This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft File: vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft (raw, json) Hash identifier: 5epD7Ms6pKnJw6jnD6hXwtMS8LpZCzB4vMfDoB8HYMU= Subject key identifier: 50:92:3F:55:A4:BC:1E:2A:3A:43:EB:11:1E:40:E5:8B:F9:A1:F3:E2 Authority key identifier: BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F Certificate issuer: /CN=A91F4957/serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft Manifest number: 01CF Signing time: Tue 23 Dec 2025 01:52:47 +0000 Manifest this update: Tue 23 Dec 2025 01:52:46 +0000 Manifest next update: Tue 30 Dec 2025 01:52:46 +0000 Files and hashes: 1: vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl (hash: g/7AkLEuPy7RrAqdsWf/6WR7yJ4+MYo6szfB9mMXFI4=) 2: 60B707FA1AEA11EE92BEA24CC4F9AE02.roa (hash: kXqagkJo/A0eBKA6rzsFPrgkBqXmX4C+r5kQGo8fciw=) 3: F0237E941B1911EE9DFF2942C4F9AE02.roa (hash: OFcdlnYr84QtfXIjFkq221jW9RB67N6+iA5hYs6y+y0=) 4: 4231A1AA1B1711EEA5566A23C4F9AE02.roa (hash: lTkc7C0RlmKbFSYdbjr+dPk/Bz3louAuGeeNLMUaa3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4957, serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Validity Not Before: Dec 23 01:52:46 2025 GMT Not After : Dec 30 01:52:46 2025 GMT Subject: CN=6949f5ee-f270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bd:bb:0a:59:e0:74:38:c5:d4:38:30:d0:a0: ca:f4:3a:74:ab:ab:3a:7e:7e:a3:3b:3d:4c:3d:2f: 7d:ed:2f:ca:a3:94:15:61:e9:17:28:6f:eb:63:bf: d8:9f:b0:18:ca:9e:f4:7c:f5:b4:d8:52:7a:eb:18: fc:73:83:b7:87:9b:73:32:95:10:22:29:31:54:82: f2:19:1b:fd:ea:4e:95:27:b2:ad:c7:2f:c6:f1:f7: 95:50:78:94:fd:4a:53:f3:26:29:0a:9e:71:df:a3: b2:bc:52:f6:67:90:2e:65:c4:92:44:39:6d:0a:ef: 1f:88:7b:02:22:dd:aa:0f:03:a3:e0:68:12:98:ec: 02:ee:5e:fe:63:20:47:80:a0:62:85:e2:44:cc:f7: af:4b:c9:c0:3b:ac:e3:94:08:83:c4:12:83:16:e0: 31:a4:5f:1d:51:06:a7:2f:ec:c8:14:79:8e:37:85: 80:08:49:e0:6b:2d:cc:0c:7c:36:d2:fe:bc:dd:bb: af:dc:d0:09:b8:4d:06:60:b5:a7:ed:d4:a0:71:f1: e0:8c:72:1e:82:3f:1a:77:6b:6b:a6:4a:1e:af:31: 92:74:60:9a:55:dc:12:34:15:fd:99:45:10:7c:63: 0a:f7:72:be:38:fd:ab:e7:aa:10:4c:f0:55:67:dc: 54:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:92:3F:55:A4:BC:1E:2A:3A:43:EB:11:1E:40:E5:8B:F9:A1:F3:E2 X509v3 Authority Key Identifier: keyid:BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ea:fe:6c:48:a5:7d:5a:78:d7:a3:57:3d:07:f3:22:f8:b5: c2:d1:b4:12:f5:a8:3f:d2:1e:16:0e:40:cb:15:83:a1:b8:35: 6a:c7:f2:28:e4:b7:19:be:31:c3:98:36:b9:03:f7:a8:ab:e1: 65:25:1b:73:5c:d5:fc:1e:50:f3:9b:20:26:01:e4:6b:6a:cb: a7:77:b4:c5:08:e8:3e:43:48:43:70:95:88:2a:13:94:ad:c8: e2:f4:a4:c0:58:8b:b6:fe:0b:61:06:19:91:cc:37:38:f5:ca: d5:c4:29:9d:ee:d6:96:67:93:7b:44:92:0f:b4:8f:85:ae:4d: 95:64:46:7b:6f:a3:d3:00:9d:e3:04:41:0c:eb:fb:73:6a:e1: 8d:1b:a5:d7:e5:48:47:f2:31:ab:2b:df:4d:d3:15:52:47:1a: ea:3a:b0:92:3b:50:5f:a4:ed:cb:61:ff:9f:43:19:41:3c:b7: ed:f0:bc:7d:65:54:e0:de:02:fb:e9:53:02:7e:e4:fe:28:b1: 51:75:d2:a1:c1:13:c7:98:c4:2c:bf:e2:28:d2:6e:0b:16:80: 36:54:28:12:33:4a:86:ff:6e:a9:05:fb:d0:43:cf:65:6e:7a: 15:18:be:75:8a:62:53:5d:e8:ed:7e:80:fc:04:c2:fb:9e:79: 48:f2:be:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NTcxMTAvBgNVBAUTKEJGMkQxQjM5RDNDMkU5QUUwQUE4RkFCOTRCQUM1NDBD QzUyNjUyNEYwHhcNMjUxMjIzMDE1MjQ2WhcNMjUxMjMwMDE1MjQ2WjAYMRYwFAYD VQQDDA02OTQ5ZjVlZS1mMjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw727ClngdDjF1Dgw0KDK9Dp0q6s6fn6jOz1MPS997S/Ko5QVYekXKG/rY7/Y n7AYyp70fPW02FJ66xj8c4O3h5tzMpUQIikxVILyGRv96k6VJ7Ktxy/G8feVUHiU /UpT8yYpCp5x36OyvFL2Z5AuZcSSRDltCu8fiHsCIt2qDwOj4GgSmOwC7l7+YyBH gKBiheJEzPevS8nAO6zjlAiDxBKDFuAxpF8dUQanL+zIFHmON4WACEngay3MDHw2 0v683buv3NAJuE0GYLWn7dSgcfHgjHIegj8ad2trpkoerzGSdGCaVdwSNBX9mUUQ fGMK93K+OP2r56oQTPBVZ9xUPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCSP1Wk vB4qOkPrER5A5Yv5ofPiMB8GA1UdIwQYMBaAFL8tGznTwumuCqj6uUusVAzFJlJP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Ny81NzFCMjIxMDFB RTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZhNEtxUHE1UzZ4VURNVW1V azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z5MGJPZFBDNmE0S3FQcTVTNnhVRE1VbVVrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Ny81NzFCMjIxMDFBRTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZh NEtxUHE1UzZ4VURNVW1VazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt6v5sSKV9WnjXo1c9B/Mi+LXC0bQS9ag/0h4WDkDLFYOhuDVqx/Io 5LcZvjHDmDa5A/eoq+FlJRtzXNX8HlDzmyAmAeRrasund7TFCOg+Q0hDcJWIKhOU rcji9KTAWIu2/gthBhmRzDc49crVxCmd7taWZ5N7RJIPtI+Frk2VZEZ7b6PTAJ3j BEEM6/tzauGNG6XX5UhH8jGrK99N0xVSRxrqOrCSO1BfpO3LYf+fQxlBPLft8Lx9 ZVTg3gL76VMCfuT+KLFRddKhwRPHmMQsv+Io0m4LFoA2VCgSM0qG/26pBfvQQ89l bnoVGL51imJTXejtfoD8BML7nnlI8r41 -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:35 2025 by rpki-client