This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft File: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft (raw, json) Hash identifier: fXytZ+KfTH3oCKaaIo2R94CrydLcOMYsa67Pxx0UnJc= Subject key identifier: F5:E3:79:92:41:1C:AB:7E:B7:EF:02:AF:A9:32:D5:52:05:88:57:2E Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 Certificate issuer: /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Certificate serial: 31D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft Manifest number: 31B9 Signing time: Thu 04 Dec 2025 15:15:00 +0000 Manifest this update: Thu 04 Dec 2025 15:14:59 +0000 Manifest next update: Thu 11 Dec 2025 15:14:59 +0000 Files and hashes: 1: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl (hash: VDhi6nSXfBCULine4GEq1v1k2TgKtmxsg2Lz5R5LF0E=) 2: 33B0CCAEBCE311EA953FBB5EC4F9AE02.roa (hash: ErhPkGRbX8uOsiv8BWxLJU0CPTjQbpalIipsBEye//M=) 3: 32538B4EBCE311EA953FBB5EC4F9AE02.roa (hash: /EM/vo0t7hxhR1+u4hOK5kv/a5vaIBeuI2TOpMQ2J6U=) 4: 31CCE602BCE311EA953FBB5EC4F9AE02.roa (hash: 4L/QBsPDgl5EFK4nBoxi1+onb9ozFugWEl6aDf8ffAI=) 5: 33036E24BCE311EA953FBB5EC4F9AE02.roa (hash: XqVyekJEjEzuH8hLRjew+hAKZkF1o9oKv8NocJP1RLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 15:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12753 (0x31d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1461, serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Validity Not Before: Dec 4 15:14:59 2025 GMT Not After : Dec 11 15:14:59 2025 GMT Subject: CN=6931a574-bc99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e8:22:fc:72:77:a7:a3:4f:3d:6c:55:30:4e: b9:44:ab:30:98:84:c8:4f:f8:d1:cd:5a:99:86:67: 97:c9:2c:f9:8b:1c:f6:35:ca:a6:c0:34:9e:b0:22: f3:a8:10:23:c8:94:42:0e:36:9e:71:ec:18:94:f2: e7:9a:2d:5d:75:09:a4:c8:fe:50:60:c2:a5:92:88: aa:5a:81:3c:fe:f0:08:bd:9e:aa:96:fd:d8:9b:d3: 5e:4f:4d:05:25:a3:0d:ec:55:4d:e9:f6:41:14:9a: 16:b9:51:6d:d9:f3:85:2b:a9:ca:1a:af:6c:b5:0c: e8:65:4b:f5:24:92:f7:b4:bc:73:22:d2:ab:eb:be: f4:67:bd:2a:2e:05:e7:89:04:af:fd:61:c8:9c:61: 9a:58:00:93:50:68:e1:f8:9b:46:d2:64:7a:ca:3e: 29:90:6f:99:f8:c4:a3:9e:c1:1a:b4:cb:50:e1:c5: d3:e1:1f:52:47:5c:ad:1a:79:34:9b:2b:02:bf:43: 2b:a1:dc:22:f0:07:f1:77:a5:06:ab:ad:02:cc:38: a0:1e:7a:82:0b:e9:87:86:76:fe:45:48:8f:6a:ad: ae:83:8f:4c:4a:68:c6:01:a5:39:da:f3:bc:e6:51: 2a:27:e0:09:e3:40:cb:e0:cd:2d:67:54:1f:54:04: 49:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E3:79:92:41:1C:AB:7E:B7:EF:02:AF:A9:32:D5:52:05:88:57:2E X509v3 