This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft File: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft (raw, json) Hash identifier: YTq48nY8iSkirtqDhdrLPeDZLUu75SC6EDafQRrwZhw= Subject key identifier: 76:06:9A:1B:02:14:A3:2C:43:85:44:AD:A8:FF:71:B7:F0:0A:F9:BD Authority key identifier: 60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04 Certificate issuer: /CN=A91BBED0/serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204 Certificate serial: 0192 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft Manifest number: 018D Signing time: Sun 07 Dec 2025 02:00:42 +0000 Manifest this update: Sun 07 Dec 2025 02:00:42 +0000 Manifest next update: Sun 14 Dec 2025 02:00:42 +0000 Files and hashes: 1: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl (hash: CMrSAmzJlyRk8WN04QyX6IF46kFEdmg7Xau2j+fcRZg=) 2: 2BA240AC994111F096074C40C4F9AE02.roa (hash: muY8FRyGGtKORkz0DPbnMxy7K5goG6Kn9e6MVRZPVic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 02:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBED0, serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204 Validity Not Before: Dec 7 02:00:42 2025 GMT Not After : Dec 14 02:00:42 2025 GMT Subject: CN=6934dfca-e96b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0a:79:b4:d3:db:3d:2a:96:2b:18:75:a0:b1: 14:80:d8:d9:63:58:91:80:56:44:7d:44:4c:7e:bb: a3:43:a3:ee:e7:e5:6a:34:b6:90:ac:ab:30:5d:ee: bd:5b:51:72:17:65:b7:05:71:c5:03:bb:be:33:07: a3:fc:6d:63:8d:bc:12:6d:63:c1:e3:50:ae:5a:16: 11:7c:e3:9d:8c:9d:6d:ae:7b:5c:6c:06:3f:70:c9: 11:20:aa:f1:25:ca:a5:1e:f8:f7:d2:18:3b:87:3c: a6:6c:fc:57:1d:18:bb:05:c3:e4:8b:48:2f:3e:31: 5d:5d:cd:68:d6:49:ed:62:96:31:34:d5:d6:52:ef: cd:5a:54:fb:cf:2a:02:75:9c:65:8c:8a:dd:e6:7f: da:a6:cb:e2:8d:e0:84:c8:b3:64:c2:e9:c6:91:60: 9d:4f:3f:f5:77:b2:70:e3:49:60:56:d5:b6:e6:2a: 9f:8c:78:dd:d2:6b:37:49:35:7e:1c:79:de:a0:09: 5f:a6:26:d3:c5:8e:bb:9c:9b:df:ad:08:3d:d7:dc: ce:29:de:5e:aa:82:50:0d:9b:6e:13:26:c0:c1:8c: 42:64:f9:fb:98:c3:ec:02:cd:03:c1:a3:86:6e:c9: f1:c0:5b:08:31:1b:a0:b2:59:fd:8d:e8:33:87:22: bf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:06:9A:1B:02:14:A3:2C:43:85:44:AD:A8:FF:71:B7:F0:0A:F9:BD X509v3 Authority Key Identifier: keyid:60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:51:59:c4:a9:ca:60:1f:82:7d:88:5a:a3:81:66:58:9a:9c: 24:af:c4:31:ff:ca:6a:49:18:4f:da:a7:1a:3c:d2:aa:ec:fa: 98:06:b0:b1:fe:f0:7d:cc:29:f8:96:56:7d:d2:37:23:62:2d: 42:c8:55:33:a5:1c:fc:83:d9:72:8a:48:6f:b6:27:dd:7b:3e: 85:ff:fb:7c:1d:93:fa:2e:53:c0:4e:d2:d7:30:41:98:34:9d: 6d:b4:d3:38:10:52:06:2e:44:7e:76:b2:7f:ec:8a:d4:f3:83: 2a:60:88:48:f8:29:2f:0d:43:16:13:ef:8d:d9:91:ce:33:c6: 91:2d:63:f7:ad:55:88:83:7a:52:cb:9d:1c:dc:b6:bb:8b:58: c6:58:83:85:06:47:e9:85:9f:9c:b2:88:27:fc:21:25:f9:6b: 77:bd:b9:70:29:38:4d:0a:bc:39:7f:50:67:70:76:c5:be:8a: d1:16:33:7d:26:71:b7:ac:6c:2e:56:bb:f1:73:cb:97:80:0e: 7a:5f:71:0d:4b:ed:f5:28:5a:f4:6d:00:22:7e:95:89:15:17: 1b:f4:94:8b:ba:fc:d9:76:d0:6b:0e:7f:ab:70:77:03:2e:1e: 39:b9:cb:63:7d:e7:2b:4b:b4:bb:40:4f:7b:cf:aa:b1:ad:04: bc:67:72:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJFRDAxMTAvBgNVBAUTKDYwOUZFQzI1OTQzODBGQzc2Mzk2OTQxNzNDM0NGRTVG MkI1OTYyMDQwHhcNMjUxMjA3MDIwMDQyWhcNMjUxMjE0MDIwMDQyWjAYMRYwFAYD VQQDEw02OTM0ZGZjYS1lOTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gp5tNPbPSqWKxh1oLEUgNjZY1iRgFZEfURMfrujQ6Pu5+VqNLaQrKswXe69 W1FyF2W3BXHFA7u+Mwej/G1jjbwSbWPB41CuWhYRfOOdjJ1trntcbAY/cMkRIKrx JcqlHvj30hg7hzymbPxXHRi7BcPki0gvPjFdXc1o1kntYpYxNNXWUu/NWlT7zyoC dZxljIrd5n/apsvijeCEyLNkwunGkWCdTz/1d7Jw40lgVtW25iqfjHjd0ms3STV+ HHneoAlfpibTxY67nJvfrQg919zOKd5eqoJQDZtuEybAwYxCZPn7mMPsAs0DwaOG bsnxwFsIMRugsln9jegzhyK/VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYGmhsC FKMsQ4VEraj/cbfwCvm9MB8GA1UdIwQYMBaAFGCf7CWUOA/HY5aUFzw8/l8rWWIE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkVEMC80QzE3QTA0RTc3 RTExMUVFQUI0QUVGNTNDNEY5QUUwMi9ZSl9zSlpRNEQ4ZGpscFFYUER6LVh5dFpZ Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKX3NKWlE0RDhkamxwUVhQRHotWHl0WllnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkVEMC80QzE3QTA0RTc3RTExMUVFQUI0QUVGNTNDNEY5QUUwMi9ZSl9zSlpRNEQ4 ZGpscFFYUER6LVh5dFpZZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIUVnEqcpgH4J9iFqjgWZYmpwkr8Qx/8pqSRhP2qcaPNKq7PqYBrCx /vB9zCn4llZ90jcjYi1CyFUzpRz8g9lyikhvtifdez6F//t8HZP6LlPATtLXMEGY NJ1ttNM4EFIGLkR+drJ/7IrU84MqYIhI+CkvDUMWE++N2ZHOM8aRLWP3rVWIg3pS y50c3La7i1jGWIOFBkfphZ+csogn/CEl+Wt3vblwKThNCrw5f1BncHbFvorRFjN9 JnG3rGwuVrvxc8uXgA56X3ENS+31KFr0bQAifpWJFRcb9JSLuvzZdtBrDn+rcHcD Lh45uctjfecrS7S7QE97z6qxrQS8Z3Lj -----END CERTIFICATE-----Generated at Sun Dec 7 06:19:18 2025 by rpki-client