This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft File: yIwqqUquXvn01JfoOHo53RvOk50.mft (raw, json) Hash identifier: OCgz4PL62XrOudiD4bSFH4X1gX9/Jx1eqh6SJ6kyxp4= Subject key identifier: CC:47:49:C6:6E:18:5D:6E:C4:F4:82:49:A1:E0:FD:6A:31:96:86:B1 Authority key identifier: C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D Certificate issuer: /CN=A91228E2/serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft Manifest number: 0194 Signing time: Tue 23 Dec 2025 02:28:19 +0000 Manifest this update: Tue 23 Dec 2025 02:28:18 +0000 Manifest next update: Tue 30 Dec 2025 02:28:18 +0000 Files and hashes: 1: yIwqqUquXvn01JfoOHo53RvOk50.crl (hash: 2Mtb/K8qQIFWZEG5mgGI/IpmDyLGWgRSJqFXc4xOrFY=) 2: EF98E11472E211EEB93A4F72C4F9AE02.roa (hash: zjnMnu7RY/dZWeqb3tnlHnJORJa1AYwPA3wCVz3+WfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91228E2, serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D Validity Not Before: Dec 23 02:28:18 2025 GMT Not After : Dec 30 02:28:18 2025 GMT Subject: CN=6949fe43-eac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3c:97:96:6f:98:18:af:9e:ad:99:98:55:2d: eb:66:d2:71:bd:30:b4:de:7c:4d:b6:fa:1c:d2:e1: 83:06:be:f8:19:fd:6f:ac:09:97:4c:06:99:5c:59: 4a:e9:2a:31:bb:df:66:c5:4f:27:49:8a:97:df:db: c6:29:f7:a3:19:c4:8c:4b:b1:c4:79:76:59:9b:12: cc:3e:8a:6e:a0:c5:5d:f9:36:be:9c:65:7d:7d:f2: e2:f0:53:26:3b:ad:57:d9:5b:64:f6:ee:03:fd:40: 67:61:04:aa:ec:75:3c:32:1e:d5:a5:01:3b:fc:fc: d5:c9:f2:2b:0c:09:6b:40:2a:2e:15:14:df:cd:7b: fe:91:69:26:c9:cf:0b:28:f7:59:c9:19:5d:60:bb: 6d:6d:d8:c6:de:d6:41:bb:93:f1:f2:b6:5a:00:cd: 06:9c:44:60:f9:c3:a2:23:46:20:d1:2a:52:18:06: a5:2a:f0:bf:90:77:83:15:50:cf:49:2d:ee:39:b3: 13:e3:33:c1:97:c5:d2:a4:29:d9:ae:fc:69:52:50: b5:5c:93:b4:fc:44:79:9c:ad:5e:5b:ca:3e:a4:ab: d7:04:15:a9:35:03:d5:d6:f2:bd:16:0b:f6:be:f0: 1a:aa:10:f3:9a:67:a5:c9:85:91:15:21:f7:e2:61: 47:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:47:49:C6:6E:18:5D:6E:C4:F4:82:49:A1:E0:FD:6A:31:96:86:B1 X509v3 Authority Key Identifier: keyid:C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:37:de:5a:4d:bb:7d:5f:c3:00:02:5d:6a:3e:69:c6:ec:2f: 3f:f9:1f:c3:f1:34:83:58:94:81:b5:56:27:77:1b:2e:48:80: 48:9b:b7:7f:5d:61:59:75:41:7c:9f:16:da:10:61:02:d9:ab: 71:cf:7b:0b:ff:5e:a9:5a:80:53:4e:71:55:2d:7d:9e:bc:5d: 87:33:0a:87:d2:cf:e9:9a:85:e9:c2:19:a0:73:6c:dc:fd:77: 40:99:a6:92:4b:1a:56:46:95:bc:b6:94:39:95:81:40:d5:ac: a5:c4:9c:c8:82:c8:6d:80:bd:a6:8b:ad:72:ff:24:3c:d0:81: b1:6a:c4:e8:94:5d:54:cb:81:2c:f1:60:91:86:9f:73:2c:ab: 7b:0e:ac:11:5e:94:46:d9:7c:36:43:65:d7:be:b7:f9:8c:29: af:b4:74:9c:21:2a:27:f0:8a:eb:69:8b:1e:b6:bb:97:27:9a: 20:d7:3d:cd:c6:77:2e:0f:65:4e:75:f5:e1:16:ad:53:cb:19: 27:31:1d:5b:7f:81:84:42:9c:54:89:b2:38:04:e7:f3:a9:4a: 64:fd:6d:1c:3f:61:7b:58:5b:70:37:ea:ea:ee:ba:8c:53:d6: 24:27:92:27:85:eb:68:f3:2a:01:fc:c3:f9:d5:20:7e:42:41: 89:7b:d6:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI4RTIxMTAvBgNVBAUTKEM4OEMyQUE5NEFBRTVFRjlGNEQ0OTdFODM4N0EzOURE MUJDRTkzOUQwHhcNMjUxMjIzMDIyODE4WhcNMjUxMjMwMDIyODE4WjAYMRYwFAYD VQQDDA02OTQ5ZmU0My1lYWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDyXlm+YGK+erZmYVS3rZtJxvTC03nxNtvoc0uGDBr74Gf1vrAmXTAaZXFlK 6Soxu99mxU8nSYqX39vGKfejGcSMS7HEeXZZmxLMPopuoMVd+Ta+nGV9ffLi8FMm O61X2Vtk9u4D/UBnYQSq7HU8Mh7VpQE7/PzVyfIrDAlrQCouFRTfzXv+kWkmyc8L KPdZyRldYLttbdjG3tZBu5Px8rZaAM0GnERg+cOiI0Yg0SpSGAalKvC/kHeDFVDP SS3uObMT4zPBl8XSpCnZrvxpUlC1XJO0/ER5nK1eW8o+pKvXBBWpNQPV1vK9Fgv2 vvAaqhDzmmelyYWRFSH34mFHQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxHScZu GF1uxPSCSaHg/WoxloaxMB8GA1UdIwQYMBaAFMiMKqlKrl759NSX6Dh6Od0bzpOd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjhFMi9DRTU0MDZGNjcy RTExMUVFQjA3ODE2MTlDNEY5QUUwMi95SXdxcVVxdVh2bjAxSmZvT0hvNTNSdk9r NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJd3FxVXF1WHZuMDFKZm9PSG81M1J2T2s1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjhFMi9DRTU0MDZGNjcyRTExMUVFQjA3ODE2MTlDNEY5QUUwMi95SXdxcVVxdVh2 bjAxSmZvT0hvNTNSdk9rNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBON95aTbt9X8MAAl1qPmnG7C8/+R/D8TSDWJSBtVYndxsuSIBIm7d/ XWFZdUF8nxbaEGEC2atxz3sL/16pWoBTTnFVLX2evF2HMwqH0s/pmoXpwhmgc2zc /XdAmaaSSxpWRpW8tpQ5lYFA1aylxJzIgshtgL2mi61y/yQ80IGxasTolF1Uy4Es 8WCRhp9zLKt7DqwRXpRG2Xw2Q2XXvrf5jCmvtHScISon8IrraYsetruXJ5og1z3N xncuD2VOdfXhFq1TyxknMR1bf4GEQpxUibI4BOfzqUpk/W0cP2F7WFtwN+rq7rqM U9YkJ5Inheto8yoB/MP51SB+QkGJe9bQ -----END CERTIFICATE-----Generated at Wed Dec 24 21:24:01 2025 by rpki-client