This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft File: yUSBytAO-x3qepOcvimo9F8l4gs.mft (raw, json) Hash identifier: o5s01y1iK1RJZfEMaipbFvS64ktG710YpE48vpPK4pA= Subject key identifier: F9:E3:7A:0A:4A:AF:B1:98:3E:DD:C6:ED:2F:CC:63:17:7F:7C:F6:DF Authority key identifier: C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B Certificate issuer: /CN=A9113F63/serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B Certificate serial: 0258 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft Manifest number: 0254 Signing time: Fri 05 Dec 2025 00:01:23 +0000 Manifest this update: Fri 05 Dec 2025 00:01:23 +0000 Manifest next update: Fri 12 Dec 2025 00:01:23 +0000 Files and hashes: 1: yUSBytAO-x3qepOcvimo9F8l4gs.crl (hash: 7YGbbORR4/1ClfdYxBr/qRJNXRY63eOexXLhAuAxJr4=) 2: 03D8DC4A40F011EDAD789E3AC4F9AE02.roa (hash: 21GXaY8jinl0FFe6J0Dy+QT51osw17hMflWFhu3HoLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 600 (0x258) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113F63, serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B Validity Not Before: Dec 5 00:01:23 2025 GMT Not After : Dec 12 00:01:23 2025 GMT Subject: CN=693220d3-c326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fd:f0:5c:8f:19:00:7e:b5:d2:82:91:26:0b: fc:ce:81:18:a6:a2:31:31:bd:48:a4:03:89:84:45: 96:a1:0b:29:91:7f:7b:84:c0:34:37:21:e9:5d:92: 7c:93:34:13:dd:b6:c9:ce:44:8c:ff:dd:2e:cd:af: d3:ec:f8:7e:39:e5:0c:69:cd:ae:e2:e1:77:86:97: e9:da:bc:22:bd:bb:cc:ac:de:18:80:9b:4e:7a:46: 58:38:4b:1d:02:f6:10:d8:8d:71:f7:66:fc:f3:62: 4d:1d:df:76:a4:b8:bf:ba:e9:d9:6e:6e:ba:70:9e: b5:98:9c:b5:05:eb:48:a6:c9:22:3f:18:f8:48:20: ba:17:35:96:ae:7c:fc:30:34:9e:17:aa:7e:e3:90: b0:ba:a2:6f:35:5f:b4:49:be:42:c2:6f:8a:7b:e6: 9e:6e:a9:c6:08:b1:e8:3e:39:65:47:0c:25:8e:4f: 9c:b9:44:61:b4:d7:60:0e:7f:08:34:29:97:94:2e: fb:88:2e:3b:ba:fc:b4:6b:a8:7d:37:cf:86:4a:2f: 27:ef:25:c8:a5:d3:e4:31:ed:fc:1e:4f:79:22:e4: ed:e2:b9:03:db:a2:c1:f0:9e:98:1b:b8:55:d8:32: 18:47:de:8d:1d:db:39:48:0a:6c:56:62:8b:0f:e3: ec:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E3:7A:0A:4A:AF:B1:98:3E:DD:C6:ED:2F:CC:63:17:7F:7C:F6:DF X509v3 Authority Key Identifier: keyid:C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:4e:f5:bd:c8:c5:ec:c6:03:4b:2c:f5:df:0b:90:ea:a1:dd: 5d:b8:1b:c3:dc:f1:69:85:3d:11:69:ad:a1:91:5a:e5:a7:42: 33:27:c1:0e:c8:3f:d0:d6:0d:10:18:0d:29:a9:9b:12:b5:af: e5:6d:6c:fd:f1:e7:34:0a:6a:7f:0c:15:87:b0:12:f5:59:f6: b0:88:85:19:69:7e:59:c5:b5:5d:5e:38:0b:db:4d:a8:e3:7a: 21:8e:22:4d:43:c2:f4:55:0f:5f:98:9a:9c:9c:69:2e:a9:18: b0:d1:c2:8a:75:70:63:7a:55:7e:5b:8c:e9:70:8a:55:2e:db: dd:9b:d7:5d:c0:1c:18:f3:b2:be:03:3a:d8:ef:1d:1e:da:a6: 67:3b:15:82:51:d6:1b:18:d6:9f:02:47:46:af:3b:fc:8c:db: 9e:fb:7d:6d:58:aa:8b:ed:17:17:1b:36:07:96:f4:d6:2a:0d: ac:41:34:1c:36:65:06:49:25:c0:56:31:51:3d:5c:f4:83:bd: e0:cf:b1:3a:8f:7c:8c:89:80:8a:95:91:f9:69:8e:fb:e5:ff: 96:bc:21:97:24:64:9c:7d:68:5d:56:ca:27:0b:4e:06:0c:24: 36:95:c6:1c:09:75:50:6b:3a:e5:21:56:47:c9:29:27:fd:df: b3:b9:02:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNGNjMxMTAvBgNVBAUTKEM5NDQ4MUNBRDAwRUZCMURFQTdBOTM5Q0JFMjlBOEY0 NUYyNUUyMEIwHhcNMjUxMjA1MDAwMTIzWhcNMjUxMjEyMDAwMTIzWjAYMRYwFAYD VQQDEw02OTMyMjBkMy1jMzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2P3wXI8ZAH610oKRJgv8zoEYpqIxMb1IpAOJhEWWoQspkX97hMA0NyHpXZJ8 kzQT3bbJzkSM/90uza/T7Ph+OeUMac2u4uF3hpfp2rwivbvMrN4YgJtOekZYOEsd AvYQ2I1x92b882JNHd92pLi/uunZbm66cJ61mJy1BetIpskiPxj4SCC6FzWWrnz8 MDSeF6p+45CwuqJvNV+0Sb5Cwm+Ke+aebqnGCLHoPjllRwwljk+cuURhtNdgDn8I NCmXlC77iC47uvy0a6h9N8+GSi8n7yXIpdPkMe38Hk95IuTt4rkD26LB8J6YG7hV 2DIYR96NHds5SApsVmKLD+PsRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnjegpK r7GYPt3G7S/MYxd/fPbfMB8GA1UdIwQYMBaAFMlEgcrQDvsd6nqTnL4pqPRfJeIL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0Y2My81MTlCNjRBNjQw RUMxMUVEQTg4RUI1MzNDNEY5QUUwMi95VVNCeXRBTy14M3FlcE9jdmltbzlGOGw0 Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVU0J5dEFPLXgzcWVwT2N2aW1vOUY4bDRncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0Y2My81MTlCNjRBNjQwRUMxMUVEQTg4RUI1MzNDNEY5QUUwMi95VVNCeXRBTy14 M3FlcE9jdmltbzlGOGw0Z3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTTvW9yMXsxgNLLPXfC5Dqod1duBvD3PFphT0Raa2hkVrlp0IzJ8EO yD/Q1g0QGA0pqZsSta/lbWz98ec0Cmp/DBWHsBL1WfawiIUZaX5ZxbVdXjgL202o 43ohjiJNQ8L0VQ9fmJqcnGkuqRiw0cKKdXBjelV+W4zpcIpVLtvdm9ddwBwY87K+ AzrY7x0e2qZnOxWCUdYbGNafAkdGrzv8jNue+31tWKqL7RcXGzYHlvTWKg2sQTQc NmUGSSXAVjFRPVz0g73gz7E6j3yMiYCKlZH5aY775f+WvCGXJGScfWhdVsonC04G DCQ2lcYcCXVQazrlIVZHySkn/d+zuQIw -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:06 2025 by rpki-client