This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft File: YGHkRpDveLCtqNg1DRHKngGUnBQ.mft (raw, json) Hash identifier: OMzrrKiwAI9G3SkljA9UH0dxYudJiXJPfHdDEaVqFa0= Subject key identifier: C8:61:2A:42:97:53:04:56:31:78:41:85:8F:BE:65:F0:B1:D3:DE:BA Authority key identifier: 60:61:E4:46:90:EF:78:B0:AD:A8:D8:35:0D:11:CA:9E:01:94:9C:14 Certificate issuer: /CN=A91BFE76/serialNumber=6061E44690EF78B0ADA8D8350D11CA9E01949C14 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGHkRpDveLCtqNg1DRHKngGUnBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft Manifest number: 1B Signing time: Tue 23 Dec 2025 06:39:24 +0000 Manifest this update: Tue 23 Dec 2025 06:39:23 +0000 Manifest next update: Tue 30 Dec 2025 06:39:23 +0000 Files and hashes: 1: YGHkRpDveLCtqNg1DRHKngGUnBQ.crl (hash: hEhH/xAkN5iMxLNsoBeuhdcz/t0lIIUz3CG5TpyAQsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.crl rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGHkRpDveLCtqNg1DRHKngGUnBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:39:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE76, serialNumber=6061E44690EF78B0ADA8D8350D11CA9E01949C14 Validity Not Before: Dec 23 06:39:23 2025 GMT Not After : Dec 30 06:39:23 2025 GMT Subject: CN=694a391c-64b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3d:1b:de:5e:82:91:bb:dc:3a:51:9e:af:54: c9:9a:8d:a8:02:a8:cb:c6:c3:b6:88:2f:fd:78:97: 4a:0d:15:22:fe:97:e2:f0:2b:2b:1b:02:ce:e3:9c: d5:2f:c7:5e:fd:d5:61:63:76:57:25:ec:a0:54:06: c7:4e:dd:60:2d:d4:64:08:78:c8:00:ee:e9:97:d0: cc:d8:04:3d:8e:ba:63:a9:d2:da:57:6d:61:5e:34: 4f:81:d6:2f:8f:b4:89:3c:9c:bc:38:68:fe:bb:0c: 21:83:d9:3b:d0:0a:5a:4f:1d:e4:86:c1:c7:da:90: 9d:59:29:c2:31:50:6b:c0:cf:77:15:6b:9a:01:f6: 60:12:7c:a2:2d:90:d8:a9:f2:ee:04:db:b0:25:0a: 20:dc:9a:9a:21:83:6e:23:0c:13:0a:2a:bc:1b:ec: 05:49:30:5b:ca:89:4a:ed:ae:94:db:3a:9f:fb:79: fb:11:bc:06:0c:1f:bb:e0:18:a1:49:3f:57:77:60: f3:c9:57:c8:84:0d:de:8c:61:50:c0:9c:31:bc:14: a7:e1:68:24:47:fe:b6:de:9f:06:6b:ad:45:16:08: 3a:96:f0:41:3c:64:c0:be:a9:e5:c1:e7:05:fb:8f: 08:20:25:66:3a:b4:8c:66:15:e6:b1:9b:4c:53:77: bf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:61:2A:42:97:53:04:56:31:78:41:85:8F:BE:65:F0:B1:D3:DE:BA X509v3 Authority Key Identifier: keyid:60:61:E4:46:90:EF:78:B0:AD:A8:D8:35:0D:11:CA:9E:01:94:9C:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGHkRpDveLCtqNg1DRHKngGUnBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:14:b7:37:6d:7a:a4:ca:5d:f0:8f:03:4b:ef:94:e2:e2:5a: 