This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft File: Y35CcZzKBnZlOgprNKBujlSsBe8.mft (raw, json) Hash identifier: ULIAKDqhc7+XwfAplQPR8LmdYnMPSFFvZ2gi+3b/Wis= Subject key identifier: A7:DC:22:C0:EA:33:D5:96:EE:54:9F:E6:40:C8:14:1F:4E:F8:A4:04 Authority key identifier: 63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF Certificate issuer: /CN=A91FECFD/serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Certificate serial: 0948 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft Manifest number: 0942 Signing time: Mon 22 Dec 2025 19:33:47 +0000 Manifest this update: Mon 22 Dec 2025 19:33:46 +0000 Manifest next update: Mon 29 Dec 2025 19:33:46 +0000 Files and hashes: 1: Y35CcZzKBnZlOgprNKBujlSsBe8.crl (hash: aw0bFn1ukGBzpgYFSMsc+ufrggr3HzrgFtB8dIo4Dz0=) 2: 995F3DCEAF7811EABCA9AC1DC4F9AE02.roa (hash: ZNkH5Sj7XHBs6ufHKPHidPlMntGP72EIG2BMLfQDnC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2376 (0x948) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECFD, serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Validity Not Before: Dec 22 19:33:46 2025 GMT Not After : Dec 29 19:33:46 2025 GMT Subject: CN=69499d1b-6288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2f:a7:1f:2c:5c:1a:ca:f1:d7:c0:f0:63:3c: 53:d2:af:40:4f:73:c6:d7:4f:ac:bc:51:ff:21:6c: a3:b9:8e:5e:37:73:75:83:f6:2c:7f:f1:e9:c6:b4: 0c:ad:09:42:d0:12:50:b5:04:46:15:6a:02:f9:a6: d1:de:01:ac:6a:69:2a:ff:45:d6:fd:16:99:fd:74: 36:42:77:64:dd:4c:e2:b3:50:c6:79:23:10:39:55: 9c:f9:ca:11:d8:90:3c:10:0e:c3:15:14:f3:bc:ef: 43:df:77:25:a1:93:de:60:71:5a:b1:3d:ce:38:29: 5e:25:ad:0e:bf:90:60:14:c7:38:ef:fd:6f:30:4a: 41:a2:8c:ea:53:4e:72:2c:7b:12:8b:61:33:cf:d6: 67:77:8e:54:80:c2:f3:5e:14:3d:bf:5d:c3:6c:46: 25:99:28:f5:7c:e1:a6:f4:d1:e8:e4:69:a5:3f:cd: 42:a1:fa:8c:9f:40:94:8c:62:27:01:23:29:87:be: cf:a7:72:fb:6d:6f:a3:76:f1:4b:4a:62:35:2b:ac: 00:db:e6:83:99:e9:00:90:8b:bb:68:16:c9:11:b6: 2b:52:36:ed:2f:59:4c:56:25:3f:99:63:58:8f:ac: 92:2b:11:03:e3:43:8d:27:a8:b3:a7:13:7e:b8:52: 6c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DC:22:C0:EA:33:D5:96:EE:54:9F:E6:40:C8:14:1F:4E:F8:A4:04 X509v3 Authority Key Identifier: keyid:63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:03:2a:d4:a4:c0:5e:8c:37:e8:e7:51:d3:4c:7c:93:52:42: 3d:6d:d7:a6:d5:02:57:0f:c7:28:98:de:56:00:d4:1c:9c:bd: ae:e0:63:5b:23:92:dc:79:dd:fc:55:07:a8:56:55:20:94:1f: 25:db:5e:e4:26:e8:0e:44:ae:38:09:fd:e2:f4:b7:62:05:1b: c2:ab:a5:cc:74:5a:9f:a7:d4:80:90:74:59:c9:fd:01:d7:8c: 42:df:ff:c2:b0:0a:c6:ce:3b:7a:df:5a:e4:41:98:61:79:1e: da:6e:97:49:ce:8a:7c:8e:6c:f5:6e:19:a0:e7:58:e4:25:b1: f1:15:ae:60:88:52:b5:9d:30:f3:6b:f0:6c:82:56:a9:ff:d2: 4a:3d:b2:1a:60:c9:c3:76:64:43:86:c5:58:68:9f:e6:f2:14: 5e:5c:81:7a:a0:0b:7c:6f:ea:7d:f2:ef:ee:52:40:89:da:67: 11:a7:bb:be:1c:f7:ad:75:28:c1:06:d5:a0:51:fb:dc:c4:16: a9:1d:dc:ab:93:c9:65:bb:a1:a1:64:cc:1e:54:14:fb:9d:22: f0:c2:52:5d:b7:eb:0e:a2:c4:83:19:03:83:d8:37:9b:b9:4d: c0:bd:a5:6b:11:94:8c:dd:dc:ae:22:55:44:ff:2a:cf:f4:c8: 00:70:cc:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDRkQxMTAvBgNVBAUTKDYzN0U0MjcxOUNDQTA2NzY2NTNBMEE2QjM0QTA2RThF NTRBQzA1RUYwHhcNMjUxMjIyMTkzMzQ2WhcNMjUxMjI5MTkzMzQ2WjAYMRYwFAYD VQQDDA02OTQ5OWQxYi02Mjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsy+nHyxcGsrx18DwYzxT0q9AT3PG10+svFH/IWyjuY5eN3N1g/Ysf/HpxrQM rQlC0BJQtQRGFWoC+abR3gGsamkq/0XW/RaZ/XQ2Qndk3Uzis1DGeSMQOVWc+coR 2JA8EA7DFRTzvO9D33cloZPeYHFasT3OOCleJa0Ov5BgFMc47/1vMEpBoozqU05y LHsSi2Ezz9Znd45UgMLzXhQ9v13DbEYlmSj1fOGm9NHo5GmlP81CofqMn0CUjGIn ASMph77Pp3L7bW+jdvFLSmI1K6wA2+aDmekAkIu7aBbJEbYrUjbtL1lMViU/mWNY j6ySKxED40ONJ6izpxN+uFJsiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfcIsDq M9WW7lSf5kDIFB9O+KQEMB8GA1UdIwQYMBaAFGN+QnGcygZ2ZToKazSgbo5UrAXv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNGRC8zN0EwNDI2NEFG NzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0JuWmxPZ3ByTktCdWpsU3NC ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzNUNjWnpLQm5abE9ncHJOS0J1amxTc0JlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUNGRC8zN0EwNDI2NEFGNzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0Ju WmxPZ3ByTktCdWpsU3NCZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPAyrUpMBejDfo51HTTHyTUkI9bdem1QJXD8comN5WANQcnL2u4GNb I5Lced38VQeoVlUglB8l217kJugORK44Cf3i9LdiBRvCq6XMdFqfp9SAkHRZyf0B 14xC3//CsArGzjt631rkQZhheR7abpdJzop8jmz1bhmg51jkJbHxFa5giFK1nTDz a/Bsglap/9JKPbIaYMnDdmRDhsVYaJ/m8hReXIF6oAt8b+p98u/uUkCJ2mcRp7u+ HPetdSjBBtWgUfvcxBapHdyrk8llu6GhZMweVBT7nSLwwlJdt+sOosSDGQOD2Deb uU3AvaVrEZSM3dyuIlVE/yrP9MgAcMx3 -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:22 2025 by rpki-client