This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft File: y8CtGWWFFkH2YRHo4pAmmKm57YA.mft (raw, json) Hash identifier: KZc+vsB28SADD0OAgDOfcAFceYHgX5140JChBD9Gu0Y= Subject key identifier: F0:CC:39:1D:34:71:5C:4A:38:31:D4:7A:2E:C8:E8:F9:8F:67:29:0E Authority key identifier: CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80 Certificate issuer: /CN=A91C38CC/serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft Manifest number: 015D Signing time: Tue 23 Dec 2025 03:11:47 +0000 Manifest this update: Tue 23 Dec 2025 03:11:46 +0000 Manifest next update: Tue 30 Dec 2025 03:11:46 +0000 Files and hashes: 1: y8CtGWWFFkH2YRHo4pAmmKm57YA.crl (hash: KZJlmIPey0djJUd2ILhRmy3OzaNcw3F8RjEYVQf9icY=) 2: CA2A06D6D5E511EE9B319A12C4F9AE02.roa (hash: 1oH4ItbHmVm/1fEeraEE8P2kGDhaFGfTWlutWFwmvbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C38CC, serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80 Validity Not Before: Dec 23 03:11:46 2025 GMT Not After : Dec 30 03:11:46 2025 GMT Subject: CN=694a0873-822a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ff:95:e3:c2:72:70:92:d6:ed:e5:fb:87:07: 47:54:ed:4f:5e:81:4a:a8:0c:26:7f:94:20:de:03: 7f:4d:a3:43:57:23:be:a1:e9:03:95:60:c9:12:25: 1a:ec:75:97:3e:d7:d6:ef:57:36:af:cd:cb:d6:a6: 0c:d8:78:0d:09:25:56:c4:76:29:87:5f:25:73:38: 5e:55:2c:a7:a7:d3:02:57:e7:34:f4:ad:a2:0b:c3: bf:a0:38:d1:98:aa:f7:51:fe:f3:a6:25:ff:96:1f: bf:4a:2f:e0:5b:4d:36:52:2b:b6:a5:f2:e8:42:43: 8b:96:f1:4b:0a:60:ba:17:b5:ff:8f:4b:80:96:76: 2a:d9:a6:a4:2d:82:60:ef:0d:29:cb:01:03:9a:e3: 79:0e:45:d7:2d:fd:e7:c7:22:a0:ff:4d:91:8a:0d: 2d:d5:71:e1:0e:02:5b:5f:f0:11:49:dd:1d:f5:0d: 99:84:2e:45:ec:01:a2:6b:77:3b:a1:46:85:68:59: e4:38:38:01:96:d2:25:ac:7c:fc:03:4b:c0:44:ec: 0f:4a:92:11:0f:67:b3:d7:43:b9:2b:c6:8c:61:1f: fc:71:85:af:e6:cd:44:48:ed:9c:86:3d:89:fd:9f: ca:f9:34:2b:60:70:c8:27:0c:8d:5d:2e:d6:a4:c3: 7e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CC:39:1D:34:71:5C:4A:38:31:D4:7A:2E:C8:E8:F9:8F:67:29:0E X509v3 Authority Key Identifier: keyid:CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:a2:19:9a:f6:8c:5b:bc:43:10:83:de:c4:9e:b3:22:c9:7a: e9:6c:32:42:28:89:12:33:03:31:e5:66:29:c3:18:11:93:80: 2e:9b:14:a0:25:fa:c2:05:a2:21:18:88:34:78:91:6d:82:5e: 23:76:d8:5a:f3:3e:14:97:07:09:85:d6:30:b4:b7:53:f6:6b: ce:01:4c:4e:f8:13:a3:b1:bf:98:51:4e:e1:54:14:38:c1:38: 84:7b:77:23:8c:fd:82:f1:24:c7:fa:a4:0e:18:fe:28:5e:4b: 0c:8e:e6:23:78:8b:8a:9a:87:1c:60:b8:d3:bb:18:1f:7e:80: a4:75:d3:19:3c:05:22:2b:15:69:e9:4f:37:b9:7c:42:ad:0b: a5:49:7a:7a:6d:42:c4:b8:58:2e:fd:e1:ec:64:c8:5c:aa:ec: c0:b3:78:98:94:c3:e8:3c:d8:64:c1:2a:3e:f0:dc:80:76:3e: f6:f4:72:92:3a:a8:50:f8:fd:36:d4:24:e2:1a:70:cd:99:ef: 99:ab:7e:a2:1e:a6:bb:df:df:6c:82:21:1f:63:11:97:55:24: 99:ea:a6:fa:bf:9f:d2:be:1b:51:df:b1:35:00:a9:25:16:3d: 4d:8a:24:03:a6:3a:df:1e:b4:79:3c:88:54:f5:0f:95:98:ac: f6:47:d4:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM4Q0MxMTAvBgNVBAUTKENCQzBBRDE5NjU4NTE2NDFGNjYxMTFFOEUyOTAyNjk4 QTlCOUVEODAwHhcNMjUxMjIzMDMxMTQ2WhcNMjUxMjMwMDMxMTQ2WjAYMRYwFAYD VQQDDA02OTRhMDg3My04MjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5P+V48JycJLW7eX7hwdHVO1PXoFKqAwmf5Qg3gN/TaNDVyO+oekDlWDJEiUa 7HWXPtfW71c2r83L1qYM2HgNCSVWxHYph18lczheVSynp9MCV+c09K2iC8O/oDjR mKr3Uf7zpiX/lh+/Si/gW002Uiu2pfLoQkOLlvFLCmC6F7X/j0uAlnYq2aakLYJg 7w0pywEDmuN5DkXXLf3nxyKg/02Rig0t1XHhDgJbX/ARSd0d9Q2ZhC5F7AGia3c7 oUaFaFnkODgBltIlrHz8A0vAROwPSpIRD2ez10O5K8aMYR/8cYWv5s1ESO2chj2J /Z/K+TQrYHDIJwyNXS7WpMN+JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDMOR00 cVxKODHUei7I6PmPZykOMB8GA1UdIwQYMBaAFMvArRllhRZB9mER6OKQJpipue2A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzhDQy8zQUM1N0M4Q0Q1 RTUxMUVFQjc3OTIyM0VDNEY5QUUwMi95OEN0R1dXRkZrSDJZUkhvNHBBbW1LbTU3 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k4Q3RHV1dGRmtIMllSSG80cEFtbUttNTdZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzhDQy8zQUM1N0M4Q0Q1RTUxMUVFQjc3OTIyM0VDNEY5QUUwMi95OEN0R1dXRkZr SDJZUkhvNHBBbW1LbTU3WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUohma9oxbvEMQg97EnrMiyXrpbDJCKIkSMwMx5WYpwxgRk4AumxSg JfrCBaIhGIg0eJFtgl4jdtha8z4UlwcJhdYwtLdT9mvOAUxO+BOjsb+YUU7hVBQ4 wTiEe3cjjP2C8STH+qQOGP4oXksMjuYjeIuKmoccYLjTuxgffoCkddMZPAUiKxVp 6U83uXxCrQulSXp6bULEuFgu/eHsZMhcquzAs3iYlMPoPNhkwSo+8NyAdj729HKS OqhQ+P021CTiGnDNme+Zq36iHqa7399sgiEfYxGXVSSZ6qb6v5/SvhtR37E1AKkl Fj1NiiQDpjrfHrR5PIhU9Q+VmKz2R9S7 -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:54 2025 by rpki-client