This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft File: -YvpQtnreFakMNG8KUc7xN1nf-o.mft (raw, json) Hash identifier: 2+u0IgLlQ6u3/echxFHnDswfcjr42dVt9jJyqghbFlg= Subject key identifier: 08:C5:FD:06:EB:A5:68:A6:CE:43:58:CA:3B:28:18:F0:22:D5:64:06 Authority key identifier: F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA Certificate issuer: /CN=A91949C1/serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft Manifest number: 0118 Signing time: Fri 19 Dec 2025 03:55:24 +0000 Manifest this update: Fri 19 Dec 2025 03:55:24 +0000 Manifest next update: Fri 26 Dec 2025 03:55:24 +0000 Files and hashes: 1: -YvpQtnreFakMNG8KUc7xN1nf-o.crl (hash: SlRqZ2GM2OwnBbud3DvnAZ29wnTvQS/79OpVf0VJ+5M=) 2: 5E1227E22DD511EF9AFE395EC4F9AE02.roa (hash: //CtK2APwvuKqYfNGso7I/JYlqJyjoNEWh980lWprcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91949C1, serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA Validity Not Before: Dec 19 03:55:24 2025 GMT Not After : Dec 26 03:55:24 2025 GMT Subject: CN=6944ccac-0f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ac:43:d5:61:91:05:14:23:af:f1:64:33:cb: 23:27:f1:52:60:88:26:0d:d1:2b:66:e2:a5:94:6c: 92:92:a3:89:d2:c2:37:3c:8b:54:53:16:40:02:e9: 81:91:00:78:24:8d:1a:8d:48:36:a4:00:0b:b1:bb: 1c:f0:1e:38:c3:3e:d7:62:f5:68:b5:8e:2c:a8:a1: 1c:76:00:f1:f3:6f:6a:20:ca:2f:0c:0d:65:07:13: 49:8a:81:86:82:89:a3:a7:c7:62:96:1a:75:d9:df: 58:59:0d:23:c0:35:8e:83:c3:7c:b8:47:96:0e:24: 5b:67:0b:f0:05:02:c0:12:5c:48:fa:f0:2a:21:74: 48:09:c1:13:27:41:35:95:4d:34:f6:1a:d3:df:9e: 38:4d:f9:4e:34:23:62:34:44:41:a6:88:c6:b7:d4: e5:14:45:23:dc:b4:69:13:c4:96:ac:98:36:ce:17: 5c:d1:47:6e:85:7f:92:a5:20:d2:90:dd:85:16:d2: c4:64:d4:1b:38:1a:4f:33:47:1a:26:30:7a:42:8a: 4e:ed:35:67:f0:90:1d:c7:5e:5e:fe:bd:60:6d:88: c7:84:f8:2a:b4:1c:ec:d2:8d:5e:db:52:9f:98:59: 99:b8:96:ee:08:20:2e:92:5b:d3:ff:15:31:25:18: a3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C5:FD:06:EB:A5:68:A6:CE:43:58:CA:3B:28:18:F0:22:D5:64:06 X509v3 Authority Key Identifier: keyid:F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:30:17:26:02:4c:75:8d:ee:42:96:44:fc:57:0b:a8:8c:e5: 57:b7:c2:c4:5d:9f:65:69:f3:2c:85:fc:b7:87:f7:9e:d7:89: c9:43:a5:17:6d:a4:fb:67:6f:b2:ed:de:36:d6:af:4c:eb:2a: 14:42:a3:7e:14:26:61:c0:f0:f5:ba:4c:f2:3d:bf:74:2a:42: 9a:a6:8c:dc:4c:99:73:41:2a:1f:07:6f:ec:a8:a5:c7:9f:01: a3:1b:8d:09:4e:99:f6:38:44:78:05:b7:48:69:f6:a1:10:c9: fc:61:1e:b5:42:af:af:7c:65:ab:0f:f8:af:e6:48:1d:93:40: 64:78:c9:46:91:de:0f:d3:fb:cf:ae:74:b7:4a:ca:f0:5a:3b: 21:78:33:37:91:62:e3:40:c2:c0:95:05:e9:e7:dd:a0:a5:7c: 7a:67:73:4f:bf:fe:0e:25:f2:62:03:f6:9f:eb:91:39:77:e2: bb:d0:53:85:61:9a:f1:ae:03:7e:35:b7:99:2e:41:ae:c0:ff: 43:e0:10:84:cd:00:54:6b:66:24:4e:7c:66:74:9c:0b:94:e8: 35:76:2a:c9:f9:32:b6:63:6e:fc:36:09:1b:f5:d8:78:3b:19: b5:10:a7:d1:d1:29:38:c3:63:4d:e0:3e:04:e2:7e:f0:f7:25: bf:4f:16:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ5QzExMTAvBgNVBAUTKEY5OEJFOTQyRDlFQjc4NTZBNDMwRDFCQzI5NDczQkM0 REQ2NzdGRUEwHhcNMjUxMjE5MDM1NTI0WhcNMjUxMjI2MDM1NTI0WjAYMRYwFAYD VQQDDA02OTQ0Y2NhYy0wZjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnqxD1WGRBRQjr/FkM8sjJ/FSYIgmDdErZuKllGySkqOJ0sI3PItUUxZAAumB kQB4JI0ajUg2pAALsbsc8B44wz7XYvVotY4sqKEcdgDx829qIMovDA1lBxNJioGG gomjp8dilhp12d9YWQ0jwDWOg8N8uEeWDiRbZwvwBQLAElxI+vAqIXRICcETJ0E1 lU009hrT3544TflONCNiNERBpojGt9TlFEUj3LRpE8SWrJg2zhdc0UduhX+SpSDS kN2FFtLEZNQbOBpPM0caJjB6QopO7TVn8JAdx15e/r1gbYjHhPgqtBzs0o1e21Kf mFmZuJbuCCAuklvT/xUxJRijtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjF/Qbr pWimzkNYyjsoGPAi1WQGMB8GA1UdIwQYMBaAFPmL6ULZ63hWpDDRvClHO8TdZ3/q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDlDMS8wOUY1MkIxNDJE RDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVGYWtNTkc4S1VjN3hOMW5m LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1ZdnBRdG5yZUZha01ORzhLVWM3eE4xbmYtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDlDMS8wOUY1MkIxNDJERDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVG YWtNTkc4S1VjN3hOMW5mLW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvMBcmAkx1je5ClkT8VwuojOVXt8LEXZ9lafMshfy3h/ee14nJQ6UX baT7Z2+y7d421q9M6yoUQqN+FCZhwPD1ukzyPb90KkKapozcTJlzQSofB2/sqKXH nwGjG40JTpn2OER4BbdIafahEMn8YR61Qq+vfGWrD/iv5kgdk0BkeMlGkd4P0/vP rnS3SsrwWjsheDM3kWLjQMLAlQXp592gpXx6Z3NPv/4OJfJiA/af65E5d+K70FOF YZrxrgN+NbeZLkGuwP9D4BCEzQBUa2YkTnxmdJwLlOg1dirJ+TK2Y278Ngkb9dh4 Oxm1EKfR0Sk4w2NN4D4E4n7w9yW/TxaV -----END CERTIFICATE-----Generated at Sun Dec 21 04:28:49 2025 by rpki-client