This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft File: YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft (raw, json) Hash identifier: 8GzAeC6BekXyDVCuO/C5A1i6r3tZbTfwAs4oiTxEzpI= Subject key identifier: 1D:A0:5D:96:C1:94:D9:2C:9C:95:8A:38:BA:41:BD:FC:CA:10:C9:DF Authority key identifier: 61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC Certificate issuer: /CN=A91E5832/serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft Manifest number: A8 Signing time: Wed 03 Dec 2025 04:32:39 +0000 Manifest this update: Wed 03 Dec 2025 04:32:38 +0000 Manifest next update: Wed 10 Dec 2025 04:32:38 +0000 Files and hashes: 1: YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl (hash: xgOwU/tXR9uXsgb3FDMQ2+niVIcE95j9CGTJODPriqo=) 2: A947EC6ED0BA11EFB7A6B027C4F9AE02.roa (hash: gdJaViuBwvdpPTeyFSaMX4mD+CpzF4bPGx3ZYKFPeLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 04:32:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5832, serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC Validity Not Before: Dec 3 04:32:38 2025 GMT Not After : Dec 10 04:32:38 2025 GMT Subject: CN=692fbd67-09b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cc:f6:9e:8d:15:82:b2:9c:ce:94:bc:7b:1f: 50:95:a1:5f:51:5b:97:c9:b5:59:5a:00:88:27:51: 4a:90:7c:3a:d6:7e:1f:1e:3c:d7:16:c1:f6:6a:dc: f7:4d:33:a6:16:3c:e8:54:0e:32:c1:4c:82:cb:eb: 29:36:c9:2f:b1:89:84:b0:a7:5b:a7:1c:52:0e:5b: fd:e0:74:5e:4d:aa:03:a9:f4:a5:95:c9:cb:3b:4d: 2a:e9:b9:ba:e4:c1:6e:22:6f:54:3b:0c:61:ba:32: 48:7e:4c:b5:17:a8:0c:a5:46:64:3b:10:f5:62:07: ba:3d:70:9e:3d:39:f5:42:b0:db:32:f9:c4:19:71: 93:e1:d6:44:e6:a9:be:0d:de:6f:bd:11:b7:44:e2: 43:71:50:bb:89:62:bd:e6:ab:7f:34:d7:3e:50:16: 94:26:33:e2:c0:dc:dc:9d:3b:38:56:cf:79:8c:4b: f3:3e:b2:52:5e:24:37:17:bf:6e:85:ed:c7:e2:d2: c4:1d:22:53:bb:03:43:a6:a8:30:82:20:17:c6:c5: 03:c1:4e:f1:d8:a0:eb:6d:c9:6d:ba:3d:3f:ea:f9: 40:33:a7:32:49:e8:89:b3:0d:ff:1d:ec:87:7b:d4: 2c:46:20:cf:70:be:e8:c9:11:08:e4:36:bd:3d:7d: 1f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A0:5D:96:C1:94:D9:2C:9C:95:8A:38:BA:41:BD:FC:CA:10:C9:DF X509v3 Authority Key Identifier: keyid:61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:d1:93:7d:ef:83:41:5e:4b:e2:cd:9c:9e:df:0b:95:f0:1f: 8b:f7:45:64:34:58:4f:5e:97:86:9a:50:54:43:82:d6:d4:e3: 8e:18:eb:b6:b2:50:88:68:33:ad:ed:c3:6b:b5:74:38:94:1f: 1c:2f:eb:3b:ca:1b:68:e9:70:3b:11:2c:cf:c5:a2:00:56:9e: cc:26:5a:db:0b:63:22:8b:79:ea:d8:22:13:b5:1a:b1:6a:72: 13:c4:dc:0c:28:78:3d:19:f6:13:74:ca:7e:2d:e7:da:16:b8: 98:5c:e5:c1:65:cb:9a:fd:94:d1:6a:b1:b2:de:4c:d8:a0:cb: 7c:4d:d4:52:46:5c:ce:1c:09:4d:75:40:64:e3:39:78:4c:fd: d2:8b:fe:46:b2:66:e0:d5:85:c5:26:9c:a4:c7:44:00:4e:92: f3:71:79:39:a7:ca:38:22:e7:be:8f:6c:61:46:0e:af:6d:4b: 2e:7b:74:90:0c:c5:4b:3a:12:70:93:49:47:92:c2:d0:2f:0c: 23:d5:d9:76:8f:ec:0c:c5:02:c8:41:c8:ab:b1:53:0e:31:fd: 42:d1:74:8c:84:18:56:ef:23:01:f8:d6:2d:4e:70:d9:74:13: 3e:b2:ff:d6:0a:87:9f:22:22:60:f1:1a:64:c0:0c:5d:bd:71: 4a:0e:08:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU4MzIxMTAvBgNVBAUTKDYxNDdBMkE2RjEwNkRDNTYwMTNEQzNCQ0ZCQTBCNEI3 NTNFQ0QxQkMwHhcNMjUxMjAzMDQzMjM4WhcNMjUxMjEwMDQzMjM4WjAYMRYwFAYD VQQDEw02OTJmYmQ2Ny0wOWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8z2no0VgrKczpS8ex9QlaFfUVuXybVZWgCIJ1FKkHw61n4fHjzXFsH2atz3 TTOmFjzoVA4ywUyCy+spNskvsYmEsKdbpxxSDlv94HReTaoDqfSllcnLO00q6bm6 5MFuIm9UOwxhujJIfky1F6gMpUZkOxD1Yge6PXCePTn1QrDbMvnEGXGT4dZE5qm+ Dd5vvRG3ROJDcVC7iWK95qt/NNc+UBaUJjPiwNzcnTs4Vs95jEvzPrJSXiQ3F79u he3H4tLEHSJTuwNDpqgwgiAXxsUDwU7x2KDrbcltuj0/6vlAM6cySeiJsw3/HeyH e9QsRiDPcL7oyREI5Da9PX0fOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2gXZbB lNksnJWKOLpBvfzKEMnfMB8GA1UdIwQYMBaAFGFHoqbxBtxWAT3DvPugtLdT7NG8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTgzMi8xRUQ0NTJBQ0Qw QkExMUVGODk2Q0QwMjZDNEY5QUUwMi9ZVWVpcHZFRzNGWUJQY084LTZDMHQxUHMw YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lVZWlwdkVHM0ZZQlBjTzgtNkMwdDFQczBidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTgzMi8xRUQ0NTJBQ0QwQkExMUVGODk2Q0QwMjZDNEY5QUUwMi9ZVWVpcHZFRzNG WUJQY084LTZDMHQxUHMwYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR0ZN974NBXkvizZye3wuV8B+L90VkNFhPXpeGmlBUQ4LW1OOOGOu2 slCIaDOt7cNrtXQ4lB8cL+s7yhto6XA7ESzPxaIAVp7MJlrbC2Mii3nq2CITtRqx anITxNwMKHg9GfYTdMp+LefaFriYXOXBZcua/ZTRarGy3kzYoMt8TdRSRlzOHAlN dUBk4zl4TP3Si/5Gsmbg1YXFJpykx0QATpLzcXk5p8o4Iue+j2xhRg6vbUsue3SQ DMVLOhJwk0lHksLQLwwj1dl2j+wMxQLIQcirsVMOMf1C0XSMhBhW7yMB+NYtTnDZ dBM+sv/WCoefIiJg8RpkwAxdvXFKDggA -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:40 2025 by rpki-client