This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft File: yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft (raw, json) Hash identifier: /QfuIRd2CcRicgN+yLQ1wc6Qkmd/appRPPKDqvIEZCQ= Subject key identifier: E6:E5:AA:63:5F:D1:DD:3B:21:3F:A5:E4:6B:50:A0:16:79:1A:4A:90 Authority key identifier: CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 Certificate issuer: /CN=A91706CE/serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft Manifest number: 01DF Signing time: Sun 21 Dec 2025 02:03:12 +0000 Manifest this update: Sun 21 Dec 2025 02:03:12 +0000 Manifest next update: Sun 28 Dec 2025 02:03:12 +0000 Files and hashes: 1: yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl (hash: 0LiqNe8BwNWkQQmQKoeNMbT+HIrf2er5vWD8bhk4Nq0=) 2: CBECEF26736C11F0AB1C0331C4F9AE02.roa (hash: PohdabGkRRj8yF6hYAyIfaJYtFhBZ6QjhxOMrxm3cjY=) 3: 4C93B0C80F8E11EEA5B58045C4F9AE02.roa (hash: vIvtHj4TVv3QcsCJzYo0IznJMaTQQl47vgi8rc8e+n4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706CE, serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Validity Not Before: Dec 21 02:03:12 2025 GMT Not After : Dec 28 02:03:12 2025 GMT Subject: CN=69475560-81c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:de:1d:4b:53:1c:37:05:f2:29:f0:3a:34:15: 15:dd:ac:f7:54:84:55:bd:90:32:49:6f:1c:f4:01: 36:d0:d5:e7:b2:f5:83:cf:7a:ec:90:79:9b:87:19: 90:84:b3:4f:d2:09:45:18:75:5a:0b:09:19:9c:b3: 76:32:72:ca:f7:e3:fd:81:e7:6c:70:a6:4e:ca:2d: 7e:6a:e6:a5:59:61:5a:10:aa:e3:aa:48:28:e5:b8: 9a:02:7e:5c:7e:77:f7:d7:0f:7e:47:70:3c:18:2c: e3:8e:9b:78:17:d0:42:d7:83:8e:68:6c:ab:5d:77: 40:3e:08:47:07:aa:70:cf:57:b0:b2:d9:2c:e6:df: 11:e3:0f:37:ed:bd:21:51:3f:a8:62:d4:4a:e7:90: 6d:3a:f4:f4:cd:d7:d1:e8:13:ff:7d:e5:f9:84:d0: d4:9f:f7:2b:85:3b:4d:e3:f7:6e:51:e9:05:e9:f5: 42:97:b0:80:31:bf:1b:02:57:b7:8b:8d:02:b7:38: e3:ae:c1:3c:d6:95:fb:c5:a4:8e:69:78:c9:77:a5: 2b:83:41:3c:3f:e4:91:e9:02:1a:85:a9:7c:0c:27: f7:4a:02:79:6b:24:80:f0:ba:e1:26:64:9f:44:f0: ec:87:58:b2:02:4a:ef:67:cd:ad:50:53:03:bd:21: 40:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E5:AA:63:5F:D1:DD:3B:21:3F:A5:E4:6B:50:A0:16:79:1A:4A:90 X509v3 Authority Key Identifier: keyid:CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:69:bd:f5:95:1d:f3:6e:05:b9:f2:38:55:38:24:80:4c:42: a7:45:8e:17:b7:f6:41:25:f2:39:ff:d9:0e:88:df:27:35:11: df:e9:a6:7c:66:91:bc:4c:4e:08:3e:88:2a:3c:ff:dc:1f:21: c6:e5:a3:2f:b0:61:1d:0b:dd:d5:9a:3b:68:15:c4:e5:7a:d6: c3:19:80:23:86:4e:6d:b0:32:8b:24:db:d1:27:cd:0d:fc:73: ac:f3:8b:94:4f:fe:dd:04:cd:1e:6b:09:ea:e6:bd:8f:2f:a1: cc:df:2d:b9:51:e8:79:9e:b6:ce:4d:98:c5:b2:e0:c6:bc:54: f2:af:20:c1:31:f8:76:d9:be:cf:96:5a:28:4f:3b:9d:01:6a: b5:70:07:cd:ce:70:12:4d:4f:6f:af:73:1e:01:3e:81:6d:06: af:db:c0:9b:3e:91:47:76:6f:4d:9f:aa:26:37:08:b1:cc:a8: 7b:c9:f9:57:e4:42:0e:b8:e1:83:60:ca:d6:86:89:c6:f0:9f: bf:99:e7:e8:c9:95:4e:26:c9:ba:06:a5:6e:3e:c9:1b:cb:40: e4:87:4e:00:7a:43:38:32:8a:18:a9:23:a9:02:a2:47:65:85: 26:1a:55:6a:f3:33:7b:14:8b:1c:cd:37:2f:8c:ee:07:cb:64: d0:c5:11:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2Q0UxMTAvBgNVBAUTKENBQTQxNTMyQjdGNzJBQTJDM0UyQUQ2REY0MEI4RDRE MUVCMDM1OTcwHhcNMjUxMjIxMDIwMzEyWhcNMjUxMjI4MDIwMzEyWjAYMRYwFAYD VQQDDA02OTQ3NTU2MC04MWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlt4dS1McNwXyKfA6NBUV3az3VIRVvZAySW8c9AE20NXnsvWDz3rskHmbhxmQ hLNP0glFGHVaCwkZnLN2MnLK9+P9gedscKZOyi1+aualWWFaEKrjqkgo5biaAn5c fnf31w9+R3A8GCzjjpt4F9BC14OOaGyrXXdAPghHB6pwz1ewstks5t8R4w837b0h UT+oYtRK55BtOvT0zdfR6BP/feX5hNDUn/crhTtN4/duUekF6fVCl7CAMb8bAle3 i40CtzjjrsE81pX7xaSOaXjJd6Urg0E8P+SR6QIahal8DCf3SgJ5aySA8LrhJmSf RPDsh1iyAkrvZ82tUFMDvSFAIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOblqmNf 0d07IT+l5GtQoBZ5GkqQMB8GA1UdIwQYMBaAFMqkFTK39yqiw+KtbfQLjU0esDWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZDRS9FOTBCRDY2ODBG ODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0txTEQ0cTF0OUF1TlRSNndO WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxUVZNcmYzS3FMRDRxMXQ5QXVOVFI2d05aYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDZDRS9FOTBCRDY2ODBGODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0tx TEQ0cTF0OUF1TlRSNndOWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4ab31lR3zbgW58jhVOCSATEKnRY4Xt/ZBJfI5/9kOiN8nNRHf6aZ8 ZpG8TE4IPogqPP/cHyHG5aMvsGEdC93VmjtoFcTletbDGYAjhk5tsDKLJNvRJ80N /HOs84uUT/7dBM0eawnq5r2PL6HM3y25Ueh5nrbOTZjFsuDGvFTyryDBMfh22b7P llooTzudAWq1cAfNznASTU9vr3MeAT6BbQav28CbPpFHdm9Nn6omNwixzKh7yflX 5EIOuOGDYMrWhonG8J+/mefoyZVOJsm6BqVuPskby0Dkh04AekM4MooYqSOpAqJH ZYUmGlVq8zN7FIsczTcvjO4Hy2TQxRHD -----END CERTIFICATE-----Generated at Sun Dec 21 08:41:15 2025 by rpki-client