This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft File: zyFayRHKpSBlx-xKx5V4NTgr4-0.mft (raw, json) Hash identifier: jYEVVdlBA6gT6t8vPaqOHAJF+uqnunKCRZgmZvZnsgw= Subject key identifier: 4D:49:6E:1C:FC:5C:67:23:BE:E6:20:DC:83:64:47:55:FB:C9:C6:3D Authority key identifier: CF:21:5A:C9:11:CA:A5:20:65:C7:EC:4A:C7:95:78:35:38:2B:E3:ED Certificate issuer: /CN=A91BF2DB/serialNumber=CF215AC911CAA52065C7EC4AC7957835382BE3ED Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft Manifest number: 0A Signing time: Wed 03 Dec 2025 06:10:17 +0000 Manifest this update: Wed 03 Dec 2025 06:10:16 +0000 Manifest next update: Wed 10 Dec 2025 06:10:16 +0000 Files and hashes: 1: zyFayRHKpSBlx-xKx5V4NTgr4-0.crl (hash: Ou3KqbMALG1vPQPvBTc3Rjuyp6V2XPX508PCLU/NxfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.crl rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF2DB, serialNumber=CF215AC911CAA52065C7EC4AC7957835382BE3ED Validity Not Before: Dec 3 06:10:16 2025 GMT Not After : Dec 10 06:10:16 2025 GMT Subject: CN=692fd449-7502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:d6:b2:e5:b2:2e:21:d7:17:3f:80:1d:e9: c0:ce:2c:84:62:f7:7d:58:14:b4:a3:8f:0f:99:83: a5:45:6b:23:f2:b0:ea:f8:fc:64:9e:6b:2d:a4:88: 85:62:60:d2:fb:36:32:a2:7a:86:ac:e0:c4:ad:59: fb:ca:0a:db:87:cc:9b:2c:cb:74:e1:fd:fa:0f:f5: 46:e8:02:35:00:86:bb:7c:21:c9:a0:87:6b:3b:10: 44:9a:b0:6b:b4:50:c6:87:c8:af:18:2d:a6:fc:f9: be:ca:d0:c8:2f:7e:ed:5d:ad:b5:f2:d6:ae:e9:a3: 1f:3b:81:33:d4:b5:71:a6:cc:48:14:af:07:ed:82: d5:85:26:09:a4:cb:a8:8f:4c:82:3c:0e:3d:55:fa: 5b:77:a5:12:35:35:7d:79:37:01:c6:29:01:eb:d2: 6b:9b:9a:00:2c:5c:c7:a9:0d:1b:71:b9:a2:67:ca: 38:41:32:97:1d:42:88:f2:04:ab:7a:fd:d3:7c:37: a5:73:ce:a8:97:bd:e5:73:4a:9b:1f:48:15:68:c1: ad:cd:a1:9d:ee:2a:c5:a3:39:cd:b0:54:42:8d:54: f3:da:2f:1f:66:63:8b:0d:8a:2f:1e:80:fe:d5:6b: e1:26:41:52:e2:78:6f:e0:12:85:26:de:4d:46:7d: 96:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:49:6E:1C:FC:5C:67:23:BE:E6:20:DC:83:64:47:55:FB:C9:C6:3D X509v3 Authority Key Identifier: keyid:CF:21:5A:C9:11:CA:A5:20:65:C7:EC:4A:C7:95:78:35:38:2B:E3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:0e:b3:87:29:5c:6e:c2:52:f2:7c:e3:17:7c:10:76:d6:75: 20:d3:6a:17:6f:e7:88:c2:c1:e5:14:59:7a:78:be:08:74:cb: