This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft File: YwXctV_RS1x6opSuN8cCdWkvQYA.mft (raw, json) Hash identifier: cMo/SbgzkG7nlW4BznGA4iJlaUzvBFaJuIeE9KqAjIo= Subject key identifier: 3D:80:8C:3F:AE:98:C6:31:17:4F:57:B7:84:B2:B1:87:77:5A:A8:B8 Authority key identifier: 63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80 Certificate issuer: /CN=A91A9CD5/serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft Manifest number: E3 Signing time: Fri 19 Dec 2025 04:33:33 +0000 Manifest this update: Fri 19 Dec 2025 04:33:33 +0000 Manifest next update: Fri 26 Dec 2025 04:33:33 +0000 Files and hashes: 1: YwXctV_RS1x6opSuN8cCdWkvQYA.crl (hash: /6hmSgj7NPFp6p0vBmyuvrfaKFrfjMQBdXGiMHglQXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:33:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CD5, serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180 Validity Not Before: Dec 19 04:33:33 2025 GMT Not After : Dec 26 04:33:33 2025 GMT Subject: CN=6944d59d-d2f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c2:5c:37:ea:3e:61:de:af:27:81:e7:a8:e8: 14:c0:14:d4:7a:8c:ad:a6:41:2b:cd:a5:51:3c:c3: cb:52:77:e3:18:7d:5f:c1:98:ce:dd:af:67:ef:5b: 2b:ce:9d:5c:88:bd:fd:23:66:12:8d:b9:5f:fb:15: 9b:be:f5:94:59:29:0a:74:55:78:0c:82:1e:59:01: 43:f4:4b:21:d0:ed:73:e0:91:d1:a1:05:92:97:ec: a6:f9:ab:46:b6:79:ec:47:78:b4:ea:5a:31:d0:8f: b3:e5:e8:b7:63:34:9f:ad:fc:ff:cd:5c:06:18:8a: a7:aa:3f:0d:eb:ae:f2:ea:55:0e:29:f4:49:d6:b1: b1:ee:b5:56:e9:b5:06:9f:54:73:8a:7f:0d:95:8a: 32:ae:62:f3:e5:1f:1f:2c:d5:10:5d:3d:be:ca:16: 38:27:52:fd:c5:85:82:7c:c0:08:3f:63:ab:37:7a: 09:58:2f:8d:f6:9e:e3:52:ce:01:14:5a:89:b2:c1: e6:11:bb:39:32:77:ca:ff:f9:b7:05:2b:3b:61:ff: 6a:a4:59:bf:76:bd:ab:b3:37:9e:a8:50:bf:9d:f6: db:90:e0:e9:cd:7d:74:21:fa:92:2a:57:73:e6:1b: 66:67:42:3b:71:41:a5:8b:ea:eb:63:0a:24:c9:63: 85:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:80:8C:3F:AE:98:C6:31:17:4F:57:B7:84:B2:B1:87:77:5A:A8:B8 X509v3 Authority Key Identifier: keyid:63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2e:05:ee:29:ef:90:8f:b8:e1:a4:d7:51:62:c5:8e:f4:c2: 89:c3:b3:b0:49:3b:d0:5f:34:57:63:36:0f:d7:83:7a:cb:d7: 86:76:a2:41:46:eb:b9:72:26:0b:cc:f8:3e:02:f3:d4:96:24: 50:5d:31:60:b7:2b:e6:e7:a6:ba:19:5e:61:d7:37:99:da:65: 09:61:cb:db:96:3c:1c:7b:05:4a:9a:e1:ed:6c:12:5a:d2:4f: 2e:91:96:08:d6:49:52:e3:e0:e5:52:34:3e:51:eb:ff:74:b5: fd:96:66:97:a9:a5:32:08:1a:33:3d:e8:ea:8d:11:24:b6:ef: 5d:38:84:a3:cf:14:8f:5e:13:c4:4b:22:43:6d:41:9b:37:18: 5b:aa:48:d3:07:07:c1:59:22:fc:55:19:8b:dd:4b:57:31:da: 9b:aa:b1:bc:98:a3:6b:aa:77:82:39:9d:99:b3:8d:10:bf:08: 25:a6:22:f2:e5:b5:38:3b:78:ab:fe:8c:a6:64:6e:3e:07:73: 0f:af:e0:bf:f9:6f:30:dd:bf:dd:28:5d:f0:4f:ba:0a:7e:3f: a6:18:85:86:35:33:53:56:15:32:db:fb:9b:4a:7c:f4:71:66: 49:21:dd:13:d8:27:ae:f1:84:3e:e4:11:54:17:4b:50:08:99: 39:8d:08:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlDRDUxMTAvBgNVBAUTKDYzMDVEQ0I1NUZEMTRCNUM3QUEyOTRBRTM3QzcwMjc1 NjkyRjQxODAwHhcNMjUxMjE5MDQzMzMzWhcNMjUxMjI2MDQzMzMzWjAYMRYwFAYD VQQDDA02OTQ0ZDU5ZC1kMmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlMJcN+o+Yd6vJ4HnqOgUwBTUeoytpkErzaVRPMPLUnfjGH1fwZjO3a9n71sr zp1ciL39I2YSjblf+xWbvvWUWSkKdFV4DIIeWQFD9Esh0O1z4JHRoQWSl+ym+atG tnnsR3i06lox0I+z5ei3YzSfrfz/zVwGGIqnqj8N667y6lUOKfRJ1rGx7rVW6bUG n1Rzin8NlYoyrmLz5R8fLNUQXT2+yhY4J1L9xYWCfMAIP2OrN3oJWC+N9p7jUs4B FFqJssHmEbs5MnfK//m3BSs7Yf9qpFm/dr2rszeeqFC/nfbbkODpzX10IfqSKldz 5htmZ0I7cUGli+rrYwokyWOFJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2AjD+u mMYxF09Xt4SysYd3Wqi4MB8GA1UdIwQYMBaAFGMF3LVf0UtceqKUrjfHAnVpL0GA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUNENS83QTlBMjUxMDdG RUYxMUVGQTgyREY2MzlDNEY5QUUwMi9Zd1hjdFZfUlMxeDZvcFN1TjhjQ2RXa3ZR WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l3WGN0Vl9SUzF4Nm9wU3VOOGNDZFdrdlFZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUNENS83QTlBMjUxMDdGRUYxMUVGQTgyREY2MzlDNEY5QUUwMi9Zd1hjdFZfUlMx eDZvcFN1TjhjQ2RXa3ZRWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqLgXuKe+Qj7jhpNdRYsWO9MKJw7OwSTvQXzRXYzYP14N6y9eGdqJB Ruu5ciYLzPg+AvPUliRQXTFgtyvm56a6GV5h1zeZ2mUJYcvbljwcewVKmuHtbBJa 0k8ukZYI1klS4+DlUjQ+Uev/dLX9lmaXqaUyCBozPejqjREktu9dOISjzxSPXhPE SyJDbUGbNxhbqkjTBwfBWSL8VRmL3UtXMdqbqrG8mKNrqneCOZ2Zs40QvwglpiLy 5bU4O3ir/oymZG4+B3MPr+C/+W8w3b/dKF3wT7oKfj+mGIWGNTNTVhUy2/ubSnz0 cWZJId0T2Ceu8YQ+5BFUF0tQCJk5jQj+ -----END CERTIFICATE-----Generated at Fri Dec 19 20:15:53 2025 by rpki-client