This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft File: yvogqQGAldIp8KxDkg3NQ6Zr61I.mft (raw, json) Hash identifier: CBOEHFs7raAsE/N3/LRb/qRdofgw8gOu6UyGpBkgjW4= Subject key identifier: DB:AD:C9:B2:C2:EE:64:1E:86:80:B8:53:17:05:9D:72:52:FC:49:D0 Authority key identifier: CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 Certificate issuer: /CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Certificate serial: 11DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft Manifest number: 11B4 Signing time: Wed 10 Dec 2025 16:40:57 +0000 Manifest this update: Wed 10 Dec 2025 16:40:56 +0000 Manifest next update: Wed 17 Dec 2025 16:40:56 +0000 Files and hashes: 1: yvogqQGAldIp8KxDkg3NQ6Zr61I.crl (hash: qBnsGxEOHbMGfmzooS7gD2Og5Irnc9JCzW+u3jlieKQ=) 2: 08BD74841A4F11EA8DFECB86C4F9AE02.roa (hash: 5pPzlX8jdTNFookFj/rSeOJPoKLM49nAfSCOByjLKkM=) 3: B9F821D4462D11EC93DFE63CC4F9AE02.roa (hash: I8lWHibGq7xqWHXndBv/JsEhBfdVBWJiR9FoofIbTMA=) 4: F7ACE748AD3C11EA95DFF369C4F9AE02.roa (hash: eva2CwxKJKJqWQ6I0wp7A0DX5eeMMT63BYKB14R391I=) 5: F6609DDAAD3C11EA95DFF369C4F9AE02.roa (hash: RU5uDzdAkRAS9qZ8SwVPWAXrYZQRzn4OHSyBtdDYzzE=) 6: D3258BFA7AE711EFB4F5E235C4F9AE02.roa (hash: IqcKshpk+qASTKe+nVLkoXyik/TGszfm7PEMyL1PxRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 16:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4570 (0x11da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4FB5, serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Validity Not Before: Dec 10 16:40:56 2025 GMT Not After : Dec 17 16:40:56 2025 GMT Subject: CN=6939a299-3e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:96:19:5d:c0:f1:3c:2f:40:ef:bf:6d:38:84: 53:a1:32:ac:de:cd:95:e6:15:2d:37:29:1a:50:66: 65:ba:45:07:d1:ed:7a:2a:86:a4:df:ee:ba:a4:b8: 3c:4e:4b:df:aa:76:f4:d7:4b:74:80:24:5f:53:ca: 1c:47:a5:38:0d:44:bd:21:8f:75:8d:89:19:aa:ba: cb:9b:64:79:c5:64:e0:15:25:38:bb:3e:7d:56:a6: 68:50:84:9a:ba:e2:3f:c6:85:7e:e8:3b:0a:fe:e4: 74:48:a8:6a:41:02:ce:a5:db:69:34:85:1d:c4:12: 45:17:e3:30:fb:0c:6e:94:14:c9:2d:bc:4c:31:5d: 73:66:2e:42:df:83:5b:a2:9c:31:99:8c:92:90:90: a5:4c:3f:e7:cb:c0:87:9a:b2:67:04:b3:f2:c2:c0: be:03:59:bd:3c:48:c1:c6:9f:00:cf:36:8f:e0:99: ac:bb:33:d0:fb:47:2b:74:da:01:dc:50:a0:6e:00: f3:d6:52:cc:85:57:c2:26:61:30:22:b7:7e:8b:05: e0:75:8b:16:87:33:67:e2:98:d4:3c:89:0d:66:28: 2b:ef:e6:b2:39:fe:55:70:ef:d9:68:71:18:b0:7d: d9:d1:c9:c1:f9:a3:ae:4a:4f:0f:e8:a0:39:e4:40: 6b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AD:C9:B2:C2:EE:64:1E:86:80:B8:53:17:05:9D:72:52:FC:49:D0 