This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft File: WY9YPfrp_JTaoww3iyFr7JcOM5g.mft (raw, json) Hash identifier: gH8ZDVEVyFI4qt9ccC7qPAHCDmZqZK5vrCiKF1+7nvc= Subject key identifier: 12:03:21:EF:1F:76:B7:01:D3:54:48:E4:23:00:87:18:1B:7D:D7:6E Authority key identifier: 59:8F:58:3D:FA:E9:FC:94:DA:A3:0C:37:8B:21:6B:EC:97:0E:33:98 Certificate issuer: /CN=A91EBD8F/serialNumber=598F583DFAE9FC94DAA30C378B216BEC970E3398 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft Manifest number: 03 Signing time: Fri 05 Dec 2025 05:58:04 +0000 Manifest this update: Fri 05 Dec 2025 05:58:04 +0000 Manifest next update: Fri 12 Dec 2025 05:58:04 +0000 Files and hashes: 1: WY9YPfrp_JTaoww3iyFr7JcOM5g.crl (hash: 1vzsgLHLT4ZTT8v51xO8zTZGH7lTSKXQ/kBXGmH8yp0=) 2: F6B314DED0EA11F0BB3C3D41C4F9AE02.roa (hash: Lu9d7bLmcepghWXa0s1nwEOsBKeZ6ANCakVX+XS+9JI=) 3: F63AE892D0EA11F0ABD63D41C4F9AE02.roa (hash: Dzn3sksu9AWhENIZ0pYx9MNaFbrpkCqwLZyubYj2Yqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.crl rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBD8F, serialNumber=598F583DFAE9FC94DAA30C378B216BEC970E3398 Validity Not Before: Dec 5 05:58:04 2025 GMT Not After : Dec 12 05:58:04 2025 GMT Subject: CN=6932746c-3e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b2:f2:b8:f4:ec:12:d4:7f:90:55:00:a8:06: af:ab:58:70:0f:bf:44:aa:36:90:df:c4:4e:97:3b: 25:d1:a6:5e:d8:0b:e3:03:f4:36:24:78:ac:52:13: 9b:94:d2:6f:8a:d1:c0:19:78:c1:88:59:c8:32:cc: 2a:38:59:01:ef:21:d3:83:80:61:48:68:f9:b5:8b: 27:e9:08:b0:5d:03:d0:9e:21:b1:21:8a:35:8f:2d: a1:75:88:ff:33:29:d7:ef:ee:bf:61:f1:0a:17:d4: 0a:e8:94:18:a6:50:01:57:14:96:62:79:38:91:84: 0d:5c:da:21:bb:98:4a:d5:d5:18:67:5e:81:1e:70: ea:07:c7:62:05:a7:69:29:35:02:c6:eb:8a:1b:4d: 2a:ab:eb:24:07:f7:7f:bb:d2:81:ba:0b:ac:7f:ab: 27:e5:d6:0f:06:9e:42:b8:62:72:80:c1:71:45:b4: 8e:61:f3:99:f4:62:ac:c7:67:ee:74:3e:8f:af:2d: ff:d8:57:d3:16:55:b9:6d:5d:ae:89:cd:a5:ef:99: c5:20:3d:e9:23:21:2e:cf:74:5a:df:8b:b8:c6:b3: b4:b9:95:72:44:f8:cb:63:e2:ec:47:c8:ac:41:ef: 2f:bc:8f:8d:dc:a3:35:20:e2:0e:15:39:4a:fd:90: 48:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:03:21:EF:1F:76:B7:01:D3:54:48:E4:23:00:87:18:1B:7D:D7:6E X509v3 Authority Key Identifier: keyid:59:8F:58:3D:FA:E9:FC:94:DA:A3:0C:37:8B:21:6B:EC:97:0E:33:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:12:07:5f:e7:5f:31:40:2c:a3:26:d6:7a:0c:f8:6f:ee:13: 