This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft File: yvogqQGAldIp8KxDkg3NQ6Zr61I.mft (raw, json) Hash identifier: O6DHEJ2bZdbJVBOjE9eli0I6FPDTmyhSYxm9LzH+Q4U= Subject key identifier: 88:F9:0B:21:03:D3:E3:23:FD:DE:94:1C:01:93:83:83:DD:75:B8:2E Authority key identifier: CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 Certificate issuer: /CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Certificate serial: 11D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft Manifest number: 11B2 Signing time: Sat 06 Dec 2025 16:43:16 +0000 Manifest this update: Sat 06 Dec 2025 16:43:16 +0000 Manifest next update: Sat 13 Dec 2025 16:43:16 +0000 Files and hashes: 1: yvogqQGAldIp8KxDkg3NQ6Zr61I.crl (hash: VPAx1dZG3czwV9Qe8r1sT71Feqr9uaF27qRM+MHkXYY=) 2: 08BD74841A4F11EA8DFECB86C4F9AE02.roa (hash: 5pPzlX8jdTNFookFj/rSeOJPoKLM49nAfSCOByjLKkM=) 3: B9F821D4462D11EC93DFE63CC4F9AE02.roa (hash: I8lWHibGq7xqWHXndBv/JsEhBfdVBWJiR9FoofIbTMA=) 4: F7ACE748AD3C11EA95DFF369C4F9AE02.roa (hash: eva2CwxKJKJqWQ6I0wp7A0DX5eeMMT63BYKB14R391I=) 5: F6609DDAAD3C11EA95DFF369C4F9AE02.roa (hash: RU5uDzdAkRAS9qZ8SwVPWAXrYZQRzn4OHSyBtdDYzzE=) 6: D3258BFA7AE711EFB4F5E235C4F9AE02.roa (hash: IqcKshpk+qASTKe+nVLkoXyik/TGszfm7PEMyL1PxRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4568 (0x11d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4FB5, serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Validity Not Before: Dec 6 16:43:16 2025 GMT Not After : Dec 13 16:43:16 2025 GMT Subject: CN=69345d24-9b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0a:2e:bc:d4:38:d6:34:02:be:05:51:06:5e: 2c:94:06:71:a3:8f:28:3a:27:a2:43:ed:35:e7:8a: 7b:4a:ab:30:1f:6d:13:be:44:d1:37:0e:c4:3d:0a: 3a:0e:8a:c4:83:2a:b4:dd:fe:a9:89:c0:1c:49:4c: f2:84:4f:c8:4c:87:7f:67:b8:f9:2f:c5:69:08:66: 98:ec:c5:02:c2:20:6d:ed:fd:a2:d8:4b:f4:e2:5d: 9f:f0:c2:8e:aa:8a:e2:1f:3e:0b:a0:59:32:48:47: 4e:b4:0c:e1:64:12:55:56:06:f0:ce:22:98:34:b5: b9:b0:42:43:39:5f:20:1a:07:71:bf:64:81:27:f4: 15:30:23:1a:4a:98:76:e3:da:d4:b7:2d:ce:81:0d: eb:17:57:87:64:89:ed:06:d7:90:7c:7a:77:81:fd: 45:03:75:d0:cb:a8:51:b0:32:67:44:bd:18:e3:7a: ca:bd:df:7c:56:4d:17:1f:67:98:87:7f:21:99:2a: 5d:41:99:7c:69:c8:e2:66:c0:bf:b2:9f:36:f6:08: d0:c6:9e:c0:f2:cd:86:e4:ff:aa:9d:a6:3d:23:58: 16:5a:bb:7f:cd:83:41:cb:d4:37:dc:18:5d:77:2e: c4:fa:e9:2c:7d:0e:6d:29:7f:0c:43:6e:74:11:8b: ca:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F9:0B:21:03:D3:E3:23:FD:DE:94:1C:01:93:83:83:DD:75:B8:2E