This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft File: Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft (raw, json) Hash identifier: oPl9VfPNXWE7wkVSxeZNbtbvHJtZr7ymcmMNAEFy9zs= Subject key identifier: 9F:62:33:C3:12:5A:6B:D6:AE:0D:DA:48:14:7F:A5:AB:FF:38:0D:A4 Authority key identifier: 63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74 Certificate issuer: /CN=A91DFD4C/serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft Manifest number: 3E Signing time: Sun 21 Dec 2025 06:28:27 +0000 Manifest this update: Sun 21 Dec 2025 06:28:26 +0000 Manifest next update: Sun 28 Dec 2025 06:28:26 +0000 Files and hashes: 1: Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl (hash: iuNhjBnBcedqYCk8doqA1LHw66dtz9IFEEtDJU1Krfk=) 2: 4EC550229F7911F0892F6680C4F9AE02.roa (hash: 8V07zUVOskE1wa+gVr+yuKqZDgrgYU/QSi8IILKEhL0=) 3: 3A4C99D49F7911F08FC08A7FC4F9AE02.roa (hash: hzN1fw40guW51CNb+UZLqljQGspAiSfGnAzMh1uOZu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFD4C, serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74 Validity Not Before: Dec 21 06:28:26 2025 GMT Not After : Dec 28 06:28:26 2025 GMT Subject: CN=6947938b-6f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e1:84:bd:e5:b0:de:3f:7c:69:08:72:df:03: c5:f7:68:e3:75:22:5d:dd:64:a3:9a:54:a8:08:0c: ca:f9:0a:d9:2c:42:5d:bd:e9:bd:a0:97:67:aa:b1: ae:64:17:a8:e6:3c:f3:76:95:7b:a9:06:11:35:2c: fe:0f:bb:ce:0b:b5:d1:d3:ea:cc:75:ce:c7:07:b6: 3b:ac:10:fd:d9:e7:a0:ea:b7:f9:ff:9c:d4:29:5c: 4c:e4:44:ba:d0:55:f8:4c:54:09:cb:0c:fc:ad:39: 03:de:90:aa:bf:cd:5f:3e:97:15:68:ef:3a:f0:b1: 51:db:dc:90:b9:9d:08:8d:2e:c2:e4:da:96:b9:96: 12:13:c9:7b:1d:a9:25:fa:05:d6:1c:b6:10:55:9c: 38:d7:ef:07:0e:c8:cd:ce:50:ab:22:f4:40:c5:58: 92:05:a1:39:82:34:2f:4a:df:af:05:78:e2:63:9c: 6f:04:0e:b9:62:e8:4b:0a:57:63:3d:cf:05:cf:22: 3a:93:ff:3f:d8:ed:f3:7d:69:1e:6b:91:13:c9:62: 45:50:af:13:2f:fe:66:f1:4b:18:78:92:25:06:f2: d2:0a:8a:c6:2e:67:bb:fe:97:ca:75:8b:a6:da:0b: a7:bc:47:84:54:6d:a9:ba:a1:bd:98:96:a2:b2:29: 86:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:62:33:C3:12:5A:6B:D6:AE:0D:DA:48:14:7F:A5:AB:FF:38:0D:A4 X509v3 Authority Key Identifier: keyid:63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:52:59:5a:08:1d:b2:70:ea:ee:18:e7:e5:ca:72:ca:77:aa: 8c:09:25:99:a8:21:18:d4:b2:2d:72:4f:e0:94:21:04:61:a1: 