This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft File: ygziy6mc3g2QJ_zkhk8myRPUGeM.mft (raw, json) Hash identifier: R0D4HIXtDtqIviCl1vDVNrs+J5pLYXp5SCwT7fG62p4= Subject key identifier: DE:D6:D7:93:CC:94:CF:51:59:71:B5:EF:C4:E0:FA:EB:D8:13:2C:67 Authority key identifier: CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3 Certificate issuer: /CN=A91B2C43/serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3 Certificate serial: 0BC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft Manifest number: 0BAB Signing time: Sat 06 Dec 2025 18:18:03 +0000 Manifest this update: Sat 06 Dec 2025 18:18:02 +0000 Manifest next update: Sat 13 Dec 2025 18:18:02 +0000 Files and hashes: 1: ygziy6mc3g2QJ_zkhk8myRPUGeM.crl (hash: UjLoQy/vYi13ZjYkWhY6XPT2MWWw/CVQmGH2sVXnKkQ=) 2: AD989788E05511EEADC7D67EC4F9AE02.roa (hash: gKXy2g22Zjp1Hqmn7Qc1nw8xcDNaJidEhFHTK4F7AJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3011 (0xbc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2C43, serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3 Validity Not Before: Dec 6 18:18:02 2025 GMT Not After : Dec 13 18:18:02 2025 GMT Subject: CN=6934735a-6c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5d:a2:aa:7a:42:05:52:c5:57:41:7c:26:c1: a1:c0:3c:aa:d4:6e:14:d0:63:81:22:1f:77:57:96: 5c:85:e5:e1:62:28:6f:fd:8c:3d:db:48:77:68:ef: 74:ec:f1:ce:17:d4:ca:53:41:ff:b9:d0:10:b7:e8: ae:ad:35:a5:1a:67:82:fa:07:cc:87:94:74:ae:a7: c7:37:06:41:b3:f0:c7:25:ce:08:0e:99:c3:53:e4: bf:bd:5c:f1:97:82:a4:e2:d6:04:63:6f:d5:4f:c6: 40:45:9b:1a:56:fa:98:08:f4:cb:9d:c8:08:03:eb: f7:4d:e0:aa:5e:ec:b2:16:05:33:a7:f4:31:61:ee: 43:95:e8:36:c0:46:9c:e0:05:4b:28:2c:ff:00:58: 28:24:e9:d1:f7:63:6b:d8:44:af:b2:21:e7:fe:fd: b3:34:e4:4e:f3:04:8a:2d:bb:21:da:ac:09:f3:fb: 78:88:9f:5b:41:ae:9f:84:7b:62:a0:43:37:0e:9c: 5f:33:ff:33:cb:3e:de:8b:7c:68:09:80:40:5c:bd: f3:4a:a4:37:21:c7:4e:7d:b4:e9:99:4c:46:3c:54: 55:a2:30:a6:75:f8:fc:6c:6c:e3:77:6e:c6:8f:fb: df:4e:1e:f0:54:74:b1:97:9e:10:ba:04:f6:1b:54: 65:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D6:D7:93:CC:94:CF:51:59:71:B5:EF:C4:E0:FA:EB:D8:13:2C:67 X509v3 Authority Key Identifier: keyid:CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:a2:50:73:4f:9f:5a:18:17:bc:dd:0f:be:84:50:c2:4b:76: 0c:5e:14:12:7a:22:8d:29:2a:87:b6:8d:46:3f:2b:99:0b:20: c1:60:f7:88:18:cf:d8:a7:7a:ce:c7:d9:2b:ee:4d:5d:40:ff: 89:c4:46:7f:f2:b1:40:a1:47:33:5c:f5:3c:0c:30:ec:05:5c: 64:21:e5:4d:16:24:7e:6c:2d:d8:62:b8:13:f2:7e:82:4b:52: 61:8d:50:7f:c6:9e:49:f9:98:d1:13:0a:42:5e:4f:bd:77:3b: 71:1a:54:6a:2a:4c:57:da:b0:ed:aa:26:02:99:a3:a7:ef:5c: 23:af:7f:0b:ae:60:b1:18:a7:47:41:dd:36:76:9d:04:31:8b: 07:75:11:8e:65:2b:5d:eb:46:c9:58:fa:2d:f1:17:87:04:84: 56:36:f0:9b:90:a1:bc:53:ac:49:ea:03:fb:95:ef:f2:bf:ec: c8:b9:47:46:21:a0:02:13:fd:c4:00:49:e1:3f:73:b7:58:a6: 19:72:b8:c8:ea:4d:f6:fc:fe:4a:52:9c:89:c1:39:a4:1c:db: 89:06:5f:ac:bb:97:51:ff:70:a0:f5:60:2b:e4:1f:26:ff:4b: 84:1a:b5:11:9d:15:c9:87:2a:41:9f:f3:9a:c8:d0:64:44:04: 9f:45:f9:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDNDMxMTAvBgNVBAUTKENBMENFMkNCQTk5Q0RFMEQ5MDI3RkNFNDg2NEYyNkM5 MTNENDE5RTMwHhcNMjUxMjA2MTgxODAyWhcNMjUxMjEzMTgxODAyWjAYMRYwFAYD VQQDEw02OTM0NzM1YS02YzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3l2iqnpCBVLFV0F8JsGhwDyq1G4U0GOBIh93V5ZcheXhYihv/Yw920h3aO90 7PHOF9TKU0H/udAQt+iurTWlGmeC+gfMh5R0rqfHNwZBs/DHJc4IDpnDU+S/vVzx l4Kk4tYEY2/VT8ZARZsaVvqYCPTLncgIA+v3TeCqXuyyFgUzp/QxYe5Dleg2wEac 4AVLKCz/AFgoJOnR92Nr2ESvsiHn/v2zNORO8wSKLbsh2qwJ8/t4iJ9bQa6fhHti oEM3DpxfM/8zyz7ei3xoCYBAXL3zSqQ3IcdOfbTpmUxGPFRVojCmdfj8bGzjd27G j/vfTh7wVHSxl54QugT2G1RlbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7W15PM lM9RWXG178Tg+uvYEyxnMB8GA1UdIwQYMBaAFMoM4supnN4NkCf85IZPJskT1Bnj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM0My9EQzJGNTQ2ODM5 RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNnMlFKX3praGs4bXlSUFVH ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lneml5Nm1jM2cyUUpfemtoazhteVJQVUdlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkM0My9EQzJGNTQ2ODM5RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNn MlFKX3praGs4bXlSUFVHZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3olBzT59aGBe83Q++hFDCS3YMXhQSeiKNKSqHto1GPyuZCyDBYPeI GM/Yp3rOx9kr7k1dQP+JxEZ/8rFAoUczXPU8DDDsBVxkIeVNFiR+bC3YYrgT8n6C S1JhjVB/xp5J+ZjREwpCXk+9dztxGlRqKkxX2rDtqiYCmaOn71wjr38LrmCxGKdH Qd02dp0EMYsHdRGOZStd60bJWPot8ReHBIRWNvCbkKG8U6xJ6gP7le/yv+zIuUdG IaACE/3EAEnhP3O3WKYZcrjI6k32/P5KUpyJwTmkHNuJBl+su5dR/3Cg9WAr5B8m /0uEGrURnRXJhypBn/OayNBkRASfRfno -----END CERTIFICATE-----Generated at Sun Dec 7 02:38:11 2025 by rpki-client