This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft File: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft (raw, json) Hash identifier: iWyHMhR+sxEFlO4b1xdUO/2+kMjQsaI8iRI42pSP2OQ= Subject key identifier: 95:7F:88:0A:D6:AF:81:23:B9:5A:54:A1:2E:5E:3D:BA:18:FE:AD:0A Authority key identifier: 61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5 Certificate issuer: /CN=A91DF195/serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft Manifest number: 2A Signing time: Fri 05 Dec 2025 05:30:16 +0000 Manifest this update: Fri 05 Dec 2025 05:30:15 +0000 Manifest next update: Fri 12 Dec 2025 05:30:15 +0000 Files and hashes: 1: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl (hash: M1wfTrF2PNxCEAN8so5mUoq37yphk+9dm1sk9BUBtII=) 2: DD3F28CC93D111F0B0A32B0BC4F9AE02.roa (hash: OJep3Jj5FjQRgEx+dN34IpTpsR0/ZkQ1f2GGqPdjPgg=) 3: B2B63AAC93CF11F0AFB6CD40C4F9AE02.roa (hash: QZkJm8VBjgXrSCDM+VZ1EYZWVut/5O77RoipwMHofMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF195, serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5 Validity Not Before: Dec 5 05:30:15 2025 GMT Not After : Dec 12 05:30:15 2025 GMT Subject: CN=69326de7-3fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:76:b1:1b:da:a5:06:1a:ba:4f:56:df:eb:b0: 18:5b:70:44:18:ad:9a:05:2d:44:3a:c6:2a:bd:bd: f2:20:4d:36:1e:10:ee:fd:a8:79:8a:0f:9c:ca:78: b4:8c:9a:d4:29:88:0e:8c:52:43:9f:05:51:cf:01: 31:02:d6:2d:76:7f:d9:ae:f7:6b:62:2e:4a:97:01: 27:2b:56:92:7e:57:64:c4:dd:56:d4:25:c2:67:f5: 04:31:a8:c7:0a:c2:ad:50:ad:cb:60:8c:0a:4d:45: cd:dd:b2:16:c8:75:64:7c:5b:4c:15:82:e0:de:b3: 72:3d:80:ce:5c:64:49:de:6b:35:cc:88:db:67:d5: fe:b4:1c:7c:56:5a:42:0a:96:5a:5a:dd:96:8e:48: 71:93:8e:54:52:60:b5:a7:df:51:12:7f:2d:7a:84: cf:d8:f6:bb:e8:2f:bd:e9:ed:17:0a:31:f1:6e:e0: 61:39:5c:c8:38:de:c7:e1:f5:e0:53:e6:b2:da:95: 6f:69:c8:0b:35:a9:30:89:43:9d:0d:ef:1c:db:b2: 65:75:19:9c:16:88:82:28:85:17:86:70:69:8a:12: ed:ce:a4:ef:d3:58:b7:7d:9d:1b:19:2d:ea:fa:d6: 50:a8:21:da:8d:f9:9a:96:39:90:9d:50:84:ef:94: fd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7F:88:0A:D6:AF:81:23:B9:5A:54:A1:2E:5E:3D:BA:18:FE:AD:0A X509v3 Authority Key Identifier: keyid:61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:59:e5:af:bf:c5:7c:79:b3:d4:b7:58:b2:a9:71:03:0b:ea: 