eb:9d:f7:d0:47:c9:78:a9:b3:ea:c1:d8:e7:1e:7a:fb:f9:5f: ac:fe:7f:3e:85:16:83:7b:7e:e5:f2:3a:5e:ec:d9:a1:75:60: 6c:b5:98:0d:e4:fe:69:aa:04:a7:46:32:3c:f5:ea:2f:c0:fb: bb:be:6c:cc:da:6a:11:c1:da:ce:14:67:ca:70:6c:71:a6:a3: 10:a8:30:4b:c2:38:c2:49:f6:6b:96:12:86:1d:a3:af:7d:44: 87:ec:e9:45:7f:34:be:b6:5d:cc:77:d1:02:c1:4e:ce:41:26: 4a:41:ad:65:3a:54:13:05:f2:f4:c8:1f:1d:08:56:df:a4:d0: ae:a6:45:ce:e7:c0:4e:34:8b:3c:28:64:a9:44:88:a5:a3:4d: 19:ea:52:04:48:48:b9:6f:ae:50:03:13:b6:53:27:bc:2e:ae: 15:00:24:08:95:14:be:d6:7f:39:16:08:6e:c3:49:56:17:60: 74:c8:57:94:f7:0e:53:fc:dc:14:09:2e:19:18:ae:a6:9a:99: b1:81:c6:a2:8d:65:92:a7:d1:74:6c:4c:d9:1d:45:25:c7:c3: d6:f6:dc:d8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RjJEQjExMC8GA1UEBRMoQ0YyMTVBQzkxMUNBQTUyMDY1QzdFQzRBQzc5NTc4MzUz ODJCRTNFRDAeFw0yNTEyMDMwNjEwMTZaFw0yNTEyMTAwNjEwMTZaMBgxFjAUBgNV BAMTDTY5MmZkNDQ5LTc1MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1itay5bIuIdcXP4Ad6cDOLIRi931YFLSjjw+Zg6VFayPysOr4/GSeay2kiIVi YNL7NjKieoas4MStWfvKCtuHzJssy3Th/foP9UboAjUAhrt8Icmgh2s7EESasGu0 UMaHyK8YLab8+b7K0Mgvfu1drbXy1q7pox87gTPUtXGmzEgUrwftgtWFJgmky6iP TII8Dj1V+lt3pRI1NX15NwHGKQHr0mubmgAsXMepDRtxuaJnyjhBMpcdQojyBKt6 /dN8N6VzzqiXveVzSpsfSBVowa3NoZ3uKsWjOc2wVEKNVPPaLx9mY4sNii8egP7V a+EmQVLieG/gEoUm3k1GfZbFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTUluHPxc ZyO+5iDcg2RHVfvJxj0wHwYDVR0jBBgwFoAUzyFayRHKpSBlx+xKx5V4NTgr4+0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGMkRCLzBDQTc3RkQ2QzQz NTExRjA4MTM4RjA3REM0RjlBRTAyL3p5RmF5UkhLcFNCbHgteEt4NVY0TlRncjQt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvenlGYXlSSEtwU0JseC14S3g1VjROVGdyNC0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG MkRCLzBDQTc3RkQ2QzQzNTExRjA4MTM4RjA3REM0RjlBRTAyL3p5RmF5UkhLcFNC bHgteEt4NVY0TlRncjQtMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABcOs4cpXG7CUvJ84xd8EHbWdSDTahdv54jCweUUWXp4vgh0y+ud99BH yXips+rB2Oceevv5X6z+fz6FFoN7fuXyOl7s2aF1YGy1mA3k/mmqBKdGMjz16i/A +7u+bMzaahHB2s4UZ8pwbHGmoxCoMEvCOMJJ9muWEoYdo699RIfs6UV/NL62Xcx3 0QLBTs5BJkpBrWU6VBMF8vTIHx0IVt+k0K6mRc7nwE40izwoZKlEiKWjTRnqUgRI SLlvrlADE7ZTJ7wurhUAJAiVFL7WfzkWCG7DSVYXYHTIV5T3DlP83BQJLhkYrqaa mbGBxqKNZZKn0XRsTNkdRSXHw9b23Ng= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:21 2025 by rpki-client