This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft File: YkYyDes0LSw9wa7bkPF2dyt_x38.mft (raw, json) Hash identifier: ZA3aVJFJkrYqG7l/wWyj94+zPNR4u2WfRBQNit40l+4= Subject key identifier: 29:83:8E:D6:CC:23:9B:24:CC:AF:42:A0:EA:99:4C:FB:C3:FB:6E:F0 Authority key identifier: 62:46:32:0D:EB:34:2D:2C:3D:C1:AE:DB:90:F1:76:77:2B:7F:C7:7F Certificate issuer: /CN=A911AD1F/serialNumber=6246320DEB342D2C3DC1AEDB90F176772B7FC77F Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft Manifest number: 23 Signing time: Fri 05 Dec 2025 05:34:14 +0000 Manifest this update: Fri 05 Dec 2025 05:34:13 +0000 Manifest next update: Fri 12 Dec 2025 05:34:13 +0000 Files and hashes: 1: YkYyDes0LSw9wa7bkPF2dyt_x38.crl (hash: M52qGgjPE5nPFrQQkH7rePzj1aWeTLwKw2ruvo/G7cY=) 2: 5CA352A49DAB11F0B1E32C64C4F9AE02.roa (hash: +QKL7YQeAFpSt5nMMIAz5oWErQmX2UUEoZKFT1MpXb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.crl rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AD1F, serialNumber=6246320DEB342D2C3DC1AEDB90F176772B7FC77F Validity Not Before: Dec 5 05:34:13 2025 GMT Not After : Dec 12 05:34:13 2025 GMT Subject: CN=69326ed5-42d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cb:70:38:68:f7:fb:8a:c1:2f:a4:48:61:7f: b6:01:c4:36:2a:e2:70:a7:86:c6:16:58:44:73:ba: 60:6e:82:58:d7:99:03:28:e6:86:3b:e0:d4:8f:b0: 04:04:6b:40:d1:a5:aa:92:57:a2:f9:c6:9e:fd:0a: 20:19:b7:e5:b2:6f:bf:04:a0:33:44:db:83:91:df: 9c:d4:38:ce:d3:51:78:f1:b1:94:87:fc:c8:b3:21: e1:f4:f7:59:61:5f:8f:1b:84:fd:6f:a4:42:2b:7e: 29:24:d1:f1:d7:61:d4:ed:61:b6:84:a7:11:68:ac: fb:15:53:86:8d:2f:04:e4:ed:6d:be:08:24:04:90: 64:9f:d7:55:ed:f2:26:71:66:dd:46:06:fb:0c:a9: ac:dc:81:64:38:cb:01:4d:dd:1b:08:17:00:4f:8c: d9:f3:11:ee:f2:cd:f0:53:fd:f6:9f:89:26:c8:b2: 39:48:2f:20:9b:d7:3f:49:a8:3e:5b:c8:5f:07:5f: 13:d9:77:73:3b:ef:f3:5e:75:39:f9:7b:6d:89:75: 36:d4:83:96:4c:15:39:00:08:2b:92:0b:14:3e:41: 05:9f:45:b3:74:61:0e:f7:c1:70:73:5c:8b:d0:b7: 8c:3c:94:0d:fe:2f:0f:c6:d8:8d:b2:28:7a:f9:22: e0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:83:8E:D6:CC:23:9B:24:CC:AF:42:A0:EA:99:4C:FB:C3:FB:6E:F0 X509v3 Authority Key Identifier: keyid:62:46:32:0D:EB:34:2D:2C:3D:C1:AE:DB:90:F1:76:77:2B:7F:C7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:f9:25:1d:02:d8:68:25:7f:43:db:15:65:1b:45:eb:bf:35: 