This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft File: gYu-BREIqaYrBvxp5L-jaX5l4w8.mft (raw, json) Hash identifier: sDF5/sbuJMabTUljml1hzLOMyK/TF+XfUO9e3rk/J+Q= Subject key identifier: AB:1A:34:DC:5F:94:0C:68:9B:6F:2E:4E:78:67:19:76:5E:84:45:C1 Authority key identifier: 81:8B:BE:05:11:08:A9:A6:2B:06:FC:69:E4:BF:A3:69:7E:65:E3:0F Certificate issuer: /CN=A91FCF44/serialNumber=818BBE051108A9A62B06FC69E4BFA3697E65E30F Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft Manifest number: 4C Signing time: Fri 05 Dec 2025 03:19:34 +0000 Manifest this update: Fri 05 Dec 2025 03:19:34 +0000 Manifest next update: Fri 12 Dec 2025 03:19:34 +0000 Files and hashes: 1: gYu-BREIqaYrBvxp5L-jaX5l4w8.crl (hash: 5yxDZMObp2QcOBdhMGsW3/UrdNZDyPKv/cbzYyp3/X8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.crl rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF44, serialNumber=818BBE051108A9A62B06FC69E4BFA3697E65E30F Validity Not Before: Dec 5 03:19:34 2025 GMT Not After : Dec 12 03:19:34 2025 GMT Subject: CN=69324f46-63de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9f:e9:a8:dc:26:65:15:23:68:71:7f:dc:22: 42:07:5f:eb:95:7c:ed:88:ff:55:10:3f:4e:40:37: fb:89:66:17:e4:a2:2b:57:16:fa:3d:64:32:55:76: 46:ac:60:68:2f:26:d6:d2:7b:80:13:76:6b:a2:e7: 58:93:a1:b1:b4:dc:e9:ce:30:51:a1:08:bc:b2:a3: 41:aa:fb:7b:1c:76:48:d4:e3:ed:2f:4c:c9:5a:c6: 86:cb:70:34:aa:35:d0:d5:a9:02:c8:89:5f:f7:d7: 89:fe:d2:af:66:0b:f1:73:f7:14:dd:cd:8f:f8:13: 72:11:c7:d7:03:cb:ca:e5:ce:46:09:73:4e:41:58: 0e:a4:1d:7d:94:24:f4:8b:09:68:e5:a9:85:3c:1d: fa:7b:a5:15:19:9d:3d:2f:0c:9c:83:d4:a8:a2:a8: 9c:84:94:20:a8:72:28:7c:50:f3:f6:08:e9:70:56: e2:3c:0a:a7:71:50:1a:29:e6:a7:a9:d2:90:8b:59: 1b:e7:c1:ad:fe:88:e9:6c:73:3f:6a:9c:89:d2:37: c0:63:cd:6c:26:4a:7d:a0:9e:4e:92:c8:06:1f:cf: 99:8a:00:77:c6:23:43:15:eb:f2:d3:39:6c:25:46: 98:d7:b5:3c:a0:ff:58:aa:1c:55:5f:26:f6:6d:39: b7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1A:34:DC:5F:94:0C:68:9B:6F:2E:4E:78:67:19:76:5E:84:45:C1 X509v3 Authority Key Identifier: keyid:81:8B:BE:05:11:08:A9:A6:2B:06:FC:69:E4:BF:A3:69:7E:65:E3:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:00:45:fa:75:8d:83:86:bc:fb:bf:c8:01:52:66:45:83:4e: bc:b9:0e:fd:cc:a8:f5:1f:47:41:7b:27:48:53:89:00:04:dd: 