This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft File: yZNZQ2ka0elTZudBwTkwH7f35ts.mft (raw, json) Hash identifier: Kyq/RwCVh/1tVbAJ/olPo1IJn4mOWDQIrsOV4BWg00o= Subject key identifier: 4C:60:89:97:8B:65:3D:DD:03:AE:54:84:A2:E4:2E:50:F6:7F:3F:E7 Authority key identifier: C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB Certificate issuer: /CN=A91A531A/serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB Certificate serial: 07C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft Manifest number: 07BF Signing time: Sat 20 Dec 2025 20:42:05 +0000 Manifest this update: Sat 20 Dec 2025 20:42:04 +0000 Manifest next update: Sat 27 Dec 2025 20:42:04 +0000 Files and hashes: 1: yZNZQ2ka0elTZudBwTkwH7f35ts.crl (hash: NebcEnGdgUoltFiGuJ99uTUhLLl7v9I8ppEPi+9N2jk=) 2: 43C467CA219911EB8F75645EC4F9AE02.roa (hash: 6tZzkzjjo4oBxSeK/R1NOhuzbe0x0nCnZv7oHnkeXMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1989 (0x7c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A531A, serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB Validity Not Before: Dec 20 20:42:04 2025 GMT Not After : Dec 27 20:42:04 2025 GMT Subject: CN=69470a1c-7c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6c:c3:48:34:b0:a7:44:e4:38:0e:e5:16:11: 46:9b:3b:6d:d1:b9:da:4e:07:db:ff:0e:de:a7:4c: 32:31:05:49:ba:d8:f4:d2:27:07:e5:c3:90:74:d3: a5:17:45:8f:a7:ac:44:05:08:f7:8e:7c:d3:00:13: 67:b5:73:41:09:ff:be:36:ea:4d:b6:37:e9:62:dd: 40:06:22:89:31:85:12:cc:05:52:da:75:3c:bd:e8: 49:9e:2c:8a:5b:d3:c2:42:a8:ca:10:9a:50:0e:74: 4a:98:22:ed:70:66:72:61:d0:d9:ac:9b:aa:56:8b: 23:b9:de:50:17:e7:18:7f:a4:7f:45:bc:e6:45:4c: b9:9c:75:40:9e:d3:b4:64:4f:33:37:82:55:6d:22: f5:63:66:8d:52:38:61:93:4a:16:0a:b5:06:05:b8: ec:ce:16:9a:85:89:8e:76:f6:ac:22:a2:50:eb:42: 6b:ac:98:d6:7f:88:62:ee:f5:84:b8:7e:9d:cb:1c: 4e:8f:fb:b7:74:01:c6:6a:83:f7:4d:b7:1f:c4:9e: 6e:f9:b2:f4:d4:e8:e3:6a:f9:3e:99:19:11:d5:99: 09:ce:9f:fd:a8:a5:3f:08:28:6f:95:15:60:66:4b: 85:6e:e1:0a:89:ed:17:ce:20:a4:13:ed:19:7c:da: 74:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:60:89:97:8B:65:3D:DD:03:AE:54:84:A2:E4:2E:50:F6:7F:3F:E7 X509v3 Authority Key Identifier: keyid:C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:da:f7:79:5d:b2:a8:1c:af:94:a4:51:db:33:94:b6:bd:16: cf:80:33:1b:19:56:a2:03:45:8f:7e:57:61:2b:f5:f1:35:81: 20:3a:be:74:90:ec:8e:94:a4:74:ac:cf:5d:df:49:97:8b:0d: 41:bd:7b:96:b2:69:ad:71:46:a6:61:40:70:e2:fa:2b:dd:a8: 11:5c:03:6d:ce:7b:4b:1a:3b:ea:a7:e3:ce:13:46:be:35:97: 27:6c:e4:e3:d2:a4:ef:bb:ad:62:75:a9:2f:fc:09:14:bb:62: 2f:62:c1:d7:ee:af:9a:d4:a4:ed:c5:12:85:0c:9e:5c:1e:61: 36:69:3d:30:3f:8e:8e:0c:e2:b3:dc:fa:b8:40:89:0e:00:5f: 3a:14:f1:a1:7d:b6:83:18:5e:ab:c0:f1:5f:67:ae:ff:a1:bb: 53:da:f6:ab:0b:f5:09:b1:82:1a:50:e1:45:b8:b8:15:70:3a: be:4d:00:27:99:e5:85:82:9e:75:f2:62:21:43:a0:63:3d:ec: 98:d6:16:06:9b:e0:67:be:7f:15:3a:23:b9:ae:a8:66:5d:23: b3:e4:4c:f9:2c:ea:93:20:fd:2d:b0:75:29:2f:25:51:89:6e: 11:22:ba:c6:73:1b:60:31:b7:f1:12:13:7b:0b:de:6f:e6:04: b0:76:9b:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMUExMTAvBgNVBAUTKEM5OTM1OTQzNjkxQUQxRTk1MzY2RTc0MUMxMzkzMDFG QjdGN0U2REIwHhcNMjUxMjIwMjA0MjA0WhcNMjUxMjI3MjA0MjA0WjAYMRYwFAYD VQQDDA02OTQ3MGExYy03YzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnGzDSDSwp0TkOA7lFhFGmztt0bnaTgfb/w7ep0wyMQVJutj00icH5cOQdNOl F0WPp6xEBQj3jnzTABNntXNBCf++NupNtjfpYt1ABiKJMYUSzAVS2nU8vehJniyK W9PCQqjKEJpQDnRKmCLtcGZyYdDZrJuqVosjud5QF+cYf6R/RbzmRUy5nHVAntO0 ZE8zN4JVbSL1Y2aNUjhhk0oWCrUGBbjszhaahYmOdvasIqJQ60JrrJjWf4hi7vWE uH6dyxxOj/u3dAHGaoP3TbcfxJ5u+bL01Ojjavk+mRkR1ZkJzp/9qKU/CChvlRVg ZkuFbuEKie0XziCkE+0ZfNp0oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExgiZeL ZT3dA65UhKLkLlD2fz/nMB8GA1UdIwQYMBaAFMmTWUNpGtHpU2bnQcE5MB+39+bb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMxQS8yQkRERkFDRTIx OTcxMUVCQjQ1QjAzNTlDNEY5QUUwMi95Wk5aUTJrYTBlbFRadWRCd1Rrd0g3ZjM1 dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laTlpRMmthMGVsVFp1ZEJ3VGt3SDdmMzV0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMxQS8yQkRERkFDRTIxOTcxMUVCQjQ1QjAzNTlDNEY5QUUwMi95Wk5aUTJrYTBl bFRadWRCd1Rrd0g3ZjM1dHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh2vd5XbKoHK+UpFHbM5S2vRbPgDMbGVaiA0WPfldhK/XxNYEgOr50 kOyOlKR0rM9d30mXiw1BvXuWsmmtcUamYUBw4vor3agRXANtzntLGjvqp+POE0a+ NZcnbOTj0qTvu61idakv/AkUu2IvYsHX7q+a1KTtxRKFDJ5cHmE2aT0wP46ODOKz 3Pq4QIkOAF86FPGhfbaDGF6rwPFfZ67/obtT2varC/UJsYIaUOFFuLgVcDq+TQAn meWFgp518mIhQ6BjPeyY1hYGm+Bnvn8VOiO5rqhmXSOz5Ez5LOqTIP0tsHUpLyVR iW4RIrrGcxtgMbfxEhN7C95v5gSwdpv8 -----END CERTIFICATE-----Generated at Sun Dec 21 00:44:49 2025 by rpki-client