This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft File: WY9YPfrp_JTaoww3iyFr7JcOM5g.mft (raw, json) Hash identifier: 0jLHE60HN55yZ0fI/CcQrDhMiJgcQJ+/uEciKNSIT80= Subject key identifier: 80:F0:13:D5:8A:A2:DE:31:06:D5:E0:3A:62:52:77:84:33:B8:B3:ED Authority key identifier: 59:8F:58:3D:FA:E9:FC:94:DA:A3:0C:37:8B:21:6B:EC:97:0E:33:98 Certificate issuer: /CN=A91EBD8F/serialNumber=598F583DFAE9FC94DAA30C378B216BEC970E3398 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft Manifest number: 0C Signing time: Fri 19 Dec 2025 06:58:48 +0000 Manifest this update: Fri 19 Dec 2025 06:58:48 +0000 Manifest next update: Fri 26 Dec 2025 06:58:48 +0000 Files and hashes: 1: WY9YPfrp_JTaoww3iyFr7JcOM5g.crl (hash: ww0PeIfykQ7bXIfTSj+YG7M/ZBRvcbTpk8BM3qkjAmY=) 2: 54F9E058D97F11F0B42EB3E75ED3641D.roa (hash: o2JYty/JtJqwDTRIPjLzarf8be5ER57F9WNIKeInhFs=) 3: 53EF3992D97F11F0B42EB3E75ED3641D.roa (hash: oII8tmXgPq+ZILgRsylRdfIHDt2K8RPOFb1KXGYXMrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.crl rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBD8F, serialNumber=598F583DFAE9FC94DAA30C378B216BEC970E3398 Validity Not Before: Dec 19 06:58:48 2025 GMT Not After : Dec 26 06:58:48 2025 GMT Subject: CN=6944f7a8-472f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7a:e1:08:6c:fb:59:4b:e2:c5:b3:55:fb:3b: 1f:f0:2d:02:94:3c:ba:46:c3:f1:18:e0:b7:80:d4: e0:6a:df:d8:3f:ac:53:2d:eb:88:9f:c5:fb:b6:69: 08:69:ec:81:50:08:ee:74:a1:14:95:91:e7:6b:0d: 60:51:7b:86:72:06:58:b6:1b:a4:24:54:a8:19:50: 13:fe:30:07:02:b0:19:53:2c:db:78:89:41:1b:d2: fd:e8:92:fa:0b:ed:26:5e:1e:05:36:03:d0:3a:b0: 61:5d:c5:bf:67:2f:fd:d5:e5:ce:79:5c:67:12:fc: 2e:a0:b3:35:88:4a:7d:6c:49:e9:9b:1e:42:69:83: 08:94:aa:10:39:7a:51:4e:66:ec:7c:17:c4:18:e8: 1d:07:9c:ec:65:9f:b0:90:64:01:19:d5:30:91:33: 4b:b0:83:f4:36:cb:69:40:67:31:43:7f:39:d2:40: d6:60:49:70:35:f1:6a:86:7e:71:5e:2d:08:30:44: 45:1a:be:ac:bc:ba:29:90:26:61:37:3b:13:d4:7e: 3b:6a:07:a3:e7:48:82:ae:cc:5f:c3:57:4b:78:91: b1:da:46:20:64:6f:63:84:8a:aa:6b:50:72:cf:46: 81:68:eb:af:6f:1e:4b:46:92:f0:d2:07:ca:4b:ac: a7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F0:13:D5:8A:A2:DE:31:06:D5:E0:3A:62:52:77:84:33:B8:B3:ED X509v3 Authority Key Identifier: keyid:59:8F:58:3D:FA:E9:FC:94:DA:A3:0C:37:8B:21:6B:EC:97:0E:33:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:f9:94:7a:8b:77:71:94:70:15:56:57:87:18:d8:be:f5:ae: