This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft File: Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft (raw, json) Hash identifier: 6OPog1VS9qbRJtXL89QSJ5Qn9UDLTiHyThnX/jZ78jE= Subject key identifier: 46:9E:D4:67:0A:18:E2:70:2C:6E:6C:33:20:0A:88:62:C2:E3:9D:9E Authority key identifier: 63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00 Certificate issuer: /CN=A91AB238/serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00 Certificate serial: 0820 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft Manifest number: 0817 Signing time: Thu 04 Dec 2025 19:59:45 +0000 Manifest this update: Thu 04 Dec 2025 19:59:44 +0000 Manifest next update: Thu 11 Dec 2025 19:59:44 +0000 Files and hashes: 1: Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl (hash: afvYylBGfmcssabN3oU4NPcuLyRgvOiLvICTwOy0AgI=) 2: 7634D328351411EBBF864670C4F9AE02.roa (hash: gJ6rfZA4kdz2sP4zhVk5qWSiiFvdYYEjJ3d1LC4TVQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:59:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2080 (0x820) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB238, serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00 Validity Not Before: Dec 4 19:59:44 2025 GMT Not After : Dec 11 19:59:44 2025 GMT Subject: CN=6931e831-c8f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3f:97:01:59:46:50:00:2f:fd:e2:53:de:bf: 19:c6:aa:3d:39:af:7b:28:57:b6:e4:54:32:58:dd: 5c:11:23:56:4b:29:a1:fd:df:0e:2f:7d:90:ed:c3: 8a:cd:ea:07:87:c9:84:66:39:9f:31:64:6a:23:a2: 0e:32:ce:3f:c3:5b:98:c7:ca:f8:8e:30:1e:5b:7a: 04:25:f3:27:1f:7c:c6:20:87:5f:df:dc:29:dd:85: 73:e8:b5:c9:30:f7:fe:77:eb:e5:80:61:31:00:03: f6:16:73:3a:0c:07:cf:91:52:ea:3b:67:be:60:ff: 51:75:82:8f:c0:fe:5b:d2:df:91:f7:a3:6e:73:ec: 88:97:7f:c7:21:9f:cb:28:e6:1c:58:a6:a3:87:82: 3a:bf:d0:ed:08:bf:c0:2d:95:96:d5:02:09:7b:cc: 63:9c:1f:58:42:81:9a:db:0a:90:fc:8d:a4:94:a0: 79:75:fa:d7:20:e3:d0:08:35:85:a5:86:43:e7:be: 54:3d:1c:95:c3:d1:2e:44:d3:79:c6:ef:98:3b:a7: 0e:bf:5a:93:82:f9:34:7b:c6:c7:d9:33:9e:08:8b: b1:22:60:f0:f6:06:fe:29:3b:0b:ca:74:48:41:f2: 20:3e:52:f4:c9:da:23:d1:c0:e7:4f:26:1c:87:29: 37:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9E:D4:67:0A:18:E2:70:2C:6E:6C:33:20:0A:88:62:C2:E3:9D:9E X509v3 Authority Key Identifier: keyid:63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:25:cb:30:e1:f4:41:60:17:b6:47:52:a6:2e:c3:41:4b:32: 1a:15:14:65:ef:4b:26:d1:1a:7e:18:17:2b:96:b6:b2:4c:58: c3:34:73:08:f1:3f:12:b7:c7:9d:ec:fc:b4:30:22:c1:da:c3: 22:a4:25:39:d3:86:b5:db:1f:fb:41:62:c4:4c:49:ba:99:18: fd:bc:2a:c9:bc:42:92:42:95:8b:6b:a2:d2:12:cf:c4:ad:c5: d0:f7:a7:4a:e9:12:38:c1:18:1f:01:58:1f:25:95:53:25:16: b6:08:3c:e0:aa:f4:a2:e3:8c:b9:79:54:07:ce:94:28:f1:05: 8f:f2:0b:6f:87:36:8b:e1:e5:4c:e2:62:ea:df:3c:1f:da:f5: d0:25:44:67:73:37:4a:18:b8:87:ca:15:6a:c1:b9:b3:83:22: 69:7e:e5:db:75:c5:fe:9e:08:36:ec:a6:71:0e:8d:94:c1:42: cb:51:be:4c:6c:93:1a:ff:87:e3:a6:79:42:46:41:52:25:08: 5b:c1:4c:4f:df:8c:53:00:13:3e:46:a8:98:e4:98:90:51:a6: 78:54:a1:1a:d8:db:9a:e6:9c:45:50:23:9c:03:60:4d:2f:64: 7a:13:6f:22:73:10:67:ae:1d:69:81:ed:28:18:c3:ca:d3:04: b5:0b:9b:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMzgxMTAvBgNVBAUTKDYzRkFGNEQyM0U2ODNFOTNGNjA3NjMwRERGRkQ0QjFB RjYzMzNGMDAwHhcNMjUxMjA0MTk1OTQ0WhcNMjUxMjExMTk1OTQ0WjAYMRYwFAYD VQQDEw02OTMxZTgzMS1jOGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuj+XAVlGUAAv/eJT3r8Zxqo9Oa97KFe25FQyWN1cESNWSymh/d8OL32Q7cOK zeoHh8mEZjmfMWRqI6IOMs4/w1uYx8r4jjAeW3oEJfMnH3zGIIdf39wp3YVz6LXJ MPf+d+vlgGExAAP2FnM6DAfPkVLqO2e+YP9RdYKPwP5b0t+R96Nuc+yIl3/HIZ/L KOYcWKajh4I6v9DtCL/ALZWW1QIJe8xjnB9YQoGa2wqQ/I2klKB5dfrXIOPQCDWF pYZD575UPRyVw9EuRNN5xu+YO6cOv1qTgvk0e8bH2TOeCIuxImDw9gb+KTsLynRI QfIgPlL0ydoj0cDnTyYchyk3swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEae1GcK GOJwLG5sMyAKiGLC452eMB8GA1UdIwQYMBaAFGP69NI+aD6T9gdjDd/9Sxr2Mz8A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIzOC84QzdBMzM2OEZE RkExMUVBOTNBQUZGMEFDNEY5QUUwMi9ZX3IwMGo1b1BwUDJCMk1OM18xTEd2WXpQ d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lfcjAwajVvUHBQMkIyTU4zXzFMR3ZZelB3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjIzOC84QzdBMzM2OEZERkExMUVBOTNBQUZGMEFDNEY5QUUwMi9ZX3IwMGo1b1Bw UDJCMk1OM18xTEd2WXpQd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBJcsw4fRBYBe2R1KmLsNBSzIaFRRl70sm0Rp+GBcrlrayTFjDNHMI 8T8St8ed7Py0MCLB2sMipCU504a12x/7QWLETEm6mRj9vCrJvEKSQpWLa6LSEs/E rcXQ96dK6RI4wRgfAVgfJZVTJRa2CDzgqvSi44y5eVQHzpQo8QWP8gtvhzaL4eVM 4mLq3zwf2vXQJURnczdKGLiHyhVqwbmzgyJpfuXbdcX+ngg27KZxDo2UwULLUb5M bJMa/4fjpnlCRkFSJQhbwUxP34xTABM+RqiY5JiQUaZ4VKEa2Nua5pxFUCOcA2BN L2R6E28icxBnrh1pge0oGMPK0wS1C5tt -----END CERTIFICATE-----Generated at Sat Dec 6 16:22:32 2025 by rpki-client