20:62:2a:7f:83:42:aa:ab:77:6e:62:75:9f:8f:f4:fc:98:6c: 84:e1:f0:0c:40:f6:79:eb:aa:a8:a0:18:de:f0:89:b2:34:a2: 2b:11:8d:89:c2:f0:8f:35:b7:41:16:da:1f:be:ab:c1:cc:a3: 9b:83:e0:7b:01:6a:3f:fa:9e:c2:f3:0c:48:ef:e6:49:3a:c1: f9:05:5c:0e:a9:d2:b3:78:c7:66:d8:13:2b:dc:c1:7c:0d:3f: ab:14:0f:7b:cd:30:51:d9:41:da:d4:5b:a5:30:eb:9c:e5:14: 87:b1:df:5f:1c:64:5b:9d:81:d2:e4:b4:9b:c1:8e:3d:ff:c6: 1f:a1:31:89:8c:b3:db:13:2d:3e:f3:24:8f:d7:bd:e8:f8:58: 80:05:24:f5:2c:50:74:d2:77:c5:cd:fd:c7:35:be:47:45:ed: fa:26:87:c9:07:87:20:c2:89:90:0e:56:68:66:37:52:74:66: 67:55:63:e6:df:77:98:aa:f9:89:24:60:9d:bb:a1:94:5d:62: 37:69:c0:8e:cb:d8:9f:60:84:54:3a:ea:11:8d:36:08:1b:60: aa:09:e4:04 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Q0Y0NDExMC8GA1UEBRMoODE4QkJFMDUxMTA4QTlBNjJCMDZGQzY5RTRCRkEzNjk3 RTY1RTMwRjAeFw0yNTEyMDUwMzE5MzRaFw0yNTEyMTIwMzE5MzRaMBgxFjAUBgNV BAMTDTY5MzI0ZjQ2LTYzZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5n+mo3CZlFSNocX/cIkIHX+uVfO2I/1UQP05AN/uJZhfkoitXFvo9ZDJVdkas YGgvJtbSe4ATdmui51iTobG03OnOMFGhCLyyo0Gq+3scdkjU4+0vTMlaxobLcDSq NdDVqQLIiV/314n+0q9mC/Fz9xTdzY/4E3IRx9cDy8rlzkYJc05BWA6kHX2UJPSL CWjlqYU8Hfp7pRUZnT0vDJyD1KiiqJyElCCocih8UPP2COlwVuI8CqdxUBop5qep 0pCLWRvnwa3+iOlscz9qnInSN8BjzWwmSn2gnk6SyAYfz5mKAHfGI0MV6/LTOWwl RpjXtTyg/1iqHFVfJvZtObd5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqxo03F+U DGibby5OeGcZdl6ERcEwHwYDVR0jBBgwFoAUgYu+BREIqaYrBvxp5L+jaX5l4w8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDRjQ0L0NENkQ2QzdFNUUy MDExRjBBREFBNEI2RkM0RjlBRTAyL2dZdS1CUkVJcWFZckJ2eHA1TC1qYVg1bDR3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ1l1LUJSRUlxYVlyQnZ4cDVMLWphWDVsNHc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD RjQ0L0NENkQ2QzdFNUUyMDExRjBBREFBNEI2RkM0RjlBRTAyL2dZdS1CUkVJcWFZ ckJ2eHA1TC1qYVg1bDR3OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAIARfp1jYOGvPu/yAFSZkWDTry5Dv3MqPUfR0F7J0hTiQAE3SBiKn+D Qqqrd25idZ+P9PyYbITh8AxA9nnrqqigGN7wibI0oisRjYnC8I81t0EW2h++q8HM o5uD4HsBaj/6nsLzDEjv5kk6wfkFXA6p0rN4x2bYEyvcwXwNP6sUD3vNMFHZQdrU W6Uw65zlFIex318cZFudgdLktJvBjj3/xh+hMYmMs9sTLT7zJI/Xvej4WIAFJPUs UHTSd8XN/cc1vkdF7fomh8kHhyDCiZAOVmhmN1J0ZmdVY+bfd5iq+YkkYJ27oZRd YjdpwI7L2J9ghFQ66hGNNggbYKoJ5AQ= -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:20 2025 by rpki-client