This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft File: yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft (raw, json) Hash identifier: V1moYYsvGnK05Sy99fUYOFs8Z4QRQ43uwFjoTKqDSGM= Subject key identifier: C8:AA:9A:9F:3A:AB:83:2E:3F:E3:D4:A5:3D:3E:CC:FF:83:4F:2A:D5 Authority key identifier: C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9 Certificate issuer: /CN=A91CCDF3/serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9 Certificate serial: 01E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft Manifest number: 01DE Signing time: Tue 23 Dec 2025 01:43:36 +0000 Manifest this update: Tue 23 Dec 2025 01:43:35 +0000 Manifest next update: Tue 30 Dec 2025 01:43:35 +0000 Files and hashes: 1: yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl (hash: 1t9mtfr8xqfFTNNMdD3VIs0CBt4sCXikw+kfZL5V8eg=) 2: 851A7AD6FF7F11EDA505D70EC4F9AE02.roa (hash: dYTddJDImyu3rpg7QICAEFzGZsVfww3CPHFdjrscptU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 481 (0x1e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDF3, serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9 Validity Not Before: Dec 23 01:43:35 2025 GMT Not After : Dec 30 01:43:35 2025 GMT Subject: CN=6949f3c8-7244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:18:27:bf:71:a7:46:4f:b6:72:fe:e0:a0:4a: 2c:cd:46:6e:f7:50:b7:71:48:8e:e2:c6:75:f6:65: bc:e8:c4:42:e8:66:40:41:85:c4:fb:b1:41:99:c4: ec:6a:17:a5:de:a2:da:14:f1:2d:25:86:f8:f4:8b: 78:22:4e:e2:a2:62:82:24:1c:7c:da:f3:0e:ec:0c: ed:1d:b1:01:7f:7a:d5:7e:85:0a:5d:7e:77:20:ef: 64:5e:34:4e:b3:28:fc:95:5c:0e:e8:3b:23:b3:2e: d5:2d:e5:dc:24:93:f3:28:ad:39:5e:99:c5:1e:6b: cc:18:d8:1b:49:1c:b6:d4:54:0f:e0:ec:7f:a8:c8: ce:5f:71:08:e4:8a:c5:b3:95:95:53:35:0b:46:da: 3e:ae:c9:ae:ac:09:4e:1b:c7:57:4b:00:18:0d:81: ad:29:8b:08:26:d3:8e:26:66:74:c6:71:6e:9d:d0: 3d:81:56:53:56:36:bb:aa:94:d7:f4:94:2f:67:7e: 91:56:3b:0f:9d:fb:8b:03:b8:0d:97:f1:a4:ba:2b: 8d:85:a3:f6:b2:bb:14:57:df:2f:92:97:88:45:78: f6:cc:da:a6:4f:e6:30:02:11:76:25:82:57:fa:2a: 39:49:9e:e5:62:b7:37:d4:3d:1b:0b:a2:2c:47:12: db:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AA:9A:9F:3A:AB:83:2E:3F:E3:D4:A5:3D:3E:CC:FF:83:4F:2A:D5 X509v3 Authority Key Identifier: keyid:C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:fc:30:c3:e0:55:60:8c:71:48:ff:1c:ef:75:ab:1b:f2:da: 83:53:1f:43:e6:8d:47:a8:6f:d0:fe:46:31:9b:2d:42:9a:6d: 73:9c:a0:4d:23:e8:0f:41:fd:ac:3b:a0:60:6d:28:35:51:97: 4b:11:6a:45:12:0a:44:a6:05:46:08:1a:6b:44:97:69:4f:63: 7c:ac:da:4c:c6:42:6c:19:fa:e6:7a:1a:23:2f:c5:68:7e:6d: 66:cf:e8:a9:d3:02:aa:a0:cd:c0:dc:77:75:d8:ba:0a:1c:5e: bc:01:13:de:c7:08:7a:ae:70:21:9e:70:6f:50:5a:f7:96:66: ee:a8:9c:ac:2f:6b:54:d4:32:5f:16:13:96:14:b4:02:c4:9d: 57:b1:c8:f8:e1:52:de:f4:9f:84:b7:17:6d:9e:73:86:d3:c9: 54:82:12:cb:df:8f:01:b9:3d:88:e9:e1:a3:2d:4f:f4:c0:88: 3d:85:55:4d:a4:56:1b:5b:b3:04:48:fd:77:fe:5b:d8:0a:18: 00:9c:9d:39:2e:ec:97:dd:22:f8:c0:0b:91:47:be:a3:26:2f: 12:87:fc:df:a1:f7:fc:bb:fc:8b:06:a9:ff:9f:31:8d:24:3a: ef:61:9e:2e:57:be:51:cd:d1:79:48:61:3c:11:84:9d:04:23: ed:f7:30:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NERjMxMTAvBgNVBAUTKEM5MTVGRDNCRDQ1QjgyMThCOTVGNTczNzQ5RDNBQTQ5 ODAxNkFBQTkwHhcNMjUxMjIzMDE0MzM1WhcNMjUxMjMwMDE0MzM1WjAYMRYwFAYD VQQDDA02OTQ5ZjNjOC03MjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhgnv3GnRk+2cv7goEoszUZu91C3cUiO4sZ19mW86MRC6GZAQYXE+7FBmcTs ahel3qLaFPEtJYb49It4Ik7iomKCJBx82vMO7AztHbEBf3rVfoUKXX53IO9kXjRO syj8lVwO6Dsjsy7VLeXcJJPzKK05XpnFHmvMGNgbSRy21FQP4Ox/qMjOX3EI5IrF s5WVUzULRto+rsmurAlOG8dXSwAYDYGtKYsIJtOOJmZ0xnFundA9gVZTVja7qpTX 9JQvZ36RVjsPnfuLA7gNl/GkuiuNhaP2srsUV98vkpeIRXj2zNqmT+YwAhF2JYJX +io5SZ7lYrc31D0bC6IsRxLbrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiqmp86 q4MuP+PUpT0+zP+DTyrVMB8GA1UdIwQYMBaAFMkV/TvUW4IYuV9XN0nTqkmAFqqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0RGMy80MkRFNDgzNkZG NzYxMUVEQjg5ODE1NThDNEY5QUUwMi95Ulg5TzlSYmdoaTVYMWMzU2RPcVNZQVdx cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lSWDlPOVJiZ2hpNVgxYzNTZE9xU1lBV3Fxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0RGMy80MkRFNDgzNkZGNzYxMUVEQjg5ODE1NThDNEY5QUUwMi95Ulg5TzlSYmdo aTVYMWMzU2RPcVNZQVdxcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4/DDD4FVgjHFI/xzvdasb8tqDUx9D5o1HqG/Q/kYxmy1Cmm1znKBN I+gPQf2sO6BgbSg1UZdLEWpFEgpEpgVGCBprRJdpT2N8rNpMxkJsGfrmehojL8Vo fm1mz+ip0wKqoM3A3Hd12LoKHF68ARPexwh6rnAhnnBvUFr3lmbuqJysL2tU1DJf FhOWFLQCxJ1Xscj44VLe9J+EtxdtnnOG08lUghLL348BuT2I6eGjLU/0wIg9hVVN pFYbW7MESP13/lvYChgAnJ05LuyX3SL4wAuRR76jJi8Sh/zfoff8u/yLBqn/nzGN JDrvYZ4uV75RzdF5SGE8EYSdBCPt9zBp -----END CERTIFICATE-----Generated at Tue Dec 23 18:07:41 2025 by rpki-client