This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft File: YmfJfrSg3wHtvW-dQahqh54CeX8.mft (raw, json) Hash identifier: 4gbZZ1FcDifwQdjeC6TYr8Wq2wkQcsHR7peGbhjKfcU= Subject key identifier: 0F:DA:03:5F:3F:D1:AA:0F:62:5B:99:CC:52:8C:69:8E:E7:1A:41:34 Authority key identifier: 62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F Certificate issuer: /CN=A91FA66B/serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F Certificate serial: 020F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft Manifest number: 020C Signing time: Tue 23 Dec 2025 01:23:44 +0000 Manifest this update: Tue 23 Dec 2025 01:23:43 +0000 Manifest next update: Tue 30 Dec 2025 01:23:43 +0000 Files and hashes: 1: YmfJfrSg3wHtvW-dQahqh54CeX8.crl (hash: 8z2Qf4DbGpJuqo7yovZAzbGGqZsGq7kcvv+XyZihSCk=) 2: B2DE2498C4FD11ED909F2770C4F9AE02.roa (hash: sz+mmIZs/29Io2xKT3w1Go850hnuQbV97uqO5OCD7zA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 527 (0x20f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA66B, serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F Validity Not Before: Dec 23 01:23:43 2025 GMT Not After : Dec 30 01:23:43 2025 GMT Subject: CN=6949ef1f-39de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:34:2c:91:d1:2c:1f:34:2c:ec:4e:d9:19:a4: 53:ae:a8:4d:5f:62:df:6b:a4:8a:a4:bf:af:ce:58: cb:91:c7:27:87:a4:f0:5a:b5:50:1b:33:47:6b:c3: 43:91:49:d5:1d:10:5f:d7:b7:b9:11:da:5c:61:37: 2a:b9:73:44:ba:18:91:f9:c1:0a:e1:2c:ed:24:74: 38:bb:df:77:7a:c3:3b:93:0c:c8:39:e0:7b:3b:d7: 80:9e:07:31:be:de:6c:4a:f8:9c:52:5f:74:dc:7f: 23:54:28:5f:40:eb:c4:fe:6f:66:9b:a3:15:00:14: c1:19:97:89:18:69:12:20:86:aa:f4:96:03:3a:9f: 5c:61:d4:ae:9f:a7:78:f0:7a:e2:f4:bd:69:73:f8: 49:5c:fc:b7:ce:7d:65:33:ac:bc:75:cb:a1:e3:f1: b7:f8:f1:fb:d2:01:ea:3a:16:f3:7b:f8:00:0d:74: 71:c5:a6:d3:ce:6c:d5:ff:47:e1:02:24:07:84:a6: 49:41:d8:fa:90:73:d8:af:4e:69:bf:9e:e1:91:68: 97:de:8b:8f:0d:be:68:c8:9a:97:ee:91:3c:72:98: 09:2a:63:2b:50:07:7c:f8:d4:c1:6d:1d:03:f5:b7: a9:d3:38:d0:40:cc:39:17:9d:a0:81:bd:f4:47:03: d7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DA:03:5F:3F:D1:AA:0F:62:5B:99:CC:52:8C:69:8E:E7:1A:41:34 X509v3 Authority Key Identifier: keyid:62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:7c:ca:a4:27:8b:20:4a:ae:c3:a8:b7:73:b2:61:4c:eb:5f: 91:ed:7a:2d:55:78:65:1d:19:c4:81:ed:24:cf:dc:93:e9:8e: 1f:e7:c2:1c:17:68:5d:ea:66:5f:f6:fd:65:69:e5:9e:6c:4b: d6:e6:05:ac:88:91:8d:fc:65:65:9e:83:6f:16:4d:b8:dd:0f: c7:a3:80:a7:37:44:48:3e:5b:9e:2a:11:37:aa:f2:72:b4:9c: 7e:a9:b2:20:d6:20:3d:e3:79:05:d1:e7:43:5d:ac:fc:26:be: 27:bd:60:0a:57:83:a1:46:b4:4a:69:37:da:8f:b0:54:7c:37: 4a:c9:ce:0f:01:cb:36:c0:dc:f8:a3:ac:73:fd:dc:10:a2:8d: dc:42:b7:86:e8:6a:16:35:b3:bf:ac:fb:7a:e4:05:9b:cb:64: cc:f6:37:6c:ac:8c:c5:61:1c:fb:cc:ac:24:52:c8:61:8f:83: 4a:96:33:64:2a:60:59:73:73:0f:4f:e5:39:3e:4d:07:ea:34: 31:c5:af:ad:72:d5:60:9d:73:4c:87:43:62:a2:ac:c2:80:43: 69:01:ba:b5:6c:ab:bf:f3:1e:c8:a0:ce:72:9c:71:fe:bf:af: 29:f6:13:bd:a0:76:90:43:c8:b3:80:2b:09:a8:e5:f6:73:be: a0:37:9f:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2NkIxMTAvBgNVBAUTKDYyNjdDOTdFQjRBMERGMDFFREJENkY5RDQxQTg2QTg3 OUUwMjc5N0YwHhcNMjUxMjIzMDEyMzQzWhcNMjUxMjMwMDEyMzQzWjAYMRYwFAYD VQQDDA02OTQ5ZWYxZi0zOWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTQskdEsHzQs7E7ZGaRTrqhNX2Lfa6SKpL+vzljLkccnh6TwWrVQGzNHa8ND kUnVHRBf17e5EdpcYTcquXNEuhiR+cEK4SztJHQ4u993esM7kwzIOeB7O9eAngcx vt5sSvicUl903H8jVChfQOvE/m9mm6MVABTBGZeJGGkSIIaq9JYDOp9cYdSun6d4 8Hri9L1pc/hJXPy3zn1lM6y8dcuh4/G3+PH70gHqOhbze/gADXRxxabTzmzV/0fh AiQHhKZJQdj6kHPYr05pv57hkWiX3ouPDb5oyJqX7pE8cpgJKmMrUAd8+NTBbR0D 9bep0zjQQMw5F52ggb30RwPXfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/aA18/ 0aoPYluZzFKMaY7nGkE0MB8GA1UdIwQYMBaAFGJnyX60oN8B7b1vnUGoaoeeAnl/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY2Qi8xNDJCQ0I5NkM0 RkExMUVEOUJERjMxNTdDNEY5QUUwMi9ZbWZKZnJTZzN3SHR2Vy1kUWFocWg1NENl WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltZkpmclNnM3dIdHZXLWRRYWhxaDU0Q2VYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY2Qi8xNDJCQ0I5NkM0RkExMUVEOUJERjMxNTdDNEY5QUUwMi9ZbWZKZnJTZzN3 SHR2Vy1kUWFocWg1NENlWDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3fMqkJ4sgSq7DqLdzsmFM61+R7XotVXhlHRnEge0kz9yT6Y4f58Ic F2hd6mZf9v1laeWebEvW5gWsiJGN/GVlnoNvFk243Q/Ho4CnN0RIPlueKhE3qvJy tJx+qbIg1iA943kF0edDXaz8Jr4nvWAKV4OhRrRKaTfaj7BUfDdKyc4PAcs2wNz4 o6xz/dwQoo3cQreG6GoWNbO/rPt65AWby2TM9jdsrIzFYRz7zKwkUshhj4NKljNk KmBZc3MPT+U5Pk0H6jQxxa+tctVgnXNMh0NioqzCgENpAbq1bKu/8x7IoM5ynHH+ v68p9hO9oHaQQ8izgCsJqOX2c76gN5+E -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:35 2025 by rpki-client