This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft File: Y7ooHVb6T-blNbEl4W34AdEvgJk.mft (raw, json) Hash identifier: +rGiYAKvxlrX0LjjwPviGemUV64LfjZK/jUhZZ/2LK8= Subject key identifier: 8E:2F:B3:52:4B:7C:93:96:FF:F2:D3:5C:BC:5D:22:C0:D2:9C:2E:3F Authority key identifier: 63:BA:28:1D:56:FA:4F:E6:E5:35:B1:25:E1:6D:F8:01:D1:2F:80:99 Certificate issuer: /CN=A91ECBD9/serialNumber=63BA281D56FA4FE6E535B125E16DF801D12F8099 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft Manifest number: F3 Signing time: Fri 19 Dec 2025 04:23:13 +0000 Manifest this update: Fri 19 Dec 2025 04:23:13 +0000 Manifest next update: Fri 26 Dec 2025 04:23:13 +0000 Files and hashes: 1: Y7ooHVb6T-blNbEl4W34AdEvgJk.crl (hash: alcQnkU8bfEdLR/BFNM9AG2m81y07S1EzWnsZim8P8c=) 2: 4E67247C681911EFA2640B43C4F9AE02.roa (hash: ucm8jiY7/TEfoe7vYt6Xy9WiiLrmTGt3Yko/V2TTwzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.crl rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECBD9, serialNumber=63BA281D56FA4FE6E535B125E16DF801D12F8099 Validity Not Before: Dec 19 04:23:13 2025 GMT Not After : Dec 26 04:23:13 2025 GMT Subject: CN=6944d331-87e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:14:a4:76:9f:ed:39:6e:fa:44:a0:c7:fa:ca: ff:81:6b:48:ba:54:0a:93:70:f7:b6:0d:07:ba:40: 3c:23:81:da:4f:68:ab:cf:47:32:30:20:5c:df:30: b0:b2:17:48:23:dd:c8:0e:ca:a3:c6:21:c1:35:31: f7:18:b4:97:83:d5:e3:b2:82:1b:00:79:f8:a2:8d: 22:8f:03:66:3d:c7:59:c2:19:3c:a0:40:a7:d6:3e: da:85:b5:a6:4c:f5:62:72:5c:4c:61:b4:e2:10:f4: 92:37:ca:d4:c7:7c:ee:e4:47:ce:d3:b4:42:4c:79: 62:f2:5a:70:ef:0c:4c:0c:53:65:58:a9:4d:b5:e7: b6:90:9a:73:2b:1b:08:87:33:18:62:eb:01:9c:79: fc:90:f1:3a:5c:0e:62:00:bc:26:6c:af:d1:43:22: 13:41:89:c9:c3:e7:b8:c5:c9:61:b2:d4:77:26:73: db:3e:de:41:00:fc:8a:8d:25:2e:e2:de:a2:c6:2d: 97:46:53:86:2f:fe:43:66:e7:9d:8d:38:2e:11:54: 81:cc:c1:8d:0e:57:cc:5a:39:a3:3f:49:d3:d7:24: 86:f2:7b:55:06:8a:21:bc:f5:99:bb:bc:db:d2:12: 16:46:63:fd:08:1f:cf:c4:84:bd:14:bc:90:77:ad: 50:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2F:B3:52:4B:7C:93:96:FF:F2:D3:5C:BC:5D:22:C0:D2:9C:2E:3F X509v3 Authority Key Identifier: keyid:63:BA:28:1D:56:FA:4F:E6:E5:35:B1:25:E1:6D:F8:01:D1:2F:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:2c:a3:36:73:22:66:f8:b0:4a:d2:a3:7a:9a:bf:a9:7d:bc: d0:1f:ec:3b:ad:e3:ca:0c:ac:d4:80:71:53:01:c0:14:c0:ca: 95:d3:ad:04:bb:00:aa:7b:e2:c0:86:f0:e9:6c:9d:c5:93:77: df:bf:74:96:a2:ff:29:a6:a3:c3:7c:c8:73:b8:a2:3d:47:0f: 9f:52:e8:d7:11:f8:b7:d5:70:b5:6a:c9:e8:74:8a:bd:70:ba: 38:c4:fd:4b:78:0a:f3:cf:e5:f0:0e:44:db:e0:b1:0e:9a:6c: 6b:5e:d3:4f:9a:87:f9:96:86:4a:e7:21:ae:00:b5:67:69:b9: c6:0e:d6:b5:59:5e:3e:d0:bf:df:62:b5:e0:32:91:2d:80:fe: 3a:e0:b3:0f:f2:6c:a9:e1:0b:53:3e:dd:7f:6b:c0:ec:45:41: 03:46:bc:db:da:4d:d7:49:db:f5:6f:50:32:21:1d:ee:de:fe: 66:ad:ba:71:38:e4:db:85:b0:59:b7:a5:b8:07:10:99:eb:cd: a9:8c:81:7a:99:6a:79:f9:72:70:5e:d8:7c:7d:49:de:b2:c4: eb:c0:f8:91:9d:fc:9e:91:64:68:f7:99:40:c3:03:0d:81:74: db:f5:76:bc:d8:c8:8b:22:c6:a3:74:72:54:f2:36:e7:dd:34: 20:07:70:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNCRDkxMTAvBgNVBAUTKDYzQkEyODFENTZGQTRGRTZFNTM1QjEyNUUxNkRGODAx RDEyRjgwOTkwHhcNMjUxMjE5MDQyMzEzWhcNMjUxMjI2MDQyMzEzWjAYMRYwFAYD VQQDDA02OTQ0ZDMzMS04N2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRSkdp/tOW76RKDH+sr/gWtIulQKk3D3tg0HukA8I4HaT2irz0cyMCBc3zCw shdII93IDsqjxiHBNTH3GLSXg9XjsoIbAHn4oo0ijwNmPcdZwhk8oECn1j7ahbWm TPViclxMYbTiEPSSN8rUx3zu5EfO07RCTHli8lpw7wxMDFNlWKlNtee2kJpzKxsI hzMYYusBnHn8kPE6XA5iALwmbK/RQyITQYnJw+e4xclhstR3JnPbPt5BAPyKjSUu 4t6ixi2XRlOGL/5DZuedjTguEVSBzMGNDlfMWjmjP0nT1ySG8ntVBoohvPWZu7zb 0hIWRmP9CB/PxIS9FLyQd61QyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4vs1JL fJOW//LTXLxdIsDSnC4/MB8GA1UdIwQYMBaAFGO6KB1W+k/m5TWxJeFt+AHRL4CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0JEOS9FMDQ2QjBCNjY4 MTgxMUVGOUE1M0U5MThDNEY5QUUwMi9ZN29vSFZiNlQtYmxOYkVsNFczNEFkRXZn SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k3b29IVmI2VC1ibE5iRWw0VzM0QWRFdmdKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0JEOS9FMDQ2QjBCNjY4MTgxMUVGOUE1M0U5MThDNEY5QUUwMi9ZN29vSFZiNlQt YmxOYkVsNFczNEFkRXZnSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABLKM2cyJm+LBK0qN6mr+pfbzQH+w7rePKDKzUgHFTAcAUwMqV060E uwCqe+LAhvDpbJ3Fk3ffv3SWov8ppqPDfMhzuKI9Rw+fUujXEfi31XC1asnodIq9 cLo4xP1LeArzz+XwDkTb4LEOmmxrXtNPmof5loZK5yGuALVnabnGDta1WV4+0L/f YrXgMpEtgP464LMP8myp4QtTPt1/a8DsRUEDRrzb2k3XSdv1b1AyIR3u3v5mrbpx OOTbhbBZt6W4BxCZ682pjIF6mWp5+XJwXth8fUnessTrwPiRnfyekWRo95lAwwMN gXTb9Xa82MiLIsajdHJU8jbn3TQgB3CG -----END CERTIFICATE-----Generated at Fri Dec 19 20:31:09 2025 by rpki-client