This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft File: YGHkRpDveLCtqNg1DRHKngGUnBQ.mft (raw, json) Hash identifier: 90SKKKczB6pR9o0TblFgkv0ri2YCb3gCKJHXS0olgO4= Subject key identifier: D8:04:6B:F5:BF:CE:CD:A1:83:C3:2C:CC:79:3C:F1:8D:52:0B:E5:59 Authority key identifier: 60:61:E4:46:90:EF:78:B0:AD:A8:D8:35:0D:11:CA:9E:01:94:9C:14 Certificate issuer: /CN=A91BFE76/serialNumber=6061E44690EF78B0ADA8D8350D11CA9E01949C14 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGHkRpDveLCtqNg1DRHKngGUnBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft Manifest number: 19 Signing time: Fri 19 Dec 2025 06:45:16 +0000 Manifest this update: Fri 19 Dec 2025 06:45:16 +0000 Manifest next update: Fri 26 Dec 2025 06:45:16 +0000 Files and hashes: 1: YGHkRpDveLCtqNg1DRHKngGUnBQ.crl (hash: YVz7T3e8NxKwYj3a3ZyQiDMKAP5zH8GE/s+2zQyzvb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.crl rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGHkRpDveLCtqNg1DRHKngGUnBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE76, serialNumber=6061E44690EF78B0ADA8D8350D11CA9E01949C14 Validity Not Before: Dec 19 06:45:16 2025 GMT Not After : Dec 26 06:45:16 2025 GMT Subject: CN=6944f47c-7794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1e:96:f7:3d:38:09:20:55:a5:2e:7e:60:ab: ad:da:e2:a6:9f:73:4b:fa:00:a6:a6:fa:80:1c:66: 04:9a:a6:fd:87:19:1e:c8:67:52:a2:fe:59:20:5c: 11:f5:3e:c0:fa:28:74:19:b6:26:48:09:ef:6b:ca: b9:f6:0f:05:64:80:26:63:d1:0a:6b:a2:c5:c2:e7: c9:f1:ed:cf:6f:ec:b5:14:67:4d:1c:0d:c2:d8:71: 5d:a8:0d:b0:12:d3:57:c7:d8:ec:c5:be:86:b5:f8: 34:11:04:17:67:bb:32:6a:10:40:b5:6f:c7:c9:a8: 50:9c:bf:88:7b:71:24:cb:bb:90:f9:31:89:3d:a1: 5e:dc:54:9a:01:d3:67:d2:92:15:00:48:32:8e:0f: 99:2f:24:89:19:68:49:d4:eb:c1:c2:60:50:3a:1e: 44:97:90:71:af:85:9a:03:12:f4:49:35:31:08:89: 10:eb:4e:fa:4d:09:c0:37:9b:ac:d3:c0:6d:e2:b3: f2:50:7d:79:68:08:9d:a9:45:55:ac:bf:0d:a4:12: 88:10:7d:9e:c4:d1:42:ab:30:a2:d3:ec:c3:d1:51: 0d:29:8b:2d:0c:4a:02:f5:35:d0:2a:e5:2d:f3:90: 36:5d:e6:5e:58:30:9c:19:b1:e5:69:8a:a3:3d:21: 74:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:04:6B:F5:BF:CE:CD:A1:83:C3:2C:CC:79:3C:F1:8D:52:0B:E5:59 X509v3 Authority Key Identifier: keyid:60:61:E4:46:90:EF:78:B0:AD:A8:D8:35:0D:11:CA:9E:01:94:9C:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGHkRpDveLCtqNg1DRHKngGUnBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:07:fa:87:92:9c:eb:cb:4f:08:e3:6a:99:16:13:62:57:e8: 