This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft File: YwXctV_RS1x6opSuN8cCdWkvQYA.mft (raw, json) Hash identifier: iGX0PoZXFbbr32EfWO2sVthr5gkOGVKQljL148PLfg0= Subject key identifier: A2:DD:B0:C2:E6:59:C4:00:3E:49:36:03:B8:C3:30:BC:21:07:83:63 Authority key identifier: 63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80 Certificate issuer: /CN=A91A9CD5/serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft Manifest number: E4 Signing time: Sun 21 Dec 2025 04:34:41 +0000 Manifest this update: Sun 21 Dec 2025 04:34:41 +0000 Manifest next update: Sun 28 Dec 2025 04:34:41 +0000 Files and hashes: 1: YwXctV_RS1x6opSuN8cCdWkvQYA.crl (hash: wqWohqJFNeQrr4u1JxqorBCI4cNOwh5zf1mNiQupOkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CD5, serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180 Validity Not Before: Dec 21 04:34:41 2025 GMT Not After : Dec 28 04:34:41 2025 GMT Subject: CN=694778e1-5e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:71:63:1c:67:d6:10:49:16:da:e7:8c:ba:87: 62:68:93:23:7d:22:00:34:14:69:ea:16:8b:b6:55: 11:1e:6a:e1:a8:38:09:1e:12:f3:3e:fe:5f:ff:77: 08:f5:31:33:82:1d:17:bf:d4:55:ef:54:e8:e8:39: 8a:3c:5a:b8:77:04:b4:97:eb:fa:69:d1:fe:8d:cf: 75:56:ce:47:a4:0d:99:f6:c9:54:69:55:83:03:3a: 48:0e:99:57:26:8a:d1:22:69:9f:e1:c7:74:2b:3a: 27:bc:bc:f3:91:ac:93:04:a3:9e:1b:28:23:44:5f: a6:d4:00:6b:10:78:0a:9d:e8:d5:88:6f:3b:cf:28: c4:b3:3b:6a:e5:81:1a:c7:9b:be:74:df:10:b4:30: 97:3d:d2:01:25:72:5c:09:30:78:38:bb:09:e5:87: b3:54:fe:4f:76:4f:dc:f5:96:55:4f:a8:70:ca:2a: 1e:17:01:ee:f2:c4:8f:95:fe:b4:54:f8:36:c7:ce: 0c:4e:72:6e:4c:28:41:8e:66:1c:61:25:c4:69:e3: 0f:2d:08:bd:b3:f2:1f:c4:e4:1d:1d:dc:72:44:3d: d9:b0:08:68:32:99:4f:45:3f:1c:1c:2f:cf:e8:68: f4:73:a3:bf:30:15:11:66:9c:28:1f:27:8e:8e:6e: 1c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DD:B0:C2:E6:59:C4:00:3E:49:36:03:B8:C3:30:BC:21:07:83:63 X509v3 Authority Key Identifier: keyid:63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:63:b2:7f:31:b6:79:44:0d:48:83:0b:3d:c0:d6:c6:8d:f1: ed:04:8e:37:ab:0a:db:13:b6:bc:ee:c9:71:36:c2:33:09:03: 88:06:35:68:20:0a:57:e8:49:37:33:49:3d:dd:6c:78:41:67: fc:39:61:e4:91:d6:36:bb:cf:fe:80:5a:0e:70:8c:63:f1:a6: 95:58:19:8e:98:f8:51:be:0f:91:32:16:cd:7c:7a:fd:8f:9c: 2a:3b:2d:2c:54:d2:0d:51:5b:f7:35:2d:a0:85:99:43:53:25: b9:33:7e:a1:1b:3c:40:a8:91:b3:bb:4d:5d:4c:24:2d:3c:8a: 82:16:8f:0b:32:a0:bf:0c:6b:bd:91:8d:3b:db:95:b1:76:46: c4:9c:d4:24:1e:e1:45:ae:4d:0f:2b:0e:29:e7:0d:b9:a0:56: 47:52:78:ce:bb:03:bd:c9:bd:ba:3c:45:ef:dc:95:23:a4:dc: 71:85:0f:9b:66:18:58:7f:e6:2c:7d:45:4e:86:65:46:fa:b9: 90:5b:4e:05:9e:85:bc:89:60:ad:23:aa:4c:a7:e5:bc:6d:48: e7:53:87:31:b7:78:7d:58:07:42:bf:17:e9:8d:f0:21:00:8c: ea:0c:84:88:a2:ad:cf:2b:6b:fa:5b:14:fc:ee:cf:84:3e:59: bd:95:1a:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlDRDUxMTAvBgNVBAUTKDYzMDVEQ0I1NUZEMTRCNUM3QUEyOTRBRTM3QzcwMjc1 NjkyRjQxODAwHhcNMjUxMjIxMDQzNDQxWhcNMjUxMjI4MDQzNDQxWjAYMRYwFAYD VQQDDA02OTQ3NzhlMS01ZTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2nFjHGfWEEkW2ueMuodiaJMjfSIANBRp6haLtlURHmrhqDgJHhLzPv5f/3cI 9TEzgh0Xv9RV71To6DmKPFq4dwS0l+v6adH+jc91Vs5HpA2Z9slUaVWDAzpIDplX JorRImmf4cd0KzonvLzzkayTBKOeGygjRF+m1ABrEHgKnejViG87zyjEsztq5YEa x5u+dN8QtDCXPdIBJXJcCTB4OLsJ5YezVP5Pdk/c9ZZVT6hwyioeFwHu8sSPlf60 VPg2x84MTnJuTChBjmYcYSXEaeMPLQi9s/IfxOQdHdxyRD3ZsAhoMplPRT8cHC/P 6Gj0c6O/MBURZpwoHyeOjm4cjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLdsMLm WcQAPkk2A7jDMLwhB4NjMB8GA1UdIwQYMBaAFGMF3LVf0UtceqKUrjfHAnVpL0GA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUNENS83QTlBMjUxMDdG RUYxMUVGQTgyREY2MzlDNEY5QUUwMi9Zd1hjdFZfUlMxeDZvcFN1TjhjQ2RXa3ZR WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l3WGN0Vl9SUzF4Nm9wU3VOOGNDZFdrdlFZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUNENS83QTlBMjUxMDdGRUYxMUVGQTgyREY2MzlDNEY5QUUwMi9Zd1hjdFZfUlMx eDZvcFN1TjhjQ2RXa3ZRWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANY7J/MbZ5RA1Igws9wNbGjfHtBI43qwrbE7a87slxNsIzCQOIBjVo IApX6Ek3M0k93Wx4QWf8OWHkkdY2u8/+gFoOcIxj8aaVWBmOmPhRvg+RMhbNfHr9 j5wqOy0sVNINUVv3NS2ghZlDUyW5M36hGzxAqJGzu01dTCQtPIqCFo8LMqC/DGu9 kY0725WxdkbEnNQkHuFFrk0PKw4p5w25oFZHUnjOuwO9yb26PEXv3JUjpNxxhQ+b ZhhYf+YsfUVOhmVG+rmQW04FnoW8iWCtI6pMp+W8bUjnU4cxt3h9WAdCvxfpjfAh AIzqDISIoq3PK2v6WxT87s+EPlm9lRq2 -----END CERTIFICATE-----Generated at Sun Dec 21 21:33:04 2025 by rpki-client