This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft File: yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft (raw, json) Hash identifier: cLvZK50BTKxqxSMZFnF4nE0c7jPKlY48yWYIOjY/UNM= Subject key identifier: 75:6D:4D:08:94:B9:A1:A4:23:DB:22:B2:FE:22:53:82:4E:C8:6A:39 Authority key identifier: C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9 Certificate issuer: /CN=A91CCDF3/serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9 Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft Manifest number: 01D7 Signing time: Tue 09 Dec 2025 00:59:51 +0000 Manifest this update: Tue 09 Dec 2025 00:59:50 +0000 Manifest next update: Tue 16 Dec 2025 00:59:50 +0000 Files and hashes: 1: yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl (hash: 9cNEutuMW+eyE9qcSo1f1XABchJIMns9+FQbzyGEm48=) 2: 851A7AD6FF7F11EDA505D70EC4F9AE02.roa (hash: dYTddJDImyu3rpg7QICAEFzGZsVfww3CPHFdjrscptU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 00:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDF3, serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9 Validity Not Before: Dec 9 00:59:50 2025 GMT Not After : Dec 16 00:59:50 2025 GMT Subject: CN=69377486-a6d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0f:1c:c5:25:70:fb:c9:10:b8:72:10:da:ba: 76:e1:10:fb:1c:ab:51:c8:1c:e8:3d:a9:9e:2a:c0: 9e:e0:dd:81:90:63:3e:74:2d:6b:cb:3a:80:62:ae: c5:26:b8:90:31:c2:27:3f:51:c8:45:73:2d:9d:2f: 71:f1:a8:63:ef:c2:da:bd:79:07:e0:c5:09:ef:eb: 42:64:34:d6:95:17:c6:7e:3e:6d:5e:70:ac:ff:5f: a9:b7:84:d9:4f:79:a7:be:06:ce:d9:36:82:46:57: 43:55:df:f0:c9:d7:09:af:6b:24:4c:30:70:3a:9b: 79:11:53:55:00:40:6f:92:27:b2:72:9c:4b:b6:69: f7:dd:5d:59:3b:29:68:b8:1c:f7:3a:2d:4a:d7:ed: 9d:96:a7:b1:f5:35:55:3d:e2:b6:5c:cf:94:3d:cc: c7:95:20:da:75:86:25:17:76:70:0d:d2:7c:79:66: 7e:a0:22:15:16:e9:a6:e4:e5:68:ae:6b:a4:0a:ef: 44:63:ce:00:e5:4a:7d:20:12:eb:2d:08:05:4e:76: 75:27:8b:a1:f4:7c:45:56:09:70:a7:66:0d:f1:b0: 4a:42:92:19:a3:50:16:a6:2c:64:47:25:3c:81:c5: 61:3f:88:c9:13:89:05:97:e6:20:8f:5f:00:01:7c: a1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6D:4D:08:94:B9:A1:A4:23:DB:22:B2:FE:22:53:82:4E:C8:6A:39 X509v3 Authority Key Identifier: keyid:C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:fd:92:af:5d:be:2e:e3:dc:6d:e4:90:b1:3d:26:e7:ba:55: 4e:84:81:44:03:6b:98:f0:c5:a3:64:5a:87:8f:67:2e:1a:48: 02:67:05:1c:ee:7d:c9:34:ce:28:04:97:fc:4b:b1:ee:b9:b0: 23:c8:41:0e:1a:c2:88:17:23:e9:55:8e:88:c5:f9:1d:81:73: 4d:39:97:ec:46:08:c4:e8:a7:46:97:1d:cb:ff:c5:03:23:d3: 46:0f:54:33:36:7a:7a:db:a2:27:57:e3:65:c1:c7:f7:81:38: 7c:04:f0:ab:be:57:f7:82:d1:34:6a:43:58:14:95:f2:7a:b8: 03:3b:36:8c:fd:49:d6:2b:fb:5d:d9:e6:ba:6b:46:c2:de:05: fe:86:80:6e:89:9a:94:ed:bf:44:70:c2:7d:38:4c:76:d5:c5: c6:ce:d3:71:25:76:17:54:ca:fd:e7:c7:63:ac:03:d5:ca:f5: ab:d4:00:58:ac:b3:8e:de:8c:30:3e:b9:33:14:35:b0:7a:6c: 5c:19:86:65:b0:2a:af:5c:39:81:cb:53:49:be:de:f5:f2:9e: 7d:64:19:60:f1:98:1d:37:42:d6:eb:ca:39:38:c7:84:17:6a: f7:2e:e7:1f:54:e1:9d:32:b1:5d:cd:61:c0:f9:95:55:6f:b0: 1d:bd:f5:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NERjMxMTAvBgNVBAUTKEM5MTVGRDNCRDQ1QjgyMThCOTVGNTczNzQ5RDNBQTQ5 ODAxNkFBQTkwHhcNMjUxMjA5MDA1OTUwWhcNMjUxMjE2MDA1OTUwWjAYMRYwFAYD VQQDEw02OTM3NzQ4Ni1hNmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzg8cxSVw+8kQuHIQ2rp24RD7HKtRyBzoPameKsCe4N2BkGM+dC1ryzqAYq7F JriQMcInP1HIRXMtnS9x8ahj78LavXkH4MUJ7+tCZDTWlRfGfj5tXnCs/1+pt4TZ T3mnvgbO2TaCRldDVd/wydcJr2skTDBwOpt5EVNVAEBvkieycpxLtmn33V1ZOylo uBz3Oi1K1+2dlqex9TVVPeK2XM+UPczHlSDadYYlF3ZwDdJ8eWZ+oCIVFumm5OVo rmukCu9EY84A5Up9IBLrLQgFTnZ1J4uh9HxFVglwp2YN8bBKQpIZo1AWpixkRyU8 gcVhP4jJE4kFl+Ygj18AAXyh2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVtTQiU uaGkI9sisv4iU4JOyGo5MB8GA1UdIwQYMBaAFMkV/TvUW4IYuV9XN0nTqkmAFqqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0RGMy80MkRFNDgzNkZG NzYxMUVEQjg5ODE1NThDNEY5QUUwMi95Ulg5TzlSYmdoaTVYMWMzU2RPcVNZQVdx cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lSWDlPOVJiZ2hpNVgxYzNTZE9xU1lBV3Fxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0RGMy80MkRFNDgzNkZGNzYxMUVEQjg5ODE1NThDNEY5QUUwMi95Ulg5TzlSYmdo aTVYMWMzU2RPcVNZQVdxcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx/ZKvXb4u49xt5JCxPSbnulVOhIFEA2uY8MWjZFqHj2cuGkgCZwUc 7n3JNM4oBJf8S7HuubAjyEEOGsKIFyPpVY6IxfkdgXNNOZfsRgjE6KdGlx3L/8UD I9NGD1QzNnp626InV+Nlwcf3gTh8BPCrvlf3gtE0akNYFJXyergDOzaM/UnWK/td 2ea6a0bC3gX+hoBuiZqU7b9EcMJ9OEx21cXGztNxJXYXVMr958djrAPVyvWr1ABY rLOO3owwPrkzFDWwemxcGYZlsCqvXDmBy1NJvt718p59ZBlg8ZgdN0LW68o5OMeE F2r3LucfVOGdMrFdzWHA+ZVVb7AdvfV0 -----END CERTIFICATE-----Generated at Thu Dec 11 23:13:01 2025 by rpki-client