This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft File: YDHQYB1cLYetZiNh5jv_2R4EBzM.mft (raw, json) Hash identifier: d6YVpACGqe1dKtM/O4hoFQWTCZSeLXzwo3TZmv599gc= Subject key identifier: F2:A2:E6:26:CD:F9:C0:CE:69:CE:78:22:5F:C3:D9:59:1E:B0:CC:55 Authority key identifier: 60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 Certificate issuer: /CN=A91E8103/serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft Manifest number: AD Signing time: Sun 21 Dec 2025 05:19:45 +0000 Manifest this update: Sun 21 Dec 2025 05:19:45 +0000 Manifest next update: Sun 28 Dec 2025 05:19:45 +0000 Files and hashes: 1: YDHQYB1cLYetZiNh5jv_2R4EBzM.crl (hash: KRq3DvYNuRHs3JwAeNzQxQlNnAweuS+SqtDbCbyeWQw=) 2: 6FFDB6E4A30C11F0ABE46042C4F9AE02.roa (hash: d6uVF1i6ZT73+dk+Mk43in2noeNbthxeD9nGk9TeUo8=) 3: 9A616002DE0411EFA80D3B34C4F9AE02.roa (hash: SyODw+cJwyZ2yJekBzL0vGtZJRWwofo8zfujkPhkBig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8103, serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Validity Not Before: Dec 21 05:19:45 2025 GMT Not After : Dec 28 05:19:45 2025 GMT Subject: CN=69478371-dc58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ea:9e:99:71:d4:9a:94:ef:fe:84:c0:d3:05: 3a:9e:e2:04:0c:f8:c7:9e:be:5d:21:ac:81:5d:b7: ef:cd:32:39:c3:b4:c3:1e:68:aa:39:0b:be:7f:63: b3:b8:62:bf:1a:dc:c2:84:09:f4:61:f9:a9:14:c7: 3a:91:17:50:64:8e:28:34:ac:df:ac:84:d8:fc:93: be:f7:bf:6e:19:7f:87:8c:e2:3f:11:12:f5:3f:91: 40:67:82:e7:5a:b0:96:e8:c9:11:ae:30:6b:54:53: fe:ed:cb:55:62:b3:39:f7:48:e2:5d:f0:49:de:0b: 67:c9:c3:25:7b:04:0f:6e:82:63:4c:6a:22:29:a3: 0d:42:86:51:30:4e:2b:13:ab:a9:2a:89:0b:6f:d3: 17:d5:85:73:08:fe:38:96:e0:e5:f9:7e:bf:e2:9d: 27:a7:3c:f3:8f:db:98:1f:41:16:2d:48:c7:88:1e: 78:a1:75:06:32:ba:00:90:8e:80:7b:a7:38:c5:16: 97:36:53:c7:69:ba:05:5e:4a:49:e2:b4:18:1e:58: e4:32:8a:b1:11:7f:d5:4f:02:86:e2:23:d8:31:03: bc:dc:5f:0f:13:1a:36:18:5f:89:e6:17:a4:69:5a: d5:2a:94:5d:e7:18:e7:c0:a1:2f:68:be:7c:55:76: 2a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A2:E6:26:CD:F9:C0:CE:69:CE:78:22:5F:C3:D9:59:1E:B0:CC:55 X509v3 Authority Key Identifier: keyid:60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:3e:28:bc:c5:3d:1c:16:2b:ce:ec:4e:1c:a3:91:a3:51:4a: bc:63:26:39:93:99:aa:a6:57:cc:e5:70:07:0c:b8:05:84:9c: 