This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft File: YmEJu-zJi6UufzmbgJYtOv5astQ.mft (raw, json) Hash identifier: GWQG9FCqHMfSVjAgyoxjc75/1X2/o182eHt4iAJVYTA= Subject key identifier: 6B:7B:B4:AF:6A:01:0A:08:CD:97:25:95:F3:6B:AF:A1:6D:EB:AE:73 Authority key identifier: 62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4 Certificate issuer: /CN=A91D50A2/serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4 Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft Manifest number: 0151 Signing time: Fri 05 Dec 2025 02:22:42 +0000 Manifest this update: Fri 05 Dec 2025 02:22:42 +0000 Manifest next update: Fri 12 Dec 2025 02:22:42 +0000 Files and hashes: 1: YmEJu-zJi6UufzmbgJYtOv5astQ.crl (hash: GrzC+FyFUoSOorEVRf+c1Lp5Xeznk/Bp9ott1wGaPCU=) 2: 7447BEF0928411EFB854A522C4F9AE02.roa (hash: 8r1ggxGUtscfFUhVNnn2tSXuD/VeviYdi6zXjlI+agM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50A2, serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4 Validity Not Before: Dec 5 02:22:42 2025 GMT Not After : Dec 12 02:22:42 2025 GMT Subject: CN=693241f2-f396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:59:a0:0d:62:61:37:95:5f:e7:ee:73:dc:39: c8:06:5c:01:7b:ef:a7:61:fa:8a:7c:f3:c3:26:8b: 4f:8f:46:72:52:05:c6:bb:23:9c:ff:95:a6:47:39: d4:66:08:93:c4:86:16:b8:f5:51:46:af:cd:e3:de: 78:2c:3b:fa:41:f9:ec:3d:c9:ca:45:00:54:ea:f1: dd:cb:3a:4a:d1:8b:cc:27:1e:4c:b4:15:a9:65:c0: a0:97:00:3d:77:75:25:d8:f3:f1:33:ab:20:6d:a9: 12:4f:79:05:9b:c8:a6:c8:d2:76:09:67:92:79:fc: e2:7c:1d:32:1b:9a:e7:b2:ad:59:8c:98:b8:f4:0e: 87:03:a0:73:6c:0a:06:ac:eb:f6:0d:f3:c2:89:bd: b1:25:fa:27:e6:6d:5b:61:92:e8:6d:0d:ef:2c:31: 31:06:91:e3:fe:0e:5a:24:8f:af:77:96:8d:1b:17: 08:45:8a:8d:51:56:82:3e:90:0b:cb:b8:82:61:dd: 3d:b4:91:40:4e:c1:fd:90:a4:de:0e:1b:66:bc:cf: 25:72:17:d2:b5:fc:31:da:f8:2a:f8:05:40:9d:9e: f4:ac:50:93:c6:7f:7e:35:89:6e:cd:87:a0:d8:92: 8a:67:85:34:27:35:af:94:89:43:10:d5:98:bb:b9: 25:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7B:B4:AF:6A:01:0A:08:CD:97:25:95:F3:6B:AF:A1:6D:EB:AE:73 X509v3 Authority Key Identifier: keyid:62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:c2:96:f1:d4:fa:90:3a:5b:4b:e5:ce:36:07:25:a1:68:87: 7a:46:70:77:28:43:a5:49:1a:ff:56:a0:72:6f:fa:03:af:38: 6b:95:e8:df:79:61:91:87:46:50:11:8a:10:61:7f:37:8a:83: 8a:35:9d:af:78:f3:bc:25:47:36:07:1c:17:19:18:e8:4e:c5: 76:da:08:0e:3f:8d:a7:93:57:fa:0c:8b:86:44:b4:52:06:2d: 4b:9e:17:67:18:a9:65:f3:af:8f:fa:e6:9f:e1:f4:9a:ba:8a: a4:93:4c:55:fb:1c:09:89:f2:5d:e8:22:3e:49:34:d1:ac:e4: cc:47:49:bb:5d:bb:fb:fe:20:a4:98:47:90:c5:9a:8d:5f:28: a2:b6:e5:0f:38:ce:be:60:b3:a0:ce:f3:6b:12:d4:3f:4e:1b: 55:da:46:6a:6a:ee:04:26:f5:26:dd:d8:66:de:b9:42:8f:98: 65:bb:37:84:c0:6d:bc:16:7b:87:b1:c1:a3:be:31:25:5b:f7: 21:71:2e:b2:a3:f9:35:8e:3b:95:ee:31:99:6e:ed:8b:75:a0: a1:e0:54:53:5f:00:d1:a0:c2:e5:1b:53:0b:0a:58:a2:92:f2: 03:95:a7:52:74:49:42:65:13:56:f0:93:f9:6f:d3:bc:0d:e9: 66:73:d9:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwQTIxMTAvBgNVBAUTKDYyNjEwOUJCRUNDOThCQTUyRTdGMzk5QjgwOTYyRDNB RkU1QUIyRDQwHhcNMjUxMjA1MDIyMjQyWhcNMjUxMjEyMDIyMjQyWjAYMRYwFAYD VQQDEw02OTMyNDFmMi1mMzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1mgDWJhN5Vf5+5z3DnIBlwBe++nYfqKfPPDJotPj0ZyUgXGuyOc/5WmRznU ZgiTxIYWuPVRRq/N4954LDv6QfnsPcnKRQBU6vHdyzpK0YvMJx5MtBWpZcCglwA9 d3Ul2PPxM6sgbakST3kFm8imyNJ2CWeSefzifB0yG5rnsq1ZjJi49A6HA6BzbAoG rOv2DfPCib2xJfon5m1bYZLobQ3vLDExBpHj/g5aJI+vd5aNGxcIRYqNUVaCPpAL y7iCYd09tJFATsH9kKTeDhtmvM8lchfStfwx2vgq+AVAnZ70rFCTxn9+NYluzYeg 2JKKZ4U0JzWvlIlDENWYu7klEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGt7tK9q AQoIzZcllfNrr6Ft665zMB8GA1UdIwQYMBaAFGJhCbvsyYulLn85m4CWLTr+WrLU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBBMi9FRTMxRDg3NEQw MjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9ZbUVKdS16Smk2VXVmem1iZ0pZdE92NWFz dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltRUp1LXpKaTZVdWZ6bWJnSll0T3Y1YXN0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTBBMi9FRTMxRDg3NEQwMjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9ZbUVKdS16Smk2 VXVmem1iZ0pZdE92NWFzdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/wpbx1PqQOltL5c42ByWhaId6RnB3KEOlSRr/VqByb/oDrzhrlejf eWGRh0ZQEYoQYX83ioOKNZ2vePO8JUc2BxwXGRjoTsV22ggOP42nk1f6DIuGRLRS Bi1LnhdnGKll86+P+uaf4fSauoqkk0xV+xwJifJd6CI+STTRrOTMR0m7Xbv7/iCk mEeQxZqNXyiituUPOM6+YLOgzvNrEtQ/ThtV2kZqau4EJvUm3dhm3rlCj5hluzeE wG28FnuHscGjvjElW/chcS6yo/k1jjuV7jGZbu2LdaCh4FRTXwDRoMLlG1MLClii kvIDladSdElCZRNW8JP5b9O8Delmc9m0 -----END CERTIFICATE-----Generated at Sat Dec 6 22:43:35 2025 by rpki-client