This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft File: 0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft (raw, json) Hash identifier: ig9AFBZKGbqi0ouv4jvDdF7dydQzDIqGkYVfb/wwX5s= Subject key identifier: AB:21:5D:88:E6:FA:69:F3:4E:8C:08:F0:38:C2:72:8E:C6:89:A4:27 Authority key identifier: D1:8D:44:5D:26:57:EA:FD:D4:A6:6E:75:B0:FB:D6:03:03:F0:25:FC Certificate issuer: /CN=A91FD6A0/serialNumber=D18D445D2657EAFDD4A66E75B0FBD60303F025FC Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft Manifest number: 43 Signing time: Fri 05 Dec 2025 05:16:37 +0000 Manifest this update: Fri 05 Dec 2025 05:16:36 +0000 Manifest next update: Fri 12 Dec 2025 05:16:36 +0000 Files and hashes: 1: 0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl (hash: bk+bSUeY27Z8/nvyLeemb9UH0V8AMgOn0HR4+yxHF3k=) 2: 053416126DB211F0962DC55BC4F9AE02.roa (hash: x2PuVPfM9opRCGhS75prbzNf+RUMoFINYisW+YfHaDY=) 3: 39926F626DB211F0AC1D0420C4F9AE02.roa (hash: kEFMUW+00UAEsPjX4mZ1eO2YdFDM6+IhBX5a3Q9IDw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:16:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD6A0, serialNumber=D18D445D2657EAFDD4A66E75B0FBD60303F025FC Validity Not Before: Dec 5 05:16:36 2025 GMT Not After : Dec 12 05:16:36 2025 GMT Subject: CN=69326ab5-0967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1b:ce:7a:8e:1e:ec:90:f1:1d:ce:da:2e:fd: 84:90:b9:dc:64:c9:80:22:39:0b:07:a5:3a:b3:4a: 4e:16:1a:2e:fe:b0:f9:8b:dc:a8:2f:31:13:10:3b: 22:bc:08:25:fb:41:06:45:24:1c:bb:b3:f8:a5:6f: c4:21:81:b2:50:4f:48:8c:21:d2:d2:74:17:0d:a8: fa:e0:3d:0c:05:f9:8e:e4:72:72:ec:3b:7d:98:d5: ed:58:6c:78:31:d3:c0:20:76:e4:72:3d:c1:7d:16: 4f:79:97:28:c7:19:43:5e:1e:34:f3:0a:42:70:3f: b0:f5:15:0c:a0:79:95:63:a0:d5:9f:7d:48:f3:a6: 84:b3:89:ad:cb:48:59:6b:01:c2:60:37:d3:a0:b6: 56:21:d2:b4:eb:21:02:31:66:23:bb:98:2c:b7:06: 0f:eb:b9:33:9a:b9:98:eb:2e:0a:27:eb:2d:91:21: bd:cb:b9:9e:4e:4f:ea:01:f0:43:9d:60:56:c0:d9: 67:ae:cb:77:df:bf:fe:43:85:3f:85:61:16:23:be: b4:64:86:57:26:29:59:e5:72:0d:90:f3:4a:1f:f5: 0d:24:ab:16:1f:cb:50:14:93:ff:44:c0:1b:13:1c: 31:49:26:ec:84:ab:8a:6a:75:1f:6c:49:09:e7:1f: 5e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:21:5D:88:E6:FA:69:F3:4E:8C:08:F0:38:C2:72:8E:C6:89:A4:27 X509v3 Authority Key Identifier: keyid:D1:8D:44:5D:26:57:EA:FD:D4:A6:6E:75:B0:FB:D6:03:03:F0:25:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:1d:f9:77:4b:66:6a:59:c7:01:6d:6e:7e:fe:30:80:34:51: 