This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft File: y2yF51LVad_PHekEycvnHkg-9fI.mft (raw, json) Hash identifier: 36pUymgeED8wDNzEdJejbj9/SXsQAtDXDLr9690ldbQ= Subject key identifier: 95:E1:F2:6F:D4:91:16:9B:03:76:49:7A:DC:9E:69:6F:FD:CA:C4:D5 Authority key identifier: CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2 Certificate issuer: /CN=A91BC039/serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2 Certificate serial: 0536 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft Manifest number: 052F Signing time: Sat 06 Dec 2025 22:17:39 +0000 Manifest this update: Sat 06 Dec 2025 22:17:38 +0000 Manifest next update: Sat 13 Dec 2025 22:17:38 +0000 Files and hashes: 1: y2yF51LVad_PHekEycvnHkg-9fI.crl (hash: qORDsKRzasMtiCPYaM2WDKJjOVYzZmZKBRDGZfMKaLQ=) 2: B0A2E01225C411EC88466E59C4F9AE02.roa (hash: 17hh0FNaujnCIT3ahXwH9ZpLOVBDb8/2M5laDczvxVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1334 (0x536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC039, serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2 Validity Not Before: Dec 6 22:17:38 2025 GMT Not After : Dec 13 22:17:38 2025 GMT Subject: CN=6934ab82-6dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:21:4e:72:ed:d7:3b:7e:55:66:06:72:3b:67: ab:ce:10:d5:28:79:28:cf:0f:4b:e1:15:0f:59:40: bf:0d:2e:61:84:a7:53:64:b8:55:74:1e:1e:70:83: 08:b7:c1:70:cf:01:3b:7e:c3:e3:af:88:31:64:6a: 07:ac:aa:3e:50:17:62:e4:d7:e7:a5:8c:d7:e7:1c: f4:dc:c4:57:21:69:1a:9d:84:1c:9e:d1:83:e7:94: a6:a4:2d:1c:0b:13:0a:82:52:b2:30:0d:36:8a:0a: c1:2f:67:ef:b6:09:51:63:2e:83:d1:29:e6:bb:0f: 1a:db:b9:57:20:aa:52:da:bc:16:85:23:ae:96:05: b6:b3:b4:14:26:cb:2e:9c:76:12:3a:02:ef:49:87: f0:40:5a:69:f3:81:5f:8e:5c:bf:83:d5:cf:9f:f0: 26:6c:f1:26:ac:74:24:1c:c2:64:6f:45:f1:d5:2f: b6:85:ae:ba:a5:b1:7b:33:15:3f:e1:c1:16:4d:63: 26:98:dc:dc:4e:b2:69:fe:5f:fe:d4:78:09:62:7b: 2c:0d:91:ce:0a:43:e6:59:3e:d5:fa:1c:64:39:4b: 39:52:c4:fe:c9:85:97:6f:a0:05:7f:04:54:76:71: 83:4c:8a:06:6f:e9:ee:69:86:5e:24:d6:81:82:b4: c0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E1:F2:6F:D4:91:16:9B:03:76:49:7A:DC:9E:69:6F:FD:CA:C4:D5 X509v3 Authority Key Identifier: keyid:CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:b2:25:3e:5d:24:5a:12:7b:d4:88:f6:a4:5a:d2:58:ee:e0: 7e:e5:a2:52:a9:46:16:97:90:1c:89:47:ef:11:af:8b:1e:a9: 86:47:39:3e:c2:2c:8a:8d:9f:34:aa:10:25:cf:65:0e:ee:7e: 83:b0:5c:d8:df:0d:78:bb:63:29:77:12:44:2a:79:af:69:05: 7d:22:cd:1e:56:f3:02:f5:ab:89:b7:57:a4:e0:fb:c0:d6:d4: 8f:7b:55:bc:f9:38:59:22:82:b8:bc:c4:9e:ee:a1:70:b2:44: 5a:b4:77:2b:f6:df:e4:a5:ff:a6:40:19:d4:40:c4:8f:e7:9d: 2a:6f:d4:32:71:66:7e:f4:36:50:bf:3c:2d:4d:16:56:ab:76: ca:28:e0:9a:1d:f6:d1:94:65:79:e0:4b:05:5d:af:67:14:b2: 20:8b:b7:a5:fb:94:33:45:d9:62:99:46:64:5d:1a:a8:2a:a3: 78:8d:8a:22:87:9e:bd:83:d8:83:f8:0e:9d:ff:96:f3:26:1c: 8d:b4:c3:a9:21:81:ab:02:e0:b4:05:6c:26:7f:24:3e:bf:72: 7b:a0:e2:be:22:4a:7a:63:3c:08:5e:b7:8f:f8:17:43:91:9c: 5b:47:45:91:2f:f5:9a:44:ea:78:a5:a7:7d:ac:7e:ab:80:39: 80:6d:96:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMwMzkxMTAvBgNVBAUTKENCNkM4NUU3NTJENTY5REZDRjFERTkwNEM5Q0JFNzFF NDgzRUY1RjIwHhcNMjUxMjA2MjIxNzM4WhcNMjUxMjEzMjIxNzM4WjAYMRYwFAYD VQQDEw02OTM0YWI4Mi02ZGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApiFOcu3XO35VZgZyO2erzhDVKHkozw9L4RUPWUC/DS5hhKdTZLhVdB4ecIMI t8FwzwE7fsPjr4gxZGoHrKo+UBdi5NfnpYzX5xz03MRXIWkanYQcntGD55SmpC0c CxMKglKyMA02igrBL2fvtglRYy6D0Snmuw8a27lXIKpS2rwWhSOulgW2s7QUJssu nHYSOgLvSYfwQFpp84Ffjly/g9XPn/AmbPEmrHQkHMJkb0Xx1S+2ha66pbF7MxU/ 4cEWTWMmmNzcTrJp/l/+1HgJYnssDZHOCkPmWT7V+hxkOUs5UsT+yYWXb6AFfwRU dnGDTIoGb+nuaYZeJNaBgrTACQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXh8m/U kRabA3ZJetyeaW/9ysTVMB8GA1UdIwQYMBaAFMtshedS1Wnfzx3pBMnL5x5IPvXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzAzOS9CQjUzMjNFODI1 QzIxMUVDQjQ5OUQxNThDNEY5QUUwMi95MnlGNTFMVmFkX1BIZWtFeWN2bkhrZy05 ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kyeUY1MUxWYWRfUEhla0V5Y3ZuSGtnLTlmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzAzOS9CQjUzMjNFODI1QzIxMUVDQjQ5OUQxNThDNEY5QUUwMi95MnlGNTFMVmFk X1BIZWtFeWN2bkhrZy05ZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqsiU+XSRaEnvUiPakWtJY7uB+5aJSqUYWl5AciUfvEa+LHqmGRzk+ wiyKjZ80qhAlz2UO7n6DsFzY3w14u2MpdxJEKnmvaQV9Is0eVvMC9auJt1ek4PvA 1tSPe1W8+ThZIoK4vMSe7qFwskRatHcr9t/kpf+mQBnUQMSP550qb9QycWZ+9DZQ vzwtTRZWq3bKKOCaHfbRlGV54EsFXa9nFLIgi7el+5QzRdlimUZkXRqoKqN4jYoi h569g9iD+A6d/5bzJhyNtMOpIYGrAuC0BWwmfyQ+v3J7oOK+Ikp6YzwIXreP+BdD kZxbR0WRL/WaROp4pad9rH6rgDmAbZaJ -----END CERTIFICATE-----Generated at Sun Dec 7 00:59:12 2025 by rpki-client