This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft File: yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft (raw, json) Hash identifier: jOhjtEmzCZWDly3gsTxbyo4WCbRGEinu86zShb4Xycs= Subject key identifier: 17:72:5C:03:1B:AE:10:EE:F6:FA:A8:24:3B:82:8C:61:B4:50:E4:D3 Authority key identifier: C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A Certificate issuer: /CN=A91B3558/serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A Certificate serial: 10DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft Manifest number: 10C6 Signing time: Mon 22 Dec 2025 17:00:46 +0000 Manifest this update: Mon 22 Dec 2025 17:00:45 +0000 Manifest next update: Mon 29 Dec 2025 17:00:45 +0000 Files and hashes: 1: yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl (hash: XvxFAtxRSIlRtIVfYgh7XhFmaAufA9sTPvbAcOC+Qas=) 2: B9E0D3EA716711EFBF91272AC4F9AE02.roa (hash: D2fBQ+WzSpKBrrM3Q6Z8cohOSpLekw4Ya8dTg5S7nEc=) 3: BAE1D7A8716711EFBF91272AC4F9AE02.roa (hash: y8nzjZGMQib7WT4yCqeNAgHbrhJTL2UqXsshegz4sgE=) 4: 9305EF46716511EFAA44E47BC4F9AE02.roa (hash: fEVsLbsqwk43zT4i9cB0QOn6Yu/KoGDrIvPTQDfkam8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4315 (0x10db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3558, serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A Validity Not Before: Dec 22 17:00:45 2025 GMT Not After : Dec 29 17:00:45 2025 GMT Subject: CN=6949793e-341a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7c:db:4b:c1:1e:de:29:61:5b:f4:5e:e7:b7: 47:45:5c:cb:ba:26:bd:16:cc:30:7d:02:64:21:e6: c3:a4:31:a2:a9:25:89:be:55:19:29:ef:28:23:28: e5:68:df:9b:ae:88:f2:bd:3e:da:14:c3:72:0c:3d: 98:c8:4c:4e:ab:9d:ca:b9:8f:95:7c:15:b9:34:0b: fb:30:2b:e6:c1:87:8d:39:c1:cd:36:6c:1e:4c:be: 30:3c:37:91:26:89:a7:fd:7d:b1:95:25:65:f9:5c: e0:bb:7c:95:0b:de:13:43:14:dc:dd:dd:74:a7:7c: 84:38:8f:17:02:c6:5d:fa:76:00:cc:c7:91:fd:a8: a6:f5:79:85:e4:a0:06:7e:5e:5e:f1:71:64:57:c6: 27:04:d0:a0:6f:d6:01:04:f8:fc:91:bc:36:6f:51: 8c:b3:ce:09:6b:76:d4:e2:cf:13:ec:b8:7b:7a:01: 96:20:55:e1:31:ff:24:7f:ca:85:bb:88:3e:de:f4: 94:61:cc:f3:39:c0:4c:6a:23:47:b3:05:2f:9d:eb: db:1a:5e:fe:e2:00:12:ca:60:63:1e:00:8f:ef:6d: 08:1a:8c:1c:3f:30:9a:53:6f:19:3e:7d:fb:d6:15: d4:79:5b:f3:fc:fa:6a:c5:f3:11:26:66:7c:31:5c: 9b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:72:5C:03:1B:AE:10:EE:F6:FA:A8:24:3B:82:8C:61:B4:50:E4:D3 X509v3 Authority Key Identifier: keyid:C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:93:fc:cc:b3:62:58:e2:d0:68:f8:c2:a9:c5:fb:49:b7:de: 90:11:40:7d:3d:d1:66:54:77:c7:fe:bc:1c:51:e1:4c:b3:63: 92:ba:26:29:c4:6a:41:3d:0a:40:a4:91:b8:98:5a:8c:d3:0e: bc:a5:65:14:9d:59:e2:3d:63:1e:3e:4a:21:e6:12:ed:66:60: 8a:3f:20:1b:6d:28:47:60:91:24:db:29:d3:b0:e7:b5:fa:ce: ef:42:54:78:2b:f8:a9:9a:0e:a6:3d:b6:cc:08:37:52:17:9f: 6f:ac:3b:32:4d:3f:83:48:ca:bb:b1:c9:d9:c3:fa:2d:ea:93: 85:68:4a:19:db:14:15:e3:64:08:dc:89:64:23:9b:91:2d:e1: 27:e0:f2:8c:74:1c:f0:24:5d:a0:4b:65:48:18:bd:92:17:e0: f0:20:db:cf:06:b3:36:29:73:d1:93:5b:56:f1:1f:19:4a:b4: 5b:95:e0:08:6a:92:63:50:3b:cb:a6:57:22:d4:5d:b2:fa:a3: f8:ce:f6:d7:03:64:c9:f8:d8:47:ca:a7:90:75:98:d4:68:cc: 3f:30:87:cc:73:7b:4a:9e:ef:fa:30:16:78:1b:d0:78:a1:48: b1:14:f9:7a:67:86:ed:09:71:b8:28:27:99:d9:36:32:fa:60: ef:07:3c:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICENswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1NTgxMTAvBgNVBAUTKEM4OTA5MjU0RjY5NjY2RDU4NUUzMTBBQ0Q4REZGMkIx RkI5QTVGMkEwHhcNMjUxMjIyMTcwMDQ1WhcNMjUxMjI5MTcwMDQ1WjAYMRYwFAYD VQQDDA02OTQ5NzkzZS0zNDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkHzbS8Ee3ilhW/Re57dHRVzLuia9FswwfQJkIebDpDGiqSWJvlUZKe8oIyjl aN+brojyvT7aFMNyDD2YyExOq53KuY+VfBW5NAv7MCvmwYeNOcHNNmweTL4wPDeR Jomn/X2xlSVl+Vzgu3yVC94TQxTc3d10p3yEOI8XAsZd+nYAzMeR/aim9XmF5KAG fl5e8XFkV8YnBNCgb9YBBPj8kbw2b1GMs84Ja3bU4s8T7Lh7egGWIFXhMf8kf8qF u4g+3vSUYczzOcBMaiNHswUvnevbGl7+4gASymBjHgCP720IGowcPzCaU28ZPn37 1hXUeVvz/PpqxfMRJmZ8MVybBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBdyXAMb rhDu9vqoJDuCjGG0UOTTMB8GA1UdIwQYMBaAFMiQklT2lmbVheMQrNjf8rH7ml8q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzU1OC8wRjIxMjE0RTM5 MDUxMUU5OUEzMzAyMzNDNEY5QUUwMi95SkNTVlBhV1p0V0Y0eENzMk5feXNmdWFY eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lKQ1NWUGFXWnRXRjR4Q3MyTl95c2Z1YVh5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzU1OC8wRjIxMjE0RTM5MDUxMUU5OUEzMzAyMzNDNEY5QUUwMi95SkNTVlBhV1p0 V0Y0eENzMk5feXNmdWFYeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlk/zMs2JY4tBo+MKpxftJt96QEUB9PdFmVHfH/rwcUeFMs2OSuiYp xGpBPQpApJG4mFqM0w68pWUUnVniPWMePkoh5hLtZmCKPyAbbShHYJEk2ynTsOe1 +s7vQlR4K/ipmg6mPbbMCDdSF59vrDsyTT+DSMq7scnZw/ot6pOFaEoZ2xQV42QI 3IlkI5uRLeEn4PKMdBzwJF2gS2VIGL2SF+DwINvPBrM2KXPRk1tW8R8ZSrRbleAI apJjUDvLplci1F2y+qP4zvbXA2TJ+NhHyqeQdZjUaMw/MIfMc3tKnu/6MBZ4G9B4 oUixFPl6Z4btCXG4KCeZ2TYy+mDvBzzC -----END CERTIFICATE-----Generated at Tue Dec 23 17:28:41 2025 by rpki-client