This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft File: 1Ycen8b73n3HG36JXIoEw9ACHYU.mft (raw, json) Hash identifier: nqmSXBAfGwvg8WiDI4drPWeAMHZsWdymVOhqD4rjYB4= Subject key identifier: 29:AC:22:CD:FE:18:AF:25:AB:39:99:AC:89:A1:F5:CC:39:6C:F0:51 Authority key identifier: D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 Certificate issuer: /CN=A91F8A49/serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft Manifest number: 01B6 Signing time: Sun 21 Dec 2025 02:24:08 +0000 Manifest this update: Sun 21 Dec 2025 02:24:08 +0000 Manifest next update: Sun 28 Dec 2025 02:24:08 +0000 Files and hashes: 1: 1Ycen8b73n3HG36JXIoEw9ACHYU.crl (hash: qa+2Ac8tcCoR+aKnA5Xq5w4w6K2qtOPtMFg4vbRpG0E=) 2: B78CCA4E4C5711EE9FE2EA35C4F9AE02.roa (hash: yOezlN4+53IwwnSsCKNCBTmWXo8aQEvNaQEYhS9yato=) 3: A355C1A8B6D511F089793D6DC4F9AE02.roa (hash: 0SnBjCkd1/QSiUJjvI651mo+kVttGehwO0xz/nqsNeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A49, serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Validity Not Before: Dec 21 02:24:08 2025 GMT Not After : Dec 28 02:24:08 2025 GMT Subject: CN=69475a48-a2a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:72:0e:b5:8a:eb:b7:87:79:37:68:61:64:78: 29:8e:0b:4a:87:e1:16:ff:db:58:73:5f:a4:97:63: 74:c7:99:f3:8f:1f:f3:c0:85:b2:6e:bb:0e:ef:37: e0:c5:56:2b:25:08:2a:86:b7:93:4d:ae:bf:71:0e: 51:eb:55:56:f2:63:b0:74:89:df:e3:ad:19:17:30: 75:44:96:55:c7:00:1f:54:90:bd:29:0b:c3:1b:22: 6e:dd:d4:91:a2:eb:6a:49:15:0f:a2:42:dc:49:14: 40:f8:34:6c:95:32:72:2c:06:23:85:24:85:0b:f9: 7b:50:d6:95:02:68:6a:3e:18:2d:fb:9a:e2:1d:a5: 3c:0f:aa:11:8d:70:68:e3:1a:3b:ed:e8:7e:50:46: 7f:48:90:61:50:95:7e:c1:3f:c5:f3:14:1c:4c:46: 0b:37:8f:39:af:fc:fc:82:af:b7:73:f7:8e:cf:91: 36:43:56:22:1f:dd:f4:21:98:05:99:b6:77:6e:fe: ae:33:d4:37:be:86:73:88:c8:bb:03:f9:c7:3d:bb: 2f:cf:2f:8b:5c:66:f6:c3:17:0e:f7:65:78:34:9e: 10:c9:8f:2e:f9:39:13:1f:c4:93:21:81:fc:9b:d6: 3a:54:7e:c2:4a:71:d5:93:cb:89:31:e3:d6:af:64: 1e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AC:22:CD:FE:18:AF:25:AB:39:99:AC:89:A1:F5:CC:39:6C:F0:51 X509v3 Authority Key Identifier: keyid:D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:48:e6:f3:c6:91:0a:fe:99:58:96:71:f1:01:da:37:1a:11: a3:24:54:23:19:8c:12:ce:28:cd:62:0d:17:ba:9e:97:f5:12: fd:30:44:c8:de:3d:93:59:54:a6:b9:8c:8b:2c:4d:aa:bd:4d: bb:b5:3f:66:6f:38:95:a6:83:ba:d1:ac:14:dd:34:2d:55:57: ea:05:ab:b2:23:97:56:32:f5:a1:da:e7:8c:14:40:5c:07:92: 09:70:48:d3:ec:1f:37:5f:09:9c:86:3f:0b:68:46:15:e4:10: 02:95:6b:3f:fa:0b:98:32:ba:62:87:fb:f2:8c:1f:36:0c:62: aa:1e:ce:e4:85:5b:9b:bc:06:6d:28:02:54:2c:d4:20:10:73: a9:e2:2a:56:f2:f0:62:44:83:eb:30:0f:39:c0:65:91:35:08: dd:14:b0:d7:20:9b:e4:e0:0b:b7:19:82:0b:3d:fa:35:d4:43: d8:17:2c:08:db:39:1a:4d:bd:12:f8:52:a8:60:5e:b1:2e:d8: 66:e3:b8:48:4c:81:20:c1:d4:b5:1c:9c:d7:56:85:db:e0:5a: ec:82:ad:f2:a4:86:88:2b:dc:ce:75:43:5a:66:42:57:b2:bb: ba:60:e1:52:5d:8a:35:d1:b6:f1:66:1a:e2:28:75:91:20:54: 2c:8a:ad:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDkxMTAvBgNVBAUTKEQ1ODcxRTlGQzZGQkRFN0RDNzFCN0U4OTVDOEEwNEMz RDAwMjFEODUwHhcNMjUxMjIxMDIyNDA4WhcNMjUxMjI4MDIyNDA4WjAYMRYwFAYD VQQDDA02OTQ3NWE0OC1hMmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnHIOtYrrt4d5N2hhZHgpjgtKh+EW/9tYc1+kl2N0x5nzjx/zwIWybrsO7zfg xVYrJQgqhreTTa6/cQ5R61VW8mOwdInf460ZFzB1RJZVxwAfVJC9KQvDGyJu3dSR outqSRUPokLcSRRA+DRslTJyLAYjhSSFC/l7UNaVAmhqPhgt+5riHaU8D6oRjXBo 4xo77eh+UEZ/SJBhUJV+wT/F8xQcTEYLN485r/z8gq+3c/eOz5E2Q1YiH930IZgF mbZ3bv6uM9Q3voZziMi7A/nHPbsvzy+LXGb2wxcO92V4NJ4QyY8u+TkTH8STIYH8 m9Y6VH7CSnHVk8uJMePWr2Qe1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmsIs3+ GK8lqzmZrImh9cw5bPBRMB8GA1UdIwQYMBaAFNWHHp/G+959xxt+iVyKBMPQAh2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0OS80N0QwNDQ2NDQ3 QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNuM0hHMzZKWElvRXc5QUNI WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFZY2VuOGI3M24zSEczNkpYSW9FdzlBQ0hZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0OS80N0QwNDQ2NDQ3QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNu M0hHMzZKWElvRXc5QUNIWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJSObzxpEK/plYlnHxAdo3GhGjJFQjGYwSzijNYg0Xup6X9RL9METI 3j2TWVSmuYyLLE2qvU27tT9mbziVpoO60awU3TQtVVfqBauyI5dWMvWh2ueMFEBc B5IJcEjT7B83Xwmchj8LaEYV5BAClWs/+guYMrpih/vyjB82DGKqHs7khVubvAZt KAJULNQgEHOp4ipW8vBiRIPrMA85wGWRNQjdFLDXIJvk4Au3GYILPfo11EPYFywI 2zkaTb0S+FKoYF6xLthm47hITIEgwdS1HJzXVoXb4Frsgq3ypIaIK9zOdUNaZkJX sru6YOFSXYo10bbxZhriKHWRIFQsiq2w -----END CERTIFICATE-----Generated at Tue Dec 23 02:42:01 2025 by rpki-client