9b:ff:55:c8:07:ac:cc:78:3f:7e:00:e3:c7:00:89:c4:8e:3b: 8e:fd:41:ca:5e:71:1f:8f:f3:db:aa:32:4e:75:63:44:57:41: e9:0f:3c:41:88:16:82:5d:73:44:87:3c:c5:fa:6d:f2:64:2d: 71:43:7d:4c:d7:54:2f:5b:38:19:49:3f:b1:42:a4:71:5e:e2: 5d:68:2a:2a:4a:85:25:f8:7a:3c:a1:4a:bd:d3:6f:d8:0b:fd: f0:4c:c6:b9:51:92:c1:24:2d:f1:57:09:2f:5e:6e:cf:e4:c8: 77:0c:de:aa:3b:d1:f3:18:a5:66:1c:f0:b7:fc:51:06:43:1c: da:8a:9f:1c:20:b4:8b:f7:63:fc:14:7f:92:5b:f4:a4:0e:09: 6f:a9:05:24:05:12:d9:93:81:bf:d7:4a:e7:9d:94:e6:40:bf: 29:80:06:21:2c:b9:ad:7a:50:bf:4a:72:6d:a8:a7:3f:cf:39: e4:a1:89:60:54:54:61:b0:62:0b:d0:f9:b1:79:c1:25:db:cc: 1e:41:e5:e9:33:1f:6b:06:9e:f5:29:8c:44:90:1d:50:84:00: 59:37:30:cd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RkQ0QzExMC8GA1UEBRMoNjM4MzNBMjQxRTNFNDk1OUVCQTE5QzcwMUQwNDg4N0RC NEIxRkM3NDAeFw0yNTEyMjEwNjI4MjZaFw0yNTEyMjgwNjI4MjZaMBgxFjAUBgNV BAMMDTY5NDc5MzhiLTZmNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCn4YS95bDeP3xpCHLfA8X3aON1Il3dZKOaVKgIDMr5CtksQl296b2gl2eqsa5k F6jmPPN2lXupBhE1LP4Pu84LtdHT6sx1zscHtjusEP3Z56Dqt/n/nNQpXEzkRLrQ VfhMVAnLDPytOQPekKq/zV8+lxVo7zrwsVHb3JC5nQiNLsLk2pa5lhITyXsdqSX6 BdYcthBVnDjX7wcOyM3OUKsi9EDFWJIFoTmCNC9K368FeOJjnG8EDrli6EsKV2M9 zwXPIjqT/z/Y7fN9aR5rkRPJYkVQrxMv/mbxSxh4kiUG8tIKisYuZ7v+l8p1i6ba C6e8R4RUbam6ob2YlqKyKYbJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUn2IzwxJa a9auDdpIFH+lq/84DaQwHwYDVR0jBBgwFoAUY4M6JB4+SVnroZxwHQSIfbSx/HQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGRDRDLzU2RUMzRDlDODM2 RDExRjA4ODE2MDA2QUM0RjlBRTAyL1k0TTZKQjQtU1Zucm9aeHdIUVNJZmJTeF9I US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWTRNNkpCNC1TVm5yb1p4d0hRU0lmYlN4X0hRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG RDRDLzU2RUMzRDlDODM2RDExRjA4ODE2MDA2QUM0RjlBRTAyL1k0TTZKQjQtU1Zu cm9aeHdIUVNJZmJTeF9IUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIFSWVoIHbJw6u4Y5+XKcsp3qowJJZmoIRjUsi1yT+CUIQRhoZv/VcgH rMx4P34A48cAicSOO479QcpecR+P89uqMk51Y0RXQekPPEGIFoJdc0SHPMX6bfJk LXFDfUzXVC9bOBlJP7FCpHFe4l1oKipKhSX4ejyhSr3Tb9gL/fBMxrlRksEkLfFX CS9ebs/kyHcM3qo70fMYpWYc8Lf8UQZDHNqKnxwgtIv3Y/wUf5Jb9KQOCW+pBSQF EtmTgb/XSuedlOZAvymABiEsua16UL9Kcm2opz/POeShiWBUVGGwYgvQ+bF5wSXb zB5B5ekzH2sGnvUpjESQHVCEAFk3MM0= -----END CERTIFICATE-----Generated at Mon Dec 22 11:32:07 2025 by rpki-client