This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft File: YykwQRnxpH9dBkCy33Xe8fZMe68.mft (raw, json) Hash identifier: qfxp8rd+WyapXdTlCwH3tU6f5bkEg2Xv2rZdlrUxkbQ= Subject key identifier: A9:58:5B:1C:8C:50:51:C1:33:D1:06:2B:C3:5F:7C:CC:2B:1F:07:D4 Authority key identifier: 63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF Certificate issuer: /CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF Certificate serial: 07C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft Manifest number: 07B6 Signing time: Thu 04 Dec 2025 20:21:31 +0000 Manifest this update: Thu 04 Dec 2025 20:21:31 +0000 Manifest next update: Thu 11 Dec 2025 20:21:31 +0000 Files and hashes: 1: YykwQRnxpH9dBkCy33Xe8fZMe68.crl (hash: FK1TrKz3ShdCpZtbL+hwCXdTUczMhjcG2Nx5gwh2a/8=) 2: 4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa (hash: ae/KpKHVYIp48jLRoLaAXZhQ2bpbYIXVEw1zOqGKhNs=) 3: 261A4C3432B611EBBB18F11EC4F9AE02.roa (hash: 6VCktPY0Y/VVY9wKy7mnkatZ5tFS2gKEFeVDjxPVHEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1990 (0x7c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF Validity Not Before: Dec 4 20:21:31 2025 GMT Not After : Dec 11 20:21:31 2025 GMT Subject: CN=6931ed4b-464d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:86:a1:89:d2:bc:ab:f2:b8:e8:b2:89:8d:71: a9:77:64:e4:50:80:be:6e:53:d6:73:9b:d9:7b:20: ff:58:2c:54:bb:58:f9:4c:d1:7e:39:b4:3a:45:ed: 86:76:64:bd:79:d1:8a:38:98:27:43:85:ad:97:45: 58:ac:f4:92:87:34:07:4c:aa:37:61:b4:39:b8:fe: 4e:01:5c:59:36:0c:54:6c:d1:f9:d2:84:21:9c:3f: 58:c7:54:83:5b:7c:f2:78:5a:1f:94:42:88:1f:3e: a5:6a:80:86:04:ea:7a:84:07:68:8e:30:3a:04:94: 5d:20:18:22:f3:ec:28:7e:27:a5:bb:f2:74:49:2e: 38:0f:23:1b:bb:2a:bc:28:1c:6c:3d:d4:f1:65:85: 2c:0c:5c:5c:ff:e9:d6:3f:6c:e3:1a:de:84:e4:5c: 5a:b8:26:0a:08:c2:85:de:3c:d6:b0:2a:41:3f:0e: d3:a6:99:72:34:98:64:cc:fe:60:f7:98:d0:54:88: db:c7:21:5f:c8:9b:65:ef:36:b8:f5:04:22:6a:8b: b4:cd:2b:26:57:74:16:12:ed:f0:82:ac:56:a8:72: be:ec:57:32:07:15:6f:e3:7d:8a:71:d4:a6:5c:a7: da:cb:e0:33:5d:f9:65:83:18:f2:e7:9f:07:05:ff: 4e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:58:5B:1C:8C:50:51:C1:33:D1:06:2B:C3:5F:7C:CC:2B:1F:07:D4 X509v3 Authority Key Identifier: keyid:63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:75:ab:d4:3d:c9:e7:13:15:5b:cf:a5:d7:6a:a2:6b:30:e0: ba:d0:29:e4:45:83:74:f3:a6:e6:80:14:43:8d:b7:7a:c0:df: 2c:e5:81:ba:f9:c8:c2:2b:95:8c:ae:10:77:63:69:de:12:77: 5f:e1:86:13:6e:1e:e5:40:94:91:b9:61:8d:40:4d:62:a9:89: 1b:6d:9a:c8:32:08:94:d9:4f:c4:8e:81:f4:03:ce:78:1f:c3: f8:89:f5:98:8f:b3:a2:2f:29:3a:0b:23:4c:03:7c:a9:09:f1: 1e:3b:fe:47:75:b9:e6:08:56:cf:e4:70:ae:95:1d:7a:1c:6e: 9a:9b:5f:91:f6:97:e7:a7:5f:5e:df:54:fb:d3:4d:93:d4:1b: f4:db:73:0e:ba:2c:48:75:1e:98:5d:2d:60:90:f5:e4:02:6b: 0f:2b:4d:8b:dc:49:ed:34:d8:f1:35:07:f1:aa:9d:f9:8a:fd: ea:52:67:db:08:24:f7:72:eb:2a:92:a4:31:e3:2d:d8:e8:81: 5b:81:48:f8:87:e5:c0:87:3c:35:f8:27:c6:96:29:29:c2:ba: 26:99:b5:ea:51:0b:9c:fa:3d:06:e5:32:7c:a3:79:72:60:62: a9:a1:54:15:42:f9:65:c8:b6:7b:e0:c0:8c:d2:41:fe:aa:fa: ff:3c:1c:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDYzMjkzMDQxMTlGMUE0N0Y1RDA2NDBCMkRGNzVERUYx RjY0QzdCQUYwHhcNMjUxMjA0MjAyMTMxWhcNMjUxMjExMjAyMTMxWjAYMRYwFAYD VQQDEw02OTMxZWQ0Yi00NjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIahidK8q/K46LKJjXGpd2TkUIC+blPWc5vZeyD/WCxUu1j5TNF+ObQ6Re2G dmS9edGKOJgnQ4Wtl0VYrPSShzQHTKo3YbQ5uP5OAVxZNgxUbNH50oQhnD9Yx1SD W3zyeFoflEKIHz6laoCGBOp6hAdojjA6BJRdIBgi8+wofielu/J0SS44DyMbuyq8 KBxsPdTxZYUsDFxc/+nWP2zjGt6E5FxauCYKCMKF3jzWsCpBPw7TpplyNJhkzP5g 95jQVIjbxyFfyJtl7za49QQiaou0zSsmV3QWEu3wgqxWqHK+7FcyBxVv432KcdSm XKfay+AzXfllgxjy558HBf9ObwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlYWxyM UFHBM9EGK8NffMwrHwfUMB8GA1UdIwQYMBaAFGMpMEEZ8aR/XQZAst913vH2THuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84RkU3QThCODI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBIOWRCa0N5MzNYZThmWk1l NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l5a3dRUm54cEg5ZEJrQ3kzM1hlOGZaTWU2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84RkU3QThCODI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBI OWRCa0N5MzNYZThmWk1lNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIdavUPcnnExVbz6XXaqJrMOC60CnkRYN086bmgBRDjbd6wN8s5YG6 +cjCK5WMrhB3Y2neEndf4YYTbh7lQJSRuWGNQE1iqYkbbZrIMgiU2U/EjoH0A854 H8P4ifWYj7OiLyk6CyNMA3ypCfEeO/5HdbnmCFbP5HCulR16HG6am1+R9pfnp19e 31T7002T1Bv023MOuixIdR6YXS1gkPXkAmsPK02L3EntNNjxNQfxqp35iv3qUmfb CCT3cusqkqQx4y3Y6IFbgUj4h+XAhzw1+CfGlikpwrommbXqUQuc+j0G5TJ8o3ly YGKpoVQVQvllyLZ74MCM0kH+qvr/PBxh -----END CERTIFICATE-----Generated at Sat Dec 6 13:01:54 2025 by rpki-client