This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft File: Y06sGbStSypNQSgRX59VZ5TMdSM.mft (raw, json) Hash identifier: zskVoPX7lpfHDMNi17vrFGH3+cKLRXZNBbLVxwgHn3Q= Subject key identifier: 7C:91:45:5C:5D:19:E6:EF:7D:FB:CD:1D:25:91:AC:F4:B5:DC:F1:0F Authority key identifier: 63:4E:AC:19:B4:AD:4B:2A:4D:41:28:11:5F:9F:55:67:94:CC:75:23 Certificate issuer: /CN=A91647ED/serialNumber=634EAC19B4AD4B2A4D4128115F9F556794CC7523 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y06sGbStSypNQSgRX59VZ5TMdSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft Manifest number: 0D Signing time: Fri 19 Dec 2025 06:55:36 +0000 Manifest this update: Fri 19 Dec 2025 06:55:36 +0000 Manifest next update: Fri 26 Dec 2025 06:55:36 +0000 Files and hashes: 1: Y06sGbStSypNQSgRX59VZ5TMdSM.crl (hash: SEzADBlSM04YyLcpe9zx6/8S+nuFzBqlfCL1y6xXsIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.crl rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y06sGbStSypNQSgRX59VZ5TMdSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91647ED, serialNumber=634EAC19B4AD4B2A4D4128115F9F556794CC7523 Validity Not Before: Dec 19 06:55:36 2025 GMT Not After : Dec 26 06:55:36 2025 GMT Subject: CN=6944f6e8-73fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bf:db:86:8d:fa:e1:b9:f7:ec:83:a5:5f:ad: f4:18:82:e0:61:09:67:f7:c6:93:3e:3f:c9:c8:67: 05:55:47:cd:06:a3:02:3e:ce:6f:38:f0:26:92:c9: 8a:13:dc:c5:49:12:4a:28:de:84:55:89:10:0e:67: 9a:d8:53:3e:36:69:48:c1:b2:b7:e4:bd:52:4d:2c: 11:7f:af:fd:46:01:70:1e:49:05:9b:d0:ba:37:4a: d4:7d:2b:33:0e:ef:08:57:91:55:2e:96:65:1b:0c: cc:2b:86:a4:a5:59:ea:92:7a:e7:a3:e0:24:dd:32: fd:9b:18:cd:49:30:3b:db:52:f2:91:4e:1e:35:6e: 60:1d:fc:62:34:65:07:e9:63:97:e0:b1:ce:63:61: fa:7c:b2:1d:7a:51:83:07:f5:b8:7d:b7:2a:fc:cb: 36:1e:8c:6f:a9:5c:fc:bf:b1:fc:a5:82:41:0b:24: d8:1b:1c:88:45:0c:d9:69:ef:bd:b3:5c:c4:73:3b: bb:78:ad:2c:ab:ac:22:b7:8d:ea:f1:e6:b8:dd:fe: 4f:c5:27:1b:0a:c2:0a:f6:c7:a0:94:4d:04:ef:cd: 41:df:a6:f1:77:0b:ac:17:65:16:21:14:6a:dc:86: fd:60:fa:40:7d:e5:e8:84:a8:05:3f:16:17:96:c9: 5d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:91:45:5C:5D:19:E6:EF:7D:FB:CD:1D:25:91:AC:F4:B5:DC:F1:0F X509v3 Authority Key Identifier: keyid:63:4E:AC:19:B4:AD:4B:2A:4D:41:28:11:5F:9F:55:67:94:CC:75:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y06sGbStSypNQSgRX59VZ5TMdSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:b1:77:3f:1e:6f:0c:97:92:2b:96:3c:a4:02:a3:15:c9:25: