This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft File: yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft (raw, json) Hash identifier: 1E2oYU0se//waEzE7zQGPQJfH7PZ1KOgHYnPGMhjD0w= Subject key identifier: 96:14:42:BD:AF:7D:EA:0C:7C:EE:06:D4:8F:C1:12:77:8B:14:1F:24 Authority key identifier: C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9 Certificate issuer: /CN=A91CCDF3/serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9 Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft Manifest number: 01D5 Signing time: Fri 05 Dec 2025 01:03:34 +0000 Manifest this update: Fri 05 Dec 2025 01:03:33 +0000 Manifest next update: Fri 12 Dec 2025 01:03:33 +0000 Files and hashes: 1: yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl (hash: kuFWOUX7DoR3P1IfjIuodAqdqXyZ25UC8LWspu3CLds=) 2: 851A7AD6FF7F11EDA505D70EC4F9AE02.roa (hash: dYTddJDImyu3rpg7QICAEFzGZsVfww3CPHFdjrscptU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDF3, serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9 Validity Not Before: Dec 5 01:03:33 2025 GMT Not After : Dec 12 01:03:33 2025 GMT Subject: CN=69322f66-2339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:76:cc:d4:4c:af:bc:45:0e:dd:cd:29:47:1b: 60:82:52:51:10:53:ae:3f:90:9f:c7:30:f9:b6:c2: b7:55:a7:a9:3d:60:50:05:c0:be:89:70:26:21:8c: bb:0c:df:86:b5:2e:87:06:a8:d6:4a:80:f4:36:13: a4:fe:a5:2a:d5:ec:6d:37:46:6d:c2:1f:d6:81:7d: 87:9b:11:4e:3b:f5:d4:0f:0c:5b:9e:43:cb:46:3d: f7:90:d4:8b:79:41:45:a6:cc:b2:fc:7b:eb:d0:ef: 44:cc:45:11:55:16:44:85:4e:b5:97:c9:a0:65:4e: 9a:b4:65:7e:ef:e5:ce:80:84:dd:72:2b:af:aa:58: a6:ea:12:bd:e5:74:23:16:92:11:75:4a:70:c8:60: 53:7e:0f:1e:e4:12:bb:25:d9:7d:e3:63:a4:f9:ed: ac:b1:5a:8c:c1:02:71:56:a1:09:04:ec:ec:d4:04: 27:d5:91:de:25:50:52:88:c4:6a:27:07:cb:c3:1f: 63:70:d7:11:05:76:23:ca:2c:03:db:8c:54:d7:63: 31:68:d1:d6:93:8f:3a:4c:91:2f:f4:33:02:21:0b: 12:f7:d3:5b:4e:c6:55:5b:98:a3:b8:1d:d0:bf:c5: 02:ef:3c:fa:09:c5:a8:7c:55:99:ce:0c:65:b0:56: 5e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:14:42:BD:AF:7D:EA:0C:7C:EE:06:D4:8F:C1:12:77:8B:14:1F:24 X509v3 Authority Key Identifier: keyid:C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:64:ad:05:a0:81:79:c0:64:d1:95:9f:8d:89:d7:6c:27:98: 0c:a1:43:65:06:a6:b8:62:c1:b1:3b:72:1c:48:0e:7f:2a:24: 3a:07:a3:f1:9a:29:e3:4f:bf:f0:fc:c0:f4:97:8f:70:0b:d1: a8:ec:1b:fc:a7:8c:3a:4b:f7:06:a7:b0:5d:75:a6:b6:e5:9f: 23:b3:ee:90:96:49:d8:a5:f4:e1:97:6a:ae:3a:24:02:81:38: 17:e8:a8:aa:e6:2d:5a:62:3f:67:07:8f:7e:c5:6b:c6:12:4f: e8:22:6f:dd:7c:df:16:66:e9:30:5e:eb:7c:4c:ad:bd:40:08: ae:8c:63:26:ef:97:56:7f:23:55:d5:a6:db:2c:ef:7d:c1:56: ae:bc:88:ba:52:f9:84:4a:dd:05:fb:f3:6b:be:48:59:c6:7a: 4e:96:e4:66:ed:73:c0:18:d8:93:16:99:04:c7:0c:9b:91:2d: 7b:07:b6:15:d3:00:f6:cf:be:45:48:49:ca:06:18:ab:7b:88: 95:89:8a:22:96:69:94:f8:e5:15:9f:96:68:d5:39:1a:d5:22: 5a:66:4e:b5:48:76:d7:e8:e0:85:9c:15:34:04:b0:96:da:a5: ea:33:10:79:b4:56:6e:40:4a:a4:1a:53:46:72:ff:58:84:09: a0:43:85:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NERjMxMTAvBgNVBAUTKEM5MTVGRDNCRDQ1QjgyMThCOTVGNTczNzQ5RDNBQTQ5 ODAxNkFBQTkwHhcNMjUxMjA1MDEwMzMzWhcNMjUxMjEyMDEwMzMzWjAYMRYwFAYD VQQDEw02OTMyMmY2Ni0yMzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnbM1EyvvEUO3c0pRxtgglJREFOuP5CfxzD5tsK3VaepPWBQBcC+iXAmIYy7 DN+GtS6HBqjWSoD0NhOk/qUq1extN0Ztwh/WgX2HmxFOO/XUDwxbnkPLRj33kNSL eUFFpsyy/Hvr0O9EzEURVRZEhU61l8mgZU6atGV+7+XOgITdciuvqlim6hK95XQj FpIRdUpwyGBTfg8e5BK7Jdl942Ok+e2ssVqMwQJxVqEJBOzs1AQn1ZHeJVBSiMRq JwfLwx9jcNcRBXYjyiwD24xU12MxaNHWk486TJEv9DMCIQsS99NbTsZVW5ijuB3Q v8UC7zz6CcWofFWZzgxlsFZeXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYUQr2v feoMfO4G1I/BEneLFB8kMB8GA1UdIwQYMBaAFMkV/TvUW4IYuV9XN0nTqkmAFqqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0RGMy80MkRFNDgzNkZG NzYxMUVEQjg5ODE1NThDNEY5QUUwMi95Ulg5TzlSYmdoaTVYMWMzU2RPcVNZQVdx cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lSWDlPOVJiZ2hpNVgxYzNTZE9xU1lBV3Fxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0RGMy80MkRFNDgzNkZGNzYxMUVEQjg5ODE1NThDNEY5QUUwMi95Ulg5TzlSYmdo aTVYMWMzU2RPcVNZQVdxcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAZK0FoIF5wGTRlZ+NiddsJ5gMoUNlBqa4YsGxO3IcSA5/KiQ6B6Px minjT7/w/MD0l49wC9Go7Bv8p4w6S/cGp7Bddaa25Z8js+6QlknYpfThl2quOiQC gTgX6Kiq5i1aYj9nB49+xWvGEk/oIm/dfN8WZukwXut8TK29QAiujGMm75dWfyNV 1abbLO99wVauvIi6UvmESt0F+/NrvkhZxnpOluRm7XPAGNiTFpkExwybkS17B7YV 0wD2z75FSEnKBhire4iViYoilmmU+OUVn5Zo1Tka1SJaZk61SHbX6OCFnBU0BLCW 2qXqMxB5tFZuQEqkGlNGcv9YhAmgQ4WW -----END CERTIFICATE-----Generated at Sat Dec 6 21:27:48 2025 by rpki-client