This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft File: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft (raw, json) Hash identifier: dWUEaKxX80578Xt0SR53sOKV1O/oLme5QYzm4e0tPos= Subject key identifier: E1:94:0D:B9:D6:DC:69:4B:98:FF:ED:B9:66:4D:BB:F3:E3:C3:64:71 Authority key identifier: 60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B Certificate issuer: /CN=A91E5998/serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B Certificate serial: 0690 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft Manifest number: 0685 Signing time: Thu 18 Dec 2025 21:53:37 +0000 Manifest this update: Thu 18 Dec 2025 21:53:36 +0000 Manifest next update: Thu 25 Dec 2025 21:53:36 +0000 Files and hashes: 1: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl (hash: bxb1hsykq1Q8C7CEQ20F+BxtsemHQC0kxb571Wt+fhM=) 2: 7438DDF0FD4A11EF85D3AC1AC4F9AE02.roa (hash: ZFyON0cFfqWSYmJESFiDKpaoMViJEmJBEJHpK/VixB8=) 3: 24365CBCF51411EFB44F001BC4F9AE02.roa (hash: WNqUPBF8HNjFohXgQh/4EEtiPRYZ8HZnCTlz6HaVU7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:53:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1680 (0x690) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5998, serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B Validity Not Before: Dec 18 21:53:36 2025 GMT Not After : Dec 25 21:53:36 2025 GMT Subject: CN=694477e1-4a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1d:cb:d6:1b:38:c7:9f:5d:90:84:c2:54:92: 3d:8b:bf:fb:76:b1:3c:75:be:97:5f:26:a4:2e:eb: 14:9b:0e:8a:16:8f:b6:2a:0d:7b:be:7b:4a:25:0b: 93:ef:8b:1f:34:d8:db:c6:72:a3:c5:29:89:34:70: b9:c1:94:81:b6:4f:09:33:5c:b1:b1:1f:15:fc:23: 73:c6:8e:d6:f5:c2:43:9f:c0:b0:09:fc:d0:a8:6e: b8:36:f6:9f:f3:04:d6:8c:3f:01:8f:03:41:e2:25: c7:cf:78:ce:59:31:d3:7d:9b:6f:6a:38:1e:13:6c: 66:29:89:9c:e2:40:6c:bb:ac:14:a1:11:76:1f:28: 64:31:86:b1:0f:a3:8d:49:c1:34:23:46:8c:11:07: ad:0d:6d:cb:03:e3:6b:7a:6c:8d:55:0b:b1:d8:b0: 65:35:34:e8:5c:24:b2:46:62:33:26:7f:75:af:3d: 5e:b3:7a:f3:41:9c:77:8d:39:ab:87:2d:a4:31:a6: d0:4c:0b:57:f7:3d:45:29:da:3e:eb:18:c6:a4:81: f1:8c:08:0d:19:dd:84:4b:e7:3a:c4:a7:16:cd:a9: 1e:53:9d:9c:4d:88:0d:86:85:8f:e4:3f:24:b9:c4: 59:0d:0b:64:b1:a7:5f:a0:b8:45:77:b6:14:3c:44: 22:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:94:0D:B9:D6:DC:69:4B:98:FF:ED:B9:66:4D:BB:F3:E3:C3:64:71 X509v3 Authority Key Identifier: keyid:60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:2b:2b:22:ce:e0:f4:ff:55:28:58:e6:2c:49:29:3f:4c:23: 99:56:9f:11:26:b8:79:95:e1:6b:c8:4a:11:40:3e:84:03:e3: 07:2b:d6:3d:33:4e:16:e5:e6:dd:c9:c2:0a:ad:1b:c1:92:02: 74:b4:f2:46:f0:42:70:ea:af:f6:05:a2:d3:2e:b7:e2:ac:ae: 81:25:c1:5a:81:f6:64:98:01:68:90:56:d4:06:e9:0f:b5:1f: 26:41:e1:90:1b:17:55:98:59:de:c4:8f:e8:cf:67:e7:e1:5f: ac:39:2e:22:c3:65:76:85:b5:a6:2f:a1:31:47:61:eb:45:cc: eb:66:c0:52:13:77:4d:d6:97:71:ce:6b:34:92:17:74:ae:b1: a2:30:c8:ab:0d:83:35:cd:e4:a0:d6:53:f0:95:92:b2:1f:bf: ff:19:aa:06:64:6a:40:62:4a:33:42:44:74:38:a3:98:4f:3b: 93:14:39:54:23:91:1e:c5:09:09:e0:06:19:f6:28:cc:fb:c0: 74:70:5e:40:c0:e4:fe:8c:2f:0e:82:c6:02:47:83:20:ea:4b: 12:87:4a:02:0f:fe:0a:54:dc:ab:75:c6:79:df:7c:4a:af:14: 69:f5:65:95:b4:72:22:4b:b0:04:03:91:51:bb:b2:fc:1a:6e: a8:51:3d:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU5OTgxMTAvBgNVBAUTKDYwMURDNTRCMUY1MjA1MDgwRUZEOUFBNkNGQTVBNTFD NEE3OUREMkIwHhcNMjUxMjE4MjE1MzM2WhcNMjUxMjI1MjE1MzM2WjAYMRYwFAYD VQQDDA02OTQ0NzdlMS00YTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqR3L1hs4x59dkITCVJI9i7/7drE8db6XXyakLusUmw6KFo+2Kg17vntKJQuT 74sfNNjbxnKjxSmJNHC5wZSBtk8JM1yxsR8V/CNzxo7W9cJDn8CwCfzQqG64Nvaf 8wTWjD8BjwNB4iXHz3jOWTHTfZtvajgeE2xmKYmc4kBsu6wUoRF2HyhkMYaxD6ON ScE0I0aMEQetDW3LA+NremyNVQux2LBlNTToXCSyRmIzJn91rz1es3rzQZx3jTmr hy2kMabQTAtX9z1FKdo+6xjGpIHxjAgNGd2ES+c6xKcWzakeU52cTYgNhoWP5D8k ucRZDQtksadfoLhFd7YUPEQiJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGUDbnW 3GlLmP/tuWZNu/Pjw2RxMB8GA1UdIwQYMBaAFGAdxUsfUgUIDv2aps+lpRxKed0r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTk5OC8yQzU5MkUyODlG MUYxMUVCQjMwRDU3NDNDNEY5QUUwMi9ZQjNGU3g5U0JRZ09fWnFtejZXbEhFcDUz U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCM0ZTeDlTQlFnT19acW16NldsSEVwNTNTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTk5OC8yQzU5MkUyODlGMUYxMUVCQjMwRDU3NDNDNEY5QUUwMi9ZQjNGU3g5U0JR Z09fWnFtejZXbEhFcDUzU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBKysizuD0/1UoWOYsSSk/TCOZVp8RJrh5leFryEoRQD6EA+MHK9Y9 M04W5ebdycIKrRvBkgJ0tPJG8EJw6q/2BaLTLrfirK6BJcFagfZkmAFokFbUBukP tR8mQeGQGxdVmFnexI/oz2fn4V+sOS4iw2V2hbWmL6ExR2HrRczrZsBSE3dN1pdx zms0khd0rrGiMMirDYM1zeSg1lPwlZKyH7//GaoGZGpAYkozQkR0OKOYTzuTFDlU I5EexQkJ4AYZ9ijM+8B0cF5AwOT+jC8OgsYCR4Mg6ksSh0oCD/4KVNyrdcZ533xK rxRp9WWVtHIiS7AEA5FRu7L8Gm6oUT1R -----END CERTIFICATE-----Generated at Fri Dec 19 23:59:34 2025 by rpki-client