73:75:50:92:04:91:74:8a:27:09:3d:64:68:6e:3e:bb:38:b2: a7:b6:65:9e:4c:7c:55:a9:f4:5f:e2:54:57:ca:97:96:42:6e: 3c:44:c5:98:03:0b:a7:59:a2:a3:37:3b:22:26:4c:4e:54:f4: 22:a8:80:c1:9d:4a:9b:65:c7:c3:ce:dd:ec:66:56:65:69:6e: 40:c9:3d:01:d5:7f:f2:67:27:1c:a6:dc:ac:e6:c1:e7:ee:ed: 3e:0e:d9:fb:92:f8:d7:00:29:34:2d:38:50:19:b2:c8:20:bb: 18:00:c5:f2:b6:9a:f3:6f:91:b1:3f:44:f6:3c:3d:28:aa:0a: ec:6c:4d:7c:d8:0f:71:7f:b4:4b:19:89:12:e1:0e:04:fb:54: ab:a6:14:1a:bc:6f:64:37:d1:ec:a3:c7:be:5a:00:77:02:24: 40:90:8a:b5:5a:e5:35:f5:e1:b9:f6:e1:a6:d4:98:2f:bf:86: 3d:79:d7:4f:69:31:06:ad:1f:62:9a:8f:3c:13:ce:31:58:5c: 14:73:d9:87:dc:c1:00:b5:d2:06:40:72:65:ca:25:96:60:2b: 6d:09:aa:fb:02:ac:70:0e:75:d3:e6:ed:b3:31:0a:a1:e4:da: 07:f6:12:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkQ4RjExMC8GA1UEBRMoNTk4RjU4M0RGQUU5RkM5NERBQTMwQzM3OEIyMTZCRUM5 NzBFMzM5ODAeFw0yNTEyMDUwNTU4MDRaFw0yNTEyMTIwNTU4MDRaMBgxFjAUBgNV BAMTDTY5MzI3NDZjLTNlNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRsvK49OwS1H+QVQCoBq+rWHAPv0SqNpDfxE6XOyXRpl7YC+MD9DYkeKxSE5uU 0m+K0cAZeMGIWcgyzCo4WQHvIdODgGFIaPm1iyfpCLBdA9CeIbEhijWPLaF1iP8z Kdfv7r9h8QoX1ArolBimUAFXFJZieTiRhA1c2iG7mErV1RhnXoEecOoHx2IFp2kp NQLG64obTSqr6yQH93+70oG6C6x/qyfl1g8GnkK4YnKAwXFFtI5h85n0YqzHZ+50 Po+vLf/YV9MWVbltXa6JzaXvmcUgPekjIS7PdFrfi7jGs7S5lXJE+Mtj4uxHyKxB 7y+8j43cozUg4g4VOUr9kEhRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEgMh7x92 twHTVEjkIwCHGBt9124wHwYDVR0jBBgwFoAUWY9YPfrp/JTaoww3iyFr7JcOM5gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCRDhGL0E5NUU5QTI4RDBF QTExRjA5MTdGNzk0MEM0RjlBRTAyL1dZOVlQZnJwX0pUYW93dzNpeUZyN0pjT001 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV1k5WVBmcnBfSlRhb3d3M2l5RnI3SmNPTTVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC RDhGL0E5NUU5QTI4RDBFQTExRjA5MTdGNzk0MEM0RjlBRTAyL1dZOVlQZnJwX0pU YW93dzNpeUZyN0pjT001Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABASB1/nXzFALKMm1noM+G/uE3N1UJIEkXSKJwk9ZGhuPrs4sqe2ZZ5M fFWp9F/iVFfKl5ZCbjxExZgDC6dZoqM3OyImTE5U9CKogMGdSptlx8PO3exmVmVp bkDJPQHVf/JnJxym3Kzmwefu7T4O2fuS+NcAKTQtOFAZssgguxgAxfK2mvNvkbE/ RPY8PSiqCuxsTXzYD3F/tEsZiRLhDgT7VKumFBq8b2Q30eyjx75aAHcCJECQirVa 5TX14bn24abUmC+/hj15109pMQatH2KajzwTzjFYXBRz2YfcwQC10gZAcmXKJZZg K20JqvsCrHAOddPm7bMxCqHk2gf2Egk= -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:24 2025 by rpki-client