9d:2a:ff:ca:88:70:9e:d5:41:7c:56:da:40:b6:92:44:ed:1c: a1:a2:d8:7a:29:26:51:56:31:76:a6:b1:9d:dd:be:34:2a:c0: 99:39:c7:27:dc:68:c5:c0:9f:04:3a:df:89:5a:de:f5:bd:11: 02:2e:75:95:55:86:3e:98:d1:35:05:dd:ca:39:20:1d:49:b4: 9e:9d:f7:b6:06:71:a1:df:9e:63:a9:2d:e9:f6:e3:d1:b1:1e: ba:8f:e4:fd:59:d2:f6:91:d6:f2:a2:46:21:53:e5:37:7b:7d: a3:fe:46:b0:2c:e1:89:4d:f1:9c:37:03:10:0a:1e:0d:98:c1: 13:c3:af:27:5d:f9:53:b6:e2:2b:39:60:d6:84:a8:32:fd:33: 91:4d:b2:c7:3c:b5:4e:2e:26:be:c9:69:67:8d:8b:dd:5e:6c: ef:33:cd:d5:a5:cc:17:93:be:54:df:4a:8d:d4:94:e5:3a:93: 98:13:de:9a:99:b4:5d:f1:06:5d:9d:7d:78:4d:5d:e3:ad:87: 9a:22:35:84:c0:57:07:a7:e7:91:a4:59:d5:c4:4c:02:56:b6: 02:ca:ce:a2:0d:68:90:32:6f:05:70:70:22:29:84:b4:13:91: b9:02:24:44 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDZBMDExMC8GA1UEBRMoRDE4RDQ0NUQyNjU3RUFGREQ0QTY2RTc1QjBGQkQ2MDMw M0YwMjVGQzAeFw0yNTEyMDUwNTE2MzZaFw0yNTEyMTIwNTE2MzZaMBgxFjAUBgNV BAMTDTY5MzI2YWI1LTA5NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5G856jh7skPEdztou/YSQudxkyYAiOQsHpTqzSk4WGi7+sPmL3KgvMRMQOyK8 CCX7QQZFJBy7s/ilb8QhgbJQT0iMIdLSdBcNqPrgPQwF+Y7kcnLsO32Y1e1YbHgx 08AgduRyPcF9Fk95lyjHGUNeHjTzCkJwP7D1FQygeZVjoNWffUjzpoSzia3LSFlr AcJgN9OgtlYh0rTrIQIxZiO7mCy3Bg/ruTOauZjrLgon6y2RIb3LuZ5OT+oB8EOd YFbA2Weuy3ffv/5DhT+FYRYjvrRkhlcmKVnlcg2Q80of9Q0kqxYfy1AUk/9EwBsT HDFJJuyEq4pqdR9sSQnnH16NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqyFdiOb6 afNOjAjwOMJyjsaJpCcwHwYDVR0jBBgwFoAU0Y1EXSZX6v3Upm51sPvWAwPwJfww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZENkEwLzc4REY2MDdDNkRC MTExRjBBRDRCNUU1QUM0RjlBRTAyLzBZMUVYU1pYNnYzVXBtNTFzUHZXQXdQd0pm dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMFkxRVhTWlg2djNVcG01MXNQdldBd1B3SmZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE NkEwLzc4REY2MDdDNkRCMTExRjBBRDRCNUU1QUM0RjlBRTAyLzBZMUVYU1pYNnYz VXBtNTFzUHZXQXdQd0pmdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG0d+XdLZmpZxwFtbn7+MIA0UZ0q/8qIcJ7VQXxW2kC2kkTtHKGi2Hop JlFWMXamsZ3dvjQqwJk5xyfcaMXAnwQ634la3vW9EQIudZVVhj6Y0TUF3co5IB1J tJ6d97YGcaHfnmOpLen249GxHrqP5P1Z0vaR1vKiRiFT5Td7faP+RrAs4YlN8Zw3 AxAKHg2YwRPDrydd+VO24is5YNaEqDL9M5FNssc8tU4uJr7JaWeNi91ebO8zzdWl zBeTvlTfSo3UlOU6k5gT3pqZtF3xBl2dfXhNXeOth5oiNYTAVwen55GkWdXETAJW tgLKzqINaJAybwVwcCIphLQTkbkCJEQ= -----END CERTIFICATE-----Generated at Sat Dec 6 18:36:07 2025 by rpki-client