This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft File: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft (raw, json) Hash identifier: MnhF3UfmP5VTmlOT3WERyhn2X6AggHv0LRPaP0jnvIE= Subject key identifier: 6C:30:6B:DC:03:F5:E9:0A:BF:CF:DE:30:58:8A:FD:50:07:31:93:87 Authority key identifier: 63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35 Certificate issuer: /CN=A91DCDB3/serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft Manifest number: 0191 Signing time: Tue 23 Dec 2025 02:33:29 +0000 Manifest this update: Tue 23 Dec 2025 02:33:28 +0000 Manifest next update: Tue 30 Dec 2025 02:33:28 +0000 Files and hashes: 1: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl (hash: IWscDoGp0pbEgReo9cXe05bJ88b/BwO3IUQR6rqvREE=) 2: A4B89C5082B111EEB427125DC4F9AE02.roa (hash: Si3a7BG/8OJeYXWshDKB1ssBaH31J9TWvH+Wp+wV/dA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCDB3, serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235 Validity Not Before: Dec 23 02:33:28 2025 GMT Not After : Dec 30 02:33:28 2025 GMT Subject: CN=6949ff78-f37b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:81:8b:fb:a2:e9:34:5a:9c:3d:20:fb:5a:38: f6:0a:c6:71:41:9b:1b:9d:de:20:e5:15:7c:22:b4: de:e6:d5:a2:d4:b1:c9:40:7f:5e:42:db:b0:2b:3c: 94:71:81:a6:eb:09:dd:47:1f:a4:b5:bf:28:ee:79: 8b:38:b6:be:6c:98:95:a6:8c:f8:93:8c:48:4f:87: 46:40:2a:80:9e:87:f4:73:85:78:29:3b:70:73:ae: 16:1d:a3:01:86:9a:22:d1:d4:86:cd:84:e4:fb:c2: fe:18:67:37:45:42:56:e7:da:3b:e9:99:e3:e1:69: 1c:d1:7d:b7:98:2c:bc:90:dc:55:ad:0a:9f:ef:15: a6:2f:0d:f0:73:5a:a4:f5:cf:43:3b:d6:48:f7:79: 6e:6b:8d:0c:93:85:7f:d1:52:68:49:4b:c6:2e:80: e9:e0:f1:e4:da:32:8b:66:57:f6:8a:31:47:aa:7d: 9b:4d:e1:04:d1:06:ed:3e:13:28:a7:f0:c6:e1:bd: 1d:2d:f1:51:4f:91:cc:b2:c4:7f:36:3b:ae:00:ac: 2f:43:36:5e:84:00:ed:53:2b:f1:d5:2a:fa:6b:ac: 8d:df:90:5e:5a:05:0d:cc:7e:18:f4:45:c6:a4:79: fa:6c:0a:58:6c:28:f4:65:67:9e:be:1a:4c:a7:82: 3d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:30:6B:DC:03:F5:E9:0A:BF:CF:DE:30:58:8A:FD:50:07:31:93:87 X509v3 Authority Key Identifier: keyid:63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:ba:af:ff:aa:53:45:88:2a:f3:dc:e4:2f:3e:b3:40:b3:db: ea:0e:9a:7c:b6:26:98:71:3b:dd:a2:05:8f:23:cf:63:8f:a6: a1:0c:7c:04:95:bf:e2:27:a3:f8:e1:be:6e:56:c4:9d:bd:c8: 59:5c:17:c8:d3:27:86:9b:11:c9:69:15:dc:cf:06:52:59:f1: 71:ed:c9:0e:18:c3:c0:3e:21:31:ad:f1:5e:f8:21:74:6f:58: 99:db:c0:97:9a:9e:92:36:8a:58:d3:0f:4c:51:79:df:0b:ea: ae:2a:05:ed:d8:d4:67:50:b9:63:e7:f9:b1:0e:5f:b0:07:9a: 6e:6a:b4:5c:7c:05:db:3d:9a:c4:27:7a:e5:b6:7a:09:6a:8b: 72:ed:65:74:6b:2d:a5:42:f5:71:36:1b:9c:63:d9:41:5c:d7: 38:ca:6e:e9:f9:cd:d5:50:1d:ce:f5:90:e6:55:e1:63:ef:9d: a6:5b:6a:c7:fd:f2:2c:17:40:17:54:dc:5e:db:17:d3:9e:ac: 6e:bd:ed:90:e2:cf:7a:c8:3b:9b:07:3f:5f:9d:1a:38:39:22: 67:05:a9:19:7d:09:bb:f1:bf:26:d9:47:e7:fc:fe:0c:1d:c6: 75:f2:9d:ce:7d:e2:e3:d9:96:83:ff:3f:0c:74:ee:a9:76:fa: 54:be:7b:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEQjMxMTAvBgNVBAUTKDYzQTI5QUJEODdGNEExRkU1NUNCRjJBMEY0MDk3NTBB QzM0QUMyMzUwHhcNMjUxMjIzMDIzMzI4WhcNMjUxMjMwMDIzMzI4WjAYMRYwFAYD VQQDDA02OTQ5ZmY3OC1mMzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYGL+6LpNFqcPSD7Wjj2CsZxQZsbnd4g5RV8IrTe5tWi1LHJQH9eQtuwKzyU cYGm6wndRx+ktb8o7nmLOLa+bJiVpoz4k4xIT4dGQCqAnof0c4V4KTtwc64WHaMB hpoi0dSGzYTk+8L+GGc3RUJW59o76Znj4Wkc0X23mCy8kNxVrQqf7xWmLw3wc1qk 9c9DO9ZI93lua40Mk4V/0VJoSUvGLoDp4PHk2jKLZlf2ijFHqn2bTeEE0QbtPhMo p/DG4b0dLfFRT5HMssR/NjuuAKwvQzZehADtUyvx1Sr6a6yN35BeWgUNzH4Y9EXG pHn6bApYbCj0ZWeevhpMp4I9owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwwa9wD 9ekKv8/eMFiK/VAHMZOHMB8GA1UdIwQYMBaAFGOimr2H9KH+VcvyoPQJdQrDSsI1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0RCMy85MzA1RDJFMDgy QUYxMUVFQkVDNTk3NTlDNEY5QUUwMi9ZNkthdllmMG9mNVZ5X0tnOUFsMUNzTkt3 alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k2S2F2WWYwb2Y1VnlfS2c5QWwxQ3NOS3dqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0RCMy85MzA1RDJFMDgyQUYxMUVFQkVDNTk3NTlDNEY5QUUwMi9ZNkthdllmMG9m NVZ5X0tnOUFsMUNzTkt3alUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0uq//qlNFiCrz3OQvPrNAs9vqDpp8tiaYcTvdogWPI89jj6ahDHwE lb/iJ6P44b5uVsSdvchZXBfI0yeGmxHJaRXczwZSWfFx7ckOGMPAPiExrfFe+CF0 b1iZ28CXmp6SNopY0w9MUXnfC+quKgXt2NRnULlj5/mxDl+wB5puarRcfAXbPZrE J3rltnoJaoty7WV0ay2lQvVxNhucY9lBXNc4ym7p+c3VUB3O9ZDmVeFj752mW2rH /fIsF0AXVNxe2xfTnqxuve2Q4s96yDubBz9fnRo4OSJnBakZfQm78b8m2Ufn/P4M HcZ18p3OfeLj2ZaD/z8MdO6pdvpUvnuJ -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:27 2025 by rpki-client