This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft File: Y3kC4bqWiB1HLuyt-kW1V348HDE.mft (raw, json) Hash identifier: XHlrm67f25LbDHA4b156/7y/kz8zG+zPfRGxUYWCM1g= Subject key identifier: AB:0D:51:09:A0:09:C5:7C:76:44:54:C5:59:25:04:C9:D9:8E:8E:F8 Authority key identifier: 63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31 Certificate issuer: /CN=A91CE524/serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31 Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft Manifest number: 017F Signing time: Sun 07 Dec 2025 02:06:47 +0000 Manifest this update: Sun 07 Dec 2025 02:06:46 +0000 Manifest next update: Sun 14 Dec 2025 02:06:46 +0000 Files and hashes: 1: Y3kC4bqWiB1HLuyt-kW1V348HDE.crl (hash: p9EPSZEARgQyN2QPvGCMVe861Jdqhx9d+mWB449MysA=) 2: FF1FE402898011EEB3403779C4F9AE02.roa (hash: kfUd7cLCmHmQ/k7ENeRjEkFUrum5OXV/qc4Vt8EOcIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE524, serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31 Validity Not Before: Dec 7 02:06:46 2025 GMT Not After : Dec 14 02:06:46 2025 GMT Subject: CN=6934e136-0940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:0d:27:eb:bc:38:8d:cd:05:cc:4f:e4:0a:70: 97:ba:41:db:ae:37:1a:8c:52:79:df:75:af:20:67: e0:4b:98:1a:62:0e:df:09:1f:d1:a7:7d:56:60:a9: dd:39:7d:72:0d:4d:12:ae:25:9e:96:58:6d:e4:6f: 77:26:19:d6:7a:6e:c3:98:f1:4e:44:e3:be:37:95: 98:95:ba:3c:54:03:26:ff:d2:c9:63:5a:46:8f:90: 3d:40:b9:d2:a9:42:64:be:82:20:8b:ea:1d:67:97: d4:73:ce:a9:af:f3:fc:77:ac:6d:4b:24:4a:4c:08: a0:a7:35:a9:33:20:c3:32:64:57:fe:3c:5d:9f:7e: 1f:19:f7:d9:e1:8f:a5:75:84:71:0b:ff:9d:48:04: fc:61:25:07:42:32:2d:51:70:19:da:c0:d7:83:20: 9d:50:ef:9f:0a:34:df:e8:cc:c4:0d:b1:90:15:7b: 73:f2:15:c2:13:1d:97:19:dd:5c:69:11:82:1b:55: f0:0f:c7:2d:37:ea:e1:ff:02:1c:18:36:35:c5:93: 9a:16:db:8a:19:35:1a:3e:6d:e7:f7:2e:73:f2:18: 8c:b4:3f:62:a6:6a:7f:6f:08:b4:b8:04:f6:c5:d5: 9f:2b:1e:38:16:76:47:ee:b7:11:40:12:6a:6f:1b: 66:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0D:51:09:A0:09:C5:7C:76:44:54:C5:59:25:04:C9:D9:8E:8E:F8 X509v3 Authority Key Identifier: keyid:63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:2f:79:f6:4e:94:a6:e7:c6:38:87:0f:a5:cd:3f:95:8b:d3: d9:91:1c:db:e4:73:4f:bd:ed:5e:5a:f7:e8:85:b6:10:1d:8b: 79:40:33:db:85:8c:f9:0d:89:ee:c5:79:ec:e2:be:6d:ac:98: 6c:b0:2c:2f:dc:18:6c:21:d8:75:7c:45:3b:65:a5:82:62:95: 67:7b:87:ba:f5:c2:e5:61:04:2c:dd:81:fc:f1:f3:bc:ca:b2: 94:d9:5d:4a:60:a6:c7:80:5d:55:a1:3f:c0:48:fa:fd:49:26: 95:af:80:fa:dc:b0:5e:65:c8:71:46:b5:28:11:d0:ac:fc:04: d5:10:c1:0f:5c:25:85:5c:fd:51:fc:08:37:51:27:42:9c:94: d3:52:36:4a:ee:59:80:d8:27:ae:71:9e:af:01:90:23:a8:c4: b2:d7:12:f0:db:f4:b3:e0:9b:f8:69:3f:38:fd:9c:82:dc:00: ae:a9:e9:25:3d:61:83:45:44:30:3d:6c:28:58:95:5f:b3:03: 1a:f8:4d:13:4c:e1:03:11:26:85:13:19:8a:61:b9:2d:f2:44: 5e:d5:7a:7d:bd:71:d6:9f:86:e2:03:aa:2d:0e:c5:ff:e7:80: dd:51:8a:38:e7:85:af:07:5e:27:e7:0e:b3:46:14:6d:de:cc: 7f:90:51:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1MjQxMTAvBgNVBAUTKDYzNzkwMkUxQkE5Njg4MUQ0NzJFRUNBREZBNDVCNTU3 N0UzQzFDMzEwHhcNMjUxMjA3MDIwNjQ2WhcNMjUxMjE0MDIwNjQ2WjAYMRYwFAYD VQQDEw02OTM0ZTEzNi0wOTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Q0n67w4jc0FzE/kCnCXukHbrjcajFJ533WvIGfgS5gaYg7fCR/Rp31WYKnd OX1yDU0SriWellht5G93JhnWem7DmPFOROO+N5WYlbo8VAMm/9LJY1pGj5A9QLnS qUJkvoIgi+odZ5fUc86pr/P8d6xtSyRKTAigpzWpMyDDMmRX/jxdn34fGffZ4Y+l dYRxC/+dSAT8YSUHQjItUXAZ2sDXgyCdUO+fCjTf6MzEDbGQFXtz8hXCEx2XGd1c aRGCG1XwD8ctN+rh/wIcGDY1xZOaFtuKGTUaPm3n9y5z8hiMtD9ipmp/bwi0uAT2 xdWfKx44FnZH7rcRQBJqbxtm3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsNUQmg CcV8dkRUxVklBMnZjo74MB8GA1UdIwQYMBaAFGN5AuG6logdRy7srfpFtVd+PBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTUyNC8wQzJDMkJENjg4 QzUxMUVFQTgzMTFDNzFDNEY5QUUwMi9ZM2tDNGJxV2lCMUhMdXl0LWtXMVYzNDhI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kza0M0YnFXaUIxSEx1eXQta1cxVjM0OEhERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTUyNC8wQzJDMkJENjg4QzUxMUVFQTgzMTFDNzFDNEY5QUUwMi9ZM2tDNGJxV2lC MUhMdXl0LWtXMVYzNDhIREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPL3n2TpSm58Y4hw+lzT+Vi9PZkRzb5HNPve1eWvfohbYQHYt5QDPb hYz5DYnuxXns4r5trJhssCwv3BhsIdh1fEU7ZaWCYpVne4e69cLlYQQs3YH88fO8 yrKU2V1KYKbHgF1VoT/ASPr9SSaVr4D63LBeZchxRrUoEdCs/ATVEMEPXCWFXP1R /Ag3USdCnJTTUjZK7lmA2CeucZ6vAZAjqMSy1xLw2/Sz4Jv4aT84/ZyC3ACuqekl PWGDRUQwPWwoWJVfswMa+E0TTOEDESaFExmKYbkt8kRe1Xp9vXHWn4biA6otDsX/ 54DdUYo454WvB14n5w6zRhRt3sx/kFG2 -----END CERTIFICATE-----Generated at Sun Dec 7 03:44:10 2025 by rpki-client