This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft File: yNpkCWcTSBB928ixg_VavykxJVY.mft (raw, json) Hash identifier: PGdd+9csaCHIwAHybrgEEWcPScW3F8WnntbWFj44zgA= Subject key identifier: 4A:AF:CF:7D:F5:64:15:25:1C:1C:0E:EB:3A:23:41:B0:E2:32:4F:F8 Authority key identifier: C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56 Certificate issuer: /CN=A9120974/serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556 Certificate serial: 10AC Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft Manifest number: 10AC Signing time: Thu 04 Dec 2025 16:56:09 +0000 Manifest this update: Thu 04 Dec 2025 16:56:09 +0000 Manifest next update: Thu 11 Dec 2025 16:56:09 +0000 Files and hashes: 1: yNpkCWcTSBB928ixg_VavykxJVY.crl (hash: dgqplma/w7U7a/k3ua7L1kVlQKhqactc/r/W23c23TA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 16:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4268 (0x10ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556 Validity Not Before: Dec 4 16:56:09 2025 GMT Not After : Dec 11 16:56:09 2025 GMT Subject: CN=6931bd29-0f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:13:a2:e5:a4:ea:04:3d:6d:09:0d:9d:a9:b3: 1f:81:18:94:1b:69:c3:59:a7:91:d7:3e:10:a7:cc: 53:f6:97:f6:7c:fd:cf:a7:c9:2e:66:d1:ca:82:3b: 18:3c:fa:a6:9c:11:02:39:5e:93:53:3b:86:39:dc: 0d:cb:ac:9c:9f:fc:0a:ba:a3:c0:25:fd:47:d7:4f: 07:67:0e:61:4c:ed:eb:a8:f6:05:1b:01:ee:0f:07: 8a:ff:45:98:74:9a:4a:3e:c9:1d:f9:c8:98:34:59: 50:f4:79:d8:40:16:a4:11:93:b6:1e:73:2f:84:7f: 77:05:75:d2:4d:92:c2:46:7a:11:b8:49:0b:25:21: 30:e1:28:f7:0f:4b:f8:41:c0:9e:2d:e3:80:fb:86: b0:c1:5c:2f:21:be:af:02:2a:0d:14:93:fe:9e:77: c9:e2:92:79:c2:6a:a9:ce:f4:65:ff:f0:d6:ae:ad: f4:fa:67:bf:64:cf:e6:a1:e5:ec:0b:90:5a:2a:be: e5:af:29:65:76:d9:f1:51:55:9b:ed:2c:b5:f1:71: 10:b9:13:67:dc:a8:65:1d:c9:43:0c:2c:01:18:e1: 8b:4c:7f:06:66:b6:eb:7a:3e:84:f7:19:88:00:b4: 41:76:60:77:17:a9:cb:da:a2:89:6e:dc:99:ab:e0: 42:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AF:CF:7D:F5:64:15:25:1C:1C:0E:EB:3A:23:41:B0:E2:32:4F:F8 X509v3 Authority Key Identifier: keyid:C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:2c:60:02:4e:aa:c8:fb:66:27:eb:af:bd:6a:a9:60:27:08: eb:6e:d9:fc:17:3b:9d:02:e3:2d:9d:0e:b6:88:d3:86:36:79: b8:d4:3e:a6:6c:4d:07:e7:d4:e6:c6:c0:79:8f:63:a4:9c:65: 57:ed:27:c3:4a:4c:4b:b0:ca:f5:a6:44:05:78:7c:37:72:e8: 39:57:70:1b:12:52:b6:89:ec:6e:26:bb:1c:e7:5f:2f:23:b8: c0:ed:59:ba:d1:f7:72:ba:c9:a5:45:aa:de:3f:85:bc:d1:d3: e9:cf:20:1e:ab:85:20:d7:78:33:07:cf:f7:60:c1:6e:e1:a3: 8a:23:98:78:76:d9:21:b6:b2:ad:65:f9:6e:7e:4b:7c:77:63: 1a:fe:06:db:b5:22:c9:77:1a:b6:88:5b:c9:37:cc:10:1c:7b: 03:58:a7:8f:c5:ee:6d:9e:40:de:1d:7c:f1:0a:b3:f2:37:7f: 78:a6:a5:b6:9a:14:db:a4:a1:b6:21:d5:7f:2e:df:25:e5:19: 13:b0:5b:b8:a9:42:3a:8c:10:60:bc:d4:d6:f4:d8:34:ed:a7: 2a:a7:23:96:e8:94:f1:9d:f5:3e:13:a8:64:a3:8f:da:29:91: 13:bb:97:fd:38:cf:58:97:c3:e8:59:47:0e:80:35:90:68:6b: f4:b5:0f:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEM4REE2NDA5NjcxMzQ4MTA3RERCQzhCMTgzRjU1QUJG MjkzMTI1NTYwHhcNMjUxMjA0MTY1NjA5WhcNMjUxMjExMTY1NjA5WjAYMRYwFAYD VQQDEw02OTMxYmQyOS0wZjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqROi5aTqBD1tCQ2dqbMfgRiUG2nDWaeR1z4Qp8xT9pf2fP3Pp8kuZtHKgjsY PPqmnBECOV6TUzuGOdwNy6ycn/wKuqPAJf1H108HZw5hTO3rqPYFGwHuDweK/0WY dJpKPskd+ciYNFlQ9HnYQBakEZO2HnMvhH93BXXSTZLCRnoRuEkLJSEw4Sj3D0v4 QcCeLeOA+4awwVwvIb6vAioNFJP+nnfJ4pJ5wmqpzvRl//DWrq30+me/ZM/moeXs C5BaKr7lrylldtnxUVWb7Sy18XEQuRNn3KhlHclDDCwBGOGLTH8GZrbrej6E9xmI ALRBdmB3F6nL2qKJbtyZq+BC4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqvz331 ZBUlHBwO6zojQbDiMk/4MB8GA1UdIwQYMBaAFMjaZAlnE0gQfdvIsYP1Wr8pMSVW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9ENjc3RDMxQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi95TnBrQ1djVFNCQjkyOGl4Z19WYXZ5a3hK VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL3lOcGtDV2NUU0JCOTI4aXhnX1ZhdnlreEpWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9ENjc3RDMxQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi95TnBrQ1djVFNC QjkyOGl4Z19WYXZ5a3hKVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApLGACTqrI+2Yn66+9aqlgJwjrbtn8FzudAuMtnQ62iNOGNnm41D6m bE0H59TmxsB5j2OknGVX7SfDSkxLsMr1pkQFeHw3cug5V3AbElK2iexuJrsc518v I7jA7Vm60fdyusmlRareP4W80dPpzyAeq4Ug13gzB8/3YMFu4aOKI5h4dtkhtrKt Zflufkt8d2Ma/gbbtSLJdxq2iFvJN8wQHHsDWKePxe5tnkDeHXzxCrPyN394pqW2 mhTbpKG2IdV/Lt8l5RkTsFu4qUI6jBBgvNTW9Ng07acqpyOW6JTxnfU+E6hko4/a KZETu5f9OM9Yl8PoWUcOgDWQaGv0tQ91 -----END CERTIFICATE-----Generated at Sat Dec 6 18:33:56 2025 by rpki-client