This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft File: yDkkRRVKIRRXRo3JJnXGsrycRIs.mft (raw, json) Hash identifier: dmXxMVOyHHu12oNJta7DfC+YWBFJu5oXXmLGV1A6ZMg= Subject key identifier: A5:A9:8D:09:F9:C8:76:7E:58:9F:EB:81:14:E6:D1:62:CF:08:80:E9 Authority key identifier: C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B Certificate issuer: /CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft Manifest number: 01F7 Signing time: Fri 19 Dec 2025 01:43:43 +0000 Manifest this update: Fri 19 Dec 2025 01:43:42 +0000 Manifest next update: Fri 26 Dec 2025 01:43:42 +0000 Files and hashes: 1: yDkkRRVKIRRXRo3JJnXGsrycRIs.crl (hash: WQrWWWsDD7tJOh6zioL4+1OAdGlOOiYkurIXNYdCUQI=) 2: EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa (hash: F7qGiUSXmfTHkG4rLsiz9f3fhRuXMOAIShVR1Seg7DE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7890, serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Validity Not Before: Dec 19 01:43:42 2025 GMT Not After : Dec 26 01:43:42 2025 GMT Subject: CN=6944adcf-64f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:78:2c:aa:1f:1d:a6:63:fe:5e:2d:1d:73:6c: 4e:7b:0e:ce:81:4b:1a:c4:9f:6d:ef:fc:ff:a7:39: 4f:9a:fc:64:db:da:d0:7c:97:ad:5a:96:97:9c:bf: 14:b4:cf:bf:09:26:e7:a6:ed:20:86:98:24:5f:0f: 9e:89:63:5a:ba:aa:c3:a0:1b:68:50:13:d3:35:be: 57:7d:bd:1b:cb:de:dc:c2:d3:fc:40:1f:0e:78:9a: 1b:be:7f:38:f4:e3:49:ed:c1:e7:e6:bf:3c:ae:98: 7a:ab:e3:5e:7f:c3:1f:f8:1a:8f:97:e6:f3:74:24: 62:29:4e:50:82:6d:b5:5a:e7:e0:36:48:2a:12:a5: b6:a7:6f:ac:3b:59:aa:6e:fd:8c:a0:cc:9a:3c:4c: 77:89:54:38:45:0f:33:12:b7:b4:76:2b:7a:48:d2: a9:cb:9a:e3:f6:5b:72:3a:07:16:6c:5d:82:b9:89: 71:da:d2:3d:0b:8b:21:fd:b3:eb:93:0f:16:07:e4: 15:d8:1d:0e:c8:fd:42:87:8e:ea:9e:79:1a:8c:a1: 29:df:68:ab:07:31:68:26:0d:0d:59:7c:43:62:74: bc:b6:4c:78:39:40:d5:6c:fe:c5:d2:0c:cb:b3:ae: b5:9f:33:d3:6d:96:ac:93:47:01:f7:8c:5d:76:50: bf:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A9:8D:09:F9:C8:76:7E:58:9F:EB:81:14:E6:D1:62:CF:08:80:E9 X509v3 Authority Key Identifier: keyid:C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:33:d8:7e:c9:4d:7b:08:0a:65:47:f9:fd:4d:d9:ac:8b:0c: 73:72:15:47:14:6b:8b:ca:13:37:01:59:e8:70:8a:37:ed:59: 51:3e:9d:d0:ab:0f:91:72:10:5e:98:35:42:a6:ed:f0:3d:ea: 34:d4:49:6c:1d:f8:45:6e:39:4e:61:4d:07:1c:a5:62:75:b1: 0b:ff:ab:68:c9:e1:00:1b:45:91:10:93:55:21:53:f2:64:69: dd:a8:42:5e:69:b4:af:0a:5c:ea:ff:f3:8e:5d:9a:93:64:6b: 2a:75:a9:bf:c1:c7:46:26:0e:0b:f6:5f:a7:c6:3e:1b:6a:0e: 9d:df:84:92:3a:88:25:8c:fe:e3:6f:6e:36:67:aa:71:19:13: 22:10:b0:c0:cb:27:d4:02:74:62:f1:64:d7:dc:9b:4b:39:51: a8:d2:3e:72:7d:07:6a:e5:6c:51:55:81:c2:87:15:11:92:69: a1:1e:46:8c:93:9e:63:fc:95:19:1b:90:3f:04:53:c5:5a:19: 1c:5b:8d:fc:d5:c1:57:f9:01:bd:f1:9c:43:df:6c:0d:b9:b8: 20:ee:2a:9b:71:b3:d8:16:ae:43:1d:31:8f:e6:89:59:66:9b: ba:94:60:d4:83:33:a6:28:e5:dc:b7:5d:c9:10:05:54:bc:9a: b1:fd:12:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4OTAxMTAvBgNVBAUTKEM4MzkyNDQ1MTU0QTIxMTQ1NzQ2OERDOTI2NzVDNkIy QkM5QzQ0OEIwHhcNMjUxMjE5MDE0MzQyWhcNMjUxMjI2MDE0MzQyWjAYMRYwFAYD VQQDDA02OTQ0YWRjZi02NGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Xgsqh8dpmP+Xi0dc2xOew7OgUsaxJ9t7/z/pzlPmvxk29rQfJetWpaXnL8U tM+/CSbnpu0ghpgkXw+eiWNauqrDoBtoUBPTNb5Xfb0by97cwtP8QB8OeJobvn84 9ONJ7cHn5r88rph6q+Nef8Mf+BqPl+bzdCRiKU5Qgm21WufgNkgqEqW2p2+sO1mq bv2MoMyaPEx3iVQ4RQ8zEre0dit6SNKpy5rj9ltyOgcWbF2CuYlx2tI9C4sh/bPr kw8WB+QV2B0OyP1Ch47qnnkajKEp32irBzFoJg0NWXxDYnS8tkx4OUDVbP7F0gzL s661nzPTbZask0cB94xddlC/NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWpjQn5 yHZ+WJ/rgRTm0WLPCIDpMB8GA1UdIwQYMBaAFMg5JEUVSiEUV0aNySZ1xrK8nESL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg5MC9BREUxMzE4NkRB REYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lSUlhSbzNKSm5YR3NyeWNS SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEa2tSUlZLSVJSWFJvM0pKblhHc3J5Y1JJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg5MC9BREUxMzE4NkRBREYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lS UlhSbzNKSm5YR3NyeWNSSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7M9h+yU17CAplR/n9TdmsiwxzchVHFGuLyhM3AVnocIo37VlRPp3Q qw+RchBemDVCpu3wPeo01ElsHfhFbjlOYU0HHKVidbEL/6toyeEAG0WREJNVIVPy ZGndqEJeabSvClzq//OOXZqTZGsqdam/wcdGJg4L9l+nxj4bag6d34SSOogljP7j b242Z6pxGRMiELDAyyfUAnRi8WTX3JtLOVGo0j5yfQdq5WxRVYHChxURkmmhHkaM k55j/JUZG5A/BFPFWhkcW4381cFX+QG98ZxD32wNubgg7iqbcbPYFq5DHTGP5olZ Zpu6lGDUgzOmKOXct13JEAVUvJqx/RIp -----END CERTIFICATE-----Generated at Fri Dec 19 10:38:46 2025 by rpki-client