This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft File: Y06sGbStSypNQSgRX59VZ5TMdSM.mft (raw, json) Hash identifier: DnsrL+dEazqRll3VujUl/C9brc48dW8f2ng6v+N9fhs= Subject key identifier: 73:65:6E:E2:C6:05:EB:43:84:46:03:DA:42:1E:90:2D:AD:DF:35:04 Authority key identifier: 63:4E:AC:19:B4:AD:4B:2A:4D:41:28:11:5F:9F:55:67:94:CC:75:23 Certificate issuer: /CN=A91647ED/serialNumber=634EAC19B4AD4B2A4D4128115F9F556794CC7523 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y06sGbStSypNQSgRX59VZ5TMdSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft Manifest number: 0F Signing time: Tue 23 Dec 2025 06:50:17 +0000 Manifest this update: Tue 23 Dec 2025 06:50:17 +0000 Manifest next update: Tue 30 Dec 2025 06:50:17 +0000 Files and hashes: 1: Y06sGbStSypNQSgRX59VZ5TMdSM.crl (hash: 3LGx9eEUSedZ//O0esYqf6Y8vdIwG9aMKZbwiKA2Src=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.crl rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y06sGbStSypNQSgRX59VZ5TMdSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91647ED, serialNumber=634EAC19B4AD4B2A4D4128115F9F556794CC7523 Validity Not Before: Dec 23 06:50:17 2025 GMT Not After : Dec 30 06:50:17 2025 GMT Subject: CN=694a3ba9-02c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2c:6a:f5:2b:87:6b:39:a4:a4:7c:86:67:5d: 82:56:82:0a:ce:6d:fe:74:54:7d:1c:c9:8f:fd:1a: c0:42:35:ad:1e:e3:34:4a:1d:bc:cd:c2:1c:f2:cd: b2:f4:c7:ce:32:ec:3d:bd:c3:da:85:9f:83:d8:6e: 54:3a:6e:b4:61:78:1b:52:3e:e0:58:c1:f7:8b:97: f6:ca:3b:b6:13:2c:65:dd:8f:85:ce:96:61:19:cc: 9a:68:5a:c6:02:e1:2c:c7:a6:a8:f7:5a:8b:f5:84: 63:62:0e:36:1d:57:35:85:37:42:85:b7:51:b1:f7: 8b:fd:f9:35:50:49:5f:93:c9:aa:0c:95:e0:8f:4e: 55:00:51:b2:a2:9c:a3:63:a1:d0:c7:a6:cb:f7:0e: 4f:3c:f0:e5:95:a9:33:1f:03:3f:f9:8b:1e:8d:a9: 83:51:78:8d:ee:e9:2e:fe:66:16:71:9a:22:e9:9c: 25:37:2c:08:e4:a4:b4:48:87:4f:61:a0:47:ae:af: e1:08:86:06:e3:fb:17:68:15:0b:02:6c:49:0b:6c: 1c:f6:79:c7:b4:56:e3:a9:20:53:38:0c:8e:13:83: 73:17:d8:4c:05:11:0d:bc:fc:14:9d:3b:56:ad:34: 6b:31:97:ae:91:2e:7d:f6:6f:0e:18:45:92:c4:c3: 01:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:65:6E:E2:C6:05:EB:43:84:46:03:DA:42:1E:90:2D:AD:DF:35:04 X509v3 Authority Key Identifier: keyid:63:4E:AC:19:B4:AD:4B:2A:4D:41:28:11:5F:9F:55:67:94:CC:75:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y06sGbStSypNQSgRX59VZ5TMdSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:25:90:3b:20:45:7e:12:b3:ff:49:f6:84:0c:f5:27:27:88: fd:94:00:d7:31:20:59:5a:b3:a0:6b:44:38:0d:e6:12:c5:2e: e8:90:d1:1d:df:4a:a0:7d:fc:43:31:df:53:61:16:fd:77:7a: 1d:a1:5a:f4:16:66:b4:0d:c6:db:98:d0:6f:04:c4:17:db:b3: bd:c0:fe:6d:c2:a4:b6:e2:6f:eb:a1:b3:d5:cf:f8:e5:74:03: 61:88:d7:5d:35:42:30:70:9d:7b:ca:4e:63:83:2e:1d:ef:20: f2:2d:43:ef:9e:51:81:ec:ab:0e:7f:4a:8b:98:35:58:33:64: 14:5d:e1:4f:40:3a:26:89:c0:c3:40:d1:2e:ff:d7:1f:e3:4b: 20:00:f3:32:14:78:9a:23:a6:12:20:ee:93:eb:04:49:69:63: 0a:11:7e:95:f5:1b:0e:57:17:b3:2f:70:2f:70:3f:84:ac:b5: 3f:cd:12:81:ec:88:fd:da:b0:6b:0a:e5:ba:ff:76:bb:ca:50: 2e:89:ce:a2:8d:f8:37:d0:14:23:64:8a:71:39:7b:76:23:87: 8a:40:0b:bf:58:a5:92:54:b0:95:57:68:57:f5:24:ce:8d:eb: ef:f9:39:37:ec:c5:c9:86:61:9e:11:31:fb:db:29:d4:01:c8: bc:0c:f5:a1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NDdFRDExMC8GA1UEBRMoNjM0RUFDMTlCNEFENEIyQTRENDEyODExNUY5RjU1Njc5 NENDNzUyMzAeFw0yNTEyMjMwNjUwMTdaFw0yNTEyMzAwNjUwMTdaMBgxFjAUBgNV BAMMDTY5NGEzYmE5LTAyYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9LGr1K4drOaSkfIZnXYJWggrObf50VH0cyY/9GsBCNa0e4zRKHbzNwhzyzbL0 x84y7D29w9qFn4PYblQ6brRheBtSPuBYwfeLl/bKO7YTLGXdj4XOlmEZzJpoWsYC 4SzHpqj3Wov1hGNiDjYdVzWFN0KFt1Gx94v9+TVQSV+TyaoMleCPTlUAUbKinKNj odDHpsv3Dk888OWVqTMfAz/5ix6NqYNReI3u6S7+ZhZxmiLpnCU3LAjkpLRIh09h oEeur+EIhgbj+xdoFQsCbEkLbBz2ece0VuOpIFM4DI4Tg3MX2EwFEQ28/BSdO1at NGsxl66RLn32bw4YRZLEwwE3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUc2Vu4sYF 60OERgPaQh6QLa3fNQQwHwYDVR0jBBgwFoAUY06sGbStSypNQSgRX59VZ5TMdSMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0N0VEL0Q0NzQ2OTFFQ0I4 MDExRjA4NDBGNTQxQ0M0RjlBRTAyL1kwNnNHYlN0U3lwTlFTZ1JYNTlWWjVUTWRT TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWTA2c0diU3RTeXBOUVNnUlg1OVZaNVRNZFNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0 N0VEL0Q0NzQ2OTFFQ0I4MDExRjA4NDBGNTQxQ0M0RjlBRTAyL1kwNnNHYlN0U3lw TlFTZ1JYNTlWWjVUTWRTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADolkDsgRX4Ss/9J9oQM9ScniP2UANcxIFlas6BrRDgN5hLFLuiQ0R3f SqB9/EMx31NhFv13eh2hWvQWZrQNxtuY0G8ExBfbs73A/m3CpLbib+uhs9XP+OV0 A2GI1101QjBwnXvKTmODLh3vIPItQ++eUYHsqw5/SouYNVgzZBRd4U9AOiaJwMNA 0S7/1x/jSyAA8zIUeJojphIg7pPrBElpYwoRfpX1Gw5XF7MvcC9wP4SstT/NEoHs iP3asGsK5br/drvKUC6JzqKN+DfQFCNkinE5e3Yjh4pAC79YpZJUsJVXaFf1JM6N 6+/5OTfsxcmGYZ4RMfvbKdQByLwM9aE= -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:23 2025 by rpki-client