This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft File: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft (raw, json) Hash identifier: aPS+lXTMMIVE6xAA29t/NTWodpYhFxG8piAtQlX/1Eg= Subject key identifier: F3:43:9D:CD:0C:35:D6:F2:5B:9D:CB:61:22:7E:B7:A1:9C:EB:B6:99 Authority key identifier: 63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54 Certificate issuer: /CN=A91F428C/serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254 Certificate serial: 34F7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft Manifest number: 34F2 Signing time: Mon 22 Dec 2025 14:57:47 +0000 Manifest this update: Mon 22 Dec 2025 14:57:47 +0000 Manifest next update: Mon 29 Dec 2025 14:57:47 +0000 Files and hashes: 1: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl (hash: Le5ISDO4tni8IUZX1vFgy3Hviig/4JkePvvbHpSfv5I=) 2: 8852DDDEBED411ECBA66025BC4F9AE02.roa (hash: 3hsbI0PrBL5LI5VaCiCNQ0sMN2EIkZA6LenSvD9t9yA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13559 (0x34f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C, serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254 Validity Not Before: Dec 22 14:57:47 2025 GMT Not After : Dec 29 14:57:47 2025 GMT Subject: CN=69495c6b-38a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9c:68:40:e7:1d:45:2b:62:ce:c4:2b:a5:dd: b6:59:aa:26:6a:5f:80:bc:33:43:07:f9:6a:5f:ef: 89:f6:a8:a6:69:15:18:51:ee:fe:8f:48:2f:6b:1e: 37:0c:98:b7:99:e9:96:d6:ec:9d:02:6e:0c:20:a1: 5d:f0:40:ad:d6:73:22:1b:54:da:0c:28:ac:5f:c7: 50:8b:4d:7b:62:df:94:7b:0b:97:ad:23:29:97:27: d4:37:d7:70:1f:9c:aa:9d:9e:bf:9e:8f:a3:44:bd: 94:bd:f2:88:20:f5:c5:52:91:b3:45:2d:54:de:eb: e1:a7:9f:25:68:c3:62:b2:d4:a1:e7:f2:c1:8d:a2: cb:17:f4:92:f7:f1:8f:1a:6c:01:7e:e1:8f:29:5d: c2:5a:25:bf:8c:b4:80:ed:78:28:00:ca:dd:e0:44: c5:5c:50:b7:cd:28:ff:43:39:85:9a:fa:b4:db:2d: 55:26:50:1a:55:08:c4:63:8d:39:51:6d:9e:ff:59: aa:f2:3b:e8:5e:00:8d:a9:86:be:07:80:8e:87:39: 1f:12:ee:69:2e:80:09:64:9b:2f:29:29:34:6e:ae: 34:a8:64:6e:1d:14:15:a0:38:36:9c:cf:df:43:a3: 58:d4:86:bb:f2:4d:41:7e:60:99:79:db:a9:a4:dc: b3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:43:9D:CD:0C:35:D6:F2:5B:9D:CB:61:22:7E:B7:A1:9C:EB:B6:99 X509v3 Authority Key Identifier: keyid:63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:16:ab:b4:44:0f:ee:94:26:a0:c7:3d:40:8b:5d:db:d5:b1: f7:4b:d1:0e:f7:b8:e8:7a:3f:fe:cd:60:65:04:c1:f4:41:af: 0a:9a:71:8c:4f:ec:f6:96:ef:7a:02:28:8a:17:e9:71:1a:41: 32:2b:d1:9c:9f:95:71:87:ca:d6:cc:5a:d1:c8:2b:de:af:87: 49:aa:a7:49:6e:13:a1:7b:56:f1:a9:01:e5:c9:e5:7a:28:ef: ae:8e:da:a1:9d:85:69:b5:7b:f1:3b:34:0c:56:a8:86:0b:86: 4b:02:20:b2:01:30:0c:e6:c8:20:22:e9:a3:c8:36:9b:e8:4e: 1a:61:60:89:4c:a8:75:30:2e:12:01:4e:a2:1d:3e:40:3d:69: 07:5b:ef:4d:81:35:22:12:65:47:75:ee:c5:d8:ce:37:82:9e: c3:84:62:34:06:ff:c4:10:ed:74:eb:b0:84:47:f1:20:25:05: f5:6e:62:f5:f4:45:3b:13:49:62:8b:fb:36:ca:9b:45:94:25: f8:2b:92:5a:c6:ff:de:a8:7b:e1:a9:55:74:55:14:98:0a:1c: b7:31:44:95:e5:49:11:24:52:e8:57:96:f9:bf:6f:3d:94:a7: 7b:d3:93:68:07:1d:19:9a:3d:aa:30:f7:86:5a:c6:90:03:1a: 2a:fd:7c:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKDYzMkM4REUwMjIwQjhDMTBCNDFGRjQ5QkZGOEI0MzJD RjhGRkQyNTQwHhcNMjUxMjIyMTQ1NzQ3WhcNMjUxMjI5MTQ1NzQ3WjAYMRYwFAYD VQQDDA02OTQ5NWM2Yi0zOGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJxoQOcdRStizsQrpd22Waomal+AvDNDB/lqX++J9qimaRUYUe7+j0gvax43 DJi3memW1uydAm4MIKFd8ECt1nMiG1TaDCisX8dQi017Yt+UewuXrSMplyfUN9dw H5yqnZ6/no+jRL2UvfKIIPXFUpGzRS1U3uvhp58laMNistSh5/LBjaLLF/SS9/GP GmwBfuGPKV3CWiW/jLSA7XgoAMrd4ETFXFC3zSj/QzmFmvq02y1VJlAaVQjEY405 UW2e/1mq8jvoXgCNqYa+B4COhzkfEu5pLoAJZJsvKSk0bq40qGRuHRQVoDg2nM/f Q6NY1Ia78k1BfmCZeduppNyzYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNDnc0M NdbyW53LYSJ+t6Gc67aZMB8GA1UdIwQYMBaAFGMsjeAiC4wQtB/0m/+LQyz4/9JU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy80NDlCQTUwNjFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpCQzBIX1NiXzR0RExQal8w bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1l5eU40Q0lMakJDMEhfU2JfNHRETFBqXzBsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4Qy80NDlCQTUwNjFEQTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpC QzBIX1NiXzR0RExQal8wbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDFqu0RA/ulCagxz1Ai13b1bH3S9EO97joej/+zWBlBMH0Qa8KmnGM T+z2lu96AiiKF+lxGkEyK9Gcn5Vxh8rWzFrRyCver4dJqqdJbhOhe1bxqQHlyeV6 KO+ujtqhnYVptXvxOzQMVqiGC4ZLAiCyATAM5sggIumjyDab6E4aYWCJTKh1MC4S AU6iHT5APWkHW+9NgTUiEmVHde7F2M43gp7DhGI0Bv/EEO1067CER/EgJQX1bmL1 9EU7E0lii/s2yptFlCX4K5Jaxv/eqHvhqVV0VRSYChy3MUSV5UkRJFLoV5b5v289 lKd705NoBx0Zmj2qMPeGWsaQAxoq/Xzl -----END CERTIFICATE-----Generated at Wed Dec 24 12:34:42 2025 by rpki-client