This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft File: lY1wluouaxa8JKHQRXGdLsUUSX4.mft (raw, json) Hash identifier: 4fAxjtvAzvqbXWRnlWdCHIsctc+zhF0QSBW/h2akP2k= Subject key identifier: EC:14:45:6D:6E:21:E5:77:C4:AE:4B:35:A6:2A:8D:13:89:78:EF:E0 Authority key identifier: 95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E Certificate issuer: /CN=A91E28D8/serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E Certificate serial: 02C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft Manifest number: 02BD Signing time: Sun 21 Dec 2025 00:39:27 +0000 Manifest this update: Sun 21 Dec 2025 00:39:27 +0000 Manifest next update: Sun 28 Dec 2025 00:39:27 +0000 Files and hashes: 1: lY1wluouaxa8JKHQRXGdLsUUSX4.crl (hash: Fla9JOOwrgMWx1N3G63a0LumMoDoDVoK0bv5Pn3j7BY=) 2: 01109D481B9011EDBC68484CC4F9AE02.roa (hash: SSzVNdfhJc5xjlACETmueaivBNOUX59PK+NBqYEOe30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 705 (0x2c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28D8, serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E Validity Not Before: Dec 21 00:39:27 2025 GMT Not After : Dec 28 00:39:27 2025 GMT Subject: CN=694741bf-59f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:88:ba:e0:12:5b:96:19:ae:6d:ad:02:ad:69: 92:69:00:a9:99:61:cf:9c:19:02:85:25:4b:19:2a: 6f:7d:46:82:7b:e7:7a:e0:3e:1b:db:c0:f5:18:1c: 1f:00:ef:8d:b8:b4:c5:3e:5a:43:83:8d:6b:f8:8e: 92:81:5d:14:d3:3a:8c:24:ea:e8:fe:36:52:77:94: 25:ed:94:6d:f3:3a:03:d0:5a:f9:57:a8:ee:45:a3: c8:f0:0a:21:af:94:cf:af:86:a7:c4:ca:b0:8c:94: ee:3e:fd:16:01:a2:45:6f:e9:0d:d6:cb:df:19:c2: 4a:2f:6b:51:39:7d:79:76:de:8a:c6:73:8e:8d:bc: 00:ea:4e:76:c9:83:b5:8f:85:4a:f5:36:4f:b1:2e: fe:f6:bf:3c:6a:64:91:c5:d3:4b:81:f4:6e:c8:01: 2a:97:61:2a:12:54:7c:97:2e:cd:23:33:5d:57:c5: 17:16:6e:ca:1f:a1:0d:e1:be:92:71:33:5f:73:cc: f0:b1:49:11:b9:33:9c:ad:14:42:47:6d:2f:2f:5a: 8e:6a:2c:1b:a3:b9:18:ac:8a:b2:07:7e:e8:34:6b: 17:67:17:9f:63:e6:db:12:7d:04:b8:64:71:a9:04: 5a:ab:08:4a:c5:a9:97:29:34:72:ad:2f:70:9e:7a: 65:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:14:45:6D:6E:21:E5:77:C4:AE:4B:35:A6:2A:8D:13:89:78:EF:E0 X509v3 Authority Key Identifier: keyid:95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:52:78:49:07:36:f6:4a:4c:6b:69:28:f1:10:02:79:c1:b9: 14:70:5b:1a:38:05:ed:03:b9:0f:ff:4c:a8:fe:78:5c:69:a8: 4e:e4:9f:3d:73:9f:8a:5e:2b:c1:20:9d:1d:7b:b5:d5:02:ca: 60:a9:9c:90:cd:d0:6d:87:ba:8f:fb:7c:c5:bb:75:6f:23:aa: 66:53:ce:0f:ff:c6:dd:ee:fb:59:5f:90:42:63:2d:88:de:f4: b4:ce:a2:a9:fd:2f:ad:7d:f0:4b:53:5e:b8:95:67:b2:ea:44: 65:60:24:72:e5:3d:8f:f9:3e:15:76:96:cc:8d:ed:0e:4b:17: 49:76:d3:74:ab:a1:77:2d:5c:08:2d:61:7c:30:69:f4:d7:7a: dd:50:ac:5c:58:6b:4c:ea:7d:97:8c:ed:e0:34:87:85:86:b9: a7:a0:dd:4b:70:ce:c6:de:8a:74:0b:2b:d0:69:8e:e7:75:e3: e8:f6:01:d1:2e:c4:eb:0d:86:ac:15:90:c3:80:00:29:f2:82: 7d:51:af:be:ce:30:2f:3e:31:d3:e1:a7:54:1b:a3:3f:dd:ad: e1:2f:34:b6:99:70:ac:5c:b9:62:43:f9:93:0c:9b:21:a4:4a: 63:84:c8:5b:0b:8e:a0:1d:f1:83:3d:7e:8f:ba:c1:10:2d:11: b0:bb:3a:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4RDgxMTAvBgNVBAUTKDk1OEQ3MDk2RUEyRTZCMTZCQzI0QTFEMDQ1NzE5RDJF QzUxNDQ5N0UwHhcNMjUxMjIxMDAzOTI3WhcNMjUxMjI4MDAzOTI3WjAYMRYwFAYD VQQDDA02OTQ3NDFiZi01OWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIi64BJblhmuba0CrWmSaQCpmWHPnBkChSVLGSpvfUaCe+d64D4b28D1GBwf AO+NuLTFPlpDg41r+I6SgV0U0zqMJOro/jZSd5Ql7ZRt8zoD0Fr5V6juRaPI8Aoh r5TPr4anxMqwjJTuPv0WAaJFb+kN1svfGcJKL2tROX15dt6KxnOOjbwA6k52yYO1 j4VK9TZPsS7+9r88amSRxdNLgfRuyAEql2EqElR8ly7NIzNdV8UXFm7KH6EN4b6S cTNfc8zwsUkRuTOcrRRCR20vL1qOaiwbo7kYrIqyB37oNGsXZxefY+bbEn0EuGRx qQRaqwhKxamXKTRyrS9wnnplcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwURW1u IeV3xK5LNaYqjROJeO/gMB8GA1UdIwQYMBaAFJWNcJbqLmsWvCSh0EVxnS7FFEl+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhEOC82QjI0QkNDMjFB QkYxMUVEQjVCNENDNENDNEY5QUUwMi9sWTF3bHVvdWF4YThKS0hRUlhHZExzVVVT WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xZMXdsdW91YXhhOEpLSFFSWEdkTHNVVVNYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhEOC82QjI0QkNDMjFBQkYxMUVEQjVCNENDNENDNEY5QUUwMi9sWTF3bHVvdWF4 YThKS0hRUlhHZExzVVVTWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaUnhJBzb2SkxraSjxEAJ5wbkUcFsaOAXtA7kP/0yo/nhcaahO5J89 c5+KXivBIJ0de7XVAspgqZyQzdBth7qP+3zFu3VvI6pmU84P/8bd7vtZX5BCYy2I 3vS0zqKp/S+tffBLU164lWey6kRlYCRy5T2P+T4VdpbMje0OSxdJdtN0q6F3LVwI LWF8MGn013rdUKxcWGtM6n2XjO3gNIeFhrmnoN1LcM7G3op0CyvQaY7ndePo9gHR LsTrDYasFZDDgAAp8oJ9Ua++zjAvPjHT4adUG6M/3a3hLzS2mXCsXLliQ/mTDJsh pEpjhMhbC46gHfGDPX6PusEQLRGwuzp4 -----END CERTIFICATE-----Generated at Sun Dec 21 19:47:28 2025 by rpki-client