42:89:62:ed:90:1d:60:38:d6:4d:0c:d4:21:27:b3:a5:60:c0: 76:09:cb:6d:37:67:c9:d7:5a:a5:66:53:11:24:f2:02:9a:46: 8d:94:09:79:18:8c:f2:21:4d:32:84:f2:59:c0:72:ac:17:ac: 61:a7:25:a3:6c:0f:b6:69:ce:b0:36:ed:be:52:7f:a9:c2:ef: bb:de:03:b4:ee:86:a2:aa:08:e3:26:b6:92:35:27:08:50:10: cc:34:e8:ed:ff:49:cf:e7:31:09:67:4f:2f:b2:70:f6:75:86: cc:a2:fb:8e:70:dd:a7:96:e5:89:28:0e:f4:ce:c8:7c:cc:8d: ae:5e:9a:b7:14:59:2c:2b:b9:d6:e5:d0:e5:1b:16:6c:2a:e0: 9a:12:2d:7f:b0:fe:2e:84:f9:d6:98:9b:51:8a:e8:77:bb:7e: 76:1e:23:39:71:37:64:a0:46:5c:73:9f:59:ee:54:06:12:40: 09:17:02:a3:e5:82:22:da:81:f6:3a:e4:5e:fb:8c:ee:0b:fb: 0d:24:49:b5:a5:44:5b:40:8a:df:b6:b3:06:ff:7e:91:80:3d: 4d:89:37:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxMDMxMTAvBgNVBAUTKDYwMzFEMDYwMUQ1QzJEODdBRDY2MjM2MUU2M0JGRkQ5 MUUwNDA3MzMwHhcNMjUxMjIxMDUxOTQ1WhcNMjUxMjI4MDUxOTQ1WjAYMRYwFAYD VQQDDA02OTQ3ODM3MS1kYzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteqemXHUmpTv/oTA0wU6nuIEDPjHnr5dIayBXbfvzTI5w7TDHmiqOQu+f2Oz uGK/GtzChAn0YfmpFMc6kRdQZI4oNKzfrITY/JO+979uGX+HjOI/ERL1P5FAZ4Ln WrCW6MkRrjBrVFP+7ctVYrM590jiXfBJ3gtnycMlewQPboJjTGoiKaMNQoZRME4r E6upKokLb9MX1YVzCP44luDl+X6/4p0npzzzj9uYH0EWLUjHiB54oXUGMroAkI6A e6c4xRaXNlPHaboFXkpJ4rQYHljkMoqxEX/VTwKG4iPYMQO83F8PExo2GF+J5hek aVrVKpRd5xjnwKEvaL58VXYqwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKi5ibN +cDOac54Il/D2VkesMxVMB8GA1UdIwQYMBaAFGAx0GAdXC2HrWYjYeY7/9keBAcz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODEwMy85M0RDNzU0RURF MDExMUVGOTMzMzVGMEJDNEY5QUUwMi9ZREhRWUIxY0xZZXRaaU5oNWp2XzJSNEVC ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lESFFZQjFjTFlldFppTmg1anZfMlI0RUJ6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODEwMy85M0RDNzU0RURFMDExMUVGOTMzMzVGMEJDNEY5QUUwMi9ZREhRWUIxY0xZ ZXRaaU5oNWp2XzJSNEVCek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmPii8xT0cFivO7E4co5GjUUq8YyY5k5mqplfM5XAHDLgFhJxCiWLt kB1gONZNDNQhJ7OlYMB2CcttN2fJ11qlZlMRJPICmkaNlAl5GIzyIU0yhPJZwHKs F6xhpyWjbA+2ac6wNu2+Un+pwu+73gO07oaiqgjjJraSNScIUBDMNOjt/0nP5zEJ Z08vsnD2dYbMovuOcN2nluWJKA70zsh8zI2uXpq3FFksK7nW5dDlGxZsKuCaEi1/ sP4uhPnWmJtRiuh3u352HiM5cTdkoEZcc59Z7lQGEkAJFwKj5YIi2oH2OuRe+4zu C/sNJEm1pURbQIrftrMG/36RgD1NiTcx -----END CERTIFICATE-----Generated at Sun Dec 21 14:42:29 2025 by rpki-client