This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft File: YwXctV_RS1x6opSuN8cCdWkvQYA.mft (raw, json) Hash identifier: eNctWkfkBzxYQMAdbMxblK6ej7Fyg76d2eQKOMULSQE= Subject key identifier: CC:77:3B:E6:50:EA:4E:AE:80:07:A8:84:19:69:1E:AC:9D:A5:97:38 Authority key identifier: 63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80 Certificate issuer: /CN=A91A9CD5/serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft Manifest number: DC Signing time: Fri 05 Dec 2025 03:32:25 +0000 Manifest this update: Fri 05 Dec 2025 03:32:24 +0000 Manifest next update: Fri 12 Dec 2025 03:32:24 +0000 Files and hashes: 1: YwXctV_RS1x6opSuN8cCdWkvQYA.crl (hash: +y8bkAN/DYSqqNmLVv/J3RFUsCl83+iFpnyGfhc6Ffg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CD5, serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180 Validity Not Before: Dec 5 03:32:24 2025 GMT Not After : Dec 12 03:32:24 2025 GMT Subject: CN=69325249-fba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:41:48:e9:cd:1f:22:81:74:7e:55:7d:41:72: 64:4b:fe:1b:af:38:f0:8a:a6:1d:aa:e4:6a:0a:c5: 40:5e:37:b6:b2:ae:ab:ee:5c:a0:79:b0:35:d9:fe: ad:ae:6d:90:44:d7:a7:ec:30:ba:5f:e6:a9:68:8f: b6:d2:39:83:ed:00:71:d4:ce:cd:ef:90:05:f6:22: 28:58:f2:59:9e:00:55:bb:1d:a3:4e:b9:c1:f4:16: e9:07:23:d1:0a:8f:61:f6:7a:65:35:38:24:81:48: 01:af:05:79:d8:75:6d:e7:1c:32:5d:9f:c3:b0:41: 04:c3:7a:4c:ea:57:f8:e9:05:d8:06:09:8c:c3:cc: bd:47:90:21:5a:92:42:93:1f:70:12:3f:b5:d0:8b: 39:67:86:06:4e:56:9f:fb:41:7e:93:b5:04:bc:e8: b7:7a:ee:a8:b6:a3:18:0b:34:3d:c6:c2:55:e2:0f: 81:4b:d0:26:b6:9c:60:c7:0b:0e:9c:38:cf:9c:74: 6f:38:4c:ff:25:8f:f9:73:84:cb:df:ce:92:74:a4: a1:59:a8:e6:27:46:2b:6f:bb:e6:ce:d1:25:19:e6: c2:86:5d:39:87:09:50:67:04:14:de:08:f4:9d:12: f2:c3:ea:7c:1a:dc:16:40:08:c2:cd:90:82:a9:12: e6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:77:3B:E6:50:EA:4E:AE:80:07:A8:84:19:69:1E:AC:9D:A5:97:38 X509v3 Authority Key Identifier: keyid:63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:2b:1b:6f:2e:6d:38:ef:87:49:26:32:1b:03:dd:4e:ac:94: b1:0b:64:51:9b:79:ed:46:2a:55:7e:60:ad:d7:2f:22:25:ea: 78:17:c6:3a:44:f8:7e:fe:bd:a8:25:9e:7b:ec:0d:4d:df:8e: 66:70:b9:22:4d:68:4f:94:34:96:c3:4a:98:94:70:95:9c:46: 77:e4:ee:e1:ef:bd:7f:e8:1b:73:89:46:d1:e5:68:31:ae:e4: 88:db:da:66:fe:65:10:51:7e:ab:0b:ac:49:60:70:76:39:e1: df:68:da:6c:f7:a7:b7:4d:1f:15:e1:e1:fc:b3:ab:1a:0e:d4: e4:c4:27:73:a1:fc:2c:d0:50:27:7a:01:e8:94:6f:51:63:4f: 45:c6:30:ab:14:ad:32:62:03:76:76:c5:ab:d3:ae:e4:b6:9a: cf:9a:3f:1d:05:00:d1:28:29:7c:1d:f9:b1:0c:bd:32:71:69: 9e:bb:fe:92:2d:17:0d:0f:20:35:f5:d8:ff:bd:e4:31:a2:8e: 6c:ee:46:de:68:67:cd:2b:00:fe:64:a6:24:fd:f6:2f:be:c0: 0e:ee:90:84:92:99:1a:36:f9:34:39:98:1c:ba:cc:2d:35:e5: 49:a0:e2:ef:d8:c4:bb:fa:66:97:b9:85:09:7a:ef:9a:90:65: a2:ab:4d:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlDRDUxMTAvBgNVBAUTKDYzMDVEQ0I1NUZEMTRCNUM3QUEyOTRBRTM3QzcwMjc1 NjkyRjQxODAwHhcNMjUxMjA1MDMzMjI0WhcNMjUxMjEyMDMzMjI0WjAYMRYwFAYD VQQDEw02OTMyNTI0OS1mYmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnEFI6c0fIoF0flV9QXJkS/4brzjwiqYdquRqCsVAXje2sq6r7lygebA12f6t rm2QRNen7DC6X+apaI+20jmD7QBx1M7N75AF9iIoWPJZngBVux2jTrnB9BbpByPR Co9h9nplNTgkgUgBrwV52HVt5xwyXZ/DsEEEw3pM6lf46QXYBgmMw8y9R5AhWpJC kx9wEj+10Is5Z4YGTlaf+0F+k7UEvOi3eu6otqMYCzQ9xsJV4g+BS9AmtpxgxwsO nDjPnHRvOEz/JY/5c4TL386SdKShWajmJ0Yrb7vmztElGebChl05hwlQZwQU3gj0 nRLyw+p8GtwWQAjCzZCCqRLm6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMx3O+ZQ 6k6ugAeohBlpHqydpZc4MB8GA1UdIwQYMBaAFGMF3LVf0UtceqKUrjfHAnVpL0GA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUNENS83QTlBMjUxMDdG RUYxMUVGQTgyREY2MzlDNEY5QUUwMi9Zd1hjdFZfUlMxeDZvcFN1TjhjQ2RXa3ZR WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l3WGN0Vl9SUzF4Nm9wU3VOOGNDZFdrdlFZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUNENS83QTlBMjUxMDdGRUYxMUVGQTgyREY2MzlDNEY5QUUwMi9Zd1hjdFZfUlMx eDZvcFN1TjhjQ2RXa3ZRWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKKxtvLm0474dJJjIbA91OrJSxC2RRm3ntRipVfmCt1y8iJep4F8Y6 RPh+/r2oJZ577A1N345mcLkiTWhPlDSWw0qYlHCVnEZ35O7h771/6BtziUbR5Wgx ruSI29pm/mUQUX6rC6xJYHB2OeHfaNps96e3TR8V4eH8s6saDtTkxCdzofws0FAn egHolG9RY09FxjCrFK0yYgN2dsWr067ktprPmj8dBQDRKCl8HfmxDL0ycWmeu/6S LRcNDyA19dj/veQxoo5s7kbeaGfNKwD+ZKYk/fYvvsAO7pCEkpkaNvk0OZgcuswt NeVJoOLv2MS7+maXuYUJeu+akGWiq015 -----END CERTIFICATE-----Generated at Sat Dec 6 19:37:23 2025 by rpki-client