This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft File: YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft (raw, json) Hash identifier: s9U9pg02jJhPAmyTOp6XHY59zzatA0XGctndDroc1TI= Subject key identifier: 4B:D7:C2:32:CF:A1:2D:17:17:87:B7:62:2D:A8:3E:BA:0A:2D:4C:AA Authority key identifier: 60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5 Certificate issuer: /CN=A91F59DF/serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5 Certificate serial: 0692 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft Manifest number: 0684 Signing time: Mon 08 Dec 2025 21:15:38 +0000 Manifest this update: Mon 08 Dec 2025 21:15:37 +0000 Manifest next update: Mon 15 Dec 2025 21:15:37 +0000 Files and hashes: 1: YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl (hash: PmdT9NpzxyOGt4IjUdSir5SsAo6ngmW8GJ5sftJyca4=) 2: 1348519E9C1211EBA38A7C4CC4F9AE02.roa (hash: jmj2Qf4qhtOu5u36GPmwSsc+P3+wO6jacfxys+6pyWY=) 3: 354314309C0F11EBAEFB6225C4F9AE02.roa (hash: JJP7X3f6AVH5KsSFfVI30UVBcX+xwO84hT0LgBX60uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 21:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1682 (0x692) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59DF, serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5 Validity Not Before: Dec 8 21:15:37 2025 GMT Not After : Dec 15 21:15:37 2025 GMT Subject: CN=69373ffa-8ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b6:9d:77:44:0a:c3:d9:70:66:40:09:e9:a5: 05:a6:47:df:e2:e6:cb:29:38:79:d7:ff:f3:2d:e2: 86:90:38:ea:5e:77:b5:b1:7f:51:49:6d:28:13:6c: fd:7f:9c:dd:62:7b:25:e8:8a:e5:69:45:14:be:cf: 2c:de:a9:e6:cb:e2:4b:7b:69:cf:31:16:aa:88:c1: 2e:2b:b4:82:e7:a7:53:32:ee:3d:9c:64:e1:cd:16: 6f:bd:81:e7:be:af:b8:36:6f:55:51:2c:1d:48:65: ac:e0:f1:fc:a4:b6:34:45:e9:b8:37:8b:3b:df:b3: cf:99:55:4f:00:ed:76:6c:32:08:f0:55:2e:2d:59: a6:6b:19:c8:ae:90:44:3b:de:8b:1a:18:b9:7f:46: 2b:b7:12:73:a3:18:59:c0:d0:77:70:0b:0f:c7:00: c3:67:9d:23:10:a8:1e:06:7d:65:24:10:ce:88:37: 6d:7e:d3:f3:07:cc:79:7b:04:51:d0:38:a4:f9:e5: 6b:4a:60:9e:1c:7b:81:41:3d:76:95:76:3d:f9:7f: b6:3a:23:3e:74:f3:60:57:c3:29:1a:45:90:cb:eb: 8d:52:4e:ec:13:91:98:58:a2:f7:59:8f:07:ca:7a: 08:f4:2e:b7:4f:65:84:24:1d:39:91:05:10:b0:d0: b2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D7:C2:32:CF:A1:2D:17:17:87:B7:62:2D:A8:3E:BA:0A:2D:4C:AA X509v3 Authority Key Identifier: keyid:60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:83:88:6e:fd:b4:6c:66:80:b6:ea:27:92:46:66:88:8e:1d: d2:96:48:49:c0:2b:e1:c4:84:47:83:dc:35:f6:0a:c3:c0:f7: f4:67:bb:01:f5:6c:c5:75:48:66:89:eb:9a:6d:ce:ef:5b:13: 96:10:32:ad:d8:56:0a:36:a6:df:c9:81:3a:d6:5c:b5:b6:39: f2:48:8f:11:3e:ca:1f:bb:4e:db:d7:af:71:7d:13:3a:d7:9d: 3d:5e:71:a2:e1:2a:13:1b:04:2f:b7:9b:ab:f8:70:37:24:61: 90:78:db:94:bc:9f:5b:68:21:32:19:a4:70:a0:4d:25:a2:53: f0:cf:87:a1:3f:f3:01:74:76:b6:9f:ea:73:cc:b9:5b:00:8d: c2:04:69:79:04:b4:7f:f3:e1:e5:70:d0:2a:0c:54:ef:29:0e: c5:05:8c:ac:8d:d2:b8:ee:dc:b8:9b:4e:42:23:d7:9f:a3:99: 00:8f:cb:85:7c:d6:0b:03:e9:b1:f5:df:19:bb:a2:2f:b6:c5: fe:29:a4:2f:87:80:54:3e:85:6c:cf:f0:10:bb:b6:2f:06:dd: 83:3b:77:b4:6c:4b:fa:ad:a9:23:77:56:47:8b:bf:33:97:86: a9:31:14:d7:4c:14:ef:20:bf:07:4b:d7:4d:84:17:f8:4f:ec: 76:2a:35:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5REYxMTAvBgNVBAUTKDYwOUEzMTI2RTIzNjlBOTdENDdGRDY0NDk4RDgxNjVF MjFFNTI1QzUwHhcNMjUxMjA4MjExNTM3WhcNMjUxMjE1MjExNTM3WjAYMRYwFAYD VQQDEw02OTM3M2ZmYS04YmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLadd0QKw9lwZkAJ6aUFpkff4ubLKTh51//zLeKGkDjqXne1sX9RSW0oE2z9 f5zdYnsl6IrlaUUUvs8s3qnmy+JLe2nPMRaqiMEuK7SC56dTMu49nGThzRZvvYHn vq+4Nm9VUSwdSGWs4PH8pLY0Rem4N4s737PPmVVPAO12bDII8FUuLVmmaxnIrpBE O96LGhi5f0YrtxJzoxhZwNB3cAsPxwDDZ50jEKgeBn1lJBDOiDdtftPzB8x5ewRR 0Dik+eVrSmCeHHuBQT12lXY9+X+2OiM+dPNgV8MpGkWQy+uNUk7sE5GYWKL3WY8H ynoI9C63T2WEJB05kQUQsNCyIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvXwjLP oS0XF4e3Yi2oProKLUyqMB8GA1UdIwQYMBaAFGCaMSbiNpqX1H/WRJjYFl4h5SXF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlERi9CQjUyRjRBQzlD MEQxMUVCQUVEODRCMjRDNEY5QUUwMi9ZSm94SnVJMm1wZlVmOVpFbU5nV1hpSGxK Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKb3hKdUkybXBmVWY5WkVtTmdXWGlIbEpjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlERi9CQjUyRjRBQzlDMEQxMUVCQUVEODRCMjRDNEY5QUUwMi9ZSm94SnVJMm1w ZlVmOVpFbU5nV1hpSGxKY1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlg4hu/bRsZoC26ieSRmaIjh3SlkhJwCvhxIRHg9w19grDwPf0Z7sB 9WzFdUhmieuabc7vWxOWEDKt2FYKNqbfyYE61ly1tjnySI8RPsofu07b169xfRM6 1509XnGi4SoTGwQvt5ur+HA3JGGQeNuUvJ9baCEyGaRwoE0lolPwz4ehP/MBdHa2 n+pzzLlbAI3CBGl5BLR/8+HlcNAqDFTvKQ7FBYysjdK47ty4m05CI9efo5kAj8uF fNYLA+mx9d8Zu6IvtsX+KaQvh4BUPoVsz/AQu7YvBt2DO3e0bEv6rakjd1ZHi78z l4apMRTXTBTvIL8HS9dNhBf4T+x2KjU/ -----END CERTIFICATE-----Generated at Wed Dec 10 15:02:51 2025 by rpki-client