Authority Key Identifier: keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d0:5c:7d:3a:71:89:12:0f:06:b5:19:66:ed:be:f8:94:04: c3:50:fa:44:b6:09:8b:ea:78:47:4e:38:e7:67:71:f0:bd:5b: 42:ba:b3:c2:46:27:4a:77:73:1a:74:18:3e:b3:a4:f1:7b:91: 74:8a:3d:d9:af:50:81:59:38:3c:5c:43:44:58:cd:f1:a6:a5: 16:4c:e0:cd:01:12:49:1c:cf:8a:ba:a9:b1:3c:bf:6f:23:6d: d3:d4:5a:bb:5d:56:2e:dc:4b:ec:19:9e:95:5b:44:9d:93:fe: 87:c7:6e:ce:ed:d9:46:32:4a:7d:c8:fc:57:bf:96:e9:c4:b2: a8:c6:0a:a6:e9:a3:39:5b:f9:a8:0f:e5:5a:0c:be:5b:fb:4c: b8:c7:9c:9b:06:61:18:c8:fc:5f:d6:6e:dd:ff:05:5d:5d:81: a8:89:8a:fc:bd:68:21:5e:2e:34:9c:95:9b:83:80:8f:5d:d1: 21:34:4a:34:44:b4:7b:30:4b:67:86:c6:77:e0:f4:12:c5:78: 95:53:5b:42:bb:33:13:c7:35:6c:f8:4d:4a:44:50:96:4a:4d: 7c:a8:56:70:52:ad:39:f4:97:da:39:47:8f:ec:5e:c1:eb:a9: 42:4e:90:03:af:de:0d:a9:53:c6:07:64:ef:d0:56:0a:cb:24: af:49:ee:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE0NjExMTAvBgNVBAUTKDYzN0VEMTQxRkZFMDI1RkQwNTE5OTQ1Q0VENDhFNzRG OEJEMEY1QzkwHhcNMjUxMjA0MTUxNDU5WhcNMjUxMjExMTUxNDU5WjAYMRYwFAYD VQQDEw02OTMxYTU3NC1iYzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzugi/HJ3p6NPPWxVME65RKswmITIT/jRzVqZhmeXySz5ixz2NcqmwDSesCLz qBAjyJRCDjaecewYlPLnmi1ddQmkyP5QYMKlkoiqWoE8/vAIvZ6qlv3Ym9NeT00F JaMN7FVN6fZBFJoWuVFt2fOFK6nKGq9stQzoZUv1JJL3tLxzItKr6770Z70qLgXn iQSv/WHInGGaWACTUGjh+JtG0mR6yj4pkG+Z+MSjnsEatMtQ4cXT4R9SR1ytGnk0 mysCv0Mrodwi8Afxd6UGq60CzDigHnqCC+mHhnb+RUiPaq2ug49MSmjGAaU52vO8 5lEqJ+AJ40DL4M0tZ1QfVARJNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXjeZJB HKt+t+8Cr6ky1VIFiFcuMB8GA1UdIwQYMBaAFGN+0UH/4CX9BRmUXO1I50+L0PXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTQ2MS9GQ0U5QTY4MEJE RjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pmMEZHWlJjN1VqblQ0dlE5 Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzN1JRZl9nSmYwRkdaUmM3VWpuVDR2UTljay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTQ2MS9GQ0U5QTY4MEJERjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pm MEZHWlJjN1VqblQ0dlE5Y2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO0Fx9OnGJEg8GtRlm7b74lATDUPpEtgmL6nhHTjjnZ3HwvVtCurPC RidKd3MadBg+s6Txe5F0ij3Zr1CBWTg8XENEWM3xpqUWTODNARJJHM+KuqmxPL9v I23T1Fq7XVYu3EvsGZ6VW0Sdk/6Hx27O7dlGMkp9yPxXv5bpxLKoxgqm6aM5W/mo D+VaDL5b+0y4x5ybBmEYyPxf1m7d/wVdXYGoiYr8vWghXi40nJWbg4CPXdEhNEo0 RLR7MEtnhsZ34PQSxXiVU1tCuzMTxzVs+E1KRFCWSk18qFZwUq059JfaOUeP7F7B 66lCTpADr94NqVPGB2Tv0FYKyySvSe4f -----END CERTIFICATE-----Generated at Sat Dec 6 12:24:26 2025 by rpki-client