This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft File: Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft (raw, json) Hash identifier: 6pf89Y7UNERCKkjAUyhf2TOml+eKqe/20TQCcX3ZgmE= Subject key identifier: E0:14:10:E7:50:B8:AF:A9:C7:18:E3:E7:B6:3D:F2:2F:96:40:4E:1B Authority key identifier: 63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74 Certificate issuer: /CN=A91DFD4C/serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft Manifest number: 36 Signing time: Fri 05 Dec 2025 05:22:59 +0000 Manifest this update: Fri 05 Dec 2025 05:22:58 +0000 Manifest next update: Fri 12 Dec 2025 05:22:58 +0000 Files and hashes: 1: Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl (hash: WU5R+HuvkcS6wMGAa0p9FhWcglqTccbhi3CnuqIfBUA=) 2: 4EC550229F7911F0892F6680C4F9AE02.roa (hash: 8V07zUVOskE1wa+gVr+yuKqZDgrgYU/QSi8IILKEhL0=) 3: 3A4C99D49F7911F08FC08A7FC4F9AE02.roa (hash: hzN1fw40guW51CNb+UZLqljQGspAiSfGnAzMh1uOZu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFD4C, serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74 Validity Not Before: Dec 5 05:22:58 2025 GMT Not After : Dec 12 05:22:58 2025 GMT Subject: CN=69326c32-80e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:65:41:da:ec:f0:e5:d5:c0:ab:e9:b9:50:e0: 18:43:5e:2b:04:65:4e:15:a2:61:6c:82:11:e3:54: 4e:04:8a:02:69:02:73:cf:2d:77:bd:b4:3e:05:8f: 16:2b:a5:5a:95:51:c9:cc:cf:0e:5b:d6:5b:27:3b: be:88:99:ee:3c:bf:45:65:1b:24:50:50:f1:6d:04: db:fa:2e:dc:90:75:71:e7:77:e4:b7:6d:8d:f0:8d: ce:f6:43:87:b5:ef:88:21:a3:a2:7c:29:78:63:d4: e2:94:63:99:29:84:9e:37:f4:59:1f:44:34:d6:1a: 28:0d:dd:9f:9c:e3:ca:cb:3a:9a:c6:e2:21:ce:c2: ea:65:ee:e0:07:2e:49:39:44:41:61:8e:0b:58:c9: bd:75:79:43:d5:22:78:bc:9c:b5:0a:37:40:16:77: 74:d5:7a:53:18:b4:c3:60:cf:17:57:74:ec:39:b6: 7f:51:d7:d8:83:c1:d6:f6:57:ac:2a:a6:68:7a:3d: f3:86:67:ca:1b:30:f6:e8:fe:58:5c:14:4c:c2:06: 50:e6:1b:40:c5:f4:3e:c6:cb:29:56:b5:72:00:fe: af:64:3e:30:24:af:b9:05:49:42:1b:93:87:e5:97: 6a:99:21:99:f7:d3:bf:a9:80:cb:cd:dc:24:f6:78: 73:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:14:10:E7:50:B8:AF:A9:C7:18:E3:E7:B6:3D:F2:2F:96:40:4E:1B X509v3 Authority Key Identifier: keyid:63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ea:1b:d5:e5:4f:3e:04:12:6d:52:25:c9:7c:ec:fe:48:b4: a5:bf:b3:25:2c:12:09:ca:d1:75:ef:e6:d9:f2:57:1a:6f:da: 20:ed:b8:a8:3b:3e:67:55:92:7e:12:8c:68:ea:f2:8b:fe:35: c6:5f:65:33:81:bf:58:48:d6:8c:b9:78:e3:1f:ad:80:cb:b5: de:6c:fa:cd:5e:d6:bc:94:0a:71:52:b1:ef:40:c4:45:d4:d6: ba:66:0a:e9:35:f3:e6:a2:1b:3e:69:14:40:80:63:07:e7:19: 07:ee:e3:e9:10:81:54:f2:7a:54:a2:37:cf:e6:37:f0:f1:99: 4a:fd:c6:87:06:18:5a:a7:4d:da:b7:e5:66:f9:84:57:5f:c0: 32:89:34:98:02:e9:c7:86:bc:d3:23:bf:5a:0d:45:45:3a:3b: db:b0:ae:80:b3:15:56:7c:dc:fa:62:2d:6c:df:df:eb:37:dd: 19:7f:c9:2a:c0:37:d5:cc:fe:ef:0a:14:6b:c3:6e:9f:0b:07: 06:6f:39:60:b0:46:34:69:4d:9f:77:87:d5:9c:cf:07:6c:f2: 65:89:6a:3f:52:2a:9e:91:88:b4:31:78:2b:46:1b:62:45:f5: ec:a3:c2:42:a0:91:09:ef:c8:44:b2:62:7a:77:64:f8:80:02: af:0b:50:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RkQ0QzExMC8GA1UEBRMoNjM4MzNBMjQxRTNFNDk1OUVCQTE5QzcwMUQwNDg4N0RC NEIxRkM3NDAeFw0yNTEyMDUwNTIyNThaFw0yNTEyMTIwNTIyNThaMBgxFjAUBgNV BAMTDTY5MzI2YzMyLTgwZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTZUHa7PDl1cCr6blQ4BhDXisEZU4VomFsghHjVE4EigJpAnPPLXe9tD4FjxYr pVqVUcnMzw5b1lsnO76Ime48v0VlGyRQUPFtBNv6LtyQdXHnd+S3bY3wjc72Q4e1 74gho6J8KXhj1OKUY5kphJ439FkfRDTWGigN3Z+c48rLOprG4iHOwupl7uAHLkk5 REFhjgtYyb11eUPVIni8nLUKN0AWd3TVelMYtMNgzxdXdOw5tn9R19iDwdb2V6wq pmh6PfOGZ8obMPbo/lhcFEzCBlDmG0DF9D7GyylWtXIA/q9kPjAkr7kFSUIbk4fl l2qZIZn307+pgMvN3CT2eHN9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4BQQ51C4 r6nHGOPntj3yL5ZAThswHwYDVR0jBBgwFoAUY4M6JB4+SVnroZxwHQSIfbSx/HQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGRDRDLzU2RUMzRDlDODM2 RDExRjA4ODE2MDA2QUM0RjlBRTAyL1k0TTZKQjQtU1Zucm9aeHdIUVNJZmJTeF9I US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWTRNNkpCNC1TVm5yb1p4d0hRU0lmYlN4X0hRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG RDRDLzU2RUMzRDlDODM2RDExRjA4ODE2MDA2QUM0RjlBRTAyL1k0TTZKQjQtU1Zu cm9aeHdIUVNJZmJTeF9IUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADrqG9XlTz4EEm1SJcl87P5ItKW/syUsEgnK0XXv5tnyVxpv2iDtuKg7 PmdVkn4SjGjq8ov+NcZfZTOBv1hI1oy5eOMfrYDLtd5s+s1e1ryUCnFSse9AxEXU 1rpmCuk18+aiGz5pFECAYwfnGQfu4+kQgVTyelSiN8/mN/DxmUr9xocGGFqnTdq3 5Wb5hFdfwDKJNJgC6ceGvNMjv1oNRUU6O9uwroCzFVZ83PpiLWzf3+s33Rl/ySrA N9XM/u8KFGvDbp8LBwZvOWCwRjRpTZ93h9Wczwds8mWJaj9SKp6RiLQxeCtGG2JF 9eyjwkKgkQnvyESyYnp3ZPiAAq8LUEI= -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:25 2025 by rpki-client