This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft File: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft (raw, json) Hash identifier: ZW9ddZZYHbeFMMv9A68HBfVSxn4MlFTaeJ6kGME2tgU= Subject key identifier: AD:C2:CB:0F:B6:22:F0:FD:6F:8D:3E:E3:90:C3:BB:1F:FA:C7:8E:84 Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 Certificate issuer: /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Certificate serial: 31DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft Manifest number: 31C2 Signing time: Mon 22 Dec 2025 15:18:03 +0000 Manifest this update: Mon 22 Dec 2025 15:18:03 +0000 Manifest next update: Mon 29 Dec 2025 15:18:03 +0000 Files and hashes: 1: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl (hash: SGwwF0K+pnjtWVgbFSV9+tnCMBnfabdpCM/BaWi6h5U=) 2: 31CCE602BCE311EA953FBB5EC4F9AE02.roa (hash: 4L/QBsPDgl5EFK4nBoxi1+onb9ozFugWEl6aDf8ffAI=) 3: 33036E24BCE311EA953FBB5EC4F9AE02.roa (hash: XqVyekJEjEzuH8hLRjew+hAKZkF1o9oKv8NocJP1RLE=) 4: 32538B4EBCE311EA953FBB5EC4F9AE02.roa (hash: /EM/vo0t7hxhR1+u4hOK5kv/a5vaIBeuI2TOpMQ2J6U=) 5: 33B0CCAEBCE311EA953FBB5EC4F9AE02.roa (hash: ErhPkGRbX8uOsiv8BWxLJU0CPTjQbpalIipsBEye//M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12762 (0x31da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1461, serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Validity Not Before: Dec 22 15:18:03 2025 GMT Not After : Dec 29 15:18:03 2025 GMT Subject: CN=6949612b-75a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:60:d7:60:ec:83:12:a2:f7:c0:1b:9b:75:72: 12:cc:af:07:b3:e0:b5:20:3c:fd:38:79:7d:7c:de: 6e:d6:61:53:97:02:e4:00:55:76:18:f1:b8:84:c0: 3d:15:a1:79:3a:e1:d7:e5:d1:6b:b0:67:54:c2:d9: 5f:22:e0:da:91:49:3c:97:9c:94:c5:4d:e8:9b:8b: 5d:d9:a8:b7:e0:a3:7b:97:95:16:4e:04:e8:50:a0: 17:2b:f1:37:7b:2a:dd:9c:9e:5f:ac:1f:15:53:7d: 4a:1f:88:a1:d4:80:21:22:93:be:96:7c:5c:00:98: be:d0:44:6f:06:2a:61:ae:f9:a2:cd:dd:31:57:48: 0d:0e:fb:d2:9a:f2:88:d5:d4:85:39:8e:50:cc:7b: 22:5d:ac:8b:e3:60:0a:9f:89:49:05:51:80:a5:d8: 3a:f9:ce:55:c5:1c:95:b8:cd:bb:94:d4:8f:ee:3b: 77:9e:48:fa:3c:5c:e6:2a:ed:30:56:ab:87:ab:70: dd:66:6c:62:25:2c:b9:0f:b8:55:56:ab:8c:31:c4: ca:dc:3e:59:2d:66:d0:84:b5:6d:4d:bd:c5:db:e3: b2:9f:1e:17:d8:d8:3b:a1:01:2b:64:f2:b9:75:05: a7:17:13:fc:7a:ba:83:84:6a:ce:fd:e4:47:85:bf: 37:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C2:CB:0F:B6:22:F0:FD:6F:8D:3E:E3:90:C3:BB:1F:FA:C7:8E:84 X509v3 Authority Key Identifier: keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:42:d7:6b:e4:a1:20:08:05:6a:c8:2a:fb:e1:dc:ea:bc:97: 0a:48:cc:95:56:9f:28:e2:f7:81:81:6f:5b:3b:72:55:37:c1: 4c:0d:0c:fb:2f:da:84:00:ec:2c:ef:cb:fc:5a:66:43:3f:07: 0f:6b:8c:32:ec:15:2e:9a:87:0d:ec:6f:27:19:aa:cf:2a:8f: 9a:b0:c8:c6:bd:2a:d4:61:71:ec:f8:21:e1:dd:f3:80:60:6c: c3:65:0e:40:73:d7:0a:27:e8:e0:fc:d3:ac:65:06:52:72:13: 41:36:af:17:1c:9f:3e:be:58:5d:26:90:cc:2e:2f:c2:48:62: 7d:87:f3:c0:16:e0:e3:a8:58:3f:7c:8a:9c:54:57:18:9a:b5: e5:cc:46:20:12:62:7c:28:fb:08:ca:d3:c5:67:47:08:74:83: f1:8c:4d:bd:91:98:70:5d:6b:ad:94:5e:e9:20:0d:84:00:14: d8:eb:f5:66:0a:de:41:02:65:07:e3:67:fc:df:de:da:bb:16: 73:fa:c5:2e:68:4e:06:2e:be:b6:83:12:d0:1b:09:dd:b1:90: 13:de:32:a5:ce:f4:e5:91:45:49:61:4e:60:27:3f:6a:cb:b6: 37:5e:91:12:aa:bd:39:74:b5:b5:51:19:9e:6c:16:c8:45:71: 9e:6a:05:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE0NjExMTAvBgNVBAUTKDYzN0VEMTQxRkZFMDI1RkQwNTE5OTQ1Q0VENDhFNzRG OEJEMEY1QzkwHhcNMjUxMjIyMTUxODAzWhcNMjUxMjI5MTUxODAzWjAYMRYwFAYD VQQDDA02OTQ5NjEyYi03NWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2DXYOyDEqL3wBubdXISzK8Hs+C1IDz9OHl9fN5u1mFTlwLkAFV2GPG4hMA9 FaF5OuHX5dFrsGdUwtlfIuDakUk8l5yUxU3om4td2ai34KN7l5UWTgToUKAXK/E3 eyrdnJ5frB8VU31KH4ih1IAhIpO+lnxcAJi+0ERvBiphrvmizd0xV0gNDvvSmvKI 1dSFOY5QzHsiXayL42AKn4lJBVGApdg6+c5VxRyVuM27lNSP7jt3nkj6PFzmKu0w VquHq3DdZmxiJSy5D7hVVquMMcTK3D5ZLWbQhLVtTb3F2+Oynx4X2Ng7oQErZPK5 dQWnFxP8erqDhGrO/eRHhb83LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3Cyw+2 IvD9b40+45DDux/6x46EMB8GA1UdIwQYMBaAFGN+0UH/4CX9BRmUXO1I50+L0PXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTQ2MS9GQ0U5QTY4MEJE RjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pmMEZHWlJjN1VqblQ0dlE5 Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzN1JRZl9nSmYwRkdaUmM3VWpuVDR2UTljay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTQ2MS9GQ0U5QTY4MEJERjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pm MEZHWlJjN1VqblQ0dlE5Y2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVQtdr5KEgCAVqyCr74dzqvJcKSMyVVp8o4veBgW9bO3JVN8FMDQz7 L9qEAOws78v8WmZDPwcPa4wy7BUumocN7G8nGarPKo+asMjGvSrUYXHs+CHh3fOA YGzDZQ5Ac9cKJ+jg/NOsZQZSchNBNq8XHJ8+vlhdJpDMLi/CSGJ9h/PAFuDjqFg/ fIqcVFcYmrXlzEYgEmJ8KPsIytPFZ0cIdIPxjE29kZhwXWutlF7pIA2EABTY6/Vm Ct5BAmUH42f8397auxZz+sUuaE4GLr62gxLQGwndsZAT3jKlzvTlkUVJYU5gJz9q y7Y3XpESqr05dLW1URmebBbIRXGeagWr -----END CERTIFICATE-----Generated at Tue Dec 23 14:32:46 2025 by rpki-client