This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft File: YZBA6DW609z1wgE5bYVxmVp6zFA.mft (raw, json) Hash identifier: vaCwuhpavpF4YgPZBRvmmTRYtZXgtIsd6AJzN32kgW0= Subject key identifier: 93:FE:F5:07:B6:B1:77:A6:77:F0:96:F0:10:46:46:31:91:4E:EF:29 Authority key identifier: 61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50 Certificate issuer: /CN=A91FABEF/serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft Manifest number: 0153 Signing time: Wed 03 Dec 2025 02:42:25 +0000 Manifest this update: Wed 03 Dec 2025 02:42:24 +0000 Manifest next update: Wed 10 Dec 2025 02:42:24 +0000 Files and hashes: 1: YZBA6DW609z1wgE5bYVxmVp6zFA.crl (hash: ZW9BAmz4+cvNbbtrBymjCJyJoUpDeKFS48Eixh7PCPY=) 2: 8045E9A4CEEC11EEAFFC5E36C4F9AE02.roa (hash: QQ0CP8HHmI7PCShWjhNg26xSyERliRPL6u4e6U+9a/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 02:42:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FABEF, serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50 Validity Not Before: Dec 3 02:42:24 2025 GMT Not After : Dec 10 02:42:24 2025 GMT Subject: CN=692fa391-5d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a1:c9:0b:ba:c9:a3:7f:03:60:12:bf:61:a2: f5:7a:00:3b:95:86:24:d6:e7:d2:e7:bb:7e:36:5a: 49:2a:bf:6b:78:3c:c1:c7:78:79:3e:b0:42:53:25: 72:23:f4:01:b7:06:27:ff:41:33:05:7f:44:8d:bd: de:3e:fc:31:24:d1:8e:77:be:87:2e:59:95:58:42: cc:a7:ed:d9:62:e3:dd:a8:97:04:ab:7b:3b:7f:66: 8a:4a:e6:41:85:c2:03:10:a5:f1:e3:66:04:73:92: 7f:17:ce:eb:61:7a:d6:ab:a2:30:d0:bb:ee:56:9e: 1d:fa:b0:86:a9:41:91:ef:1f:77:0c:77:c4:f2:05: 05:3b:7b:94:3d:b6:e9:01:29:0d:97:1b:80:ed:40: c0:62:a0:0e:56:43:1f:3b:2b:da:91:df:4f:4c:02: 27:12:e6:1b:ad:3a:8f:a3:a4:ba:3b:17:c0:9d:3d: 0d:b2:42:14:cc:00:c7:d5:82:13:2b:8d:1d:dd:f9: e4:77:e2:5f:64:b0:74:dc:32:1f:e4:3d:03:9e:83: 26:87:7f:18:2f:06:45:19:3c:65:d8:92:30:f2:2a: 78:eb:02:b2:62:00:96:1c:50:42:96:7d:09:a6:9b: f5:39:30:3e:7c:78:6a:da:a0:f9:97:d6:5d:85:c2: ea:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FE:F5:07:B6:B1:77:A6:77:F0:96:F0:10:46:46:31:91:4E:EF:29 X509v3 Authority Key Identifier: keyid:61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:7b:63:3e:89:88:6e:15:3f:84:77:e8:b4:1f:e3:5d:7f:75: a5:fb:8d:50:6c:ad:16:99:12:90:d2:63:9c:7a:d0:b0:39:c1: 11:fb:8f:32:32:f0:6d:50:2c:76:c5:2d:3e:bc:21:42:97:e4: e3:1f:f9:b5:2f:07:fd:77:9d:88:5b:b6:b2:f9:9c:21:74:ef: 7e:c3:a3:10:7d:c4:5b:e0:4a:e8:2f:a0:7a:e7:81:c1:db:b0: df:d7:b6:57:10:41:6d:14:de:99:42:24:99:c9:a0:67:aa:67: 1d:51:f2:ea:35:15:cb:9c:c7:9d:c7:d6:ab:9b:d9:c1:f0:87: 18:ea:88:3a:70:d4:6b:3d:73:07:b4:05:a5:39:51:8d:1b:e9: 2a:50:42:af:a2:48:31:63:05:e2:58:18:dc:42:fd:e5:69:c4: 64:2c:ac:c2:a1:83:c0:27:b7:75:a8:f7:5d:71:22:3f:03:48: 2c:77:1f:60:36:cc:d3:60:22:4a:35:c2:6d:78:8a:b1:66:35: 45:8b:a9:02:a5:bb:c4:e8:dd:dd:f4:6b:b8:32:eb:42:ee:da: 56:4d:ff:9c:9f:81:80:56:58:9b:5d:85:a9:84:d3:a0:b2:0b: 8f:eb:6c:50:6b:5d:62:1c:50:ec:80:f1:26:6c:89:7c:90:61: 4e:9b:b5:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFCRUYxMTAvBgNVBAUTKDYxOTA0MEU4MzVCQUQzRENGNUMyMDEzOTZEODU3MTk5 NUE3QUNDNTAwHhcNMjUxMjAzMDI0MjI0WhcNMjUxMjEwMDI0MjI0WjAYMRYwFAYD VQQDEw02OTJmYTM5MS01ZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKHJC7rJo38DYBK/YaL1egA7lYYk1ufS57t+NlpJKr9reDzBx3h5PrBCUyVy I/QBtwYn/0EzBX9Ejb3ePvwxJNGOd76HLlmVWELMp+3ZYuPdqJcEq3s7f2aKSuZB hcIDEKXx42YEc5J/F87rYXrWq6Iw0LvuVp4d+rCGqUGR7x93DHfE8gUFO3uUPbbp ASkNlxuA7UDAYqAOVkMfOyvakd9PTAInEuYbrTqPo6S6OxfAnT0NskIUzADH1YIT K40d3fnkd+JfZLB03DIf5D0DnoMmh38YLwZFGTxl2JIw8ip46wKyYgCWHFBCln0J ppv1OTA+fHhq2qD5l9ZdhcLqRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJP+9Qe2 sXemd/CW8BBGRjGRTu8pMB8GA1UdIwQYMBaAFGGQQOg1utPc9cIBOW2FcZlaesxQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUJFRi9DMDc2NDU3MkNC MTkxMUVFODE1RkFCNjhDNEY5QUUwMi9ZWkJBNkRXNjA5ejF3Z0U1YllWeG1WcDZ6 RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1laQkE2RFc2MDl6MXdnRTViWVZ4bVZwNnpGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUJFRi9DMDc2NDU3MkNCMTkxMUVFODE1RkFCNjhDNEY5QUUwMi9ZWkJBNkRXNjA5 ejF3Z0U1YllWeG1WcDZ6RkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADe2M+iYhuFT+Ed+i0H+Ndf3Wl+41QbK0WmRKQ0mOcetCwOcER+48y MvBtUCx2xS0+vCFCl+TjH/m1Lwf9d52IW7ay+ZwhdO9+w6MQfcRb4EroL6B654HB 27Df17ZXEEFtFN6ZQiSZyaBnqmcdUfLqNRXLnMedx9arm9nB8IcY6og6cNRrPXMH tAWlOVGNG+kqUEKvokgxYwXiWBjcQv3lacRkLKzCoYPAJ7d1qPddcSI/A0gsdx9g NszTYCJKNcJteIqxZjVFi6kCpbvE6N3d9Gu4MutC7tpWTf+cn4GAVlibXYWphNOg sguP62xQa11iHFDsgPEmbIl8kGFOm7Wf -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:29 2025 by rpki-client