This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft File: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft (raw, json) Hash identifier: qPMtr+NATrpySojzYxfBjB325F8OroZtbRgs5a9rzI0= Subject key identifier: 89:39:F8:AB:9B:56:8F:6C:56:08:62:E1:00:42:0A:8D:45:F3:22:4A Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 Certificate issuer: /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Certificate serial: 31D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft Manifest number: 31C1 Signing time: Sat 20 Dec 2025 15:19:15 +0000 Manifest this update: Sat 20 Dec 2025 15:19:14 +0000 Manifest next update: Sat 27 Dec 2025 15:19:14 +0000 Files and hashes: 1: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl (hash: JBueAx0b29cPMrZS1usuE3Xwi9G4l4iwOsHCvm1NK34=) 2: 33036E24BCE311EA953FBB5EC4F9AE02.roa (hash: XqVyekJEjEzuH8hLRjew+hAKZkF1o9oKv8NocJP1RLE=) 3: 32538B4EBCE311EA953FBB5EC4F9AE02.roa (hash: /EM/vo0t7hxhR1+u4hOK5kv/a5vaIBeuI2TOpMQ2J6U=) 4: 31CCE602BCE311EA953FBB5EC4F9AE02.roa (hash: 4L/QBsPDgl5EFK4nBoxi1+onb9ozFugWEl6aDf8ffAI=) 5: 33B0CCAEBCE311EA953FBB5EC4F9AE02.roa (hash: ErhPkGRbX8uOsiv8BWxLJU0CPTjQbpalIipsBEye//M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12761 (0x31d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1461, serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Validity Not Before: Dec 20 15:19:14 2025 GMT Not After : Dec 27 15:19:14 2025 GMT Subject: CN=6946be73-b021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:97:53:24:51:a0:59:67:73:a6:d0:c9:b9:75: 30:d2:8a:f4:5f:27:dd:1d:a1:8e:40:bb:7c:96:21: 7b:f8:2f:c6:55:40:77:c2:ce:a2:d8:52:fb:87:e5: 66:8e:e7:c3:e6:09:b6:e5:7a:a8:12:75:15:b3:a0: b8:6e:c8:7d:d6:71:cb:5a:80:c8:0e:f3:bc:79:29: 8f:da:44:ca:70:20:42:c2:6b:f6:31:29:b2:1d:a5: 99:5d:c1:b7:ca:e6:90:f2:94:b6:a5:9b:31:30:4c: 0d:c2:7b:42:0f:37:2d:38:35:80:1c:4c:89:f9:34: 0a:1f:c2:ae:c6:36:8b:74:d5:6a:20:ca:3f:27:bc: fa:4f:64:f8:02:03:5a:dd:0a:9d:26:78:d6:1f:d2: e9:97:1f:6f:8d:ea:be:70:9e:b6:29:f7:14:b9:74: ec:87:d2:ea:e3:2f:69:50:a5:6b:76:d9:1f:ba:52: cc:cb:43:db:58:06:83:e3:cf:b8:a2:c8:ad:6c:56: 4d:42:12:14:4b:5b:c8:0e:c0:1a:61:ce:30:1c:34: db:e0:aa:05:68:eb:bd:0b:7f:ad:73:b2:db:17:62: b1:d2:91:79:dc:17:ca:e2:79:6d:71:1c:4b:75:69: 80:23:fa:31:9d:03:fc:d9:48:63:28:49:36:1f:4e: 80:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:39:F8:AB:9B:56:8F:6C:56:08:62:E1:00:42:0A:8D:45:F3:22:4A X509v3 Authority Key Identifier: keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:28:9a:04:e3:bd:a5:85:e1:6a:6d:90:e2:9a:90:15:af:af: 26:2d:07:04:5b:05:bd:67:36:6a:db:a6:43:45:12:a2:e3:4a: 9a:96:71:52:3e:1f:dd:58:fe:1e:a1:e1:de:1c:ce:74:cb:eb: 22:9f:b0:51:c2:7d:6c:50:2c:fb:fa:9b:ed:b9:f3:69:2e:d2: 11:c9:43:0f:80:40:57:c9:b9:37:b6:1d:0c:13:11:b0:48:ea: 05:54:22:af:20:8c:5c:ce:7b:3b:b9:ca:2a:a8:be:fb:ae:53: e1:70:ff:35:39:b7:0b:27:d5:2a:a1:75:1d:e6:c6:98:94:37: cb:c8:08:d4:21:3a:a8:55:bd:15:0d:73:41:e5:67:62:2c:13: 20:1f:82:0d:ed:18:02:53:90:6d:bf:65:58:3c:5c:e0:a2:8c: 94:16:06:e8:e2:b4:01:e0:8b:27:45:6f:be:cf:a4:35:fd:46: 70:d5:35:c7:25:d6:b7:2a:77:86:bb:ae:ea:24:f9:bd:25:c9: 94:bc:54:5d:d4:72:3f:88:56:dd:a9:32:87:10:c3:1c:47:31: 8b:ac:59:2c:54:8e:13:f7:1c:ba:26:8c:f8:e4:30:1e:b1:e7: 06:0c:ab:15:d1:89:aa:ed:89:8b:e5:61:59:1a:59:0c:99:b1: 7f:9b:b3:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE0NjExMTAvBgNVBAUTKDYzN0VEMTQxRkZFMDI1RkQwNTE5OTQ1Q0VENDhFNzRG OEJEMEY1QzkwHhcNMjUxMjIwMTUxOTE0WhcNMjUxMjI3MTUxOTE0WjAYMRYwFAYD VQQDDA02OTQ2YmU3My1iMDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2JdTJFGgWWdzptDJuXUw0or0XyfdHaGOQLt8liF7+C/GVUB3ws6i2FL7h+Vm jufD5gm25XqoEnUVs6C4bsh91nHLWoDIDvO8eSmP2kTKcCBCwmv2MSmyHaWZXcG3 yuaQ8pS2pZsxMEwNwntCDzctODWAHEyJ+TQKH8KuxjaLdNVqIMo/J7z6T2T4AgNa 3QqdJnjWH9Lplx9vjeq+cJ62KfcUuXTsh9Lq4y9pUKVrdtkfulLMy0PbWAaD48+4 ositbFZNQhIUS1vIDsAaYc4wHDTb4KoFaOu9C3+tc7LbF2Kx0pF53BfK4nltcRxL dWmAI/oxnQP82UhjKEk2H06A2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIk5+Kub Vo9sVghi4QBCCo1F8yJKMB8GA1UdIwQYMBaAFGN+0UH/4CX9BRmUXO1I50+L0PXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTQ2MS9GQ0U5QTY4MEJE RjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pmMEZHWlJjN1VqblQ0dlE5 Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzN1JRZl9nSmYwRkdaUmM3VWpuVDR2UTljay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTQ2MS9GQ0U5QTY4MEJERjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pm MEZHWlJjN1VqblQ0dlE5Y2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdKJoE472lheFqbZDimpAVr68mLQcEWwW9ZzZq26ZDRRKi40qalnFS Ph/dWP4eoeHeHM50y+sin7BRwn1sUCz7+pvtufNpLtIRyUMPgEBXybk3th0MExGw SOoFVCKvIIxczns7ucoqqL77rlPhcP81ObcLJ9UqoXUd5saYlDfLyAjUITqoVb0V DXNB5WdiLBMgH4IN7RgCU5Btv2VYPFzgooyUFgbo4rQB4IsnRW++z6Q1/UZw1TXH Jda3KneGu67qJPm9JcmUvFRd1HI/iFbdqTKHEMMcRzGLrFksVI4T9xy6Joz45DAe secGDKsV0Ymq7YmL5WFZGlkMmbF/m7Nx -----END CERTIFICATE-----Generated at Sun Dec 21 00:29:09 2025 by rpki-client