This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft File: YcuQhfAv-PpF5zL1gDQPQkngDKI.mft (raw, json) Hash identifier: V3EriZsBwK3fRMbDgmmZH3Jm0weDcH2OkxvQmZ0RGqM= Subject key identifier: 4B:B4:59:8F:3C:84:2A:2F:C4:63:0B:E3:A7:E1:C2:0B:4E:C7:34:59 Authority key identifier: 61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2 Certificate issuer: /CN=A91DCB25/serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2 Certificate serial: 11F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft Manifest number: 11E7 Signing time: Mon 22 Dec 2025 16:52:07 +0000 Manifest this update: Mon 22 Dec 2025 16:52:07 +0000 Manifest next update: Mon 29 Dec 2025 16:52:07 +0000 Files and hashes: 1: YcuQhfAv-PpF5zL1gDQPQkngDKI.crl (hash: 9zmDaEFNJOGHQnDNkAHnaxrrAFAbGDX4WvBDfip/1j8=) 2: BDC1AB0AFDA611E88FA5E26DC4F9AE02.roa (hash: 5aUeJ2nUgZKlO+WBC4IJNP8ylQ0g53K6edye7fUN2n8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4593 (0x11f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCB25, serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2 Validity Not Before: Dec 22 16:52:07 2025 GMT Not After : Dec 29 16:52:07 2025 GMT Subject: CN=69497737-90c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ae:07:c9:8c:77:b2:50:62:59:94:90:18:55: b8:16:f0:a2:70:bb:ab:3f:66:85:8b:4d:11:fb:29: 21:75:18:4d:74:1c:ef:ee:a8:a1:13:ca:42:f0:11: 8b:d7:2b:0d:88:31:aa:27:77:5d:cb:2a:90:be:5a: ba:6a:f7:5d:09:83:20:dd:9d:14:56:c1:12:46:3c: 8a:ab:54:31:86:59:6c:7b:de:5d:ae:e1:35:0d:e4: 07:f8:6b:99:d3:fb:c2:ed:0f:12:77:f4:64:8c:66: ef:b0:6c:86:95:66:20:8e:67:05:b1:06:85:93:85: ec:2f:5e:f3:5a:c8:a1:60:c9:ac:be:06:57:de:2d: bf:35:93:5d:ef:31:15:c0:a0:a3:dc:62:d2:89:0b: e5:33:6f:84:f4:14:60:d3:f0:d5:b0:eb:8b:75:99: 56:e7:18:83:92:24:cc:81:ff:fc:df:bf:3d:ac:2d: 0e:77:2c:79:99:8e:f5:d3:07:bb:39:9b:02:d5:58: aa:f9:c9:05:5a:44:f5:fa:dc:16:81:94:55:d3:7c: 1b:b8:fb:61:fd:87:a9:a4:0c:1d:1c:9a:88:ad:c6: 66:27:e6:d7:cb:e4:68:e6:29:2e:c8:07:60:ae:87: 2a:16:27:c2:d9:c8:c7:b3:2c:28:1b:16:b9:16:98: 08:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B4:59:8F:3C:84:2A:2F:C4:63:0B:E3:A7:E1:C2:0B:4E:C7:34:59 X509v3 Authority Key Identifier: keyid:61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:d8:67:a8:b7:df:93:b9:88:7b:4c:36:3b:35:70:50:ac:48: 17:66:52:36:8a:77:c2:11:f9:8c:36:e3:27:6b:c8:2c:8d:d7: 9c:53:ec:9c:bd:1e:dd:eb:f6:8d:3e:ea:60:c6:9a:87:05:13: 52:c1:bc:4b:62:37:32:20:69:c5:51:01:7f:df:68:be:c0:ad: 12:6c:93:9f:97:0d:fc:5f:01:b9:98:cf:1c:df:6e:93:2e:21: ca:26:75:4d:0d:ec:68:10:4f:f9:56:b7:87:f8:19:a3:9f:9e: e2:75:27:81:8b:9f:21:f1:b0:2d:3b:d5:32:e3:11:47:3c:3e: 85:32:d3:f8:dd:be:31:6d:32:5e:bc:a8:9e:c8:38:71:dd:a6: 71:ba:8e:46:e6:f3:b3:10:f2:5a:14:3c:6b:94:0a:ab:5f:d5: a0:8d:33:ff:67:f4:eb:e1:f6:4d:de:93:b7:69:c1:fa:c2:90: e7:22:84:52:ab:0d:a4:ac:62:1b:c2:74:a0:03:7a:85:86:80: 9e:82:81:ea:ec:2a:5d:28:ff:83:65:01:f2:ad:7b:b2:6d:1f: 32:ab:2d:7e:b4:ef:85:b5:f7:03:f0:6b:50:ac:68:da:54:c4: 58:b5:e9:f6:87:e1:2a:fa:1e:be:dc:18:56:47:4d:40:f8:a6: 01:2f:56:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENCMjUxMTAvBgNVBAUTKDYxQ0I5MDg1RjAyRkY4RkE0NUU3MzJGNTgwMzQwRjQy NDlFMDBDQTIwHhcNMjUxMjIyMTY1MjA3WhcNMjUxMjI5MTY1MjA3WjAYMRYwFAYD VQQDDA02OTQ5NzczNy05MGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAta4HyYx3slBiWZSQGFW4FvCicLurP2aFi00R+ykhdRhNdBzv7qihE8pC8BGL 1ysNiDGqJ3ddyyqQvlq6avddCYMg3Z0UVsESRjyKq1Qxhllse95druE1DeQH+GuZ 0/vC7Q8Sd/RkjGbvsGyGlWYgjmcFsQaFk4XsL17zWsihYMmsvgZX3i2/NZNd7zEV wKCj3GLSiQvlM2+E9BRg0/DVsOuLdZlW5xiDkiTMgf/83789rC0Odyx5mY710we7 OZsC1Viq+ckFWkT1+twWgZRV03wbuPth/YeppAwdHJqIrcZmJ+bXy+Ro5ikuyAdg rocqFifC2cjHsywoGxa5FpgIzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEu0WY88 hCovxGML46fhwgtOxzRZMB8GA1UdIwQYMBaAFGHLkIXwL/j6Recy9YA0D0JJ4Ayi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0IyNS8yQzYwREZEOEZE QTUxMUU4ODg1OUMwNkJDNEY5QUUwMi9ZY3VRaGZBdi1QcEY1ekwxZ0RRUFFrbmdE S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ljdVFoZkF2LVBwRjV6TDFnRFFQUWtuZ0RLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0IyNS8yQzYwREZEOEZEQTUxMUU4ODg1OUMwNkJDNEY5QUUwMi9ZY3VRaGZBdi1Q cEY1ekwxZ0RRUFFrbmdES0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc2Geot9+TuYh7TDY7NXBQrEgXZlI2infCEfmMNuMna8gsjdecU+yc vR7d6/aNPupgxpqHBRNSwbxLYjcyIGnFUQF/32i+wK0SbJOflw38XwG5mM8c326T LiHKJnVNDexoEE/5VreH+Bmjn57idSeBi58h8bAtO9Uy4xFHPD6FMtP43b4xbTJe vKieyDhx3aZxuo5G5vOzEPJaFDxrlAqrX9WgjTP/Z/Tr4fZN3pO3acH6wpDnIoRS qw2krGIbwnSgA3qFhoCegoHq7CpdKP+DZQHyrXuybR8yqy1+tO+FtfcD8GtQrGja VMRYten2h+Eq+h6+3BhWR01A+KYBL1ZW -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:23 2025 by rpki-client