This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft File: Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft (raw, json) Hash identifier: oO++7JoaM1UENKbYO1ebSIcvBUvITJJFoECLeBB5qmw= Subject key identifier: BA:3C:D5:70:70:64:CA:EE:C2:3A:DC:FA:BF:9A:04:AC:E5:1B:37:31 Authority key identifier: 63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00 Certificate issuer: /CN=A91AB238/serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00 Certificate serial: 0827 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft Manifest number: 081E Signing time: Thu 18 Dec 2025 20:24:53 +0000 Manifest this update: Thu 18 Dec 2025 20:24:53 +0000 Manifest next update: Thu 25 Dec 2025 20:24:53 +0000 Files and hashes: 1: Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl (hash: W0tvNME0b7qAaCcMuGQeVItZKLs/Av5DfW0N/2S01m0=) 2: 7634D328351411EBBF864670C4F9AE02.roa (hash: gJ6rfZA4kdz2sP4zhVk5qWSiiFvdYYEjJ3d1LC4TVQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2087 (0x827) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB238, serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00 Validity Not Before: Dec 18 20:24:53 2025 GMT Not After : Dec 25 20:24:53 2025 GMT Subject: CN=69446315-9d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f4:6a:ec:69:48:bc:40:66:45:15:b0:09:98: 86:d3:dc:32:20:75:c0:ee:3c:8b:f6:7d:f7:0c:4c: c7:3f:98:7f:3a:9b:51:93:31:e9:84:e1:55:47:88: e6:7d:8a:d7:2e:ab:82:63:0d:36:14:ab:95:9b:b1: 28:17:06:c6:00:95:4e:39:d0:36:82:d1:d1:46:3b: 55:b0:d2:14:b8:50:51:11:e2:79:87:20:44:5f:7d: 0f:b4:96:9b:8c:60:c5:8e:82:6a:b1:53:b7:84:88: 5b:2c:fa:1e:00:8a:01:52:12:9a:7e:da:28:06:74: 89:00:78:75:a3:36:8e:39:19:4c:62:2c:20:5e:53: 6c:6b:03:a9:ab:c4:58:ed:60:dc:df:6b:38:31:bc: e9:52:01:30:1f:24:87:04:c2:c4:9d:47:fe:81:87: 04:1e:6b:5d:0c:a4:f3:c3:ea:11:e4:ad:61:f0:da: 79:71:1c:9d:fd:f8:2e:6f:0f:47:e7:72:b3:db:51: 01:aa:1c:fc:0c:2f:1e:c5:72:58:8b:83:81:bc:36: 35:ce:92:c8:a8:74:3a:3b:a4:ab:67:5b:45:9c:c0: f7:82:3e:de:85:0e:77:b7:16:39:70:e1:e7:55:29: a9:ae:3b:23:af:8f:c3:6c:a2:2f:68:6e:58:bb:bd: bb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3C:D5:70:70:64:CA:EE:C2:3A:DC:FA:BF:9A:04:AC:E5:1B:37:31 X509v3 Authority Key Identifier: keyid:63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:15:b5:a5:6c:c5:10:15:0c:81:a2:03:37:a3:e0:f2:ab:d7: ef:e5:ee:35:03:f9:08:95:fa:22:3a:01:99:4f:21:0a:f0:9d: db:af:9d:1e:e3:48:6f:4a:99:8e:c6:87:3a:88:ec:85:01:e9: 27:c8:a5:d8:57:03:7e:cf:98:5d:37:1e:42:8c:94:f5:0d:e2: f9:31:c5:b4:b6:27:7e:80:59:1a:a8:45:1e:3c:ff:7e:e4:20: b8:e4:86:30:dc:cf:55:6a:18:f1:43:f4:2b:f5:1e:88:76:05: 89:a3:aa:2f:42:bc:a7:29:13:b3:f5:f4:17:79:81:ee:a2:56: b0:ab:db:49:68:8c:a0:c3:34:54:43:6c:71:d2:83:48:b2:bd: 94:2c:e7:21:49:f6:7b:b6:5e:a0:3b:e3:84:14:95:61:d1:0c: d8:2d:ec:80:4c:05:b8:55:a5:d8:06:3a:d5:82:1a:c6:5c:23: c9:ab:db:36:6f:83:04:20:c1:d5:06:75:6e:2e:55:72:4d:ef: 9e:a4:02:3e:74:fe:54:7a:f4:89:1d:77:33:dc:12:6a:d8:a5: b4:3b:2f:b6:03:c9:9f:ea:2a:a1:85:ad:75:a0:b1:7f:31:ca: 01:4a:06:df:83:ef:6e:3f:2f:98:24:0a:be:aa:6a:35:01:98: d4:15:9d:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMzgxMTAvBgNVBAUTKDYzRkFGNEQyM0U2ODNFOTNGNjA3NjMwRERGRkQ0QjFB RjYzMzNGMDAwHhcNMjUxMjE4MjAyNDUzWhcNMjUxMjI1MjAyNDUzWjAYMRYwFAYD VQQDDA02OTQ0NjMxNS05ZDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmfRq7GlIvEBmRRWwCZiG09wyIHXA7jyL9n33DEzHP5h/OptRkzHphOFVR4jm fYrXLquCYw02FKuVm7EoFwbGAJVOOdA2gtHRRjtVsNIUuFBREeJ5hyBEX30PtJab jGDFjoJqsVO3hIhbLPoeAIoBUhKaftooBnSJAHh1ozaOORlMYiwgXlNsawOpq8RY 7WDc32s4MbzpUgEwHySHBMLEnUf+gYcEHmtdDKTzw+oR5K1h8Np5cRyd/fgubw9H 53Kz21EBqhz8DC8exXJYi4OBvDY1zpLIqHQ6O6SrZ1tFnMD3gj7ehQ53txY5cOHn VSmprjsjr4/DbKIvaG5Yu7271wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLo81XBw ZMruwjrc+r+aBKzlGzcxMB8GA1UdIwQYMBaAFGP69NI+aD6T9gdjDd/9Sxr2Mz8A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIzOC84QzdBMzM2OEZE RkExMUVBOTNBQUZGMEFDNEY5QUUwMi9ZX3IwMGo1b1BwUDJCMk1OM18xTEd2WXpQ d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lfcjAwajVvUHBQMkIyTU4zXzFMR3ZZelB3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjIzOC84QzdBMzM2OEZERkExMUVBOTNBQUZGMEFDNEY5QUUwMi9ZX3IwMGo1b1Bw UDJCMk1OM18xTEd2WXpQd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+FbWlbMUQFQyBogM3o+Dyq9fv5e41A/kIlfoiOgGZTyEK8J3br50e 40hvSpmOxoc6iOyFAeknyKXYVwN+z5hdNx5CjJT1DeL5McW0tid+gFkaqEUePP9+ 5CC45IYw3M9VahjxQ/Qr9R6IdgWJo6ovQrynKROz9fQXeYHuolawq9tJaIygwzRU Q2xx0oNIsr2ULOchSfZ7tl6gO+OEFJVh0QzYLeyATAW4VaXYBjrVghrGXCPJq9s2 b4MEIMHVBnVuLlVyTe+epAI+dP5UevSJHXcz3BJq2KW0Oy+2A8mf6iqhha11oLF/ McoBSgbfg+9uPy+YJAq+qmo1AZjUFZ0F -----END CERTIFICATE-----Generated at Thu Dec 18 22:03:10 2025 by rpki-client