91:67:ea:e3:96:9a:72:fe:dd:71:b0:0d:0f:67:7c:6a:af:61: ed:f9:13:fc:d6:1e:41:ea:5c:a2:13:a0:13:d8:6b:b1:68:c9: 1d:c1:91:f0:ad:c8:62:f5:b1:13:b6:45:df:34:f9:c8:61:86: 79:57:82:12:c5:fe:e5:74:ed:71:cd:2e:78:10:7d:e0:8a:a0: 97:28:ab:85:cb:a5:fe:fd:86:99:e2:96:ea:d0:14:b0:be:d4: 8b:d5:f4:13:cd:38:b4:6b:e9:68:ba:83:bd:11:79:b0:d8:f8: 3a:fc:be:ea:a5:1f:fc:b6:3e:46:ac:38:47:cc:eb:27:11:d0: 7d:13:23:b7:29:49:d7:71:1c:2e:a0:27:08:d1:1f:16:da:52: 1e:fa:44:77:e4:ea:7e:91:f5:ee:3f:41:8f:2b:68:31:f3:a0: 1c:2e:c2:01:50:2a:a0:2b:41:c9:fa:ed:8e:b1:66:4e:3f:e8: fa:dd:9a:76:68:d5:18:43:b5:13:0a:5e:2e:07:8d:95:fd:65: 59:1b:db:9f:e3:a5:57:16:d5:b5:cd:87:99:5d:fa:7a:ce:0b: 9b:36:44:a7:ff:cd:0f:7b:85:2f:47:84:69:ab:b3:60:db:13: bf:3a:10:4d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RjE5NTExMC8GA1UEBRMoNjE1Nzc1QTRERTIzRTQ2QThCNTdDOEY3QjlDOUUxRTg4 NkU1RDhENTAeFw0yNTEyMDUwNTMwMTVaFw0yNTEyMTIwNTMwMTVaMBgxFjAUBgNV BAMTDTY5MzI2ZGU3LTNmYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkdrEb2qUGGrpPVt/rsBhbcEQYrZoFLUQ6xiq9vfIgTTYeEO79qHmKD5zKeLSM mtQpiA6MUkOfBVHPATEC1i12f9mu92tiLkqXAScrVpJ+V2TE3VbUJcJn9QQxqMcK wq1QrctgjApNRc3dshbIdWR8W0wVguDes3I9gM5cZEneazXMiNtn1f60HHxWWkIK llpa3ZaOSHGTjlRSYLWn31ESfy16hM/Y9rvoL73p7RcKMfFu4GE5XMg43sfh9eBT 5rLalW9pyAs1qTCJQ50N7xzbsmV1GZwWiIIohReGcGmKEu3OpO/TWLd9nRsZLer6 1lCoIdqN+ZqWOZCdUITvlP1zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlX+ICtav gSO5WlShLl49uhj+rQowHwYDVR0jBBgwFoAUYVd1pN4j5GqLV8j3ucnh6Ibl2NUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMTk1Lzc0QzE4RjcwOTM4 QTExRjBCQkQ2MjM4NUM0RjlBRTAyL1lWZDFwTjRqNUdxTFY4ajN1Y25oNklibDJO VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWVZkMXBONGo1R3FMVjhqM3Vjbmg2SWJsMk5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG MTk1Lzc0QzE4RjcwOTM4QTExRjBCQkQ2MjM4NUM0RjlBRTAyL1lWZDFwTjRqNUdx TFY4ajN1Y25oNklibDJOVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK1Z5a+/xXx5s9S3WLKpcQML6pFn6uOWmnL+3XGwDQ9nfGqvYe35E/zW HkHqXKIToBPYa7FoyR3BkfCtyGL1sRO2Rd80+chhhnlXghLF/uV07XHNLngQfeCK oJcoq4XLpf79hpnilurQFLC+1IvV9BPNOLRr6Wi6g70RebDY+Dr8vuqlH/y2Pkas OEfM6ycR0H0TI7cpSddxHC6gJwjRHxbaUh76RHfk6n6R9e4/QY8raDHzoBwuwgFQ KqArQcn67Y6xZk4/6PrdmnZo1RhDtRMKXi4HjZX9ZVkb25/jpVcW1bXNh5ld+nrO C5s2RKf/zQ97hS9HhGmrs2DbE786EE0= -----END CERTIFICATE-----Generated at Sat Dec 6 19:31:32 2025 by rpki-client