This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft File: ypDU0hJfAza1OY7gmXcpby5AkrQ.mft (raw, json) Hash identifier: COhQxOMoxIeaZOTx62BXPgCRj3Q3nlijRli9pT2e+ws= Subject key identifier: 6A:49:25:AA:50:C2:3A:B5:B0:03:1B:B5:A0:92:45:E8:95:1A:A0:B5 Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Certificate serial: 02FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft Manifest number: 02DC Signing time: Sat 06 Dec 2025 23:59:38 +0000 Manifest this update: Sat 06 Dec 2025 23:59:37 +0000 Manifest next update: Sat 13 Dec 2025 23:59:37 +0000 Files and hashes: 1: ypDU0hJfAza1OY7gmXcpby5AkrQ.crl (hash: PNnZvloXsSF6f3bUSi6sGUcAZlJjIANDiDmAUxmtkTc=) 2: 69F7328030A611F0BBA4642EC4F9AE02.roa (hash: pRX1aAjREIQhsq5Tkyea2GP0jBJzjLDx/TwdfJT+O2w=) 3: 39FCB4EC4F4E11EDB169BF33C4F9AE02.roa (hash: 0XukXktPi06t2s/u4nG7O8A1Hjoe9Ve3TUYqOPy+qoM=) 4: 4D608CC0800211EF81167A23C4F9AE02.roa (hash: LzylPXm23vwSZhDjGZSMxqVNBZhHuc0qqCM5OUudeV8=) 5: 61A03234B57C11F0B3EF6D44C4F9AE02.roa (hash: A1vIWfjVNDBFpOaLGkypJkWaMIQtma4uqJwQ3KAhcB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 23:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 765 (0x2fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580D2, serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Validity Not Before: Dec 6 23:59:37 2025 GMT Not After : Dec 13 23:59:37 2025 GMT Subject: CN=6934c369-6574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c7:aa:a7:c0:8d:1c:b7:1a:bf:bd:fd:86:07: 31:ff:33:d2:4f:98:67:f1:be:c4:55:82:eb:88:6a: 3c:2f:0c:67:98:ba:08:d8:09:c3:a4:ec:67:12:52: 7b:54:64:a2:52:6c:6c:b1:a2:bc:8d:6a:db:08:b3: c0:74:90:a1:9d:13:2f:a6:15:08:66:62:a3:30:6f: 72:0e:00:1a:5c:3f:f1:27:6d:f4:11:5d:a1:6b:a9: 0a:6c:0f:7e:7e:13:16:d6:cf:8e:35:db:a3:cc:01: ad:61:01:b2:9e:f1:80:22:c2:63:11:44:0d:ba:94: 59:54:89:b1:be:f8:ab:e6:68:c4:73:dc:73:35:41: d8:0b:df:14:28:a1:09:67:6a:56:d9:4e:3c:48:33: 0f:5f:7b:a3:6c:34:d3:32:62:9f:52:19:f3:74:e8: 61:44:76:b2:23:54:da:c3:26:9c:04:23:b8:7c:6e: fc:12:45:db:02:c5:47:8f:6e:a2:93:9b:f7:db:fe: 31:a5:a4:c3:ab:15:2a:7e:46:43:2b:5d:f9:4b:90: c0:17:0d:5b:f5:ef:59:3c:5d:d0:21:6c:c6:a8:ef: 74:db:fa:bc:d0:56:82:f0:d8:cd:5f:94:f6:0b:d7: 3d:ac:8d:6c:d6:02:e3:f5:d2:7c:0e:e4:d3:22:f9: cf:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:49:25:AA:50:C2:3A:B5:B0:03:1B:B5:A0:92:45:E8:95:1A:A0:B5 X509v3 Authority Key Identifier: keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:52:41:4e:e5:9c:7a:2e:ce:f3:ed:1e:c6:68:fe:fb:43:7c: 6f:7c:34:40:f8:3c:a2:ff:77:aa:0f:e7:15:64:90:19:e9:ed: 0b:03:c8:63:db:34:18:d3:a4:4e:43:25:99:ef:4f:bd:ef:87: 36:f2:e5:3f:72:0b:f1:58:f4:21:52:55:19:33:53:8f:7c:1c: 9c:11:b1:f7:8b:b9:71:66:d6:cd:bb:5f:f7:36:cd:cc:35:4a: cf:fd:65:6b:d1:fc:87:79:60:bc:bd:6f:2b:b9:f2:9a:dd:70: 14:b1:2e:d5:87:df:67:55:88:9f:be:1c:0c:7e:68:7f:01:96: f5:5f:3d:28:1e:45:df:4d:56:be:b8:46:0d:37:ef:f2:fe:15: 65:6c:03:fe:a3:e1:78:d7:6a:9d:d3:fb:f4:82:66:f4:aa:6d: 4e:bf:d7:ed:47:56:67:f0:54:c5:d1:59:da:61:72:4d:f7:cc: 58:17:b4:8c:c9:e8:64:6e:2c:18:f9:63:20:79:d0:49:51:2a: c6:fa:42:54:ef:ed:9e:9a:15:d4:40:b2:45:8e:96:76:cf:cf: 87:17:1a:d6:91:45:3d:aa:7a:c4:1b:a4:b7:71:b8:d5:33:01: 44:c5:53:3b:49:d6:68:4b:bc:b6:f7:b6:7c:91:d5:7d:73:71: ad:84:d9:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwRDIxMTAvBgNVBAUTKENBOTBENEQyMTI1RjAzMzZCNTM5OEVFMDk5NzcyOTZG MkU0MDkyQjQwHhcNMjUxMjA2MjM1OTM3WhcNMjUxMjEzMjM1OTM3WjAYMRYwFAYD VQQDEw02OTM0YzM2OS02NTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn8eqp8CNHLcav739hgcx/zPST5hn8b7EVYLriGo8LwxnmLoI2AnDpOxnElJ7 VGSiUmxssaK8jWrbCLPAdJChnRMvphUIZmKjMG9yDgAaXD/xJ230EV2ha6kKbA9+ fhMW1s+ONdujzAGtYQGynvGAIsJjEUQNupRZVImxvvir5mjEc9xzNUHYC98UKKEJ Z2pW2U48SDMPX3ujbDTTMmKfUhnzdOhhRHayI1TawyacBCO4fG78EkXbAsVHj26i k5v32/4xpaTDqxUqfkZDK135S5DAFw1b9e9ZPF3QIWzGqO902/q80FaC8NjNX5T2 C9c9rI1s1gLj9dJ8DuTTIvnPEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpJJapQ wjq1sAMbtaCSReiVGqC1MB8GA1UdIwQYMBaAFMqQ1NISXwM2tTmO4Jl3KW8uQJK0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBEMi9FQkMxQUMyQzE4 NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6YTFPWTdnbVhjcGJ5NUFr clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lwRFUwaEpmQXphMU9ZN2dtWGNwYnk1QWtyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBEMi9FQkMxQUMyQzE4NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6 YTFPWTdnbVhjcGJ5NUFrclEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOUkFO5Zx6Ls7z7R7GaP77Q3xvfDRA+Dyi/3eqD+cVZJAZ6e0LA8hj 2zQY06ROQyWZ70+974c28uU/cgvxWPQhUlUZM1OPfBycEbH3i7lxZtbNu1/3Ns3M NUrP/WVr0fyHeWC8vW8rufKa3XAUsS7Vh99nVYifvhwMfmh/AZb1Xz0oHkXfTVa+ uEYNN+/y/hVlbAP+o+F412qd0/v0gmb0qm1Ov9ftR1Zn8FTF0VnaYXJN98xYF7SM yehkbiwY+WMgedBJUSrG+kJU7+2emhXUQLJFjpZ2z8+HFxrWkUU9qnrEG6S3cbjV MwFExVM7SdZoS7y297Z8kdV9c3GthNla -----END CERTIFICATE-----Generated at Mon Dec 8 06:10:59 2025 by rpki-client