This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft File: 1Ycen8b73n3HG36JXIoEw9ACHYU.mft (raw, json) Hash identifier: OpSAQ2LC+w88rcvj6A47DRpT/bWTX2UcortReQxMK6o= Subject key identifier: F1:71:42:C7:3D:EC:45:06:E1:6F:93:E7:F4:C0:2B:56:50:DE:A2:96 Authority key identifier: D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 Certificate issuer: /CN=A91F8A49/serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft Manifest number: 01AE Signing time: Fri 05 Dec 2025 01:28:24 +0000 Manifest this update: Fri 05 Dec 2025 01:28:23 +0000 Manifest next update: Fri 12 Dec 2025 01:28:23 +0000 Files and hashes: 1: 1Ycen8b73n3HG36JXIoEw9ACHYU.crl (hash: BzkJr8CImOYqsseJMpRD89zqWT/qbo6p7jzkhfY+1CI=) 2: B78CCA4E4C5711EE9FE2EA35C4F9AE02.roa (hash: yOezlN4+53IwwnSsCKNCBTmWXo8aQEvNaQEYhS9yato=) 3: A355C1A8B6D511F089793D6DC4F9AE02.roa (hash: 0SnBjCkd1/QSiUJjvI651mo+kVttGehwO0xz/nqsNeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A49, serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Validity Not Before: Dec 5 01:28:23 2025 GMT Not After : Dec 12 01:28:23 2025 GMT Subject: CN=69323538-46ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a6:6f:65:7d:fb:d3:7f:fd:d9:f3:32:d1:e9: c4:dd:5e:33:3a:65:49:a4:1f:d8:82:b1:fa:85:70: 2a:f2:65:3e:f9:3c:96:2c:43:97:3a:0c:f5:c2:a9: 1a:ec:2a:ce:c2:ee:92:9d:0f:de:49:36:88:8e:8d: fd:3f:92:e1:32:a2:b8:9a:a9:bc:07:cd:ca:96:b9: 6b:c8:5e:fa:41:e8:af:a0:4c:f1:13:af:04:5e:14: c0:ab:8b:91:c3:5b:fe:1b:40:2e:8a:59:f4:84:ea: 51:4b:f4:9e:f2:88:2d:94:af:78:09:b1:5a:ca:45: 44:1c:66:88:7d:63:1b:c9:6d:42:9e:ac:cb:c8:c6: a1:64:0c:72:df:83:95:e2:14:30:ed:01:2f:07:93: c1:13:f2:40:0a:19:8d:2d:ff:7f:f4:04:dd:20:5d: 17:cc:e3:f3:14:ae:94:d5:d5:f4:85:06:13:ba:95: 81:0d:61:9e:0a:4d:02:e1:9e:3d:7d:75:1a:16:dc: cc:3e:e1:7c:c1:12:13:5a:e1:4d:e3:ea:f4:0f:f5: e9:71:13:d1:ef:22:61:f5:78:50:04:8b:ac:ef:1d: a1:a8:63:98:ce:ea:41:c6:9f:d3:08:f9:aa:cd:f4: 25:38:47:ca:9f:3b:45:b0:a2:09:85:41:63:63:15: b1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:71:42:C7:3D:EC:45:06:E1:6F:93:E7:F4:C0:2B:56:50:DE:A2:96 X509v3 Authority Key Identifier: keyid:D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:d3:7f:6f:e2:ee:87:b2:f1:48:2b:21:b7:e6:4c:21:b5:cf: fa:19:fc:7b:d9:fc:6e:fa:73:3d:a8:c6:e0:cc:8e:b7:90:0a: f0:4b:83:bd:48:fe:f4:a6:a0:54:97:3a:66:f9:1c:87:9c:59: 8c:92:72:17:50:de:9c:f9:6e:c0:ea:bb:96:ca:96:ac:6d:fe: c6:f3:30:a6:16:70:a2:a4:39:71:5d:38:1f:d3:e6:9e:1b:5c: 5c:71:42:85:f9:8c:3d:45:8d:28:82:29:ff:ce:12:ab:39:c8: 84:e1:68:dd:39:bb:89:32:71:50:d4:e7:b6:0a:16:3b:19:e0: 02:6f:64:07:dc:0a:d6:c4:46:15:9a:f9:eb:80:5a:7a:14:d6: 9e:46:cf:54:dc:f2:4b:fb:f7:e9:e5:96:4a:45:2d:97:56:4e: 31:60:28:05:7c:7b:37:30:47:25:8a:8b:e7:de:91:89:e8:88: 25:2c:5d:8d:53:eb:7d:c0:6b:35:92:23:98:19:5c:62:63:e0: 43:19:9a:23:b1:8b:8b:2a:08:3a:38:24:ef:00:cd:7e:ad:7f: 23:d5:03:d4:b0:a9:ce:5a:18:fd:dd:45:f6:df:c3:d6:3f:46: dd:20:b9:2a:a7:ea:f9:61:3e:6e:dd:ac:72:83:6e:31:66:dc: 9c:e0:60:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDkxMTAvBgNVBAUTKEQ1ODcxRTlGQzZGQkRFN0RDNzFCN0U4OTVDOEEwNEMz RDAwMjFEODUwHhcNMjUxMjA1MDEyODIzWhcNMjUxMjEyMDEyODIzWjAYMRYwFAYD VQQDEw02OTMyMzUzOC00NmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAraZvZX3703/92fMy0enE3V4zOmVJpB/YgrH6hXAq8mU++TyWLEOXOgz1wqka 7CrOwu6SnQ/eSTaIjo39P5LhMqK4mqm8B83KlrlryF76QeivoEzxE68EXhTAq4uR w1v+G0Auiln0hOpRS/Se8ogtlK94CbFaykVEHGaIfWMbyW1CnqzLyMahZAxy34OV 4hQw7QEvB5PBE/JAChmNLf9/9ATdIF0XzOPzFK6U1dX0hQYTupWBDWGeCk0C4Z49 fXUaFtzMPuF8wRITWuFN4+r0D/XpcRPR7yJh9XhQBIus7x2hqGOYzupBxp/TCPmq zfQlOEfKnztFsKIJhUFjYxWxsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFxQsc9 7EUG4W+T5/TAK1ZQ3qKWMB8GA1UdIwQYMBaAFNWHHp/G+959xxt+iVyKBMPQAh2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0OS80N0QwNDQ2NDQ3 QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNuM0hHMzZKWElvRXc5QUNI WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFZY2VuOGI3M24zSEczNkpYSW9FdzlBQ0hZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0OS80N0QwNDQ2NDQ3QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNu M0hHMzZKWElvRXc5QUNIWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw039v4u6HsvFIKyG35kwhtc/6Gfx72fxu+nM9qMbgzI63kArwS4O9 SP70pqBUlzpm+RyHnFmMknIXUN6c+W7A6ruWypasbf7G8zCmFnCipDlxXTgf0+ae G1xccUKF+Yw9RY0ogin/zhKrOciE4WjdObuJMnFQ1Oe2ChY7GeACb2QH3ArWxEYV mvnrgFp6FNaeRs9U3PJL+/fp5ZZKRS2XVk4xYCgFfHs3MEcliovn3pGJ6IglLF2N U+t9wGs1kiOYGVxiY+BDGZojsYuLKgg6OCTvAM1+rX8j1QPUsKnOWhj93UX238PW P0bdILkqp+r5YT5u3axyg24xZtyc4GAW -----END CERTIFICATE-----Generated at Sat Dec 6 16:14:08 2025 by rpki-client