This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft File: Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft (raw, json) Hash identifier: 4lw3NTQs0OTyku7lrx2/P/lSzK9kjqFhYXmMo9FDkTM= Subject key identifier: EB:06:8E:C9:63:3F:4A:F9:E9:97:28:1E:60:DC:7A:CB:42:F7:18:DE Authority key identifier: 63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A Certificate issuer: /CN=A91D2706/serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A Certificate serial: 079B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft Manifest number: 0794 Signing time: Thu 18 Dec 2025 20:57:41 +0000 Manifest this update: Thu 18 Dec 2025 20:57:41 +0000 Manifest next update: Thu 25 Dec 2025 20:57:41 +0000 Files and hashes: 1: Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl (hash: YXUZblqojCfw8uLqe9LFIQ3qLIm+3DMLJY8LjKCQnos=) 2: 35D4363E330711EB9D3AA60BC4F9AE02.roa (hash: Yh0VpmL2xaNSLKeY9uwOAgkPswKvx9eEvHJvYdloAEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1947 (0x79b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2706, serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A Validity Not Before: Dec 18 20:57:41 2025 GMT Not After : Dec 25 20:57:41 2025 GMT Subject: CN=69446ac5-6550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:76:a0:b6:1a:e2:99:7c:c6:76:29:f2:b6:ea: 63:3e:e7:ac:3d:d8:17:ee:ba:88:26:49:ae:71:92: 85:cd:aa:6f:8d:62:2c:ba:fe:4f:47:25:c2:63:e9: 37:96:4d:40:81:7f:ae:8f:33:f7:4c:00:63:81:44: ab:00:e4:e6:8d:a2:89:f5:99:18:28:97:45:bd:5f: ea:cd:5a:72:fd:1a:f7:8f:69:01:11:42:ca:82:b8: 17:67:87:82:2d:55:0f:30:3d:ba:1d:de:20:e3:35: e5:e9:87:25:23:24:49:13:53:1a:6f:e8:be:e6:f9: 69:79:bc:d3:48:1f:0b:eb:4e:08:3f:53:f6:b6:08: a6:d2:0c:67:43:5e:89:43:5c:3b:e6:21:aa:82:92: e0:ee:0d:3a:1a:8d:fe:7e:93:d4:52:a1:e2:e9:83: 33:a5:d5:78:f4:55:52:ad:fd:e1:b5:1f:8c:9b:63: 52:8c:5d:f5:87:98:30:8b:cf:cf:98:6a:3d:19:a5: 40:5d:4f:b3:a7:a8:2e:19:db:d3:c3:cd:a3:e4:26: e2:e1:bf:d7:b4:db:e6:9a:96:0d:f9:53:0a:a5:72: a3:09:5d:6d:28:ee:6e:cf:ad:11:bc:eb:1c:26:ac: 48:f9:f8:0a:e5:9a:43:a2:d6:84:9d:73:45:e0:54: b9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:06:8E:C9:63:3F:4A:F9:E9:97:28:1E:60:DC:7A:CB:42:F7:18:DE X509v3 Authority Key Identifier: keyid:63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:9b:4b:31:64:b8:ea:ba:52:62:4d:9f:43:26:b4:11:d4:15: 8c:06:0e:d2:95:2f:9d:5f:1e:c8:10:f3:46:46:cb:fe:4c:44: 47:ae:88:97:5a:5b:01:3f:27:18:51:65:30:1c:0a:06:12:61: 90:d3:54:87:10:08:30:a4:56:0c:6b:c9:78:11:45:65:5e:4a: ad:02:4d:cc:9f:de:2a:c4:c6:cc:c1:e4:d1:22:0d:68:d7:9c: 6e:04:3d:bb:f8:71:86:00:40:10:62:11:73:2c:9c:c7:ef:c4: 9b:9e:a3:89:74:2b:0a:fa:5d:ee:82:d6:31:7f:e3:55:87:2a: 1a:2e:f3:d5:26:f5:6f:d7:a6:4d:33:c0:94:e3:1e:08:3a:f1: 2a:56:a9:49:ec:7f:9c:d0:57:5c:51:88:79:f2:23:91:b2:95: 5a:2c:65:73:7c:99:fc:4b:d7:d5:6d:05:8b:7a:8a:9c:f0:91: 68:4b:3c:f7:3b:ea:d0:97:8e:95:27:07:a4:51:cf:a0:37:3b: 64:48:0d:de:7e:2b:d3:35:1c:53:bb:bf:a5:73:ff:9f:aa:c3: 89:18:9d:74:3b:65:f1:92:d9:64:27:06:9d:b9:b9:e6:2f:ad: 45:7b:7e:38:bd:77:4d:52:11:46:7b:2a:5c:84:e4:50:95:47: cd:82:1f:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI3MDYxMTAvBgNVBAUTKDYzOTIzOTA2MzkxN0VFOTJDMDk5RTQ2QUQzNjk2QzJF Q0E3QzUxMEEwHhcNMjUxMjE4MjA1NzQxWhcNMjUxMjI1MjA1NzQxWjAYMRYwFAYD VQQDDA02OTQ0NmFjNS02NTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnagthrimXzGdinytupjPuesPdgX7rqIJkmucZKFzapvjWIsuv5PRyXCY+k3 lk1AgX+ujzP3TABjgUSrAOTmjaKJ9ZkYKJdFvV/qzVpy/Rr3j2kBEULKgrgXZ4eC LVUPMD26Hd4g4zXl6YclIyRJE1Mab+i+5vlpebzTSB8L604IP1P2tgim0gxnQ16J Q1w75iGqgpLg7g06Go3+fpPUUqHi6YMzpdV49FVSrf3htR+Mm2NSjF31h5gwi8/P mGo9GaVAXU+zp6guGdvTw82j5Cbi4b/XtNvmmpYN+VMKpXKjCV1tKO5uz60RvOsc JqxI+fgK5ZpDotaEnXNF4FS5JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsGjslj P0r56ZcoHmDcestC9xjeMB8GA1UdIwQYMBaAFGOSOQY5F+6SwJnkatNpbC7KfFEK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjcwNi8wNEQ0NTdDMjMz MDYxMUVCQTI4MkQzMEFDNEY5QUUwMi9ZNUk1QmprWDdwTEFtZVJxMDJsc0xzcDhV UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k1STVCamtYN3BMQW1lUnEwMmxzTHNwOFVRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjcwNi8wNEQ0NTdDMjMzMDYxMUVCQTI4MkQzMEFDNEY5QUUwMi9ZNUk1QmprWDdw TEFtZVJxMDJsc0xzcDhVUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzm0sxZLjqulJiTZ9DJrQR1BWMBg7SlS+dXx7IEPNGRsv+TERHroiX WlsBPycYUWUwHAoGEmGQ01SHEAgwpFYMa8l4EUVlXkqtAk3Mn94qxMbMweTRIg1o 15xuBD27+HGGAEAQYhFzLJzH78SbnqOJdCsK+l3ugtYxf+NVhyoaLvPVJvVv16ZN M8CU4x4IOvEqVqlJ7H+c0FdcUYh58iORspVaLGVzfJn8S9fVbQWLeoqc8JFoSzz3 O+rQl46VJwekUc+gNztkSA3efivTNRxTu7+lc/+fqsOJGJ10O2XxktlkJwadubnm L61Fe344vXdNUhFGeypchORQlUfNgh8D -----END CERTIFICATE-----Generated at Fri Dec 19 10:38:39 2025 by rpki-client