This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft File: yvogqQGAldIp8KxDkg3NQ6Zr61I.mft (raw, json) Hash identifier: qJJYbUYfk1rv3muo4I9wUtYnZmHE0oU9sU+ktMe21QE= Subject key identifier: 5E:0D:00:17:98:57:15:30:04:28:DB:D0:51:53:8F:F4:0A:04:49:B4 Authority key identifier: CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 Certificate issuer: /CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Certificate serial: 11DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft Manifest number: 11B8 Signing time: Thu 18 Dec 2025 17:02:40 +0000 Manifest this update: Thu 18 Dec 2025 17:02:40 +0000 Manifest next update: Thu 25 Dec 2025 17:02:40 +0000 Files and hashes: 1: yvogqQGAldIp8KxDkg3NQ6Zr61I.crl (hash: 6HsCtl4w0sNGgURzlCDBpum6y+HKBOep/c8+Vms9TZM=) 2: F7ACE748AD3C11EA95DFF369C4F9AE02.roa (hash: eva2CwxKJKJqWQ6I0wp7A0DX5eeMMT63BYKB14R391I=) 3: B9F821D4462D11EC93DFE63CC4F9AE02.roa (hash: I8lWHibGq7xqWHXndBv/JsEhBfdVBWJiR9FoofIbTMA=) 4: D3258BFA7AE711EFB4F5E235C4F9AE02.roa (hash: IqcKshpk+qASTKe+nVLkoXyik/TGszfm7PEMyL1PxRk=) 5: F6609DDAAD3C11EA95DFF369C4F9AE02.roa (hash: RU5uDzdAkRAS9qZ8SwVPWAXrYZQRzn4OHSyBtdDYzzE=) 6: 08BD74841A4F11EA8DFECB86C4F9AE02.roa (hash: 5pPzlX8jdTNFookFj/rSeOJPoKLM49nAfSCOByjLKkM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4574 (0x11de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4FB5, serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Validity Not Before: Dec 18 17:02:40 2025 GMT Not After : Dec 25 17:02:40 2025 GMT Subject: CN=694433b0-fe3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:39:0f:72:42:f5:37:04:35:ed:7f:2b:95:a1: cc:f2:d7:cc:6c:64:e6:a3:e9:cc:59:a5:65:56:57: 3d:c9:12:1d:df:02:11:73:a2:ff:e2:e6:21:1a:31: 7a:90:11:20:1b:fc:b5:52:f5:b2:dc:45:a6:4f:f1: 6c:e4:af:ff:f9:b4:1d:d5:29:79:a5:ba:38:49:58: 9b:d0:8e:68:6c:77:2a:35:94:f0:f0:19:3b:3c:62: 89:57:ab:5b:d7:dd:30:fe:49:b6:19:df:cf:52:ba: dd:64:54:51:30:ca:cc:33:a3:ae:f7:e6:e6:f7:d2: 7f:bf:3c:34:09:41:44:42:ae:75:83:66:91:1f:8b: 38:57:3b:6d:9b:4e:3e:d5:75:f8:eb:44:f2:c8:ec: 4e:e6:7b:9f:ac:61:58:93:fe:33:75:d3:e2:f7:be: de:99:33:d9:79:bb:1b:f1:a9:4b:dc:c1:ec:db:98: ec:2a:52:50:52:f5:18:50:43:61:41:80:fd:28:b9: 88:8d:c0:b6:89:8b:16:39:e7:73:9d:7b:6c:4c:aa: 05:92:35:ee:af:a9:1b:32:bf:48:e9:c1:b2:b3:27: fe:b4:2c:e2:5e:dd:76:96:71:35:f1:f3:e7:a5:0d: 78:6e:5a:ed:47:66:2a:d5:9e:46:a5:86:20:79:c9: 03:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:0D:00:17:98:57:15:30:04:28:DB:D0:51:53:8F:F4:0A:04:49:B4 