09:61:8f:d2:72:5c:2a:9d:ea:7d:57:84:81:67:46:e7:0b:f8: e5:3d:fc:4c:3c:c4:2d:47:9a:2f:de:16:d5:45:c3:41:9b:3d: 31:cb:5f:6a:8b:49:a7:b8:9e:c7:a6:04:0b:3f:b4:80:4f:cc: ea:ae:56:a1:68:f7:26:1f:53:e8:0f:55:f1:b3:c8:f5:be:af: a0:dd:46:0d:b7:b1:33:11:3b:93:19:f3:bb:49:c8:30:3c:e8: 4d:b6:70:87:2d:36:db:38:78:5e:70:65:ac:30:72:fc:45:a6: d8:b2:be:d0:00:13:36:a2:25:85:13:e0:9d:48:29:92:9c:b9: 52:af:2b:b5:c8:f4:fb:93:1c:4b:53:2c:ce:64:63:da:b9:21: 1d:44:3e:24:f1:fa:37:33:d9:f5:e5:f2:5c:61:e2:f8:0f:b8: f0:93:05:6f:85:37:fe:44:dd:d8:92:de:7d:3a:b3:61:df:14: 70:3a:b8:c0:0c:63:e7:be:d5:42:6d:71:18:4b:7a:71:bb:97: 13:43:16:81:cb:a2:57:74:02:d2:60:ad:0a:b5:52:b8:75:39: 84:6a:d8:34:d5:40:31:de:25:0a:83:03:4b:f3:98:f8:07:11: 15:d5:b3:a2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RkU3NjExMC8GA1UEBRMoNjA2MUU0NDY5MEVGNzhCMEFEQThEODM1MEQxMUNBOUUw MTk0OUMxNDAeFw0yNTEyMTkwNjQ1MTZaFw0yNTEyMjYwNjQ1MTZaMBgxFjAUBgNV BAMMDTY5NDRmNDdjLTc3OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRHpb3PTgJIFWlLn5gq63a4qafc0v6AKam+oAcZgSapv2HGR7IZ1Ki/lkgXBH1 PsD6KHQZtiZICe9ryrn2DwVkgCZj0QprosXC58nx7c9v7LUUZ00cDcLYcV2oDbAS 01fH2OzFvoa1+DQRBBdnuzJqEEC1b8fJqFCcv4h7cSTLu5D5MYk9oV7cVJoB02fS khUASDKOD5kvJIkZaEnU68HCYFA6HkSXkHGvhZoDEvRJNTEIiRDrTvpNCcA3m6zT wG3is/JQfXloCJ2pRVWsvw2kEogQfZ7E0UKrMKLT7MPRUQ0piy0MSgL1NdAq5S3z kDZd5l5YMJwZseVpiqM9IXThAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2ARr9b/O zaGDwyzMeTzxjVIL5VkwHwYDVR0jBBgwFoAUYGHkRpDveLCtqNg1DRHKngGUnBQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGRTc2L0UzMzNFQzJFQjky NzExRjBCODBFQzQ1RUM0RjlBRTAyL1lHSGtScER2ZUxDdHFOZzFEUkhLbmdHVW5C US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWUdIa1JwRHZlTEN0cU5nMURSSEtuZ0dVbkJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG RTc2L0UzMzNFQzJFQjkyNzExRjBCODBFQzQ1RUM0RjlBRTAyL1lHSGtScER2ZUxD dHFOZzFEUkhLbmdHVW5CUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB0H+oeSnOvLTwjjapkWE2JX6Alhj9JyXCqd6n1XhIFnRucL+OU9/Ew8 xC1Hmi/eFtVFw0GbPTHLX2qLSae4nsemBAs/tIBPzOquVqFo9yYfU+gPVfGzyPW+ r6DdRg23sTMRO5MZ87tJyDA86E22cIctNts4eF5wZawwcvxFptiyvtAAEzaiJYUT 4J1IKZKcuVKvK7XI9PuTHEtTLM5kY9q5IR1EPiTx+jcz2fXl8lxh4vgPuPCTBW+F N/5E3diS3n06s2HfFHA6uMAMY+e+1UJtcRhLenG7lxNDFoHLold0AtJgrQq1Urh1 OYRq2DTVQDHeJQqDA0vzmPgHERXVs6I= -----END CERTIFICATE-----Generated at Fri Dec 19 20:23:27 2025 by rpki-client