X509v3 Authority Key Identifier: keyid:CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:ea:58:f6:c9:16:c1:df:be:24:b6:73:c7:43:9f:27:78:2c: b2:57:77:05:20:47:9a:5c:80:d4:b5:0e:9b:98:ba:ee:5a:7c: 37:f0:6d:63:39:32:09:45:54:1c:84:96:e7:8e:37:54:e1:eb: cf:2d:1e:35:84:f6:73:9f:5f:31:f0:f1:37:06:24:f6:56:f2: 1a:d9:46:55:5d:10:72:50:54:55:06:d9:5a:02:ff:23:dc:76: b5:05:b0:4a:19:c6:64:a9:56:f6:a0:53:30:4e:3e:bd:b5:ac: a9:e4:76:4f:90:c6:89:cd:12:01:10:2a:6b:54:83:a7:bb:eb: eb:b7:1f:cf:a2:10:62:90:ec:a4:09:98:6e:c5:54:99:37:24: 04:4a:b8:df:25:8a:83:24:2f:f4:ea:37:20:c1:c6:38:2e:7e: 7d:6f:54:a9:0a:d0:27:f8:4c:fe:d1:8a:61:45:b3:e3:55:60: 6a:b8:6b:52:3c:63:41:72:19:a5:7e:e4:a9:62:09:b7:2a:eb: f7:bb:fe:ee:69:54:e5:a2:d0:0b:5b:de:bb:ce:09:31:e5:47: 39:91:b2:01:ba:f3:58:18:87:69:dc:9b:7a:4c:2d:ca:7e:eb: 64:05:c8:8d:f4:16:28:a4:33:a3:a0:b7:93:d2:59:d9:69:6b: f5:d4:02:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGQjUxMTAvBgNVBAUTKENBRkEyMEE5MDE4MDk1RDIyOUYwQUM0MzkyMERDRDQz QTY2QkVCNTIwHhcNMjUxMjA2MTY0MzE2WhcNMjUxMjEzMTY0MzE2WjAYMRYwFAYD VQQDEw02OTM0NWQyNC05YjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgouvNQ41jQCvgVRBl4slAZxo48oOieiQ+0154p7SqswH20TvkTRNw7EPQo6 DorEgyq03f6picAcSUzyhE/ITId/Z7j5L8VpCGaY7MUCwiBt7f2i2Ev04l2f8MKO qoriHz4LoFkySEdOtAzhZBJVVgbwziKYNLW5sEJDOV8gGgdxv2SBJ/QVMCMaSph2 49rUty3OgQ3rF1eHZIntBteQfHp3gf1FA3XQy6hRsDJnRL0Y43rKvd98Vk0XH2eY h38hmSpdQZl8acjiZsC/sp829gjQxp7A8s2G5P+qnaY9I1gWWrt/zYNBy9Q33Bhd dy7E+uksfQ5tKX8MQ250EYvK8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIj5CyED 0+Mj/d6UHAGTg4PddbguMB8GA1UdIwQYMBaAFMr6IKkBgJXSKfCsQ5INzUOma+tS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEZCNS9FRjk4N0VFMjA5 RDExMUU5OTU2MDdCNTJDNEY5QUUwMi95dm9ncVFHQWxkSXA4S3hEa2czTlE2WnI2 MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l2b2dxUUdBbGRJcDhLeERrZzNOUTZacjYxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEZCNS9FRjk4N0VFMjA5RDExMUU5OTU2MDdCNTJDNEY5QUUwMi95dm9ncVFHQWxk SXA4S3hEa2czTlE2WnI2MUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA6lj2yRbB374ktnPHQ58neCyyV3cFIEeaXIDUtQ6bmLruWnw38G1j OTIJRVQchJbnjjdU4evPLR41hPZzn18x8PE3BiT2VvIa2UZVXRByUFRVBtlaAv8j 3Ha1BbBKGcZkqVb2oFMwTj69tayp5HZPkMaJzRIBECprVIOnu+vrtx/PohBikOyk CZhuxVSZNyQESrjfJYqDJC/06jcgwcY4Ln59b1SpCtAn+Ez+0YphRbPjVWBquGtS PGNBchmlfuSpYgm3Kuv3u/7uaVTlotALW967zgkx5Uc5kbIBuvNYGIdp3Jt6TC3K futkBciN9BYopDOjoLeT0lnZaWv11AJE -----END CERTIFICATE-----Generated at Sat Dec 6 19:17:33 2025 by rpki-client