X509v3 Authority Key Identifier: keyid:CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b6:3e:b4:ef:5a:03:52:32:50:e7:87:70:fb:49:c1:7d:e5: 4b:16:51:7f:dc:c5:84:e2:d4:3b:94:5b:68:40:0a:03:79:6c: e1:ed:e0:b0:0f:bf:cc:e0:94:18:42:c1:57:3f:35:5a:ba:eb: c6:e3:13:93:a3:1a:97:33:f4:f9:c5:ae:e4:97:83:c7:a2:3d: a4:8f:43:1b:1f:31:53:ce:21:1a:8e:27:e7:85:f7:3d:a1:2d: a6:26:86:64:02:a2:dd:88:ee:17:a2:b4:79:3b:e4:a7:d5:de: a3:b1:cc:b5:38:7d:ce:b3:f1:5e:f3:5a:b8:d0:b9:b0:72:92: 90:28:85:50:c3:40:a2:1f:2c:8c:d4:bd:a7:f5:d5:2d:c4:70: ef:c7:8c:63:4f:99:de:27:0a:d0:c6:fe:ac:da:be:ce:60:55: 62:e5:47:b2:15:dd:e4:76:0d:f6:12:30:c6:f7:bd:b3:94:0e: 56:9a:d2:1b:fc:3c:4b:8b:90:da:fa:89:31:50:4e:6c:07:b9: 3e:43:58:68:74:72:4c:34:a3:b6:ae:01:d6:9b:e8:50:51:f7: 67:05:00:c9:1a:59:60:6a:4e:80:c6:36:60:57:75:4b:e9:35: 68:97:48:89:af:65:ca:11:5b:a0:2b:99:63:e4:34:68:69:55: 4b:2d:54:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGQjUxMTAvBgNVBAUTKENBRkEyMEE5MDE4MDk1RDIyOUYwQUM0MzkyMERDRDQz QTY2QkVCNTIwHhcNMjUxMjEwMTY0MDU2WhcNMjUxMjE3MTY0MDU2WjAYMRYwFAYD VQQDEw02OTM5YTI5OS0zZTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpYZXcDxPC9A779tOIRToTKs3s2V5hUtNykaUGZlukUH0e16Koak3+66pLg8 Tkvfqnb010t0gCRfU8ocR6U4DUS9IY91jYkZqrrLm2R5xWTgFSU4uz59VqZoUISa uuI/xoV+6DsK/uR0SKhqQQLOpdtpNIUdxBJFF+Mw+wxulBTJLbxMMV1zZi5C34Nb opwxmYySkJClTD/ny8CHmrJnBLPywsC+A1m9PEjBxp8AzzaP4JmsuzPQ+0crdNoB 3FCgbgDz1lLMhVfCJmEwIrd+iwXgdYsWhzNn4pjUPIkNZigr7+ayOf5VcO/ZaHEY sH3Z0cnB+aOuSk8P6KA55EBr2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNutybLC 7mQehoC4UxcFnXJS/EnQMB8GA1UdIwQYMBaAFMr6IKkBgJXSKfCsQ5INzUOma+tS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEZCNS9FRjk4N0VFMjA5 RDExMUU5OTU2MDdCNTJDNEY5QUUwMi95dm9ncVFHQWxkSXA4S3hEa2czTlE2WnI2 MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l2b2dxUUdBbGRJcDhLeERrZzNOUTZacjYxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEZCNS9FRjk4N0VFMjA5RDExMUU5OTU2MDdCNTJDNEY5QUUwMi95dm9ncVFHQWxk SXA4S3hEa2czTlE2WnI2MUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdtj6071oDUjJQ54dw+0nBfeVLFlF/3MWE4tQ7lFtoQAoDeWzh7eCw D7/M4JQYQsFXPzVauuvG4xOToxqXM/T5xa7kl4PHoj2kj0MbHzFTziEajifnhfc9 oS2mJoZkAqLdiO4XorR5O+Sn1d6jscy1OH3Os/Fe81q40LmwcpKQKIVQw0CiHyyM 1L2n9dUtxHDvx4xjT5neJwrQxv6s2r7OYFVi5UeyFd3kdg32EjDG972zlA5WmtIb /DxLi5Da+okxUE5sB7k+Q1hodHJMNKO2rgHWm+hQUfdnBQDJGllgak6AxjZgV3VL 6TVol0iJr2XKEVugK5lj5DRoaVVLLVQz -----END CERTIFICATE-----Generated at Fri Dec 12 13:02:50 2025 by rpki-client