This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft File: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft (raw, json) Hash identifier: XEPA/s28jx7moeWG6UuLdM5QXlL/08mo31eD5fUALDo= Subject key identifier: 58:78:62:06:F8:64:60:61:49:65:A1:19:1D:B9:70:C6:3F:1C:DB:F5 Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC Certificate issuer: /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft Manifest number: CC Signing time: Sun 21 Dec 2025 05:13:55 +0000 Manifest this update: Sun 21 Dec 2025 05:13:55 +0000 Manifest next update: Sun 28 Dec 2025 05:13:55 +0000 Files and hashes: 1: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl (hash: 1hc33p1LtlU309o3OYjrj4BehzS0M+n6PWI6i2m1Mvg=) 2: E3239FCAD48C11EFA27EEC37C4F9AE02.roa (hash: eDrkrHM6e7G8MkefF8uO0ebeRL2ZiilrSCVyjl1v/78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC Validity Not Before: Dec 21 05:13:55 2025 GMT Not After : Dec 28 05:13:55 2025 GMT Subject: CN=69478213-7ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f8:cb:ce:3a:ab:b4:6e:20:51:85:ca:42:11: 6b:08:86:db:e0:bd:1f:9d:55:d2:0d:d0:aa:b6:65: 17:a1:be:c5:3e:5f:99:31:eb:59:7d:46:50:5b:7a: d7:be:ed:7e:3f:e1:22:da:ed:75:1f:52:12:29:e2: 99:50:d0:69:bf:d4:7b:37:43:cb:96:fb:a7:91:ed: 36:92:aa:75:6c:d6:79:b4:4c:a9:2f:6f:92:3a:32: 8b:1b:3a:5d:b8:30:8a:13:18:a0:38:8e:e4:e4:6f: 97:f8:ed:bb:1c:42:23:c4:8d:61:b8:83:68:7d:ea: c2:1e:99:d1:c9:94:99:6d:16:a3:02:60:34:0a:a0: 80:b7:59:77:e4:fd:b6:06:1c:54:00:56:31:92:b3: 54:e7:6d:31:b0:a9:ae:95:15:8d:da:80:9e:2e:a0: 6f:32:0b:f2:64:9d:89:05:9b:c8:b6:bb:3c:93:cc: 6d:c5:25:dc:5a:fa:2a:8c:6b:5d:96:68:7d:82:58: 6c:e9:9e:51:ad:f3:ce:6f:07:81:06:96:d5:c7:7a: 8c:9e:30:6c:b3:e1:9c:f0:6c:28:14:ab:06:52:a6: 74:d2:ac:a5:5a:ed:03:63:79:d9:63:7f:71:e0:bb: 27:59:ee:09:bb:9d:79:66:2f:b2:2c:3d:f6:2b:8e: f1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:78:62:06:F8:64:60:61:49:65:A1:19:1D:B9:70:C6:3F:1C:DB:F5 X509v3 Authority Key Identifier: keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:a7:e0:f6:c1:1a:07:61:66:9f:29:80:e4:13:75:0a:16:52: 99:67:e9:37:1c:4a:0e:4d:fa:d5:02:e7:6f:42:b7:85:7f:de: f2:a5:97:73:38:70:06:02:f9:3f:52:48:3b:3b:84:38:fc:64: 75:e9:2a:41:e9:e4:5d:75:b6:fe:ff:87:a0:2f:a5:93:bb:95: 9d:36:75:2f:e7:e0:87:b8:6d:54:a6:fc:12:ab:1f:29:45:31: d8:e0:f7:8e:91:05:d3:23:11:dd:26:d4:93:6f:01:7d:a8:09: a2:d0:18:8c:73:c1:04:e1:cc:39:7e:43:83:d3:20:db:39:35: d4:65:ca:0b:4b:5a:77:1e:6d:0e:26:ee:67:99:76:26:2d:30: 93:27:c1:0a:d3:9c:ac:bd:05:b5:70:22:89:65:86:37:0f:96: 49:69:b4:7a:42:f9:23:13:9c:ef:90:ba:73:8d:d1:87:ef:94: 7d:c3:48:c5:c5:68:41:90:b8:62:77:60:b3:da:23:16:01:2c: 8a:52:5a:ca:32:68:cc:22:4e:74:31:ab:37:1b:cf:40:db:36: 5f:8a:6b:64:6c:96:eb:25:b7:0b:3a:6a:1d:71:72:f9:cb:4d: b0:ec:39:ef:65:c2:72:dc:47:42:27:a5:e5:12:f5:e6:14:0b: d5:66:10:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg1RTkxMTAvBgNVBAUTKDYyNEI5NkUxRDY2NUVENzhFNzhERkFGNkMyMjAxOTEw NzNEQjY2Q0MwHhcNMjUxMjIxMDUxMzU1WhcNMjUxMjI4MDUxMzU1WjAYMRYwFAYD VQQDDA02OTQ3ODIxMy03YWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl/jLzjqrtG4gUYXKQhFrCIbb4L0fnVXSDdCqtmUXob7FPl+ZMetZfUZQW3rX vu1+P+Ei2u11H1ISKeKZUNBpv9R7N0PLlvunke02kqp1bNZ5tEypL2+SOjKLGzpd uDCKExigOI7k5G+X+O27HEIjxI1huINoferCHpnRyZSZbRajAmA0CqCAt1l35P22 BhxUAFYxkrNU520xsKmulRWN2oCeLqBvMgvyZJ2JBZvItrs8k8xtxSXcWvoqjGtd lmh9glhs6Z5RrfPObweBBpbVx3qMnjBss+Gc8GwoFKsGUqZ00qylWu0DY3nZY39x 4LsnWe4Ju515Zi+yLD32K47x/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFh4Ygb4 ZGBhSWWhGR25cMY/HNv1MB8GA1UdIwQYMBaAFGJLluHWZe1454369sIgGRBz22bM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODVFOS9DMTEyRjU1Q0Qx NzYxMUVGOTVDNURFNUFDNEY5QUUwMi9Za3VXNGRabDdYam5qZnIyd2lBWkVIUGJa c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lrdVc0ZFpsN1hqbmpmcjJ3aUFaRUhQYlpzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODVFOS9DMTEyRjU1Q0QxNzYxMUVGOTVDNURFNUFDNEY5QUUwMi9Za3VXNGRabDdY am5qZnIyd2lBWkVIUGJac3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZp+D2wRoHYWafKYDkE3UKFlKZZ+k3HEoOTfrVAudvQreFf97ypZdz OHAGAvk/Ukg7O4Q4/GR16SpB6eRddbb+/4egL6WTu5WdNnUv5+CHuG1UpvwSqx8p RTHY4PeOkQXTIxHdJtSTbwF9qAmi0BiMc8EE4cw5fkOD0yDbOTXUZcoLS1p3Hm0O Ju5nmXYmLTCTJ8EK05ysvQW1cCKJZYY3D5ZJabR6QvkjE5zvkLpzjdGH75R9w0jF xWhBkLhid2Cz2iMWASyKUlrKMmjMIk50Mas3G89A2zZfimtkbJbrJbcLOmodcXL5 y02w7DnvZcJy3EdCJ6XlEvXmFAvVZhBF -----END CERTIFICATE-----Generated at Sun Dec 21 13:05:39 2025 by rpki-client