This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft File: ysNNxbjd0zsX7HVcldRdD3YlD6g.mft (raw, json) Hash identifier: K8RhibZ88hUuwv6cies6dwz3FqPGpVDpcVu4hWoktXg= Subject key identifier: 3D:3F:B2:92:3E:80:3E:6E:2E:0C:A0:7A:50:F5:7D:8E:DF:86:B5:10 Authority key identifier: CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8 Certificate issuer: /CN=A91C9B39/serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8 Certificate serial: 023A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft Manifest number: 0236 Signing time: Tue 23 Dec 2025 00:59:08 +0000 Manifest this update: Tue 23 Dec 2025 00:59:08 +0000 Manifest next update: Tue 30 Dec 2025 00:59:08 +0000 Files and hashes: 1: ysNNxbjd0zsX7HVcldRdD3YlD6g.crl (hash: 0iARyQE9RvkTuH4oH+9LGIhwh9CJKd9cz+xWI9TB4kg=) 2: E21DEF607B5E11ED98247D60C4F9AE02.roa (hash: sHBWYK9XVEHZv+A/fyqhHjEvweQybzBfh5wreKa0iZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 570 (0x23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B39, serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8 Validity Not Before: Dec 23 00:59:08 2025 GMT Not After : Dec 30 00:59:08 2025 GMT Subject: CN=6949e95c-3ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:97:48:88:ea:c0:bb:8f:59:99:57:63:98:d2: c2:82:b8:89:ef:78:2b:9a:ae:b2:c4:b7:57:b3:61: 8a:fc:85:58:be:3a:5b:1e:b4:e7:53:54:cd:9f:2c: 03:2b:a9:ef:df:fa:f6:24:52:ce:c0:e6:7f:21:34: 96:09:a6:27:c2:3d:b7:14:67:c1:5f:62:d4:d8:59: 79:a6:52:df:46:a6:08:89:27:65:0e:9f:5d:ff:18: cc:8f:55:0a:4d:e7:b1:a2:a8:90:c4:1e:0b:b6:91: ad:67:64:65:d5:32:28:19:74:aa:f3:e7:8e:09:37: aa:76:3b:fd:ca:9d:95:2d:38:33:7a:38:66:2c:e9: 60:ee:fa:b4:c4:2a:85:a7:0e:1c:e1:9e:ba:e9:b7: 7d:ad:8d:6c:32:a7:c2:68:d2:01:64:65:35:44:e9: b4:97:6a:72:b0:c1:83:84:b7:ff:c9:4e:ed:be:5c: d1:2e:0e:8f:ab:08:3c:6d:3e:99:a6:c5:16:b9:34: 45:3c:b7:53:ad:98:e7:bc:6a:8f:39:71:dc:7e:4d: a2:ed:47:c2:5b:e8:5e:9d:e8:c8:1e:ad:d7:e3:89: e1:df:bc:c2:d1:c8:4e:7b:7a:ea:dc:f3:18:be:6e: 39:67:fd:15:46:c5:b6:e2:0f:aa:86:8f:60:ff:8c: ee:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3F:B2:92:3E:80:3E:6E:2E:0C:A0:7A:50:F5:7D:8E:DF:86:B5:10 X509v3 Authority Key Identifier: keyid:CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:fa:1d:ae:ae:23:01:c0:24:38:0b:87:7b:58:f5:6d:ae:2f: c5:26:f6:d9:7e:d2:89:50:b9:26:d3:b0:bf:b4:d3:ab:1c:57: 56:e9:37:70:69:e5:6e:2b:f5:90:5d:18:f0:25:fa:d7:56:78: 27:ff:85:0c:91:2d:98:b2:c1:af:f8:cd:e6:31:53:a3:d0:6c: c4:e3:32:a9:09:06:1e:fd:08:6a:e6:3b:4d:58:17:62:1d:f5: 29:9d:76:1c:b2:44:a4:63:6c:29:7a:b8:d6:86:45:d1:f5:fa: c1:56:02:de:18:e4:8e:74:0e:69:5f:e8:fc:77:b6:20:bc:c2: 06:14:84:cb:8c:c2:a6:1f:9b:e4:a5:bf:34:be:53:4f:6a:0b: 2d:b8:62:fc:76:dd:73:f8:af:6a:41:78:b2:92:68:d6:92:a6: 6d:f4:a5:4d:91:cd:ad:1b:cd:4c:74:24:87:ec:10:a2:ef:df: 77:70:5e:06:fd:ca:d8:c9:c3:d2:9d:5e:3d:af:51:8e:9e:59: 94:10:ac:06:30:e6:94:e0:74:82:c3:71:c6:5e:9f:f2:4c:d2: c0:fd:66:f6:b1:9e:ae:ec:3b:8b:13:57:21:4b:85:fa:ae:13: eb:72:a3:37:ce:b9:b5:cf:08:f0:f6:97:e0:78:f3:3e:b6:13: 93:03:26:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlCMzkxMTAvBgNVBAUTKENBQzM0REM1QjhEREQzM0IxN0VDNzU1Qzk1RDQ1RDBG NzYyNTBGQTgwHhcNMjUxMjIzMDA1OTA4WhcNMjUxMjMwMDA1OTA4WjAYMRYwFAYD VQQDDA02OTQ5ZTk1Yy0zYWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJdIiOrAu49ZmVdjmNLCgriJ73grmq6yxLdXs2GK/IVYvjpbHrTnU1TNnywD K6nv3/r2JFLOwOZ/ITSWCaYnwj23FGfBX2LU2Fl5plLfRqYIiSdlDp9d/xjMj1UK TeexoqiQxB4LtpGtZ2Rl1TIoGXSq8+eOCTeqdjv9yp2VLTgzejhmLOlg7vq0xCqF pw4c4Z666bd9rY1sMqfCaNIBZGU1ROm0l2pysMGDhLf/yU7tvlzRLg6Pqwg8bT6Z psUWuTRFPLdTrZjnvGqPOXHcfk2i7UfCW+henejIHq3X44nh37zC0chOe3rq3PMY vm45Z/0VRsW24g+qho9g/4zuqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0/spI+ gD5uLgygelD1fY7fhrUQMB8GA1UdIwQYMBaAFMrDTcW43dM7F+x1XJXUXQ92JQ+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUIzOS9CNjE1RDBCQzdC NUExMUVEQTVFM0NBNjZDNEY5QUUwMi95c05OeGJqZDB6c1g3SFZjbGRSZEQzWWxE NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lzTk54YmpkMHpzWDdIVmNsZFJkRDNZbEQ2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUIzOS9CNjE1RDBCQzdCNUExMUVEQTVFM0NBNjZDNEY5QUUwMi95c05OeGJqZDB6 c1g3SFZjbGRSZEQzWWxENmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX+h2uriMBwCQ4C4d7WPVtri/FJvbZftKJULkm07C/tNOrHFdW6Tdw aeVuK/WQXRjwJfrXVngn/4UMkS2YssGv+M3mMVOj0GzE4zKpCQYe/Qhq5jtNWBdi HfUpnXYcskSkY2wperjWhkXR9frBVgLeGOSOdA5pX+j8d7YgvMIGFITLjMKmH5vk pb80vlNPagstuGL8dt1z+K9qQXiykmjWkqZt9KVNkc2tG81MdCSH7BCi7993cF4G /crYycPSnV49r1GOnlmUEKwGMOaU4HSCw3HGXp/yTNLA/Wb2sZ6u7DuLE1chS4X6 rhPrcqM3zrm1zwjw9pfgePM+thOTAyZQ -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:43 2025 by rpki-client