This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft File: ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft (raw, json) Hash identifier: ahc/q26Ti1hjhSLHt7ML4pCq0dAzyUx1miI+CVKMDlk= Subject key identifier: 38:69:00:2B:D5:75:52:BC:AA:D1:02:D4:F6:0C:2E:47:35:FC:CA:3A Authority key identifier: 93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45 Certificate issuer: /CN=A91CEF3E/serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145 Certificate serial: 0EEF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft Manifest number: 0EDE Signing time: Sat 20 Dec 2025 17:20:25 +0000 Manifest this update: Sat 20 Dec 2025 17:20:25 +0000 Manifest next update: Sat 27 Dec 2025 17:20:25 +0000 Files and hashes: 1: ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl (hash: PAElwenK0Z1ssNZ1eze+sn0yj4LltcOeSh5VCfsPAGw=) 2: 5C154406988911E991B10838C4F9AE02.roa (hash: rlBKToBwc/S7CrTJwY8L3fa6c6H9ms0SKbG322SWU2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3823 (0xeef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E, serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145 Validity Not Before: Dec 20 17:20:25 2025 GMT Not After : Dec 27 17:20:25 2025 GMT Subject: CN=6946dad9-800e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:49:d6:d6:22:a1:3e:a2:36:ca:55:cc:e3:cc: 64:4c:0d:84:e7:9a:b6:0c:f7:cf:14:b1:e5:23:94: f4:8e:9f:52:74:ea:27:40:74:1f:0b:aa:ea:7a:c9: 83:ca:fb:01:1d:36:06:eb:fe:ee:9d:ba:52:c8:2f: 7c:14:fa:5d:8d:c1:ee:40:43:11:80:f1:e7:b4:2d: 77:f6:b1:55:57:d6:94:e8:2c:18:e8:f6:6f:28:a3: 15:75:23:de:72:ff:9f:a1:2d:e1:07:4f:25:b5:5e: a7:a4:69:89:2a:86:e9:b0:67:15:c3:52:a7:92:c3: f8:55:15:f6:7b:a1:0e:96:34:7f:ba:c5:a9:bc:2a: 91:24:f8:12:90:fc:69:4c:42:55:4c:ce:e7:72:a5: b4:89:7f:1c:7e:76:ef:e6:33:b5:63:09:f6:66:e4: 05:d3:71:64:15:b2:d3:bb:8a:1f:9b:8e:39:26:14: 1d:24:19:03:b2:50:51:4a:6c:0d:75:21:a1:68:73: ba:39:14:46:28:27:98:30:fc:1e:0c:58:8a:64:5a: 29:8c:f5:d2:f8:16:99:b9:22:d0:ef:64:bf:1a:42: ed:f6:35:d7:2b:ba:5f:e5:5f:ff:5f:7a:dc:5c:60: 9f:1a:13:4e:8c:f8:9d:06:32:ac:9f:e1:17:b1:85: c6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:69:00:2B:D5:75:52:BC:AA:D1:02:D4:F6:0C:2E:47:35:FC:CA:3A X509v3 Authority Key Identifier: keyid:93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:ae:85:9a:81:1e:c4:55:8c:2c:45:f0:8a:a8:65:12:26:bd: c9:df:33:ac:ab:70:2d:1d:42:91:37:73:b0:3a:b8:b9:bf:fe: 96:af:c3:aa:d8:d9:c3:ba:08:b8:41:29:45:99:3e:6d:5e:74: 28:a6:33:78:e0:c6:0a:f2:12:a0:16:63:18:c9:5d:ef:ed:3f: a1:8e:5f:d5:31:17:20:04:cb:ce:bb:0a:8c:08:f3:fc:7a:62: f5:1d:f2:60:b2:71:59:0a:a9:47:aa:89:9d:48:85:b8:79:c7: 12:49:62:ad:40:52:42:cc:49:2f:a2:37:8a:2c:40:aa:44:8e: 54:98:a2:52:a4:4a:78:ca:d4:17:06:aa:4d:4c:1c:ba:7b:8c: e0:dd:3a:29:5b:58:30:b7:16:b6:e7:ee:62:ca:c3:5f:80:9c: 56:ab:86:13:12:7d:c0:bd:20:5e:24:11:a7:1c:bb:34:d2:e0: c9:38:a9:5d:3f:7b:e7:60:7c:e9:d3:a9:d9:36:90:ce:d8:a8: 10:0d:08:19:1b:36:33:1d:df:0b:9b:96:70:30:d8:7b:bc:03: 57:94:28:a1:d2:09:99:48:70:13:af:80:40:cd:ae:fb:27:82: 40:cf:22:37:2d:6d:9e:8e:97:56:e7:ca:b5:2a:d7:74:2c:0a: 09:08:57:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGM0UxMTAvBgNVBAUTKDkzMkVDMkU2RTUyQjVBRjZDN0IwM0M0MTUwMjBFREUy NzJBQUExNDUwHhcNMjUxMjIwMTcyMDI1WhcNMjUxMjI3MTcyMDI1WjAYMRYwFAYD VQQDDA02OTQ2ZGFkOS04MDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2EnW1iKhPqI2ylXM48xkTA2E55q2DPfPFLHlI5T0jp9SdOonQHQfC6rqesmD yvsBHTYG6/7unbpSyC98FPpdjcHuQEMRgPHntC139rFVV9aU6CwY6PZvKKMVdSPe cv+foS3hB08ltV6npGmJKobpsGcVw1KnksP4VRX2e6EOljR/usWpvCqRJPgSkPxp TEJVTM7ncqW0iX8cfnbv5jO1Ywn2ZuQF03FkFbLTu4ofm445JhQdJBkDslBRSmwN dSGhaHO6ORRGKCeYMPweDFiKZFopjPXS+BaZuSLQ72S/GkLt9jXXK7pf5V//X3rc XGCfGhNOjPidBjKsn+EXsYXGnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhpACvV dVK8qtEC1PYMLkc1/Mo6MB8GA1UdIwQYMBaAFJMuwublK1r2x7A8QVAg7eJyqqFF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9DQjc0Q0Y2RTk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi9reTdDNXVVcld2YkhzRHhCVUNEdDRuS3Fv VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2t5N0M1dVVyV3ZiSHNEeEJVQ0R0NG5LcW9VVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9DQjc0Q0Y2RTk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi9reTdDNXVVcld2 YkhzRHhCVUNEdDRuS3FvVVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJroWagR7EVYwsRfCKqGUSJr3J3zOsq3AtHUKRN3OwOri5v/6Wr8Oq 2NnDugi4QSlFmT5tXnQopjN44MYK8hKgFmMYyV3v7T+hjl/VMRcgBMvOuwqMCPP8 emL1HfJgsnFZCqlHqomdSIW4eccSSWKtQFJCzEkvojeKLECqRI5UmKJSpEp4ytQX BqpNTBy6e4zg3TopW1gwtxa25+5iysNfgJxWq4YTEn3AvSBeJBGnHLs00uDJOKld P3vnYHzp06nZNpDO2KgQDQgZGzYzHd8Lm5ZwMNh7vANXlCih0gmZSHATr4BAza77 J4JAzyI3LW2ejpdW58q1Ktd0LAoJCFe8 -----END CERTIFICATE-----Generated at Sun Dec 21 02:06:27 2025 by rpki-client