This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft File: YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft (raw, json) Hash identifier: EdElljCCiDcIgNMCE5+h8qiHMwZF6p8Fk0F0sjUApZA= Subject key identifier: F2:BD:6C:83:5E:53:43:52:09:A3:A9:9A:43:B9:82:0A:2E:FB:9E:6E Authority key identifier: 61:1E:1C:14:95:28:F1:7A:0E:C7:99:C3:9D:56:26:19:C9:A1:51:00 Certificate issuer: /CN=A91C2F8C/serialNumber=611E1C149528F17A0EC799C39D562619C9A15100 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft Manifest number: DF Signing time: Fri 19 Dec 2025 04:37:48 +0000 Manifest this update: Fri 19 Dec 2025 04:37:48 +0000 Manifest next update: Fri 26 Dec 2025 04:37:48 +0000 Files and hashes: 1: YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl (hash: ib87K9L1wQuoejM8JFa+4JC2l5EQWXKIOgEBQ1W9Q8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2F8C, serialNumber=611E1C149528F17A0EC799C39D562619C9A15100 Validity Not Before: Dec 19 04:37:48 2025 GMT Not After : Dec 26 04:37:48 2025 GMT Subject: CN=6944d69c-cb40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:69:80:d3:ed:0c:fe:3e:f2:11:59:ec:0a:8c: af:06:72:1f:0e:98:1b:23:a9:d2:be:53:c8:64:45: c8:ec:93:27:d5:f2:d5:80:f6:2d:3c:76:4a:12:67: c7:1f:67:c6:75:37:ab:72:10:d1:ff:eb:c4:a9:4a: 72:1a:71:67:2c:70:e7:82:e9:5e:fc:d2:f7:95:ab: 14:d6:ca:9d:61:c3:3a:51:a2:c5:88:b4:76:aa:25: f4:89:1f:d2:b8:e5:0e:07:c6:74:02:7e:e9:97:84: 65:c6:4e:15:7b:3f:5e:d0:53:fd:79:06:8a:85:6b: e5:51:b3:d3:84:e2:58:a6:89:46:9c:5d:49:50:54: b1:72:c9:b4:72:3a:a5:dd:3e:2e:1d:59:7b:96:92: 6b:94:ea:fd:6c:bd:d3:6b:ce:c2:3d:73:8b:86:90: 09:cd:18:6d:f8:14:a7:e9:af:3f:ec:85:b5:7d:fc: 1d:40:f4:07:11:6e:1c:c7:8e:7a:fc:eb:74:ff:da: b1:65:8d:b3:00:fe:7e:1c:26:4d:b9:ae:ac:0d:dc: af:e6:b4:77:ef:53:e2:5c:18:b2:ea:8d:5e:bf:3d: b8:0f:35:ae:b2:da:d4:7d:de:89:5b:07:94:eb:36: ba:c6:e6:9a:d2:73:9d:d4:70:53:c9:81:e4:2a:6e: e7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BD:6C:83:5E:53:43:52:09:A3:A9:9A:43:B9:82:0A:2E:FB:9E:6E X509v3 Authority Key Identifier: keyid:61:1E:1C:14:95:28:F1:7A:0E:C7:99:C3:9D:56:26:19:C9:A1:51:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:d8:c5:ed:dd:bb:61:8f:90:28:c3:12:00:69:37:a2:af:5a: d2:c6:db:17:95:90:84:8a:aa:40:b0:6f:5c:e6:35:8c:88:79: 12:c9:98:b6:1d:27:1d:97:49:9b:43:aa:4a:11:ad:81:69:4c: 1c:95:ec:25:ff:83:26:1f:41:f7:65:bd:56:71:70:27:be:06: a6:fb:6f:a7:81:ca:20:9e:af:5d:4d:1f:bc:fa:7a:fe:e9:c1: 33:a9:dd:c8:ba:b0:f0:66:cf:50:98:45:dc:42:98:2e:39:8a: dd:28:73:2c:46:58:a7:23:aa:5a:ac:ce:c0:67:96:14:21:28: d9:04:98:e0:bc:24:9b:a6:19:6d:b5:6b:18:93:ea:43:3c:6a: c9:7f:a8:40:c0:f7:f9:b3:81:0a:75:0d:94:9f:57:ea:ae:a9: 23:17:ba:2c:2c:6f:87:e6:b4:75:bf:40:d6:fc:2b:de:ea:bd: 30:56:99:f0:e7:ae:21:b8:7d:66:3d:9f:77:cf:0f:a9:6d:97: 1d:c7:27:fb:b7:e8:65:42:7d:42:d3:f9:64:a0:48:8c:64:0b: 42:ea:91:4c:c8:43:2e:e9:40:cd:de:80:16:c4:84:17:a0:cd: dd:d1:ed:55:79:bf:4b:f9:6f:83:dd:3e:41:07:86:26:2a:50: 18:29:73:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJGOEMxMTAvBgNVBAUTKDYxMUUxQzE0OTUyOEYxN0EwRUM3OTlDMzlENTYyNjE5 QzlBMTUxMDAwHhcNMjUxMjE5MDQzNzQ4WhcNMjUxMjI2MDQzNzQ4WjAYMRYwFAYD VQQDDA02OTQ0ZDY5Yy1jYjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmmA0+0M/j7yEVnsCoyvBnIfDpgbI6nSvlPIZEXI7JMn1fLVgPYtPHZKEmfH H2fGdTerchDR/+vEqUpyGnFnLHDngule/NL3lasU1sqdYcM6UaLFiLR2qiX0iR/S uOUOB8Z0An7pl4Rlxk4Vez9e0FP9eQaKhWvlUbPThOJYpolGnF1JUFSxcsm0cjql 3T4uHVl7lpJrlOr9bL3Ta87CPXOLhpAJzRht+BSn6a8/7IW1ffwdQPQHEW4cx456 /Ot0/9qxZY2zAP5+HCZNua6sDdyv5rR371PiXBiy6o1evz24DzWustrUfd6JWweU 6za6xuaa0nOd1HBTyYHkKm7nIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPK9bINe U0NSCaOpmkO5ggou+55uMB8GA1UdIwQYMBaAFGEeHBSVKPF6DseZw51WJhnJoVEA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkY4Qy81RTA3MkFGRTg2 RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9ZUjRjRkpVbzhYb094NW5EblZZbUdjbWhV UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSNGNGSlVvOFhvT3g1bkRuVlltR2NtaFVRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkY4Qy81RTA3MkFGRTg2RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9ZUjRjRkpVbzhY b094NW5EblZZbUdjbWhVUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW2MXt3bthj5AowxIAaTeir1rSxtsXlZCEiqpAsG9c5jWMiHkSyZi2 HScdl0mbQ6pKEa2BaUwclewl/4MmH0H3Zb1WcXAnvgam+2+ngcognq9dTR+8+nr+ 6cEzqd3IurDwZs9QmEXcQpguOYrdKHMsRlinI6parM7AZ5YUISjZBJjgvCSbphlt tWsYk+pDPGrJf6hAwPf5s4EKdQ2Un1fqrqkjF7osLG+H5rR1v0DW/Cve6r0wVpnw 564huH1mPZ93zw+pbZcdxyf7t+hlQn1C0/lkoEiMZAtC6pFMyEMu6UDN3oAWxIQX oM3d0e1Veb9L+W+D3T5BB4YmKlAYKXM3 -----END CERTIFICATE-----Generated at Fri Dec 19 19:01:47 2025 by rpki-client