b1:79:a7:c7:e4:64:a5:51:3a:b0:05:d2:f2:13:66:9d:85:ba: 5a:cd:54:3c:96:9f:79:9b:ab:37:e1:52:22:92:a9:ef:f8:6b: 00:ff:4c:80:5e:16:4e:9b:c2:8e:86:2d:24:fc:34:82:80:6d: a0:4c:8e:58:64:ee:17:9a:03:48:c1:ed:4d:b4:15:93:28:3b: d5:a1:57:4a:26:4d:fc:dd:20:57:6a:fe:6b:9a:1e:3c:95:a1: d3:6e:6a:6e:86:88:5b:16:31:5a:f5:2a:ee:44:53:c7:8d:d6: e7:d5:74:6d:4a:d4:d2:b8:aa:86:03:e3:f7:69:88:3d:3c:e4: 7b:6c:d9:c5:03:a5:cf:33:c7:c2:46:99:fe:b6:7c:5f:b9:49: cd:20:12:be:8e:ff:db:74:75:08:cc:4e:c1:48:9a:68:59:e7: 02:38:16:de:a4:c1:a4:42:eb:ec:ff:2c:14:08:9c:b6:f7:62: f8:a5:d5:45:96:a5:1d:40:84:51:3b:d2:87:84:fb:b0:b7:21: 75:b7:d3:9b:52:d0:18:45:cd:21:8f:b6:23:83:e1:f5:34:09: db:8a:7b:f1:a6:6f:0a:66:fe:2c:47:bc:dc:9c:7f:a3:d0:70: a3:1c:dc:0e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NDdFRDExMC8GA1UEBRMoNjM0RUFDMTlCNEFENEIyQTRENDEyODExNUY5RjU1Njc5 NENDNzUyMzAeFw0yNTEyMTkwNjU1MzZaFw0yNTEyMjYwNjU1MzZaMBgxFjAUBgNV BAMMDTY5NDRmNmU4LTczZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQv9uGjfrhuffsg6VfrfQYguBhCWf3xpM+P8nIZwVVR80GowI+zm848CaSyYoT 3MVJEkoo3oRViRAOZ5rYUz42aUjBsrfkvVJNLBF/r/1GAXAeSQWb0Lo3StR9KzMO 7whXkVUulmUbDMwrhqSlWeqSeuej4CTdMv2bGM1JMDvbUvKRTh41bmAd/GI0ZQfp Y5fgsc5jYfp8sh16UYMH9bh9tyr8yzYejG+pXPy/sfylgkELJNgbHIhFDNlp772z XMRzO7t4rSyrrCK3jerx5rjd/k/FJxsKwgr2x6CUTQTvzUHfpvF3C6wXZRYhFGrc hv1g+kB95eiEqAU/FheWyV0XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfJFFXF0Z 5u99+80dJZGs9LXc8Q8wHwYDVR0jBBgwFoAUY06sGbStSypNQSgRX59VZ5TMdSMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0N0VEL0Q0NzQ2OTFFQ0I4 MDExRjA4NDBGNTQxQ0M0RjlBRTAyL1kwNnNHYlN0U3lwTlFTZ1JYNTlWWjVUTWRT TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWTA2c0diU3RTeXBOUVNnUlg1OVZaNVRNZFNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0 N0VEL0Q0NzQ2OTFFQ0I4MDExRjA4NDBGNTQxQ0M0RjlBRTAyL1kwNnNHYlN0U3lw TlFTZ1JYNTlWWjVUTWRTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADmxdz8ebwyXkiuWPKQCoxXJJbF5p8fkZKVROrAF0vITZp2FulrNVDyW n3mbqzfhUiKSqe/4awD/TIBeFk6bwo6GLST8NIKAbaBMjlhk7heaA0jB7U20FZMo O9WhV0omTfzdIFdq/muaHjyVodNuam6GiFsWMVr1Ku5EU8eN1ufVdG1K1NK4qoYD 4/dpiD085Hts2cUDpc8zx8JGmf62fF+5Sc0gEr6O/9t0dQjMTsFImmhZ5wI4Ft6k waRC6+z/LBQInLb3Yvil1UWWpR1AhFE70oeE+7C3IXW305tS0BhFzSGPtiOD4fU0 CduKe/Gmbwpm/ixHvNycf6PQcKMc3A4= -----END CERTIFICATE-----Generated at Sat Dec 20 01:10:28 2025 by rpki-client