This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft File: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft (raw, json) Hash identifier: lhkbtKWlWUFeEo1Ouupku2x7X0p19jgKeS80WedXYds= Subject key identifier: AC:37:6A:11:A5:F2:2A:D8:6B:8A:77:61:9F:18:E7:C7:38:84:04:1C Authority key identifier: 60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B Certificate issuer: /CN=A91E5998/serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B Certificate serial: 0692 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft Manifest number: 0687 Signing time: Mon 22 Dec 2025 21:42:46 +0000 Manifest this update: Mon 22 Dec 2025 21:42:46 +0000 Manifest next update: Mon 29 Dec 2025 21:42:46 +0000 Files and hashes: 1: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl (hash: +NBerbk9PfG0xhFeqlLCeSipvBE24vZIGud/cDFLFoo=) 2: 24365CBCF51411EFB44F001BC4F9AE02.roa (hash: WNqUPBF8HNjFohXgQh/4EEtiPRYZ8HZnCTlz6HaVU7w=) 3: 7438DDF0FD4A11EF85D3AC1AC4F9AE02.roa (hash: ZFyON0cFfqWSYmJESFiDKpaoMViJEmJBEJHpK/VixB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1682 (0x692) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5998, serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B Validity Not Before: Dec 22 21:42:46 2025 GMT Not After : Dec 29 21:42:46 2025 GMT Subject: CN=6949bb56-38cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5e:f5:bb:2a:f8:d1:22:b6:74:f0:ab:74:10: 1d:2e:d6:08:e6:73:ef:55:fd:8c:9a:5b:d7:57:1f: 1e:4f:35:b6:25:51:a1:0a:ab:93:20:80:58:b7:d9: b8:41:e0:fc:f7:da:a2:c2:2a:c2:a1:8f:6a:7b:da: aa:36:bb:c0:4e:ab:da:de:67:fc:02:69:55:46:6d: 4c:86:67:4c:ef:12:0a:f3:84:c9:a6:16:ca:52:1f: 37:cc:4a:b1:0f:59:e5:61:a1:e7:18:df:b4:63:c2: 68:f7:e8:39:a0:c7:5e:f2:67:1e:05:31:72:66:fa: 41:c9:19:c4:c6:d3:4c:e1:92:7e:4e:94:d6:96:b2: 82:86:a5:b4:a1:95:c2:3b:18:27:50:af:c5:2e:93: f8:b3:a7:aa:d3:54:43:53:c1:9d:cc:0f:19:ca:45: af:ff:0e:85:6c:29:01:5d:01:d8:1d:69:2c:84:95: 62:17:7d:f1:ed:be:ec:51:e2:cf:9c:13:7f:32:6f: f5:00:7b:41:4c:a1:21:96:3e:aa:4e:d5:d7:1c:4f: fc:4a:e9:36:0a:47:da:ee:7f:bf:ae:87:d3:7a:65: 1a:41:7c:84:af:96:d3:85:c8:f6:98:80:4a:6a:88: 0e:92:b6:e6:f0:2b:7f:1a:a5:6b:a0:64:9b:0e:a1: c6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:37:6A:11:A5:F2:2A:D8:6B:8A:77:61:9F:18:E7:C7:38:84:04:1C X509v3 Authority Key Identifier: keyid:60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:0d:8b:7a:34:ff:2f:b5:64:1a:0a:93:03:5c:b2:d5:5b:9a: 7e:cb:8c:d1:c4:27:a4:65:02:24:9a:41:92:84:d9:37:51:92: 85:77:d2:13:04:b6:33:f7:9d:59:65:66:d5:04:d4:00:07:35: a7:18:b8:2c:a5:2b:c8:29:23:2e:ed:b6:e7:8f:06:69:9e:7a: 81:7e:47:2a:ec:eb:ba:59:e7:f5:ab:09:bc:fa:da:a2:23:de: fb:d7:b3:3f:7e:d0:1d:7f:c9:f6:47:43:d3:7a:10:88:f3:3c: 56:a2:94:53:5a:7b:3b:6b:e6:ae:b9:2b:d5:e7:4e:19:c9:2f: 7e:d7:4c:44:8e:b3:4e:f2:a4:f3:33:42:b0:59:de:2f:6a:0e: f3:07:14:4a:4b:01:c6:c0:77:57:56:9c:5a:be:8c:e3:c3:3f: b3:50:d0:c9:76:9d:ea:de:fc:8f:78:b0:6d:c7:60:25:c6:a4: e7:8a:7d:db:46:fd:ed:61:dc:56:b2:99:0c:a6:69:26:77:cf: ba:00:e3:9c:14:a2:80:ba:76:25:8c:78:18:8f:b3:71:4e:8f: 21:0b:3a:fe:15:93:d3:39:ee:f0:d9:7e:9c:c2:9a:ac:3f:9e: ec:37:0c:33:93:b9:c4:1d:4f:ca:28:c7:b9:fc:f7:71:bd:5e: ca:59:bf:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU5OTgxMTAvBgNVBAUTKDYwMURDNTRCMUY1MjA1MDgwRUZEOUFBNkNGQTVBNTFD NEE3OUREMkIwHhcNMjUxMjIyMjE0MjQ2WhcNMjUxMjI5MjE0MjQ2WjAYMRYwFAYD VQQDDA02OTQ5YmI1Ni0zOGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxV71uyr40SK2dPCrdBAdLtYI5nPvVf2MmlvXVx8eTzW2JVGhCquTIIBYt9m4 QeD899qiwirCoY9qe9qqNrvATqva3mf8AmlVRm1MhmdM7xIK84TJphbKUh83zEqx D1nlYaHnGN+0Y8Jo9+g5oMde8mceBTFyZvpByRnExtNM4ZJ+TpTWlrKChqW0oZXC OxgnUK/FLpP4s6eq01RDU8GdzA8ZykWv/w6FbCkBXQHYHWkshJViF33x7b7sUeLP nBN/Mm/1AHtBTKEhlj6qTtXXHE/8Suk2Ckfa7n+/rofTemUaQXyEr5bThcj2mIBK aogOkrbm8Ct/GqVroGSbDqHGFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKw3ahGl 8irYa4p3YZ8Y58c4hAQcMB8GA1UdIwQYMBaAFGAdxUsfUgUIDv2aps+lpRxKed0r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTk5OC8yQzU5MkUyODlG MUYxMUVCQjMwRDU3NDNDNEY5QUUwMi9ZQjNGU3g5U0JRZ09fWnFtejZXbEhFcDUz U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCM0ZTeDlTQlFnT19acW16NldsSEVwNTNTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTk5OC8yQzU5MkUyODlGMUYxMUVCQjMwRDU3NDNDNEY5QUUwMi9ZQjNGU3g5U0JR Z09fWnFtejZXbEhFcDUzU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSDYt6NP8vtWQaCpMDXLLVW5p+y4zRxCekZQIkmkGShNk3UZKFd9IT BLYz951ZZWbVBNQABzWnGLgspSvIKSMu7bbnjwZpnnqBfkcq7Ou6Wef1qwm8+tqi I97717M/ftAdf8n2R0PTehCI8zxWopRTWns7a+auuSvV504ZyS9+10xEjrNO8qTz M0KwWd4vag7zBxRKSwHGwHdXVpxavozjwz+zUNDJdp3q3vyPeLBtx2AlxqTnin3b Rv3tYdxWspkMpmkmd8+6AOOcFKKAunYljHgYj7NxTo8hCzr+FZPTOe7w2X6cwpqs P57sNwwzk7nEHU/KKMe5/PdxvV7KWb99 -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:43 2025 by rpki-client