This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft File: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft (raw, json) Hash identifier: 8UJ19QoTFZMZBKaSdchJn1f7l86kCAqs0pej2KbXe4o= Subject key identifier: B9:43:7C:63:60:0B:E9:92:7B:41:2A:50:6D:F9:38:FB:CA:93:F2:53 Authority key identifier: 61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5 Certificate issuer: /CN=A91DF195/serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft Manifest number: 35 Signing time: Tue 23 Dec 2025 06:24:43 +0000 Manifest this update: Tue 23 Dec 2025 06:24:43 +0000 Manifest next update: Tue 30 Dec 2025 06:24:43 +0000 Files and hashes: 1: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl (hash: BGK3Psi+nrhUTXzd/qmqCmRBfMLAOAfhayGc45NuNno=) 2: 11CCFCD8DB0B11F0BC36350982D3641D.roa (hash: 4GOBEtVYgaTinl+sO51f+g5iyOeKsdw134zg1enZUAk=) 3: DD3F28CC93D111F0B0A32B0BC4F9AE02.roa (hash: OJep3Jj5FjQRgEx+dN34IpTpsR0/ZkQ1f2GGqPdjPgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF195, serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5 Validity Not Before: Dec 23 06:24:43 2025 GMT Not After : Dec 30 06:24:43 2025 GMT Subject: CN=694a35ab-fe1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:bb:eb:5e:c8:fe:39:17:5b:20:12:5b:4f: f8:a8:61:2a:35:dd:bd:e4:39:3a:95:89:7c:a8:be: 7f:66:31:15:30:90:c2:17:23:c3:e9:0f:21:ea:07: 1f:92:95:31:eb:ce:c8:76:02:a2:e9:26:a2:e5:f0: 7b:01:69:8c:72:05:1a:10:11:7a:61:05:96:ad:5b: a4:18:67:4a:8d:61:93:4d:6c:06:81:98:51:1f:03: 67:5f:84:34:77:1f:09:ac:cb:d3:85:4a:e2:df:0d: 14:26:b4:da:1b:81:7e:32:c4:3a:9f:45:d5:12:44: c2:6f:6b:2a:e3:3d:d6:4a:69:77:66:c6:84:70:ab: ae:b9:94:ff:79:ca:00:3a:ad:cb:b1:77:0d:d0:8e: 55:65:bd:0c:66:47:0c:d6:74:76:26:d7:34:79:be: ff:71:8b:05:3b:e0:d1:17:42:43:c2:aa:01:48:55: 2d:07:3d:20:3b:70:1e:34:b4:e1:f9:d3:40:78:05: 19:86:34:db:0c:4d:05:8f:13:5e:1d:47:39:b5:5e: 96:5a:e5:ad:60:1b:6c:c2:0c:38:04:af:2d:21:9a: 3d:8f:be:c2:0b:91:e1:bc:56:ab:b4:b0:36:00:46: e2:82:7a:c8:af:38:91:2c:6f:2c:23:13:a6:33:6b: a2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:43:7C:63:60:0B:E9:92:7B:41:2A:50:6D:F9:38:FB:CA:93:F2:53 X509v3 Authority Key Identifier: keyid:61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d1:54:9e:a7:75:1f:1b:27:93:f3:4b:40:4c:34:dd:69:c2: a5:60:cd:b0:cc:da:66:29:b8:44:4c:b4:9c:d2:df:5b:f2:3d: 9e:e2:cf:4e:6c:d9:98:8b:bf:a2:12:45:3f:c2:ff:79:b9:e8: 8b:59:f6:a4:75:9d:cb:e4:7f:50:ba:7a:b2:58:bb:b9:3d:52: e6:91:61:76:02:e8:97:6e:56:7a:eb:cf:c4:a4:54:9e:8e:88: 0e:44:a5:25:33:c2:fd:6d:35:cb:58:83:4f:59:4a:9f:d1:3c: f3:95:57:57:bf:7a:93:d9:43:48:23:b4:47:1e:47:49:cd:d7: 66:eb:98:a8:13:f1:a2:01:bc:d9:35:c8:2f:c8:12:cc:58:6d: 28:0b:53:4a:d7:fe:1d:3d:f7:b1:8b:02:4b:19:66:ce:ef:f9: d5:58:76:3c:61:ac:26:f0:11:bb:a4:c6:63:6e:3a:d7:0f:02: ec:aa:73:9e:92:3b:a0:74:b2:1a:37:c1:8e:4f:4d:db:ac:2d: 9d:09:9d:78:08:b7:5c:77:e7:f8:c0:c6:d2:06:76:0a:fb:54: e2:6b:c9:c7:e7:91:fd:24:f0:72:96:95:04:76:ed:6d:ac:1e: 30:ec:32:91:6c:59:99:e8:d6:91:ea:68:1e:41:f8:1b:25:ae: f7:68:99:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RjE5NTExMC8GA1UEBRMoNjE1Nzc1QTRERTIzRTQ2QThCNTdDOEY3QjlDOUUxRTg4 NkU1RDhENTAeFw0yNTEyMjMwNjI0NDNaFw0yNTEyMzAwNjI0NDNaMBgxFjAUBgNV BAMMDTY5NGEzNWFiLWZlMWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxcbvrXsj+ORdbIBJbT/ioYSo13b3kOTqViXyovn9mMRUwkMIXI8PpDyHqBx+S lTHrzsh2AqLpJqLl8HsBaYxyBRoQEXphBZatW6QYZ0qNYZNNbAaBmFEfA2dfhDR3 Hwmsy9OFSuLfDRQmtNobgX4yxDqfRdUSRMJvayrjPdZKaXdmxoRwq665lP95ygA6 rcuxdw3QjlVlvQxmRwzWdHYm1zR5vv9xiwU74NEXQkPCqgFIVS0HPSA7cB40tOH5 00B4BRmGNNsMTQWPE14dRzm1XpZa5a1gG2zCDDgEry0hmj2PvsILkeG8Vqu0sDYA RuKCesivOJEsbywjE6Yza6LBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuUN8Y2AL 6ZJ7QSpQbfk4+8qT8lMwHwYDVR0jBBgwFoAUYVd1pN4j5GqLV8j3ucnh6Ibl2NUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMTk1Lzc0QzE4RjcwOTM4 QTExRjBCQkQ2MjM4NUM0RjlBRTAyL1lWZDFwTjRqNUdxTFY4ajN1Y25oNklibDJO VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWVZkMXBONGo1R3FMVjhqM3Vjbmg2SWJsMk5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG MTk1Lzc0QzE4RjcwOTM4QTExRjBCQkQ2MjM4NUM0RjlBRTAyL1lWZDFwTjRqNUdx TFY4ajN1Y25oNklibDJOVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADvRVJ6ndR8bJ5PzS0BMNN1pwqVgzbDM2mYpuERMtJzS31vyPZ7iz05s 2ZiLv6ISRT/C/3m56ItZ9qR1ncvkf1C6erJYu7k9UuaRYXYC6JduVnrrz8SkVJ6O iA5EpSUzwv1tNctYg09ZSp/RPPOVV1e/epPZQ0gjtEceR0nN12brmKgT8aIBvNk1 yC/IEsxYbSgLU0rX/h0997GLAksZZs7v+dVYdjxhrCbwEbukxmNuOtcPAuyqc56S O6B0sho3wY5PTdusLZ0JnXgIt1x35/jAxtIGdgr7VOJrycfnkf0k8HKWlQR27W2s HjDsMpFsWZno1pHqaB5B+BslrvdomeY= -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:54 2025 by rpki-client