This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft File: Yt3ChdqLPiCesA6qNnGEXaps8oY.mft (raw, json) Hash identifier: FEBD9m8UO2iiaLId0UzE/Q3nDFA4QCrKPObfBG1tnOA= Subject key identifier: 5E:92:BC:79:3E:F7:A3:B0:B2:C1:38:5B:04:51:38:63:24:96:3C:59 Authority key identifier: 62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86 Certificate issuer: /CN=A91CE5A6/serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286 Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft Manifest number: 01A5 Signing time: Fri 19 Dec 2025 02:29:05 +0000 Manifest this update: Fri 19 Dec 2025 02:29:05 +0000 Manifest next update: Fri 26 Dec 2025 02:29:05 +0000 Files and hashes: 1: Yt3ChdqLPiCesA6qNnGEXaps8oY.crl (hash: 66SljvfRNLiMgKxBzLpfRYQuVaclxiUZwe3WPtY2Gg4=) 2: 64120230B2C211EFA43BF057C4F9AE02.roa (hash: 9h3davUQ9pNDA3U7SYojAK+YEhrIBkhT56ukToleizY=) 3: 3B8DEFBCB2CD11EFBEB6A532C4F9AE02.roa (hash: DgTHE1vd+LuLJ/6bYp2I4wVbGI057+J0uGiHNmi5Ok4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6, serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286 Validity Not Before: Dec 19 02:29:05 2025 GMT Not After : Dec 26 02:29:05 2025 GMT Subject: CN=6944b871-8b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:82:4f:f4:ae:84:97:46:0a:e9:80:d2:4c:79: 00:c5:ab:c5:28:18:09:da:4d:cb:52:9f:3f:7f:72: 48:91:fb:8c:c6:c9:74:71:27:cf:de:82:8e:e6:22: 21:f0:4b:05:de:65:e0:10:6e:91:3b:db:96:ec:bc: 3f:05:b5:b9:cb:98:c9:f1:3a:e6:d9:92:a8:be:b0: 77:81:56:02:90:70:bf:2b:fc:f0:77:51:9c:ae:43: 26:e8:77:dd:5d:4e:97:05:40:66:af:43:48:b8:5b: ac:fa:e0:97:94:18:4f:ba:7d:7a:70:c9:fe:08:9d: b0:40:94:8e:3e:19:29:d6:dd:8d:83:db:db:46:bc: 00:e2:90:9f:40:bd:1d:63:9d:07:0a:03:cd:96:4e: de:7c:7a:0d:a1:20:ec:f0:66:fa:92:3a:7d:2a:8c: fc:61:16:7e:de:9a:63:30:f8:d3:6e:32:ef:3b:5d: 2f:49:ca:7b:c4:3c:d0:95:f5:53:68:4c:91:32:ea: 15:52:5c:78:07:5b:e0:2d:2a:49:d0:93:42:5e:34: 45:4e:22:bb:80:81:fd:b5:3e:48:51:d5:c5:9b:0e: be:d7:8b:5c:2c:ed:6e:8b:9c:b2:39:49:10:62:44: d5:7c:5e:c6:c7:c6:2b:4d:a5:3d:13:0d:0d:df:06: 6c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:92:BC:79:3E:F7:A3:B0:B2:C1:38:5B:04:51:38:63:24:96:3C:59 X509v3 Authority Key Identifier: keyid:62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:aa:53:9f:34:bd:13:ce:74:ad:3e:5c:91:f6:a0:eb:36:fd: 12:ae:ad:ad:28:5e:1b:f4:01:4e:fe:3a:3d:17:62:dc:b7:c6: 8b:8a:8e:e7:15:96:45:d9:ce:e9:84:04:ce:8a:60:a8:d9:1f: bb:9f:86:26:38:92:79:a9:6e:f7:29:28:6a:ce:8c:16:19:88: 3e:0d:89:ac:9a:d1:a2:d6:96:ad:e5:b9:04:1d:e1:d3:c9:19: 46:69:9d:00:a9:ed:18:45:bd:52:a6:12:9f:32:6c:7f:2e:96: 89:22:e6:f8:e9:35:d8:22:31:eb:4a:d5:87:83:fb:84:0a:5c: 61:89:70:aa:b9:93:a5:01:41:21:e1:7d:ed:ca:9e:58:1c:c3: 93:ed:3b:25:12:ca:a9:20:11:e9:ef:f0:f9:ef:aa:a4:a1:fe: b7:fc:6e:02:dc:a3:ce:d3:ab:8b:f2:e2:0a:23:59:5d:31:18: 65:b9:00:26:60:48:cf:a5:69:34:a1:93:f4:2a:b5:f8:61:01: 8f:75:26:66:e4:72:43:88:a0:34:34:3c:af:af:f6:7c:d5:be: 7e:a7:00:91:03:02:ec:8c:aa:f6:33:db:03:0c:60:e1:e6:09: 57:2d:e8:5c:22:09:33:0f:cf:de:27:cc:8c:75:9b:6a:e6:be: 7c:c0:34:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDYyRERDMjg1REE4QjNFMjA5RUIwMEVBQTM2NzE4NDVE QUE2Q0YyODYwHhcNMjUxMjE5MDIyOTA1WhcNMjUxMjI2MDIyOTA1WjAYMRYwFAYD VQQDDA02OTQ0Yjg3MS04YjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4JP9K6El0YK6YDSTHkAxavFKBgJ2k3LUp8/f3JIkfuMxsl0cSfP3oKO5iIh 8EsF3mXgEG6RO9uW7Lw/BbW5y5jJ8Trm2ZKovrB3gVYCkHC/K/zwd1GcrkMm6Hfd XU6XBUBmr0NIuFus+uCXlBhPun16cMn+CJ2wQJSOPhkp1t2Ng9vbRrwA4pCfQL0d Y50HCgPNlk7efHoNoSDs8Gb6kjp9Koz8YRZ+3ppjMPjTbjLvO10vScp7xDzQlfVT aEyRMuoVUlx4B1vgLSpJ0JNCXjRFTiK7gIH9tT5IUdXFmw6+14tcLO1ui5yyOUkQ YkTVfF7Gx8YrTaU9Ew0N3wZsVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6SvHk+ 96OwssE4WwRROGMkljxZMB8GA1UdIwQYMBaAFGLdwoXaiz4gnrAOqjZxhF2qbPKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9BQUIzM0U0QzVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9ZdDNDaGRxTFBpQ2VzQTZxTm5HRVhhcHM4 b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1l0M0NoZHFMUGlDZXNBNnFObkdFWGFwczhvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9BQUIzM0U0QzVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9ZdDNDaGRxTFBp Q2VzQTZxTm5HRVhhcHM4b1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjqlOfNL0TznStPlyR9qDrNv0Srq2tKF4b9AFO/jo9F2Lct8aLio7n FZZF2c7phATOimCo2R+7n4YmOJJ5qW73KShqzowWGYg+DYmsmtGi1pat5bkEHeHT yRlGaZ0Aqe0YRb1SphKfMmx/LpaJIub46TXYIjHrStWHg/uEClxhiXCquZOlAUEh 4X3typ5YHMOT7TslEsqpIBHp7/D576qkof63/G4C3KPO06uL8uIKI1ldMRhluQAm YEjPpWk0oZP0KrX4YQGPdSZm5HJDiKA0NDyvr/Z81b5+pwCRAwLsjKr2M9sDDGDh 5glXLehcIgkzD8/eJ8yMdZtq5r58wDRb -----END CERTIFICATE-----Generated at Sat Dec 20 00:58:47 2025 by rpki-client