This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft File: yZYCtJIcaINWT0smUVwdY-TPNkQ.mft (raw, json) Hash identifier: D4TVaec8XItM4NhIKl336OqXXnLfhfKcf8FzYAcJJh0= Subject key identifier: 09:3A:71:9E:EF:C0:38:40:3A:BE:2E:09:93:58:13:25:AA:08:10:32 Authority key identifier: C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 Certificate issuer: /CN=A91E4EF6/serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Certificate serial: 0ACC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft Manifest number: 1219 Signing time: Mon 22 Dec 2025 18:53:41 +0000 Manifest this update: Mon 22 Dec 2025 18:53:40 +0000 Manifest next update: Mon 29 Dec 2025 18:53:40 +0000 Files and hashes: 1: yZYCtJIcaINWT0smUVwdY-TPNkQ.crl (hash: HMMggWJ5iq0nLci4W/QE7sO3GRMxW+hqTPKPKM7Xq0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:53:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2764 (0xacc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6, serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Validity Not Before: Dec 22 18:53:40 2025 GMT Not After : Dec 29 18:53:40 2025 GMT Subject: CN=694993b5-0b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:58:49:41:6e:c9:0f:ac:b3:2a:db:b1:6e:84: 2c:4d:5a:0b:4b:d2:b9:13:f8:bd:76:3a:d0:87:77: d6:a4:97:2c:e2:f5:8a:ae:37:d6:52:59:a9:1c:6d: c3:e3:0f:60:f6:9d:96:1d:e4:f7:24:72:5b:70:e8: 30:16:b8:ef:1d:05:0a:e0:57:6e:78:27:41:6a:38: eb:a6:42:c9:07:2d:d7:73:33:3a:1e:c9:f4:42:91: 1b:56:72:c5:c9:36:71:09:c0:81:c2:f1:1a:73:e2: 8f:26:2c:b2:a8:be:15:14:ce:f9:96:68:0e:c7:bf: 33:27:89:0f:80:12:f5:ad:26:6c:f1:27:1f:c4:ac: 47:eb:1e:97:58:86:0c:a7:95:db:39:3b:bf:c1:aa: 8c:58:c3:da:6b:60:af:6d:86:c3:87:0f:bb:fc:86: 2f:0d:91:bb:13:4f:b0:29:a6:f4:0c:08:4c:e7:d6: 83:4d:13:ef:a5:c3:89:f6:2b:42:40:72:bb:b0:8b: a7:b7:e9:e9:06:0f:be:1b:d3:fa:52:be:1f:28:eb: 62:43:21:61:3f:31:bc:d7:39:92:ff:ce:1c:53:6e: b6:5f:24:86:2e:97:09:e0:c2:44:20:33:74:16:f1: da:55:07:77:26:7d:08:21:96:f3:f4:b3:52:e1:ee: 1a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3A:71:9E:EF:C0:38:40:3A:BE:2E:09:93:58:13:25:AA:08:10:32 X509v3 Authority Key Identifier: keyid:C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b2:0b:07:c2:74:28:85:d4:6d:48:20:47:07:0a:51:75:53: b0:f0:3b:ad:17:60:24:19:e6:c4:56:a4:96:b2:99:f6:87:66: 89:2c:1d:39:f5:e7:52:e1:d4:1c:7a:f7:e7:ec:8a:0e:a0:be: d0:43:7a:a2:cd:fd:8c:04:2a:c9:f8:5d:95:74:5b:74:ae:98: b9:af:77:c1:a7:20:f8:f8:3c:c8:1c:11:c1:b7:11:55:c0:18: 12:9f:cc:c3:f9:e9:41:65:10:2f:77:66:4e:7e:20:3f:6c:44: 34:b2:32:dc:5a:15:42:b3:94:db:9a:d8:e1:39:02:2f:57:58: 8d:26:82:7c:f9:be:e6:47:b1:ae:9a:b1:22:cd:a3:55:61:fd: 6b:69:f5:1b:4d:41:e0:da:32:dd:76:8c:1f:32:78:18:08:c1: 39:83:ff:66:12:5b:3a:e8:90:f7:8e:85:f0:30:c8:92:20:b2: ab:cf:6b:f5:42:6a:64:dd:cf:08:09:9b:55:a3:c1:45:ce:51: a5:3f:90:53:e4:00:16:80:b8:2f:ea:1e:97:6d:21:76:2f:25: 5a:fc:aa:05:55:bd:a1:4b:8f:80:e9:b8:22:52:b3:ce:5a:cc: fb:1f:d8:39:40:c4:a9:41:24:41:b6:42:03:62:82:3f:29:bf: 37:63:e8:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKEM5OTYwMkI0OTIxQzY4ODM1NjRGNEIyNjUxNUMxRDYz RTRDRjM2NDQwHhcNMjUxMjIyMTg1MzQwWhcNMjUxMjI5MTg1MzQwWjAYMRYwFAYD VQQDDA02OTQ5OTNiNS0wYjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5lhJQW7JD6yzKtuxboQsTVoLS9K5E/i9djrQh3fWpJcs4vWKrjfWUlmpHG3D 4w9g9p2WHeT3JHJbcOgwFrjvHQUK4FdueCdBajjrpkLJBy3XczM6Hsn0QpEbVnLF yTZxCcCBwvEac+KPJiyyqL4VFM75lmgOx78zJ4kPgBL1rSZs8ScfxKxH6x6XWIYM p5XbOTu/waqMWMPaa2CvbYbDhw+7/IYvDZG7E0+wKab0DAhM59aDTRPvpcOJ9itC QHK7sIunt+npBg++G9P6Ur4fKOtiQyFhPzG81zmS/84cU262XySGLpcJ4MJEIDN0 FvHaVQd3Jn0IIZbz9LNS4e4aXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAk6cZ7v wDhAOr4uCZNYEyWqCBAyMB8GA1UdIwQYMBaAFMmWArSSHGiDVk9LJlFcHWPkzzZE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJTldUMHNtVVZ3ZFktVFBO a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laWUN0SkljYUlOV1Qwc21VVndkWS1UUE5rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJ TldUMHNtVVZ3ZFktVFBOa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrsgsHwnQohdRtSCBHBwpRdVOw8DutF2AkGebEVqSWspn2h2aJLB05 9edS4dQcevfn7IoOoL7QQ3qizf2MBCrJ+F2VdFt0rpi5r3fBpyD4+DzIHBHBtxFV wBgSn8zD+elBZRAvd2ZOfiA/bEQ0sjLcWhVCs5TbmtjhOQIvV1iNJoJ8+b7mR7Gu mrEizaNVYf1rafUbTUHg2jLddowfMngYCME5g/9mEls66JD3joXwMMiSILKrz2v1 Qmpk3c8ICZtVo8FFzlGlP5BT5AAWgLgv6h6XbSF2LyVa/KoFVb2hS4+A6bgiUrPO Wsz7H9g5QMSpQSRBtkIDYoI/Kb83Y+ih -----END CERTIFICATE-----Generated at Wed Dec 24 16:01:00 2025 by rpki-client