This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft File: YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft (raw, json) Hash identifier: ltCwzmHtipOu9vUKmbAkxY4j/NEBjPzH6xBAbCv42RU= Subject key identifier: 39:5F:1D:75:29:D1:33:76:10:37:CC:1B:E4:B3:1E:86:67:62:14:CD Authority key identifier: 60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 Certificate issuer: /CN=A91AF3C6/serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Certificate serial: 084D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft Manifest number: 0842 Signing time: Thu 18 Dec 2025 20:19:28 +0000 Manifest this update: Thu 18 Dec 2025 20:19:27 +0000 Manifest next update: Thu 25 Dec 2025 20:19:27 +0000 Files and hashes: 1: YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl (hash: Gwq/lGKsMYRtfiHOonIY7W+7Wisl91hX73UDK8gfB9M=) 2: F7F2D20ABCE911EFB7786B63C4F9AE02.roa (hash: SY9pZakTz+Y+bprs2Qaz2rmG63LM9RAeEr8PBsMxkEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:19:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2125 (0x84d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF3C6, serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Validity Not Before: Dec 18 20:19:27 2025 GMT Not After : Dec 25 20:19:27 2025 GMT Subject: CN=694461cf-b11c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:46:e8:32:89:c7:a2:11:75:2c:a5:26:f2:75: f4:f9:6e:23:15:a9:cb:47:25:eb:86:0e:68:d5:25: 92:6f:2b:ab:26:e7:38:52:7c:14:68:11:83:cc:9b: 5d:09:2a:8b:d7:9b:f1:66:f5:20:e1:1a:28:02:27: 64:d8:cf:cb:3c:15:26:e1:76:97:55:de:e6:ee:bd: a6:17:f1:df:07:4a:a4:64:25:df:5d:81:b9:09:d0: a5:9f:c1:5a:61:4c:95:86:7c:92:bc:49:c6:3d:92: cc:ca:cf:d2:3a:f4:18:58:0b:1c:5a:f6:2c:dd:8e: 73:07:aa:2b:37:af:79:6e:e4:4d:ca:79:d8:c5:1b: 4b:32:a7:77:bd:8a:f7:8d:69:ff:19:1f:5d:76:5f: 2e:97:2b:99:c8:4b:a0:ac:c0:f1:ef:ad:d2:ce:62: 00:52:7d:fd:4c:3b:89:48:33:b6:c0:4f:c2:b9:b3: 20:e2:f9:0f:37:81:03:ae:cf:87:98:ac:f4:b9:ff: 11:4e:d3:47:e0:42:e0:7f:84:a6:bc:f6:e5:bb:f2: e3:52:f7:24:df:9b:5e:d7:a5:62:36:39:0d:d2:f5: 09:1e:ab:f2:01:66:ff:1e:f2:80:d1:a3:3e:0f:78: 65:dd:f6:19:05:08:c7:c6:af:6b:7c:6b:62:7a:3d: 90:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5F:1D:75:29:D1:33:76:10:37:CC:1B:E4:B3:1E:86:67:62:14:CD X509v3 Authority Key Identifier: keyid:60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:14:44:a5:f7:bb:98:c6:2a:0e:6e:ff:11:1c:6b:fc:63:05: 6f:d6:bd:86:71:10:d4:02:4a:c7:b8:29:08:a6:6d:6b:05:e5: 5b:fb:1c:a4:e0:91:44:68:d6:5f:95:5b:8c:27:90:ca:13:f5: a4:73:2d:b8:32:1d:d1:2a:2b:96:ed:4c:74:d0:09:1f:4b:30: 76:e3:ed:13:b4:a0:8e:a8:23:d6:05:20:4b:07:a7:4c:34:4f: a3:a9:34:ab:6f:b2:c2:fd:2d:4f:f8:09:7d:d8:ff:f6:b1:d9: fb:fe:a6:22:fc:14:46:f2:04:59:96:6c:6b:23:19:1a:26:ac: 58:64:77:1d:9d:6b:a3:6c:57:7b:74:0a:cc:d7:1e:3e:10:91: f4:dc:4b:7e:16:85:44:86:42:8c:55:62:ca:6d:6c:d7:3d:78: d0:61:93:be:cb:8f:c7:74:58:e0:09:e8:a5:a9:3f:69:46:b7: 19:13:ae:d7:9d:b3:cb:c6:6e:84:5a:f8:63:1b:db:68:f5:86: 7d:29:26:e6:0a:5e:65:dc:8f:43:65:2c:23:5d:5a:12:55:aa: 4c:b2:ad:18:83:bb:ad:bf:45:4b:65:bb:78:1f:97:e7:10:bf: 67:9b:a0:82:02:aa:bc:f0:d7:d5:f7:4d:08:e0:01:9a:27:1d: 98:11:1d:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYzQzYxMTAvBgNVBAUTKDYwNkVFODVEQzNDNDY3RkM0NjRBODk0RUQ0N0E5RjFC RDMyMUI0NDEwHhcNMjUxMjE4MjAxOTI3WhcNMjUxMjI1MjAxOTI3WjAYMRYwFAYD VQQDDA02OTQ0NjFjZi1iMTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkboMonHohF1LKUm8nX0+W4jFanLRyXrhg5o1SWSbyurJuc4UnwUaBGDzJtd CSqL15vxZvUg4RooAidk2M/LPBUm4XaXVd7m7r2mF/HfB0qkZCXfXYG5CdCln8Fa YUyVhnySvEnGPZLMys/SOvQYWAscWvYs3Y5zB6orN695buRNynnYxRtLMqd3vYr3 jWn/GR9ddl8ulyuZyEugrMDx763SzmIAUn39TDuJSDO2wE/CubMg4vkPN4EDrs+H mKz0uf8RTtNH4ELgf4SmvPblu/LjUvck35te16ViNjkN0vUJHqvyAWb/HvKA0aM+ D3hl3fYZBQjHxq9rfGtiej2QhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlfHXUp 0TN2EDfMG+SzHoZnYhTNMB8GA1UdIwQYMBaAFGBu6F3DxGf8RkqJTtR6nxvTIbRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjNDNi82MzFDQzE2MEYz MzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpfeEdTb2xPMUhxZkc5TWh0 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHN29YY1BFWl94R1NvbE8xSHFmRzlNaHRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjNDNi82MzFDQzE2MEYzMzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpf eEdTb2xPMUhxZkc5TWh0RUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqFESl97uYxioObv8RHGv8YwVv1r2GcRDUAkrHuCkIpm1rBeVb+xyk 4JFEaNZflVuMJ5DKE/Wkcy24Mh3RKiuW7Ux00AkfSzB24+0TtKCOqCPWBSBLB6dM NE+jqTSrb7LC/S1P+Al92P/2sdn7/qYi/BRG8gRZlmxrIxkaJqxYZHcdnWujbFd7 dArM1x4+EJH03Et+FoVEhkKMVWLKbWzXPXjQYZO+y4/HdFjgCeilqT9pRrcZE67X nbPLxm6EWvhjG9to9YZ9KSbmCl5l3I9DZSwjXVoSVapMsq0Yg7utv0VLZbt4H5fn EL9nm6CCAqq88NfV900I4AGaJx2YER0h -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:05 2025 by rpki-client