This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft File: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft (raw, json) Hash identifier: K38R1hgimG+Kr0oWJL68Bom3ljE9U1xGCLNtt5oEmN4= Subject key identifier: 10:40:F4:2F:D0:50:FA:FF:97:08:7A:88:3C:BC:C3:26:10:D2:F3:7F Authority key identifier: 60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B Certificate issuer: /CN=A91E5998/serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B Certificate serial: 0689 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft Manifest number: 067E Signing time: Thu 04 Dec 2025 21:18:44 +0000 Manifest this update: Thu 04 Dec 2025 21:18:43 +0000 Manifest next update: Thu 11 Dec 2025 21:18:43 +0000 Files and hashes: 1: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl (hash: MDFHraZMlgr6MN9aHcUPv1XsnoVRjNq1zdj3ng6S2/M=) 2: 7438DDF0FD4A11EF85D3AC1AC4F9AE02.roa (hash: ZFyON0cFfqWSYmJESFiDKpaoMViJEmJBEJHpK/VixB8=) 3: 24365CBCF51411EFB44F001BC4F9AE02.roa (hash: WNqUPBF8HNjFohXgQh/4EEtiPRYZ8HZnCTlz6HaVU7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1673 (0x689) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5998, serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B Validity Not Before: Dec 4 21:18:43 2025 GMT Not After : Dec 11 21:18:43 2025 GMT Subject: CN=6931fab4-d465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1f:bd:45:28:67:f7:50:02:ae:ee:6f:0c:9f: 63:63:7b:95:57:e8:41:99:ef:44:dd:3b:38:fa:79: 04:9a:4b:0d:d6:66:9d:c7:e3:30:9a:e9:e5:5a:88: 14:b6:de:b2:f2:fa:44:19:f1:72:83:95:e9:c2:f7: 23:df:13:07:ee:a1:ad:ad:e0:92:c2:e1:ff:fa:5c: 8d:f5:d3:48:33:ad:d9:60:80:2b:0d:be:79:17:b7: 95:93:20:d6:bd:06:ac:9b:7b:2d:90:be:77:dd:5e: fe:ea:c0:c8:0a:de:98:79:94:0d:59:ae:3a:11:e0: a2:be:4c:18:db:e9:92:42:da:98:2a:5a:53:42:6f: 62:5c:a8:56:9b:be:02:6d:5a:2d:8c:83:eb:38:70: 61:e7:b2:e1:b0:a1:22:53:64:e4:c8:0e:47:31:7a: 9c:61:37:05:d4:6f:ee:b2:14:e5:b5:8a:fc:f8:a7: de:fd:0a:c0:72:19:31:a1:da:60:4a:c2:a9:4f:9d: 6c:ca:4e:db:8a:8f:18:a2:dd:02:7b:e0:83:d3:4f: dd:b5:ac:9f:38:c4:46:40:d8:86:9d:c6:1a:0e:81: 73:d4:1e:33:55:bb:04:ff:87:30:30:13:b4:1c:dd: c2:0a:28:28:cc:72:0b:f0:83:5e:25:97:9e:5c:7d: 3e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:40:F4:2F:D0:50:FA:FF:97:08:7A:88:3C:BC:C3:26:10:D2:F3:7F X509v3 Authority Key Identifier: keyid:60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:77:04:e7:12:26:9d:68:68:e8:39:f5:86:dd:31:f8:8f:b6: 4d:e9:e1:1f:15:e3:60:c8:97:3c:0f:d4:bd:ac:4a:bc:ba:18: f8:29:ad:3a:96:d2:1c:96:b3:4e:bf:f0:a2:2a:f7:96:40:61: 95:17:0c:cd:bf:49:59:d8:f0:9e:00:a8:3d:c8:04:42:e4:a6: 5e:68:40:eb:1d:eb:77:55:db:6f:c4:39:8a:f0:cd:b1:c5:ff: c1:ea:f2:92:2d:b4:61:f5:eb:d6:e4:44:75:0a:40:a1:ec:73: 04:3e:a6:ee:09:86:1c:ae:5d:79:ea:c9:4d:a9:ab:fe:40:d0: 90:44:e8:b3:05:b3:83:65:15:12:d4:f6:00:cb:50:18:ea:8d: 1f:95:85:73:af:4d:a6:1b:e7:ad:03:f4:d3:cd:ae:a3:cc:b0: 61:ef:f5:64:8f:ad:a6:32:1e:ff:21:97:60:45:37:ae:bb:ed: e0:22:cd:c2:e3:9b:66:da:54:ab:77:56:13:71:39:f8:89:07: 9d:d4:e5:b2:21:e3:3b:99:d8:77:2c:b1:79:27:49:f7:c7:04: 20:05:70:3a:3b:0c:d3:bd:00:2e:f0:cf:66:1f:50:87:e6:8e: 91:55:04:10:c9:b4:85:42:e2:12:ab:88:1d:a7:d8:7c:61:94: c4:10:88:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU5OTgxMTAvBgNVBAUTKDYwMURDNTRCMUY1MjA1MDgwRUZEOUFBNkNGQTVBNTFD NEE3OUREMkIwHhcNMjUxMjA0MjExODQzWhcNMjUxMjExMjExODQzWjAYMRYwFAYD VQQDEw02OTMxZmFiNC1kNDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnR+9RShn91ACru5vDJ9jY3uVV+hBme9E3Ts4+nkEmksN1madx+MwmunlWogU tt6y8vpEGfFyg5Xpwvcj3xMH7qGtreCSwuH/+lyN9dNIM63ZYIArDb55F7eVkyDW vQasm3stkL533V7+6sDICt6YeZQNWa46EeCivkwY2+mSQtqYKlpTQm9iXKhWm74C bVotjIPrOHBh57LhsKEiU2TkyA5HMXqcYTcF1G/ushTltYr8+Kfe/QrAchkxodpg SsKpT51syk7bio8Yot0Ce+CD00/dtayfOMRGQNiGncYaDoFz1B4zVbsE/4cwMBO0 HN3CCigozHIL8INeJZeeXH0+VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBA9C/Q UPr/lwh6iDy8wyYQ0vN/MB8GA1UdIwQYMBaAFGAdxUsfUgUIDv2aps+lpRxKed0r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTk5OC8yQzU5MkUyODlG MUYxMUVCQjMwRDU3NDNDNEY5QUUwMi9ZQjNGU3g5U0JRZ09fWnFtejZXbEhFcDUz U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCM0ZTeDlTQlFnT19acW16NldsSEVwNTNTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTk5OC8yQzU5MkUyODlGMUYxMUVCQjMwRDU3NDNDNEY5QUUwMi9ZQjNGU3g5U0JR Z09fWnFtejZXbEhFcDUzU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5dwTnEiadaGjoOfWG3TH4j7ZN6eEfFeNgyJc8D9S9rEq8uhj4Ka06 ltIclrNOv/CiKveWQGGVFwzNv0lZ2PCeAKg9yARC5KZeaEDrHet3VdtvxDmK8M2x xf/B6vKSLbRh9evW5ER1CkCh7HMEPqbuCYYcrl156slNqav+QNCQROizBbODZRUS 1PYAy1AY6o0flYVzr02mG+etA/TTza6jzLBh7/Vkj62mMh7/IZdgRTeuu+3gIs3C 45tm2lSrd1YTcTn4iQed1OWyIeM7mdh3LLF5J0n3xwQgBXA6OwzTvQAu8M9mH1CH 5o6RVQQQybSFQuISq4gdp9h8YZTEEIgm -----END CERTIFICATE-----Generated at Sat Dec 6 22:09:28 2025 by rpki-client