This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft File: y1IFTj13aOoWtrColMdzon3qkho.mft (raw, json) Hash identifier: NRICkQicynRlQtxnmtVgJY8mGeus1+7cHyG8hoqy77E= Subject key identifier: 2B:8B:B9:E0:BE:EC:47:B6:8B:F7:88:35:3C:4C:6B:38:31:8C:F7:47 Authority key identifier: CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A Certificate issuer: /CN=A91EB6AC/serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A Certificate serial: 0C5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft Manifest number: 0C50 Signing time: Thu 04 Dec 2025 18:03:26 +0000 Manifest this update: Thu 04 Dec 2025 18:03:25 +0000 Manifest next update: Thu 11 Dec 2025 18:03:25 +0000 Files and hashes: 1: y1IFTj13aOoWtrColMdzon3qkho.crl (hash: 0DIPey/yfT16ZFSY1cr1l53DOU5ApLAHcLNXFpRwm2A=) 2: 12D352766D2911F0B26CB33BC4F9AE02.roa (hash: d+PNEJYkgwfN/EWh9YAvK3NrsnGHrIa0Ji1QGqGUhS8=) 3: 9DA63F546D2811F09647053BC4F9AE02.roa (hash: 3gAyCRS9eTrSpT6uGMaC2W//L+1mB9VyFAfUFmHY1AA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3162 (0xc5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB6AC, serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A Validity Not Before: Dec 4 18:03:25 2025 GMT Not After : Dec 11 18:03:25 2025 GMT Subject: CN=6931ccee-2e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:df:6f:14:01:9e:9b:47:f5:b1:97:58:45:bd: da:ef:32:c9:87:a6:3a:90:7d:f1:55:c4:2b:34:73: fc:de:cc:c1:41:6e:75:85:4f:60:cf:f7:24:3b:eb: 16:9e:42:cb:21:f9:ce:3c:ea:90:8e:ba:c6:32:55: 64:38:00:f8:1c:d5:8f:02:88:a0:6f:80:59:6e:50: 45:ad:f1:fa:66:f7:39:fe:c1:73:12:df:32:fd:a0: c5:8d:f0:26:ac:b2:8b:47:f6:1a:c4:6b:8e:9e:40: 9e:0a:1d:5b:5b:b2:87:37:57:3a:1f:50:2d:db:3a: 57:cb:00:94:a1:f8:17:0d:c2:1c:a3:e2:96:9b:a3: 4c:48:50:00:31:df:ea:35:57:ba:bf:94:d4:16:21: c7:7a:bf:f9:e5:b0:05:37:3a:29:63:06:8b:c1:b1: fe:0c:91:f3:a9:dd:20:c1:46:34:26:0a:4b:e3:e1: 57:d1:fa:20:6e:de:13:df:4d:57:e1:43:fd:f8:63: 65:a0:de:8c:6a:51:43:a4:58:1b:a0:ca:f8:2b:bb: da:c3:d4:f0:8e:55:ac:66:00:6e:d7:ce:b6:8e:84: 35:b0:d4:57:35:c9:71:a0:3c:b8:92:0f:b3:25:da: 98:68:20:c4:65:79:b9:b5:53:6a:01:73:ad:4d:d5: 24:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8B:B9:E0:BE:EC:47:B6:8B:F7:88:35:3C:4C:6B:38:31:8C:F7:47 X509v3 Authority Key Identifier: keyid:CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:4b:a8:7a:1f:f9:fa:7b:a9:e8:f9:dd:23:72:b3:2e:75:27: 