 Authority key identifier: C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB Certificate issuer: /CN=A91A531A/serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB Certificate serial: 07BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft Manifest number: 07B8 Signing time: Sat 06 Dec 2025 20:23:27 +0000 Manifest this update: Sat 06 Dec 2025 20:23:26 +0000 Manifest next update: Sat 13 Dec 2025 20:23:26 +0000 Files and hashes: 1: yZNZQ2ka0elTZudBwTkwH7f35ts.crl (hash: Lw2o0kzWhr+yLPU4wUkt0Brn4Snc7Gs+enAO/Z6HGog=) 2: 43C467CA219911EB8F75645EC4F9AE02.roa (hash: 6tZzkzjjo4oBxSeK/R1NOhuzbe0x0nCnZv7oHnkeXMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1982 (0x7be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A531A, serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB Validity Not Before: Dec 6 20:23:26 2025 GMT Not After : Dec 13 20:23:26 2025 GMT Subject: CN=693490be-50ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b6:11:38:c5:d5:69:b7:68:bc:29:18:cf:cb: e6:1a:57:ae:f4:7d:59:8a:6a:c5:bf:46:9b:3a:29: 13:ce:e7:df:a5:20:60:ca:29:b2:bf:0e:1b:4a:84: a1:d9:2f:6b:74:bf:b0:c4:9b:a6:8e:ec:cf:e6:05: f9:d3:ca:3c:16:44:9a:a8:03:a8:a5:7c:74:73:94: 3d:8b:3f:fe:98:57:42:a5:c2:13:4a:ab:74:54:b3: e3:ab:bc:8c:a9:d8:8c:8e:99:a9:65:b1:c5:a6:3e: f3:6d:a5:78:b6:93:2d:75:5b:40:38:ae:63:5a:f0: 68:11:f1:17:0b:a6:d0:ca:d3:11:95:9c:56:be:73: 11:25:dc:bf:b4:e5:6c:69:1e:ac:92:ad:85:f7:bf: 5c:ea:da:d3:7c:e0:b5:79:a4:70:35:d6:67:16:7a: 1e:55:40:ca:51:e2:68:6f:51:45:63:6f:06:f2:30: cd:52:61:6f:6f:06:35:14:e7:68:d6:49:0f:da:f6: 82:3c:01:78:73:64:bb:0f:d0:1b:49:22:46:4c:7d: d4:08:24:00:8c:c9:49:cc:1a:43:d9:5c:ab:16:90: 6d:32:88:6a:00:63:5f:78:7a:70:e0:aa:7e:04:27: c4:3b:f0:7e:c7:29:e1:00:33:2f:ed:77:ba:21:2c: d3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:12:D0:F6:69:51:3B:4B:DA:87:D5:26:A8:63:8F:FA:89:F8:3F:88 X509v3 Authority Key Identifier: keyid:C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:63:58:31:54:df:7c:21:74:85:e3:02:e0:75:e4:e9:55:77: fd:08:c9:ec:39:95:34:fb:2d:43:97:fa:a6:fb:ca:fe:f6:57: e6:b0:e9:e0:a4:1a:62:61:d4:b6:7b:df:a7:49:ae:77:20:4a: 2c:54:7a:07:8b:77:81:33:fc:27:21:96:a4:a0:e5:18:50:a3: 66:b7:93:08:d1:a6:06:e7:6e:da:68:5f:7d:4a:6d:80:ff:29: ce:36:f0:27:e4:d9:e8:f8:d7:64:7c:56:ee:3e:25:99:7b:e3: 5f:01:4f:cd:41:c2:6d:3d:01:70:ae:bf:f1:d3:cb:35:54:46: 25:c1:ea:18:db:7e:9c:ac:e9:1b:42:c9:53:fd:fc:d9:f6:00: c2:1b:ad:a7:5a:1b:4e:84:a6:83:86:d5:37:57:75:fd:ce:51: 29:96:5b:a6:0b:8d:72:b5:d7:73:b8:44:bb:8b:e4:62:00:6a: b0:b2:e4:5d:91:83:ba:62:a4:6d:d9:0e:2e:6d:1e:c9:8f:a1: 4c:81:bb:ff:73:f9:2a:c8:e5:05:e6:91:67:e8:43:42:14:68: 02:eb:e7:6d:69:be:ed:11:e2:ac:df:0f:dc:f5:dd:88:fb:da: 64:a3:aa:2c:7d:5c:4d:8c:de:06:5f:ea:28:cc:d0:86:95:75: 28:d6:b8:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMUExMTAvBgNVBAUTKEM5OTM1OTQzNjkxQUQxRTk1MzY2RTc0MUMxMzkzMDFG QjdGN0U2REIwHhcNMjUxMjA2MjAyMzI2WhcNMjUxMjEzMjAyMzI2WjAYMRYwFAYD VQQDEw02OTM0OTBiZS01MGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubYROMXVabdovCkYz8vmGleu9H1ZimrFv0abOikTzuffpSBgyimyvw4bSoSh 2S9rdL+wxJumjuzP5gX508o8FkSaqAOopXx0c5Q9iz/+mFdCpcITSqt0VLPjq7yM qdiMjpmpZbHFpj7zbaV4tpMtdVtAOK5jWvBoEfEXC6bQytMRlZxWvnMRJdy/tOVs aR6skq2F979c6trTfOC1eaRwNdZnFnoeVUDKUeJob1FFY28G8jDNUmFvbwY1FOdo 1kkP2vaCPAF4c2S7D9AbSSJGTH3UCCQAjMlJzBpD2VyrFpBtMohqAGNfeHpw4Kp+ BCfEO/B+xynhADMv7Xe6ISzTuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQS0PZp UTtL2ofVJqhjj/qJ+D+IMB8GA1UdIwQYMBaAFMmTWUNpGtHpU2bnQcE5MB+39+bb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMxQS8yQkRERkFDRTIx OTcxMUVCQjQ1QjAzNTlDNEY5QUUwMi95Wk5aUTJrYTBlbFRadWRCd1Rrd0g3ZjM1 dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laTlpRMmthMGVsVFp1ZEJ3VGt3SDdmMzV0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMxQS8yQkRERkFDRTIxOTcxMUVCQjQ1QjAzNTlDNEY5QUUwMi95Wk5aUTJrYTBl bFRadWRCd1Rrd0g3ZjM1dHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdY1gxVN98IXSF4wLgdeTpVXf9CMnsOZU0+y1Dl/qm+8r+9lfmsOng pBpiYdS2e9+nSa53IEosVHoHi3eBM/wnIZakoOUYUKNmt5MI0aYG527aaF99Sm2A /ynONvAn5Nno+NdkfFbuPiWZe+NfAU/NQcJtPQFwrr/x08s1VEYlweoY236crOkb QslT/fzZ9gDCG62nWhtOhKaDhtU3V3X9zlEpllumC41ytddzuES7i+RiAGqwsuRd kYO6YqRt2Q4ubR7Jj6FMgbv/c/kqyOUF5pFn6ENCFGgC6+dtab7tEeKs3w/c9d2I +9pko6osfVxNjN4GX+oozNCGlXUo1rhQ -----END CERTIFICATE-----Generated at Sun Dec 7 01:57:07 2025 by rpki-client