This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft File: Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft (raw, json) Hash identifier: PswOYDuSgL+MjcCIyd8AF2QtNuXEp5XXyEJoS+uBi8Y= Subject key identifier: CF:E0:6A:5D:F4:EB:16:D1:53:24:99:0B:2A:6E:2A:97:A4:F4:8F:D3 Authority key identifier: 63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E Certificate issuer: /CN=A91F7315/serialNumber=63EBA48502511340B825261D5EC20A9127AF295E Certificate serial: 0BBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft Manifest number: 1475 Signing time: Sat 06 Dec 2025 18:14:51 +0000 Manifest this update: Sat 06 Dec 2025 18:14:50 +0000 Manifest next update: Sat 13 Dec 2025 18:14:50 +0000 Files and hashes: 1: Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl (hash: j/hB8/ovFkfsTIOCWrGp0Dc0Za0a6aL7EaTgJ8hGwD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3003 (0xbbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7315, serialNumber=63EBA48502511340B825261D5EC20A9127AF295E Validity Not Before: Dec 6 18:14:50 2025 GMT Not After : Dec 13 18:14:50 2025 GMT Subject: CN=6934729a-af1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a7:58:25:d0:87:ee:5a:79:0f:66:cd:90:5b: a5:b0:8d:bc:9b:b5:43:bd:1f:fb:57:08:e1:c1:c8: a2:85:7a:f5:e1:da:25:a8:0e:83:dd:65:8c:d0:1c: f6:8b:7f:39:0e:b9:66:03:f3:31:c1:37:9a:b2:6e: d5:a0:79:bb:54:52:c3:5b:39:34:83:24:35:35:a5: 8a:01:09:a3:5e:d3:84:30:71:ad:ae:36:0f:c0:50: 5d:a3:3b:12:e9:66:32:e4:39:3a:aa:4c:d7:c9:4e: 31:cc:2d:b2:41:62:2c:ac:29:e5:fe:5a:d0:86:46: 92:8c:3c:85:a5:fc:7a:7c:9c:d6:ab:3f:74:93:8d: 7e:d4:e6:44:e7:29:0f:de:19:3c:1b:b8:4d:1e:36: 7c:ba:24:8d:9f:75:ec:2d:45:e4:ab:2a:1e:e7:c1: 92:a8:5d:b1:87:ea:31:85:aa:2b:14:ec:b7:a3:11: c1:94:43:5a:9a:33:c9:fc:0e:1d:b5:36:6c:39:45: ea:47:aa:60:0f:5b:23:ce:ae:35:f4:6e:e2:da:3b: ae:0c:22:03:9d:ee:4c:a2:ab:35:d5:a1:b7:3e:4a: ed:39:56:17:ae:42:55:44:2f:f3:09:d0:65:01:9d: 66:10:0b:42:9a:0b:5e:c0:2f:d4:e9:1e:9a:97:d7: a9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E0:6A:5D:F4:EB:16:D1:53:24:99:0B:2A:6E:2A:97:A4:F4:8F:D3 X509v3 Authority Key Identifier: keyid:63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:6d:c0:41:d7:60:99:9a:ca:9f:26:71:49:b5:49:6c:33:54: d8:f2:42:9e:c7:c1:81:f7:68:2e:4f:50:94:dc:96:8a:5f:32: ca:a9:d8:ac:f0:8d:19:14:ef:c7:2c:48:2f:fc:12:f5:c3:9d: cd:ef:99:1c:77:29:61:80:15:6a:01:fa:d9:81:ca:32:77:2e: 06:43:87:5b:73:60:9a:37:3a:13:98:1a:14:89:7f:59:dd:b2: 9c:95:d5:03:0c:63:0a:85:5a:93:0e:5e:d4:df:7a:6e:7b:e3: 62:c4:d9:72:14:62:58:b0:f2:d5:40:e6:32:16:53:5b:aa:f2: 2b:ba:a8:8c:4c:b6:08:8b:4b:73:a9:34:b2:a3:29:85:aa:75: 2d:34:1c:e6:cd:19:ed:d8:f6:91:e8:c5:48:c6:1d:b0:00:97: cb:7f:e3:a6:17:a2:27:a2:ea:1e:a6:0f:24:93:9d:3d:c2:3a: d0:3f:f0:48:54:6f:43:11:4b:ae:10:ec:b2:49:f5:f1:3b:54: 57:ef:17:74:ad:9a:68:62:9b:b0:ee:40:19:f4:a8:b1:5d:f9: a9:ea:96:9e:a5:83:d5:ea:e6:d6:2c:bb:e4:d4:10:a2:34:2d: d7:85:29:2e:08:11:0a:80:cd:ed:d0:15:a0:cc:06:df:9e:39: 7c:b3:75:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMTUxMTAvBgNVBAUTKDYzRUJBNDg1MDI1MTEzNDBCODI1MjYxRDVFQzIwQTkx MjdBRjI5NUUwHhcNMjUxMjA2MTgxNDUwWhcNMjUxMjEzMTgxNDUwWjAYMRYwFAYD VQQDEw02OTM0NzI5YS1hZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqdYJdCH7lp5D2bNkFulsI28m7VDvR/7VwjhwciihXr14dolqA6D3WWM0Bz2 i385DrlmA/MxwTeasm7VoHm7VFLDWzk0gyQ1NaWKAQmjXtOEMHGtrjYPwFBdozsS 6WYy5Dk6qkzXyU4xzC2yQWIsrCnl/lrQhkaSjDyFpfx6fJzWqz90k41+1OZE5ykP 3hk8G7hNHjZ8uiSNn3XsLUXkqyoe58GSqF2xh+oxhaorFOy3oxHBlENamjPJ/A4d tTZsOUXqR6pgD1sjzq419G7i2juuDCIDne5Moqs11aG3PkrtOVYXrkJVRC/zCdBl AZ1mEAtCmgtewC/U6R6al9ep0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/gal30 6xbRUySZCypuKpek9I/TMB8GA1UdIwQYMBaAFGPrpIUCURNAuCUmHV7CCpEnryle MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxNS84MjA2RjgzMjMy RTIxMUVBOTlBNDNFNjRDNEY5QUUwMi9ZLXVraFFKUkUwQzRKU1lkWHNJS2tTZXZL VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ktdWtoUUpSRTBDNEpTWWRYc0lLa1NldktWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxNS84MjA2RjgzMjMyRTIxMUVBOTlBNDNFNjRDNEY5QUUwMi9ZLXVraFFKUkUw QzRKU1lkWHNJS2tTZXZLVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcbcBB12CZmsqfJnFJtUlsM1TY8kKex8GB92guT1CU3JaKXzLKqdis 8I0ZFO/HLEgv/BL1w53N75kcdylhgBVqAfrZgcoydy4GQ4dbc2CaNzoTmBoUiX9Z 3bKcldUDDGMKhVqTDl7U33pue+NixNlyFGJYsPLVQOYyFlNbqvIruqiMTLYIi0tz qTSyoymFqnUtNBzmzRnt2PaR6MVIxh2wAJfLf+OmF6Inouoepg8kk509wjrQP/BI VG9DEUuuEOyySfXxO1RX7xd0rZpoYpuw7kAZ9KixXfmp6paepYPV6ubWLLvk1BCi NC3XhSkuCBEKgM3t0BWgzAbfnjl8s3UL -----END CERTIFICATE-----Generated at Sun Dec 7 02:58:49 2025 by rpki-client