This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft File: y8CtGWWFFkH2YRHo4pAmmKm57YA.mft (raw, json) Hash identifier: yT1djkT6qYSLPccrKZ+reT010e5cX7EYdO2t7tfLJts= Subject key identifier: 3E:B9:53:0F:D3:FF:20:A7:21:16:C1:31:AB:01:E2:AA:55:06:54:7C Authority key identifier: CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80 Certificate issuer: /CN=A91C38CC/serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80 Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft Manifest number: 0154 Signing time: Fri 05 Dec 2025 02:25:13 +0000 Manifest this update: Fri 05 Dec 2025 02:25:12 +0000 Manifest next update: Fri 12 Dec 2025 02:25:12 +0000 Files and hashes: 1: y8CtGWWFFkH2YRHo4pAmmKm57YA.crl (hash: o7IsPiiWMg+OjVmYzcul6K1OlTjVY5bBB4F48P6+Tho=) 2: CA2A06D6D5E511EE9B319A12C4F9AE02.roa (hash: 1oH4ItbHmVm/1fEeraEE8P2kGDhaFGfTWlutWFwmvbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C38CC, serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80 Validity Not Before: Dec 5 02:25:12 2025 GMT Not After : Dec 12 02:25:12 2025 GMT Subject: CN=69324288-b8d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:78:4d:e1:30:e4:67:af:cd:2a:14:2e:1e:6f: 35:ee:7a:cf:77:82:d3:69:b9:44:e0:3d:97:28:e9: ae:4d:fd:8a:4c:ca:97:70:d9:70:7c:ed:bb:a9:e0: 7b:e7:8a:69:20:02:83:2a:61:6c:3e:b5:d2:75:72: c1:a5:ce:84:35:c1:4d:e0:07:36:ec:f8:7a:05:df: 18:2f:48:d5:1d:29:b7:13:93:d0:c1:00:7f:f2:24: 44:74:cc:78:55:7e:be:2c:23:04:e2:3e:bb:57:a1: 57:e8:a9:8b:de:ed:0d:c0:65:ee:3d:60:a3:6a:f8: 12:08:6b:43:20:d6:87:ca:e7:9f:71:96:64:fc:d1: f2:34:8d:df:71:1b:6a:ff:e9:ee:1f:a0:a3:7b:ce: f5:1b:b3:64:91:7e:22:77:10:ba:66:27:08:a6:aa: 49:34:37:4b:be:f8:45:85:9a:b0:26:69:7d:c5:58: a5:d8:1a:67:12:b0:32:30:73:66:2b:15:e8:27:b2: a3:8f:25:5f:ed:6d:39:2a:8c:00:96:5f:1a:44:1f: 70:a8:b9:5a:15:65:11:a2:11:9b:8c:73:ed:25:9c: aa:3f:19:43:5f:59:2e:93:fa:99:81:4e:d3:c7:bd: df:26:8c:2e:8b:63:2a:18:c8:df:34:7c:3f:73:5d: ec:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B9:53:0F:D3:FF:20:A7:21:16:C1:31:AB:01:E2:AA:55:06:54:7C X509v3 Authority Key Identifier: keyid:CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:d7:1c:dc:2a:f0:67:17:c9:66:b2:21:02:57:28:6d:89:32: a2:27:63:dd:b3:53:53:4a:05:e3:07:b1:ba:19:c3:0d:0f:d7: ee:30:74:24:35:01:48:77:99:c4:8a:05:de:f6:27:bd:61:4b: 8f:35:21:4a:41:a0:5a:15:2a:9c:da:1c:51:04:c9:1c:98:1b: eb:57:db:ac:00:60:07:47:a5:5c:72:23:a0:da:82:9c:ca:15: 85:ac:a8:d7:4b:e0:91:d4:dc:67:13:6e:1c:8b:80:ce:b9:2e: c7:d8:d4:20:e6:79:80:5b:65:ae:c7:e0:46:69:5f:82:45:4c: 63:90:9a:94:5c:7c:e2:6d:aa:4f:0d:83:17:60:9f:63:3f:96: 49:05:ec:b4:aa:99:6a:66:f5:25:37:08:91:70:60:ff:72:b7: e9:ab:a7:8e:2e:a1:f6:38:b7:a0:d0:2c:ed:9c:a6:66:08:4a: 40:e9:62:9a:b0:b6:6b:e7:7b:20:16:1d:79:b0:40:2e:b7:5a: 15:01:f3:52:fa:92:88:36:15:f3:4e:87:c6:58:4e:f2:c3:4f: 72:75:5a:ea:ad:ad:c0:ab:e9:88:e8:a6:21:cf:e8:12:48:54: af:a4:3e:2e:c1:d6:f6:67:46:ee:a5:e5:ef:5a:ac:5f:38:10: 5e:50:25:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM4Q0MxMTAvBgNVBAUTKENCQzBBRDE5NjU4NTE2NDFGNjYxMTFFOEUyOTAyNjk4 QTlCOUVEODAwHhcNMjUxMjA1MDIyNTEyWhcNMjUxMjEyMDIyNTEyWjAYMRYwFAYD VQQDEw02OTMyNDI4OC1iOGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA53hN4TDkZ6/NKhQuHm817nrPd4LTablE4D2XKOmuTf2KTMqXcNlwfO27qeB7 54ppIAKDKmFsPrXSdXLBpc6ENcFN4Ac27Ph6Bd8YL0jVHSm3E5PQwQB/8iREdMx4 VX6+LCME4j67V6FX6KmL3u0NwGXuPWCjavgSCGtDINaHyuefcZZk/NHyNI3fcRtq /+nuH6Cje871G7NkkX4idxC6ZicIpqpJNDdLvvhFhZqwJml9xVil2BpnErAyMHNm KxXoJ7KjjyVf7W05KowAll8aRB9wqLlaFWURohGbjHPtJZyqPxlDX1kuk/qZgU7T x73fJowui2MqGMjfNHw/c13seQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD65Uw/T /yCnIRbBMasB4qpVBlR8MB8GA1UdIwQYMBaAFMvArRllhRZB9mER6OKQJpipue2A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzhDQy8zQUM1N0M4Q0Q1 RTUxMUVFQjc3OTIyM0VDNEY5QUUwMi95OEN0R1dXRkZrSDJZUkhvNHBBbW1LbTU3 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k4Q3RHV1dGRmtIMllSSG80cEFtbUttNTdZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzhDQy8zQUM1N0M4Q0Q1RTUxMUVFQjc3OTIyM0VDNEY5QUUwMi95OEN0R1dXRkZr SDJZUkhvNHBBbW1LbTU3WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY1xzcKvBnF8lmsiECVyhtiTKiJ2Pds1NTSgXjB7G6GcMND9fuMHQk NQFId5nEigXe9ie9YUuPNSFKQaBaFSqc2hxRBMkcmBvrV9usAGAHR6VcciOg2oKc yhWFrKjXS+CR1NxnE24ci4DOuS7H2NQg5nmAW2Wux+BGaV+CRUxjkJqUXHzibapP DYMXYJ9jP5ZJBey0qplqZvUlNwiRcGD/crfpq6eOLqH2OLeg0CztnKZmCEpA6WKa sLZr53sgFh15sEAut1oVAfNS+pKINhXzTofGWE7yw09ydVrqra3Aq+mI6KYhz+gS SFSvpD4uwdb2Z0bupeXvWqxfOBBeUCXX -----END CERTIFICATE-----Generated at Sun Dec 7 03:55:24 2025 by rpki-client