9c:ef:92:d8:5e:d1:58:e8:f2:e6:52:30:cf:bf:1d:04:1c:7a: e4:17:e1:be:32:6a:96:f2:1d:ed:c3:70:9c:f2:f6:33:68:7a: a4:8c:b6:8d:01:ec:6b:5a:51:2c:06:01:fa:89:79:f5:78:15: f1:40:38:80:28:92:7b:78:d4:8d:e6:0d:ed:d9:6b:87:b0:03: 54:5c:1c:d7:b3:45:17:8a:cf:60:cd:29:6a:91:98:36:54:cd: 1e:8c:5d:e7:03:3c:d1:f1:d7:b9:a0:80:e7:12:d1:10:94:bc: ed:90:23:e3:ef:cd:92:c1:eb:5c:69:36:54:fa:80:fa:57:41: aa:6e:e4:cc:5a:d4:90:2d:9d:a3:a9:1d:ae:0f:d0:cd:c3:57: aa:a4:28:fe:5e:fc:46:a2:00:02:ba:1f:2a:a8:42:67:0f:8e: 40:f5:81:b8:0b:bb:d4:2e:9e:93:a1:a4:47:e2:e9:0d:fe:a9: d7:59:09:23:4b:09:21:94:dd:18:f7:11:48:9c:22:16:84:f5: f2:f1:7c:e4:6c:7b:c5:da:84:c9:b6:11:fb:61:86:13:5b:5c: f6:2f:0c:29:21:20:6e:54:ba:ae:5d:eb:97:55:39:91:7b:a3: 41:a6:cd:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI2QUMxMTAvBgNVBAUTKENCNTIwNTRFM0Q3NzY4RUExNkI2QjBBODk0Qzc3M0Ey N0RFQTkyMUEwHhcNMjUxMjA0MTgwMzI1WhcNMjUxMjExMTgwMzI1WjAYMRYwFAYD VQQDEw02OTMxY2NlZS0yZTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1t9vFAGem0f1sZdYRb3a7zLJh6Y6kH3xVcQrNHP83szBQW51hU9gz/ckO+sW nkLLIfnOPOqQjrrGMlVkOAD4HNWPAoigb4BZblBFrfH6Zvc5/sFzEt8y/aDFjfAm rLKLR/YaxGuOnkCeCh1bW7KHN1c6H1At2zpXywCUofgXDcIco+KWm6NMSFAAMd/q NVe6v5TUFiHHer/55bAFNzopYwaLwbH+DJHzqd0gwUY0JgpL4+FX0fogbt4T301X 4UP9+GNloN6MalFDpFgboMr4K7vaw9TwjlWsZgBu1862joQ1sNRXNclxoDy4kg+z JdqYaCDEZXm5tVNqAXOtTdUkEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuLueC+ 7Ee2i/eINTxMazgxjPdHMB8GA1UdIwQYMBaAFMtSBU49d2jqFrawqJTHc6J96pIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjZBQy9EN0U5OEE2RTE1 RDAxMUVBOTNDQTBFMTlDNEY5QUUwMi95MUlGVGoxM2FPb1d0ckNvbE1kem9uM3Fr aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kxSUZUajEzYU9vV3RyQ29sTWR6b24zcWtoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjZBQy9EN0U5OEE2RTE1RDAxMUVBOTNDQTBFMTlDNEY5QUUwMi95MUlGVGoxM2FP b1d0ckNvbE1kem9uM3FraG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaS6h6H/n6e6no+d0jcrMudSec75LYXtFY6PLmUjDPvx0EHHrkF+G+ MmqW8h3tw3Cc8vYzaHqkjLaNAexrWlEsBgH6iXn1eBXxQDiAKJJ7eNSN5g3t2WuH sANUXBzXs0UXis9gzSlqkZg2VM0ejF3nAzzR8de5oIDnEtEQlLztkCPj782Swetc aTZU+oD6V0GqbuTMWtSQLZ2jqR2uD9DNw1eqpCj+XvxGogACuh8qqEJnD45A9YG4 C7vULp6ToaRH4ukN/qnXWQkjSwkhlN0Y9xFInCIWhPXy8XzkbHvF2oTJthH7YYYT W1z2LwwpISBuVLquXeuXVTmRe6NBps2U -----END CERTIFICATE-----Generated at Sat Dec 6 19:10:02 2025 by rpki-client