This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft File: pYh4bi_YjPqvU6qilsNkRg7m6m0.mft (raw, json) Hash identifier: X4WBH1+mKb0phzPlGYKA4eBknkrRdRdZAm08ur0YaI8= Subject key identifier: 5F:81:A8:50:05:1C:DE:79:97:18:91:BD:01:C4:04:40:03:84:C8:D7 Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft Manifest number: C4 Signing time: Fri 19 Dec 2025 05:01:19 +0000 Manifest this update: Fri 19 Dec 2025 05:01:19 +0000 Manifest next update: Fri 26 Dec 2025 05:01:19 +0000 Files and hashes: 1: pYh4bi_YjPqvU6qilsNkRg7m6m0.crl (hash: 5BtMnj02CpaOUX8lCRDpDnHSQbbkaSSwyJKZpf9XSxA=) 2: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (hash: qXU62xBJEhF8s34iW9kLJHW6sq1BX3PHBxT3tX/weaA=) 3: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (hash: Z9DYBfabGIxHjUBLevu5KvPw0ydtYOqQMGpRrWOIWpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Validity Not Before: Dec 19 05:01:19 2025 GMT Not After : Dec 26 05:01:19 2025 GMT Subject: CN=6944dc1f-ddd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2a:88:16:59:6a:dd:a4:4d:39:c4:a7:9b:73: 25:7c:cd:88:c7:a4:01:ea:82:15:95:c6:25:d4:01: de:8d:5e:28:a8:3a:72:52:3a:af:d6:c1:f2:9d:16: ad:be:49:4f:25:81:02:ce:f6:e2:84:ad:1a:a8:03: 5e:5e:a2:52:b2:a8:62:ca:9f:a2:7f:4c:61:97:31: 9a:d2:ef:b1:76:2f:52:f9:c3:15:17:e8:06:fd:b0: 2a:88:1f:ef:38:d0:47:67:1d:1e:7a:7f:5d:1c:b6: 3a:e9:1d:36:60:60:ba:d5:cd:6d:11:df:19:6f:52: f4:33:9d:48:3a:44:c8:ef:01:d0:8b:69:9d:de:1e: 6a:bd:80:42:cc:8e:b2:80:59:64:c9:f5:9d:12:a7: 07:d9:36:de:55:2f:37:50:f4:43:ce:6d:41:92:79: 6d:1f:88:a2:af:89:16:ff:9e:60:d3:3a:b1:85:3a: 05:21:f5:b7:16:a9:56:94:b5:a5:8b:1d:5d:17:b5: 4d:64:23:d9:0e:f4:8c:86:d9:45:46:5d:e3:62:2a: 33:f0:68:07:46:c4:a5:d8:ea:2f:75:3e:ba:6d:75: 44:81:dc:13:27:d9:5f:85:c2:26:80:ca:d3:fc:ca: bb:35:9b:20:bd:32:51:67:ee:c1:23:3a:32:f0:39: 05:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:81:A8:50:05:1C:DE:79:97:18:91:BD:01:C4:04:40:03:84:C8:D7 X509v3 Authority Key Identifier: keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:a4:7e:c8:45:03:eb:4a:18:e7:30:33:d2:f3:74:00:d0:57: 1d:33:7d:c3:45:f6:75:aa:f1:98:5b:96:e4:5a:4c:92:2f:66: 1a:bf:b9:be:b2:79:7d:44:de:07:f4:14:39:a5:8a:f7:60:bb: 14:86:5c:65:15:aa:b2:c4:a8:36:3c:91:59:b4:43:4c:4d:b7: 22:bd:b4:52:2f:31:c0:a1:02:2c:1b:78:ca:ca:99:b0:aa:85: 08:17:94:9a:87:3a:bb:dc:4b:a8:73:ab:2c:9a:ed:2b:46:f7: d9:07:44:8e:3a:8a:8e:62:84:f1:a9:68:d7:7e:6c:06:5c:cc: c3:46:52:de:02:6b:e3:15:90:6c:33:be:72:be:d2:a2:0a:d2: 27:3b:aa:a8:41:aa:e7:ea:da:54:4d:ec:7e:59:fc:e1:f8:6a: 8f:89:44:e5:dd:fd:d1:25:36:c6:b0:2e:38:b1:dd:80:e9:e7: e2:a9:03:2d:76:16:58:ae:d3:91:f6:a4:33:24:bf:ae:74:0f: 41:5d:a4:c2:78:ed:fc:0c:af:b4:e7:32:38:2f:b2:02:50:5e: fc:4b:34:37:2d:7e:15:00:de:9c:c1:a2:77:77:17:88:db:f0: 09:d8:c7:b5:a4:eb:d6:d5:e4:45:4c:f1:c1:78:d3:44:c0:35: b2:f1:a3:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg0ODUxMTAvBgNVBAUTKEE1ODg3ODZFMkZEODhDRkFBRjUzQUFBMjk2QzM2NDQ2 MEVFNkVBNkQwHhcNMjUxMjE5MDUwMTE5WhcNMjUxMjI2MDUwMTE5WjAYMRYwFAYD VQQDDA02OTQ0ZGMxZi1kZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCqIFllq3aRNOcSnm3MlfM2Ix6QB6oIVlcYl1AHejV4oqDpyUjqv1sHynRat vklPJYECzvbihK0aqANeXqJSsqhiyp+if0xhlzGa0u+xdi9S+cMVF+gG/bAqiB/v ONBHZx0een9dHLY66R02YGC61c1tEd8Zb1L0M51IOkTI7wHQi2md3h5qvYBCzI6y gFlkyfWdEqcH2TbeVS83UPRDzm1BknltH4iir4kW/55g0zqxhToFIfW3FqlWlLWl ix1dF7VNZCPZDvSMhtlFRl3jYioz8GgHRsSl2OovdT66bXVEgdwTJ9lfhcImgMrT /Mq7NZsgvTJRZ+7BIzoy8DkF7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+BqFAF HN55lxiRvQHEBEADhMjXMB8GA1UdIwQYMBaAFKWIeG4v2Iz6r1OqopbDZEYO5upt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODQ4NS8yREJDRUY0NkI0 MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQcXZVNnFpbHNOa1JnN202 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BZaDRiaV9ZalBxdlU2cWlsc05rUmc3bTZtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODQ4NS8yREJDRUY0NkI0MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQ cXZVNnFpbHNOa1JnN202bTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMpH7IRQPrShjnMDPS83QA0FcdM33DRfZ1qvGYW5bkWkySL2Yav7m+ snl9RN4H9BQ5pYr3YLsUhlxlFaqyxKg2PJFZtENMTbcivbRSLzHAoQIsG3jKypmw qoUIF5Sahzq73Euoc6ssmu0rRvfZB0SOOoqOYoTxqWjXfmwGXMzDRlLeAmvjFZBs M75yvtKiCtInO6qoQarn6tpUTex+Wfzh+GqPiUTl3f3RJTbGsC44sd2A6efiqQMt dhZYrtOR9qQzJL+udA9BXaTCeO38DK+05zI4L7ICUF78SzQ3LX4VAN6cwaJ3dxeI 2/AJ2Me1pOvW1eRFTPHBeNNEwDWy8aNj -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:28 2025 by rpki-client