fb:ac:9f:19:4b:96:5d:c8:3d:4b:9b:a8:ce:86:3c:c8:14:c1: 70:ef:25:9e:01:d8:4f:d4:10:36:9a:d4:68:13:c3:4d:84:19: 66:99:9d:29:0d:9e:8f:0f:6f:19:ae:30:26:cd:7e:ad:4b:73: 3c:6d:6f:3f:6b:cb:b3:83:19:8c:57:b5:a4:33:cf:be:43:62: a6:c3:fd:53:c7:10:50:1d:6d:b6:64:ac:c2:56:c6:24:92:80: b4:9e:70:93:cf:75:14:7b:59:7b:4d:14:9e:3a:73:c1:23:c8: 63:0e:1d:76:24:03:6e:b0:f2:2d:6d:0c:e9:7c:2f:ff:7c:60: 51:79:68:03:70:4d:af:a0:c3:18:2b:96:c7:0f:37:62:26:bc: c3:2c:35:e0:5d:aa:12:cf:de:35:51:94:f0:18:62:bf:1d:27: ee:af:d3:e8:58:bf:7a:dd:ea:c7:de:b3:7e:75:04:ea:a4:6e: 4a:fa:8f:be:da:16:6e:07:91:ad:cb:da:c9:d4:f9:c6:12:55: 8d:63:1b:d4:ab:f5:68:1f:41:af:8f:92:84:7e:7f:de:f2:3f: fe:97:07:0a:ec:f7:bb:d4:cb:ee:4f:62:14:6c:0e:e1:87:39: 79:7f:04:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkQ4RjExMC8GA1UEBRMoNTk4RjU4M0RGQUU5RkM5NERBQTMwQzM3OEIyMTZCRUM5 NzBFMzM5ODAeFw0yNTEyMTkwNjU4NDhaFw0yNTEyMjYwNjU4NDhaMBgxFjAUBgNV BAMMDTY5NDRmN2E4LTQ3MmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9euEIbPtZS+LFs1X7Ox/wLQKUPLpGw/EY4LeA1OBq39g/rFMt64ifxfu2aQhp 7IFQCO50oRSVkedrDWBRe4ZyBli2G6QkVKgZUBP+MAcCsBlTLNt4iUEb0v3okvoL 7SZeHgU2A9A6sGFdxb9nL/3V5c55XGcS/C6gszWISn1sSembHkJpgwiUqhA5elFO Zux8F8QY6B0HnOxln7CQZAEZ1TCRM0uwg/Q2y2lAZzFDfznSQNZgSXA18WqGfnFe LQgwREUavqy8uimQJmE3OxPUfjtqB6PnSIKuzF/DV0t4kbHaRiBkb2OEiqprUHLP RoFo669vHktGkvDSB8pLrKc1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgPAT1Yqi 3jEG1eA6YlJ3hDO4s+0wHwYDVR0jBBgwFoAUWY9YPfrp/JTaoww3iyFr7JcOM5gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCRDhGL0E5NUU5QTI4RDBF QTExRjA5MTdGNzk0MEM0RjlBRTAyL1dZOVlQZnJwX0pUYW93dzNpeUZyN0pjT001 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV1k5WVBmcnBfSlRhb3d3M2l5RnI3SmNPTTVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC RDhGL0E5NUU5QTI4RDBFQTExRjA5MTdGNzk0MEM0RjlBRTAyL1dZOVlQZnJwX0pU YW93dzNpeUZyN0pjT001Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK35lHqLd3GUcBVWV4cY2L71rvusnxlLll3IPUubqM6GPMgUwXDvJZ4B 2E/UEDaa1GgTw02EGWaZnSkNno8PbxmuMCbNfq1Lczxtbz9ry7ODGYxXtaQzz75D YqbD/VPHEFAdbbZkrMJWxiSSgLSecJPPdRR7WXtNFJ46c8EjyGMOHXYkA26w8i1t DOl8L/98YFF5aANwTa+gwxgrlscPN2ImvMMsNeBdqhLP3jVRlPAYYr8dJ+6v0+hY v3rd6sfes351BOqkbkr6j77aFm4Hka3L2snU+cYSVY1jG9Sr9WgfQa+PkoR+f97y P/6XBwrs97vUy+5PYhRsDuGHOXl/BJQ= -----END CERTIFICATE-----Generated at Sat Dec 20 00:28:11 2025 by rpki-client