68:14:82:6e:c7:c4:c6:09:db:64:dd:e8:23:5a:73:ae:60:0e: 6d:77:a5:a4:09:86:5f:b8:27:58:f9:b4:b5:ed:cf:05:bc:1f: bf:de:5b:47:4f:ac:c8:e6:72:54:b7:5a:6d:76:ef:21:6b:10: c2:7c:b5:68:12:15:fc:c6:72:a8:6f:59:f1:33:83:1e:c6:84: 5c:73:5d:50:6b:f3:7f:9e:cd:65:da:82:1a:9f:ad:58:38:4d: c9:5c:ed:ee:ec:b7:da:25:c3:8c:05:7c:c6:96:99:0b:09:ce: 41:12:2a:ba:5b:bc:c3:c4:db:bb:27:7f:2e:4a:38:6f:dc:81: 21:75:6b:99:2e:5b:86:ce:a2:6c:80:90:bc:da:fa:95:0a:13: 5b:e0:a9:ee:d4:1b:1b:0d:02:19:c8:16:80:11:6c:b0:e8:22: f6:da:f8:1a:30:9b:1b:58:e5:43:62:af:76:dd:78:66:c2:c1: 9f:2d:a5:b0:a6:36:5b:71:ac:d2:19:3d:3d:c5:f5:b0:6b:fe: 46:8d:2b:18:c9:d7:6b:8e:b7:87:62:86:f9:4a:f7:d8:1f:69: 86:05:e1:36:2e:c0:45:49:30:54:a0:59:c7:31:d6:cc:0d:f3: 97:f5:57:37 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RkU3NjExMC8GA1UEBRMoNjA2MUU0NDY5MEVGNzhCMEFEQThEODM1MEQxMUNBOUUw MTk0OUMxNDAeFw0yNTEyMjMwNjM5MjNaFw0yNTEyMzAwNjM5MjNaMBgxFjAUBgNV BAMMDTY5NGEzOTFjLTY0YjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDPRveXoKRu9w6UZ6vVMmajagCqMvGw7aIL/14l0oNFSL+l+LwKysbAs7jnNUv x1791WFjdlcl7KBUBsdO3WAt1GQIeMgA7umX0MzYBD2OumOp0tpXbWFeNE+B1i+P tIk8nLw4aP67DCGD2TvQClpPHeSGwcfakJ1ZKcIxUGvAz3cVa5oB9mASfKItkNip 8u4E27AlCiDcmpohg24jDBMKKrwb7AVJMFvKiUrtrpTbOp/7efsRvAYMH7vgGKFJ P1d3YPPJV8iEDd6MYVDAnDG8FKfhaCRH/rbenwZrrUUWCDqW8EE8ZMC+qeXB5wX7 jwggJWY6tIxmFeaxm0xTd7/hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyGEqQpdT BFYxeEGFj75l8LHT3rowHwYDVR0jBBgwFoAUYGHkRpDveLCtqNg1DRHKngGUnBQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGRTc2L0UzMzNFQzJFQjky NzExRjBCODBFQzQ1RUM0RjlBRTAyL1lHSGtScER2ZUxDdHFOZzFEUkhLbmdHVW5C US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWUdIa1JwRHZlTEN0cU5nMURSSEtuZ0dVbkJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG RTc2L0UzMzNFQzJFQjkyNzExRjBCODBFQzQ1RUM0RjlBRTAyL1lHSGtScER2ZUxD dHFOZzFEUkhLbmdHVW5CUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJcUtzdteqTKXfCPA0vvlOLiWmgUgm7HxMYJ22Td6CNac65gDm13paQJ hl+4J1j5tLXtzwW8H7/eW0dPrMjmclS3Wm127yFrEMJ8tWgSFfzGcqhvWfEzgx7G hFxzXVBr83+ezWXaghqfrVg4Tclc7e7st9olw4wFfMaWmQsJzkESKrpbvMPE27sn fy5KOG/cgSF1a5kuW4bOomyAkLza+pUKE1vgqe7UGxsNAhnIFoARbLDoIvba+Bow mxtY5UNir3bdeGbCwZ8tpbCmNltxrNIZPT3F9bBr/kaNKxjJ12uOt4dihvlK99gf aYYF4TYuwEVJMFSgWccx1swN85f1Vzc= -----END CERTIFICATE-----Generated at Wed Dec 24 15:45:02 2025 by rpki-client