This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft File: Y35CcZzKBnZlOgprNKBujlSsBe8.mft (raw, json) Hash identifier: p6pTjZ4QqhPmTw+GVdXsFbhIc8yC694ASExPSJgK7vA= Subject key identifier: AA:D8:38:DA:F8:8D:F9:14:BD:A4:82:1A:47:35:55:BC:01:F3:E9:5D Authority key identifier: 63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF Certificate issuer: /CN=A91FECFD/serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Certificate serial: 0946 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft Manifest number: 0940 Signing time: Thu 18 Dec 2025 19:43:50 +0000 Manifest this update: Thu 18 Dec 2025 19:43:49 +0000 Manifest next update: Thu 25 Dec 2025 19:43:49 +0000 Files and hashes: 1: Y35CcZzKBnZlOgprNKBujlSsBe8.crl (hash: yI9463ew1SUWnqiHjOqpd4UEbJgBfhfG5u4uuLBjuTE=) 2: 995F3DCEAF7811EABCA9AC1DC4F9AE02.roa (hash: ZNkH5Sj7XHBs6ufHKPHidPlMntGP72EIG2BMLfQDnC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2374 (0x946) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECFD, serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Validity Not Before: Dec 18 19:43:49 2025 GMT Not After : Dec 25 19:43:49 2025 GMT Subject: CN=69445976-bbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:52:3a:53:42:3a:38:c3:e2:8a:7f:a5:38:12: ae:4e:71:69:20:6a:de:42:28:ae:e7:03:92:39:2f: 46:c8:dd:1c:56:1d:f1:8b:6b:61:65:e1:fb:6a:74: fb:e2:c0:e3:b3:39:32:fc:99:93:3d:78:31:16:35: 30:e0:0f:a7:79:63:aa:ef:dc:72:53:8b:e4:d1:b0: c8:52:47:03:e3:76:4f:7a:90:57:57:4d:33:df:57: a2:59:0b:14:a7:04:a7:7a:c4:a5:88:51:c4:dd:13: 58:97:cc:fc:9e:cd:87:ab:09:82:e0:46:07:5e:17: d6:45:32:67:d6:a4:5a:f7:72:4d:1e:8a:23:b5:30: 33:38:f3:20:96:bb:32:88:d8:df:5a:06:23:59:8a: 08:72:b9:3d:51:1a:05:e0:0a:fe:42:02:37:e5:2b: 86:c7:23:b8:e6:e0:67:f3:ee:38:1f:50:70:0f:6e: e5:7b:01:78:89:ed:c9:2b:c5:94:36:3d:bd:28:68: eb:78:1c:df:74:97:07:ff:2f:45:39:a2:a5:a7:98: d5:89:87:07:44:8a:1e:00:f5:88:de:df:5e:98:9d: ea:6c:41:44:e2:14:4e:a9:e0:26:35:e8:49:e9:a1: 31:83:d3:1d:2b:ef:56:e5:a6:69:d4:d3:99:3d:40: ac:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D8:38:DA:F8:8D:F9:14:BD:A4:82:1A:47:35:55:BC:01:F3:E9:5D X509v3 Authority Key Identifier: keyid:63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:d9:e6:d2:a2:b7:84:b2:c5:19:73:11:3b:bf:1b:e8:85:ea: 05:92:9f:ac:f7:04:17:70:57:c1:46:e6:4b:e2:b8:22:1b:b6: ce:f1:85:19:98:f6:80:49:d6:30:59:2d:14:db:61:b4:a2:dc: 0c:14:81:c7:60:9b:f0:de:c1:99:18:f9:a5:db:1d:ea:4a:7d: 4d:72:cf:de:88:75:42:35:52:8f:08:0b:62:21:d1:d0:87:f9: 1a:dd:04:3b:02:75:6b:dc:ad:54:86:23:b5:74:47:68:c0:65: 80:ec:1b:3d:5c:06:b3:ab:2b:f4:cd:b1:67:2c:e8:37:b7:63: 0a:20:37:ff:42:50:53:03:a8:e8:e7:e2:9a:88:b0:d2:ee:46: e5:0f:34:9c:c5:26:63:4b:bc:92:12:51:8c:b5:9e:2f:2e:7c: 64:ff:02:04:8d:15:a1:d6:d8:c2:e3:6b:50:5e:0a:66:74:1e: f5:33:8f:24:e2:ff:12:83:32:7f:f2:f0:b7:f7:aa:66:6a:ff: c4:1e:98:14:10:b3:40:14:5d:fc:49:2d:54:ce:2e:7c:24:8a: c8:e3:03:8f:c1:c4:9f:f6:22:48:34:18:f9:3b:8b:9a:c0:ce: 9f:fb:55:27:61:7f:93:91:53:bd:06:64:2d:e6:c9:5f:d1:b6: 7f:27:d1:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDRkQxMTAvBgNVBAUTKDYzN0U0MjcxOUNDQTA2NzY2NTNBMEE2QjM0QTA2RThF NTRBQzA1RUYwHhcNMjUxMjE4MTk0MzQ5WhcNMjUxMjI1MTk0MzQ5WjAYMRYwFAYD VQQDDA02OTQ0NTk3Ni1iYmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlI6U0I6OMPiin+lOBKuTnFpIGreQiiu5wOSOS9GyN0cVh3xi2thZeH7anT7 4sDjszky/JmTPXgxFjUw4A+neWOq79xyU4vk0bDIUkcD43ZPepBXV00z31eiWQsU pwSnesSliFHE3RNYl8z8ns2HqwmC4EYHXhfWRTJn1qRa93JNHoojtTAzOPMglrsy iNjfWgYjWYoIcrk9URoF4Ar+QgI35SuGxyO45uBn8+44H1BwD27lewF4ie3JK8WU Nj29KGjreBzfdJcH/y9FOaKlp5jViYcHRIoeAPWI3t9emJ3qbEFE4hROqeAmNehJ 6aExg9MdK+9W5aZp1NOZPUCsHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrYONr4 jfkUvaSCGkc1VbwB8+ldMB8GA1UdIwQYMBaAFGN+QnGcygZ2ZToKazSgbo5UrAXv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNGRC8zN0EwNDI2NEFG NzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0JuWmxPZ3ByTktCdWpsU3NC ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzNUNjWnpLQm5abE9ncHJOS0J1amxTc0JlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUNGRC8zN0EwNDI2NEFGNzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0Ju WmxPZ3ByTktCdWpsU3NCZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi2ebSoreEssUZcxE7vxvoheoFkp+s9wQXcFfBRuZL4rgiG7bO8YUZ mPaASdYwWS0U22G0otwMFIHHYJvw3sGZGPml2x3qSn1Ncs/eiHVCNVKPCAtiIdHQ h/ka3QQ7AnVr3K1UhiO1dEdowGWA7Bs9XAazqyv0zbFnLOg3t2MKIDf/QlBTA6jo 5+KaiLDS7kblDzScxSZjS7ySElGMtZ4vLnxk/wIEjRWh1tjC42tQXgpmdB71M48k 4v8SgzJ/8vC396pmav/EHpgUELNAFF38SS1Uzi58JIrI4wOPwcSf9iJINBj5O4ua wM6f+1UnYX+TkVO9BmQt5slf0bZ/J9GT -----END CERTIFICATE-----Generated at Fri Dec 19 23:56:27 2025 by rpki-client