This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft File: yZNZQ2ka0elTZudBwTkwH7f35ts.mft (raw, json) Hash identifier: UOHVBRJkKWNz5BvnDo87TS2yq9hgIxJzTysGK+RVN68= Subject key identifier: D9:57:C4:EE:BC:3A:D2:17:6B:C5:D9:9A:71:B0:4A:F2:1F:91:78:CC Authority key identifier: C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB Certificate issuer: /CN=A91A531A/serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB Certificate serial: 07C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft Manifest number: 07BE Signing time: Thu 18 Dec 2025 20:48:21 +0000 Manifest this update: Thu 18 Dec 2025 20:48:21 +0000 Manifest next update: Thu 25 Dec 2025 20:48:21 +0000 Files and hashes: 1: yZNZQ2ka0elTZudBwTkwH7f35ts.crl (hash: 3KT0XwRvDUAVuTwXxoAqRq7sKI6CvaV8CYU/HirHp8g=) 2: 43C467CA219911EB8F75645EC4F9AE02.roa (hash: 6tZzkzjjo4oBxSeK/R1NOhuzbe0x0nCnZv7oHnkeXMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1988 (0x7c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A531A, serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB Validity Not Before: Dec 18 20:48:21 2025 GMT Not After : Dec 25 20:48:21 2025 GMT Subject: CN=69446895-ecd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e7:f5:b4:50:c0:8b:92:66:3f:34:5f:50:7e: 75:3d:60:98:78:fc:bc:1d:9d:f7:7c:f5:32:a7:07: bc:ca:c5:ea:23:39:f0:96:39:7b:0c:f5:16:33:8b: 28:73:44:eb:5f:17:44:15:bb:06:4c:60:22:64:70: 1f:c4:ce:c7:e2:74:7b:ae:97:c8:71:c3:8a:b0:f4: c5:16:d5:7b:17:99:27:52:17:70:ea:79:47:c5:da: 6b:8b:68:e2:6e:40:af:8a:9d:76:c4:2a:34:87:91: ad:0b:36:f1:d0:79:f4:50:5a:f7:9b:0c:17:a2:c8: ed:3b:92:88:8d:f2:e0:ae:04:53:64:18:be:b4:52: 31:90:49:e2:45:2d:56:67:91:db:a0:5c:82:aa:f6: 05:e9:0d:d5:17:fa:3a:37:cf:2f:3b:08:95:a5:6b: fc:d6:44:c8:57:8e:62:de:27:b4:88:7c:c4:68:6c: cd:f4:34:0b:87:77:c6:61:9f:46:c5:9e:7e:ec:4f: 14:b9:7c:5b:94:75:5d:56:74:87:72:68:ca:94:90: e8:a8:3c:0e:71:33:ea:7a:65:ce:21:22:ee:03:45: 3f:62:48:f4:69:99:f4:7d:f3:22:6a:e8:af:ff:48: ea:02:8b:54:3d:84:4e:b8:92:16:ec:75:7e:05:e8: 1c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:57:C4:EE:BC:3A:D2:17:6B:C5:D9:9A:71:B0:4A:F2:1F:91:78:CC X509v3 Authority Key Identifier: keyid:C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:7c:a0:81:e8:b2:db:b3:91:0b:97:ea:ee:48:80:65:9c:ec: f0:1a:6a:7e:ff:cf:46:a7:4b:cd:82:dc:8b:e7:3b:08:f2:2c: 52:87:cc:ea:bd:93:37:bd:c7:a3:5a:0a:a4:11:4b:1e:9d:38: d7:7b:c6:bb:a8:ec:b9:ae:ce:f1:af:d3:1b:23:97:56:93:a9: e2:a1:18:27:49:b5:81:8f:9d:d9:c4:92:48:6c:cf:b1:7f:d1: 2e:76:46:47:36:03:dc:a1:9a:10:9f:e5:26:8e:72:f8:f5:ff: 26:e8:77:d8:88:6d:4f:da:40:52:86:8d:8c:f2:f9:e0:18:68: e6:8b:2c:67:22:09:3f:23:0d:6a:54:62:31:86:50:d9:65:75: 72:23:da:d9:64:47:a0:a3:be:e1:5c:2a:64:90:87:bc:8e:46: d4:c9:ed:c5:de:7b:60:be:bc:66:e5:53:1c:f0:d7:33:c7:59: 3a:b4:ac:b3:94:68:28:61:66:9f:a5:2a:cf:be:cf:d3:bb:b7: c0:ff:0e:d6:1e:dc:d2:85:91:5b:1d:93:0d:fb:ee:b8:4e:02: 7c:42:92:b1:6a:6a:fe:93:ba:7e:5f:38:06:74:55:78:bd:63: d6:bb:90:94:17:4c:54:d8:51:c2:a3:09:70:81:6d:fa:e0:45: 2b:42:ec:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMUExMTAvBgNVBAUTKEM5OTM1OTQzNjkxQUQxRTk1MzY2RTc0MUMxMzkzMDFG QjdGN0U2REIwHhcNMjUxMjE4MjA0ODIxWhcNMjUxMjI1MjA0ODIxWjAYMRYwFAYD VQQDDA02OTQ0Njg5NS1lY2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAquf1tFDAi5JmPzRfUH51PWCYePy8HZ33fPUypwe8ysXqIznwljl7DPUWM4so c0TrXxdEFbsGTGAiZHAfxM7H4nR7rpfIccOKsPTFFtV7F5knUhdw6nlHxdpri2ji bkCvip12xCo0h5GtCzbx0Hn0UFr3mwwXosjtO5KIjfLgrgRTZBi+tFIxkEniRS1W Z5HboFyCqvYF6Q3VF/o6N88vOwiVpWv81kTIV45i3ie0iHzEaGzN9DQLh3fGYZ9G xZ5+7E8UuXxblHVdVnSHcmjKlJDoqDwOcTPqemXOISLuA0U/Ykj0aZn0ffMiauiv /0jqAotUPYROuJIW7HV+BegcVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNlXxO68 OtIXa8XZmnGwSvIfkXjMMB8GA1UdIwQYMBaAFMmTWUNpGtHpU2bnQcE5MB+39+bb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMxQS8yQkRERkFDRTIx OTcxMUVCQjQ1QjAzNTlDNEY5QUUwMi95Wk5aUTJrYTBlbFRadWRCd1Rrd0g3ZjM1 dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laTlpRMmthMGVsVFp1ZEJ3VGt3SDdmMzV0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMxQS8yQkRERkFDRTIxOTcxMUVCQjQ1QjAzNTlDNEY5QUUwMi95Wk5aUTJrYTBl bFRadWRCd1Rrd0g3ZjM1dHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5fKCB6LLbs5ELl+ruSIBlnOzwGmp+/89Gp0vNgtyL5zsI8ixSh8zq vZM3vcejWgqkEUsenTjXe8a7qOy5rs7xr9MbI5dWk6nioRgnSbWBj53ZxJJIbM+x f9EudkZHNgPcoZoQn+UmjnL49f8m6HfYiG1P2kBSho2M8vngGGjmiyxnIgk/Iw1q VGIxhlDZZXVyI9rZZEego77hXCpkkIe8jkbUye3F3ntgvrxm5VMc8Nczx1k6tKyz lGgoYWafpSrPvs/Tu7fA/w7WHtzShZFbHZMN++64TgJ8QpKxamr+k7p+XzgGdFV4 vWPWu5CUF0xU2FHCowlwgW364EUrQuyX -----END CERTIFICATE-----Generated at Fri Dec 19 23:50:59 2025 by rpki-client