X509v3 Authority Key Identifier: keyid:CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:12:93:4a:3f:aa:8c:cb:95:20:d2:41:de:4e:a0:88:fa:f7: 4a:53:88:50:a8:b9:05:ef:85:68:9e:61:bf:d5:22:b7:75:fc: 72:f9:8f:25:00:14:26:e8:14:e2:e6:1d:af:45:df:63:6e:dc: a7:c1:5c:2b:df:e6:27:db:6c:6a:74:7a:88:bb:47:c6:1f:ed: 7f:50:65:7d:ba:03:62:58:10:0e:9b:ec:64:9c:f4:42:7d:e9: 10:44:44:4d:1c:05:e1:ca:24:8c:78:79:db:36:ea:73:aa:99: 5f:98:06:47:2f:03:af:d7:97:f1:c6:2b:c6:14:e1:f2:70:e0: c2:56:5a:f4:42:98:2b:92:94:f8:ad:9a:61:a6:63:2e:07:aa: 5c:ac:7a:84:02:17:4b:05:0a:85:b4:97:80:bc:a5:97:5a:55: fe:09:73:b1:5d:de:28:06:f3:ae:d4:ef:82:c3:da:a7:9f:c1: 39:23:66:46:ed:ba:09:c4:cb:c7:55:07:57:08:ad:f1:d5:a6: 50:3b:0a:f8:c7:83:be:ab:99:9f:ec:cf:fe:7d:fc:4c:09:09: 4d:c9:63:80:4d:59:2b:1f:bb:02:b3:82:d8:43:3b:ce:a1:d0: f4:21:7f:4c:d6:80:96:5d:3c:24:27:46:e2:f9:90:09:a2:97: 04:e5:d0:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGQjUxMTAvBgNVBAUTKENBRkEyMEE5MDE4MDk1RDIyOUYwQUM0MzkyMERDRDQz QTY2QkVCNTIwHhcNMjUxMjE4MTcwMjQwWhcNMjUxMjI1MTcwMjQwWjAYMRYwFAYD VQQDDA02OTQ0MzNiMC1mZTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zkPckL1NwQ17X8rlaHM8tfMbGTmo+nMWaVlVlc9yRId3wIRc6L/4uYhGjF6 kBEgG/y1UvWy3EWmT/Fs5K//+bQd1Sl5pbo4SVib0I5obHcqNZTw8Bk7PGKJV6tb 190w/km2Gd/PUrrdZFRRMMrMM6Ou9+bm99J/vzw0CUFEQq51g2aRH4s4Vzttm04+ 1XX460TyyOxO5nufrGFYk/4zddPi977emTPZebsb8alL3MHs25jsKlJQUvUYUENh QYD9KLmIjcC2iYsWOedznXtsTKoFkjXur6kbMr9I6cGysyf+tCziXt12lnE18fPn pQ14blrtR2Yq1Z5GpYYgeckDrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4NABeY VxUwBCjb0FFTj/QKBEm0MB8GA1UdIwQYMBaAFMr6IKkBgJXSKfCsQ5INzUOma+tS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEZCNS9FRjk4N0VFMjA5 RDExMUU5OTU2MDdCNTJDNEY5QUUwMi95dm9ncVFHQWxkSXA4S3hEa2czTlE2WnI2 MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l2b2dxUUdBbGRJcDhLeERrZzNOUTZacjYxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEZCNS9FRjk4N0VFMjA5RDExMUU5OTU2MDdCNTJDNEY5QUUwMi95dm9ncVFHQWxk SXA4S3hEa2czTlE2WnI2MUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChEpNKP6qMy5Ug0kHeTqCI+vdKU4hQqLkF74VonmG/1SK3dfxy+Y8l ABQm6BTi5h2vRd9jbtynwVwr3+Yn22xqdHqIu0fGH+1/UGV9ugNiWBAOm+xknPRC fekQRERNHAXhyiSMeHnbNupzqplfmAZHLwOv15fxxivGFOHycODCVlr0QpgrkpT4 rZphpmMuB6pcrHqEAhdLBQqFtJeAvKWXWlX+CXOxXd4oBvOu1O+Cw9qnn8E5I2ZG 7boJxMvHVQdXCK3x1aZQOwr4x4O+q5mf7M/+ffxMCQlNyWOATVkrH7sCs4LYQzvO odD0IX9M1oCWXTwkJ0bi+ZAJopcE5dAZ -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:26 2025 by rpki-client