54:e3:e3:cf:a5:84:e6:30:4d:5d:b8:d6:df:4e:a3:e9:fd:a4: 78:53:35:62:63:5c:de:b6:96:9e:38:bd:68:2d:a4:6c:9d:55: 39:dd:a1:ac:a5:8c:7b:f1:1e:2e:da:2d:63:7f:11:c8:a9:69: ad:d3:34:5b:c5:24:c5:e0:f3:0d:e9:1f:35:79:8a:2d:c8:af: f4:7b:66:f3:ee:2d:76:b1:da:cb:a3:87:6b:53:28:97:b7:11: ca:52:42:45:80:7c:17:ce:f2:6f:82:7d:40:bc:a3:81:e8:43: 7f:c7:93:16:ca:6e:3d:fa:8a:29:7d:ef:02:d1:92:c1:aa:e4: 6b:4b:f8:70:76:d2:90:49:50:b0:60:14:c9:fb:e1:c4:a4:de: a6:4f:54:1c:fb:c9:11:15:67:c6:f1:3a:a4:3e:6c:05:50:fa: e1:fd:38:c2:90:79:c3:ed:4f:57:90:bb:6c:38:b3:ad:c4:94: ce:2f:13:d0:3a:7c:90:9e:8e:ae:b3:f0:5b:0c:5d:e0:55:9b: 2b:2c:cd:32:49:b0:4d:0e:f6:a5:24:b1:06:d3:88:db:20:01: b4:4d:f1:8d:15:4c:b7:71:6c:9a:70:3c:02:14:a9:e4:4a:f0: 89:1b:2d:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QUQxRjExMC8GA1UEBRMoNjI0NjMyMERFQjM0MkQyQzNEQzFBRURCOTBGMTc2Nzcy QjdGQzc3RjAeFw0yNTEyMDUwNTM0MTNaFw0yNTEyMTIwNTM0MTNaMBgxFjAUBgNV BAMTDTY5MzI2ZWQ1LTQyZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/y3A4aPf7isEvpEhhf7YBxDYq4nCnhsYWWERzumBugljXmQMo5oY74NSPsAQE a0DRpaqSV6L5xp79CiAZt+Wyb78EoDNE24OR35zUOM7TUXjxsZSH/MizIeH091lh X48bhP1vpEIrfikk0fHXYdTtYbaEpxForPsVU4aNLwTk7W2+CCQEkGSf11Xt8iZx Zt1GBvsMqazcgWQ4ywFN3RsIFwBPjNnzEe7yzfBT/fafiSbIsjlILyCb1z9JqD5b yF8HXxPZd3M77/NedTn5e22JdTbUg5ZMFTkACCuSCxQ+QQWfRbN0YQ73wXBzXIvQ t4w8lA3+Lw/G2I2yKHr5IuDBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKYOO1swj myTMr0Kg6plM+8P7bvAwHwYDVR0jBBgwFoAUYkYyDes0LSw9wa7bkPF2dyt/x38w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBRDFGLzE0RDA5QzAyOURB QjExRjBBMUM1QjM2M0M0RjlBRTAyL1lrWXlEZXMwTFN3OXdhN2JrUEYyZHl0X3gz OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWtZeURlczBMU3c5d2E3YmtQRjJkeXRfeDM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB RDFGLzE0RDA5QzAyOURBQjExRjBBMUM1QjM2M0M0RjlBRTAyL1lrWXlEZXMwTFN3 OXdhN2JrUEYyZHl0X3gzOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHT5JR0C2Gglf0PbFWUbReu/NVTj48+lhOYwTV241t9Oo+n9pHhTNWJj XN62lp44vWgtpGydVTndoayljHvxHi7aLWN/Ecipaa3TNFvFJMXg8w3pHzV5ii3I r/R7ZvPuLXax2sujh2tTKJe3EcpSQkWAfBfO8m+CfUC8o4HoQ3/HkxbKbj36iil9 7wLRksGq5GtL+HB20pBJULBgFMn74cSk3qZPVBz7yREVZ8bxOqQ+bAVQ+uH9OMKQ ecPtT1eQu2w4s63ElM4vE9A6fJCejq6z8FsMXeBVmysszTJJsE0O9qUksQbTiNsg AbRN8Y0VTLdxbJpwPAIUqeRK8IkbLVQ= -----END CERTIFICATE-----Generated at Sat Dec 6 19:12:55 2025 by rpki-client