This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft File: ysouRCIiw-2H53WblewRGMOLhbY.mft (raw, json) Hash identifier: dSvoCNNGZdwA2hRxGkW3go9iCreFVs6jGKBFfCjxxEs= Subject key identifier: 3E:83:46:97:55:E7:A4:9E:EF:B6:E9:FF:FA:3C:7F:C7:15:59:E9:6D Authority key identifier: CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6 Certificate issuer: /CN=A91E9A44/serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft Manifest number: 0E Signing time: Wed 03 Dec 2025 06:09:09 +0000 Manifest this update: Wed 03 Dec 2025 06:09:08 +0000 Manifest next update: Wed 10 Dec 2025 06:09:08 +0000 Files and hashes: 1: ysouRCIiw-2H53WblewRGMOLhbY.crl (hash: lKR/s8GvWD+82ELwPQ/2KlZ8ZLJyr3melG2pJjqJvsI=) 2: 769D5C68C09711F08165E157C4F9AE02.roa (hash: OJEG2iMlHS+dlOzTygzni5AYhZaYZz74JLyfsdZ4HV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9A44, serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6 Validity Not Before: Dec 3 06:09:08 2025 GMT Not After : Dec 10 06:09:08 2025 GMT Subject: CN=692fd405-77b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:de:d7:04:9e:58:54:85:43:a2:e5:78:69:d5: b3:4a:de:fc:56:cc:9f:8e:0b:94:67:5f:a1:ec:cf: 48:7d:cc:93:fe:14:d6:bf:35:94:fe:af:36:61:75: 67:3a:b3:2d:ec:1e:72:34:b3:eb:6c:73:f0:85:0a: 67:28:03:6b:27:bb:36:75:8f:00:9c:ad:e7:6e:5a: e6:3f:a8:7e:db:08:ba:a7:c7:ab:ad:79:73:8b:55: 3a:1c:27:91:ef:b5:ce:cc:98:f2:78:da:0c:90:fc: 59:7d:aa:1f:74:20:32:60:f4:19:d8:1f:07:f8:1e: 44:30:fc:f9:74:5f:2d:3f:b5:14:b4:7c:47:ee:a9: ef:6e:c6:e1:1e:2d:a0:a1:4f:20:26:35:c4:db:43: 47:46:ae:06:24:07:39:13:63:7f:94:ed:52:75:ef: 52:e4:fb:8c:62:54:e1:d3:17:78:01:25:9c:27:30: 59:b3:91:44:c2:6f:d6:1a:a7:6b:4e:24:59:f2:65: ed:c8:67:17:f9:b1:cd:dd:f0:36:9c:95:2a:29:cf: e5:a5:11:5e:08:b2:7a:86:1b:44:4c:e5:21:fd:90: ff:9b:dd:80:87:df:31:db:52:a7:33:d4:a0:88:22: 5f:f2:28:2c:0c:cc:80:2b:17:f1:67:07:65:da:0b: 68:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:83:46:97:55:E7:A4:9E:EF:B6:E9:FF:FA:3C:7F:C7:15:59:E9:6D X509v3 Authority Key Identifier: keyid:CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:d0:e9:ed:b7:b9:eb:a8:04:f5:4a:ac:d6:97:67:37:a9:4f: 86:5d:fe:de:d3:1d:05:c2:1d:ae:a1:f9:62:d5:fd:5f:a7:d2: 73:4b:50:a5:7b:91:d8:36:d1:da:3c:7a:20:30:7f:33:14:ed: 3e:a4:49:35:21:32:fb:fe:41:06:d9:dd:90:47:a3:cf:ba:f1: 46:6d:dd:cd:f9:73:c0:41:91:da:04:8b:b7:98:9e:19:77:55: 77:ab:70:8b:d8:d7:36:7a:b2:4e:82:24:f4:62:5b:2e:b8:e3: c9:a3:98:c0:17:23:c3:cb:b4:7b:6b:4b:7f:bd:af:b4:65:43: 12:52:1d:c1:43:1f:4c:11:a2:f5:0d:1a:02:ad:6d:6e:4d:e2: a6:9f:fa:39:61:78:d5:0d:7f:a0:ca:a1:f5:4c:43:d1:69:e7: ac:9f:e1:3c:44:f1:96:85:c1:ab:86:28:a2:73:a6:26:25:f7: f0:93:8e:d0:8e:58:67:93:e8:3d:be:5b:b9:b7:b8:aa:ce:e2: 0c:58:29:c9:c8:bf:3b:86:f8:25:71:ef:4c:74:5a:23:e2:3b: 03:11:1f:1a:77:da:e2:a3:23:e0:58:8c:57:15:41:48:80:ab: bb:48:dc:6a:c9:68:97:1f:0d:12:40:75:af:fe:67:7f:a8:ca: 99:e1:15:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUE0NDExMC8GA1UEBRMoQ0FDQTJFNDQyMjIyQzNFRDg3RTc3NTlCOTVFQzExMThD MzhCODVCNjAeFw0yNTEyMDMwNjA5MDhaFw0yNTEyMTAwNjA5MDhaMBgxFjAUBgNV BAMTDTY5MmZkNDA1LTc3YjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDY3tcEnlhUhUOi5Xhp1bNK3vxWzJ+OC5RnX6Hsz0h9zJP+FNa/NZT+rzZhdWc6 sy3sHnI0s+tsc/CFCmcoA2snuzZ1jwCcreduWuY/qH7bCLqnx6uteXOLVTocJ5Hv tc7MmPJ42gyQ/Fl9qh90IDJg9BnYHwf4HkQw/Pl0Xy0/tRS0fEfuqe9uxuEeLaCh TyAmNcTbQ0dGrgYkBzkTY3+U7VJ171Lk+4xiVOHTF3gBJZwnMFmzkUTCb9Yap2tO JFnyZe3IZxf5sc3d8DaclSopz+WlEV4IsnqGG0RM5SH9kP+b3YCH3zHbUqcz1KCI Il/yKCwMzIArF/FnB2XaC2jbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPoNGl1Xn pJ7vtun/+jx/xxVZ6W0wHwYDVR0jBBgwFoAUysouRCIiw+2H53WblewRGMOLhbYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5QTQ0L0NEQTk1QjQ4QzA4 MjExRjBCOEZFNzIyNkM0RjlBRTAyL3lzb3VSQ0lpdy0ySDUzV2JsZXdSR01PTGhi WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveXNvdVJDSWl3LTJINTNXYmxld1JHTU9MaGJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 QTQ0L0NEQTk1QjQ4QzA4MjExRjBCOEZFNzIyNkM0RjlBRTAyL3lzb3VSQ0lpdy0y SDUzV2JsZXdSR01PTGhiWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACTQ6e23ueuoBPVKrNaXZzepT4Zd/t7THQXCHa6h+WLV/V+n0nNLUKV7 kdg20do8eiAwfzMU7T6kSTUhMvv+QQbZ3ZBHo8+68UZt3c35c8BBkdoEi7eYnhl3 VXercIvY1zZ6sk6CJPRiWy6448mjmMAXI8PLtHtrS3+9r7RlQxJSHcFDH0wRovUN GgKtbW5N4qaf+jlheNUNf6DKofVMQ9Fp56yf4TxE8ZaFwauGKKJzpiYl9/CTjtCO WGeT6D2+W7m3uKrO4gxYKcnIvzuG+CVx70x0WiPiOwMRHxp32uKjI+BYjFcVQUiA q7tI3GrJaJcfDRJAda/+Z3+oypnhFRI= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:12 2025 by rpki-client