This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft File: cYQNfZjFz5vWvrRIatRnQGXxR0E.mft (raw, json) Hash identifier: uG1tVPrHWvl2pW8TGxmpAYFu3lIkP/95sf1olHvbY5M= Subject key identifier: 76:4D:CC:F2:07:0A:C5:6D:C9:04:6A:4E:E4:96:4E:42:C7:98:F9:D2 Authority key identifier: 71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41 Certificate issuer: /CN=A91B7B61/serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741 Certificate serial: 060F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft Manifest number: 060A Signing time: Thu 04 Dec 2025 21:36:30 +0000 Manifest this update: Thu 04 Dec 2025 21:36:29 +0000 Manifest next update: Thu 11 Dec 2025 21:36:29 +0000 Files and hashes: 1: cYQNfZjFz5vWvrRIatRnQGXxR0E.crl (hash: VcYdGilVE88hXAwH3/NsVv4oGSWjNGV2WKMyO320L2M=) 2: C2EFC706CAAE11EBA95C5E64C4F9AE02.roa (hash: dMeJp28zx6FUq76ao4qK+ptEjKQRepLswYRFFIdTn7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1551 (0x60f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B61, serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741 Validity Not Before: Dec 4 21:36:29 2025 GMT Not After : Dec 11 21:36:29 2025 GMT Subject: CN=6931fedd-5131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:69:e5:78:cb:c5:e5:fb:c4:8f:fe:b1:0c:ac: ed:b9:4f:d4:a9:9d:78:be:83:08:c0:c2:3f:ac:84: 2a:54:a2:85:20:bd:d5:0c:a1:15:c8:8d:0e:b4:42: ea:f5:c4:1e:82:3c:5f:5c:b9:cf:1a:77:e3:21:53: 1c:90:63:54:97:ea:89:be:e3:37:e1:cf:bb:c3:bc: 89:93:f7:0d:ad:a4:4d:1a:ae:ac:6c:b7:ee:d2:a9: a8:0e:df:c5:eb:86:f8:df:6a:e5:d0:89:d8:c1:83: e3:e6:23:64:cd:60:76:1e:e3:4d:7e:2f:21:d3:5f: d5:98:0f:b4:7e:1e:cf:17:56:bf:49:53:89:2a:96: 1c:5e:9b:1e:90:d5:7e:45:4e:9d:df:06:0f:cc:5c: 8a:8b:92:fe:01:ae:f6:75:61:ae:bc:23:97:a4:43: 88:fd:a3:47:84:68:95:d6:36:52:ca:68:58:fb:e6: 01:fc:64:4f:e6:47:de:4c:40:a4:52:94:e1:24:c3: 05:05:f0:0b:91:4d:0f:c6:64:2a:5b:61:93:59:41: fd:cd:da:c6:45:7b:30:7b:35:12:7e:66:02:bd:00: 48:3c:33:8f:f7:a9:9a:f8:57:48:fb:9a:6b:89:ce: b4:74:ef:c9:27:55:3b:21:bf:70:58:45:6e:47:23: 5c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4D:CC:F2:07:0A:C5:6D:C9:04:6A:4E:E4:96:4E:42:C7:98:F9:D2 X509v3 Authority Key Identifier: keyid:71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:47:1f:b7:fc:c9:d4:40:08:c2:b7:e5:59:b6:93:b4:bd:1e: 3a:7b:f9:06:b6:da:6d:3f:61:fb:da:68:4d:5a:1f:85:a6:ec: 31:73:fe:c1:f1:08:4b:a1:59:c3:34:52:e4:bb:b4:05:ee:f4: cf:5e:5c:df:d8:9f:f1:fe:89:25:99:da:42:db:a0:98:ec:ff: 5a:59:cb:3c:39:13:44:71:60:56:ba:78:2a:25:3a:b9:38:86: be:d5:b8:8a:9e:b1:af:e6:1a:7e:05:a4:7a:02:71:ed:9f:75: 00:93:1e:f4:01:2f:78:46:b4:c4:ff:7d:f8:e8:a2:44:f0:b5: c9:ee:9b:98:17:bd:16:5d:d5:3e:09:fb:e6:6e:6f:6c:6b:85: 8c:3e:c8:e8:82:92:b0:da:1c:d5:45:d2:61:b6:76:86:b4:e2: c9:da:6e:54:bf:c7:34:df:52:58:e2:83:55:44:83:80:2d:ae: 76:d4:1f:27:7b:26:c3:5e:ec:ba:a4:09:f8:96:12:e6:55:7d: 06:8f:85:0a:55:bb:12:cf:5b:96:c5:80:27:3d:99:64:6e:57: 49:d3:96:f0:88:14:9f:7b:49:d0:ed:78:8e:98:b4:33:58:d1: 5d:fc:3e:f9:24:ae:fe:0c:06:74:ca:0b:31:c5:30:3e:ac:cb: 9a:7e:91:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCNjExMTAvBgNVBAUTKDcxODQwRDdEOThDNUNGOUJENkJFQjQ0ODZBRDQ2NzQw NjVGMTQ3NDEwHhcNMjUxMjA0MjEzNjI5WhcNMjUxMjExMjEzNjI5WjAYMRYwFAYD VQQDEw02OTMxZmVkZC01MTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2WnleMvF5fvEj/6xDKztuU/UqZ14voMIwMI/rIQqVKKFIL3VDKEVyI0OtELq 9cQegjxfXLnPGnfjIVMckGNUl+qJvuM34c+7w7yJk/cNraRNGq6sbLfu0qmoDt/F 64b432rl0InYwYPj5iNkzWB2HuNNfi8h01/VmA+0fh7PF1a/SVOJKpYcXpsekNV+ RU6d3wYPzFyKi5L+Aa72dWGuvCOXpEOI/aNHhGiV1jZSymhY++YB/GRP5kfeTECk UpThJMMFBfALkU0PxmQqW2GTWUH9zdrGRXswezUSfmYCvQBIPDOP96ma+FdI+5pr ic60dO/JJ1U7Ib9wWEVuRyNczwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZNzPIH CsVtyQRqTuSWTkLHmPnSMB8GA1UdIwQYMBaAFHGEDX2Yxc+b1r60SGrUZ0Bl8UdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0I2MS9CRTY4RDMwMkNB QUExMUVCQjhDMDJCNUNDNEY5QUUwMi9jWVFOZlpqRno1dld2clJJYXRSblFHWHhS MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NZUU5mWmpGejV2V3ZyUklhdFJuUUdYeFIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0I2MS9CRTY4RDMwMkNBQUExMUVCQjhDMDJCNUNDNEY5QUUwMi9jWVFOZlpqRno1 dld2clJJYXRSblFHWHhSMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnRx+3/MnUQAjCt+VZtpO0vR46e/kGttptP2H72mhNWh+Fpuwxc/7B 8QhLoVnDNFLku7QF7vTPXlzf2J/x/oklmdpC26CY7P9aWcs8ORNEcWBWungqJTq5 OIa+1biKnrGv5hp+BaR6AnHtn3UAkx70AS94RrTE/3346KJE8LXJ7puYF70WXdU+ Cfvmbm9sa4WMPsjogpKw2hzVRdJhtnaGtOLJ2m5Uv8c031JY4oNVRIOALa521B8n eybDXuy6pAn4lhLmVX0Gj4UKVbsSz1uWxYAnPZlkbldJ05bwiBSfe0nQ7XiOmLQz WNFd/D75JK7+DAZ0ygsxxTA+rMuafpGm -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:04 2025 by rpki-client