This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft File: yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft (raw, json) Hash identifier: O8OMPE9Ig449UG79Jl7LDNYtd5Zf5m3DhcT3Kbr17lE= Subject key identifier: 58:33:D8:69:9B:A0:08:C0:5B:C2:EE:D8:84:02:8D:D7:75:01:CE:5B Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 Certificate issuer: /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Certificate serial: 07D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft Manifest number: 07BF Signing time: Sat 06 Dec 2025 20:25:19 +0000 Manifest this update: Sat 06 Dec 2025 20:25:19 +0000 Manifest next update: Sat 13 Dec 2025 20:25:19 +0000 Files and hashes: 1: yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl (hash: u7avkTfVhkjf/OD9LaVpHuX9nDJB4sk9dUx9KpHMnUc=) 2: 5C95BDC0C12E11EEA47CBB59C4F9AE02.roa (hash: pfFLA6S00NJF9wnUh3eyO3xPwlEBQIG4Qg4AiW8MLVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2002 (0x7d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912438F, serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Validity Not Before: Dec 6 20:25:19 2025 GMT Not After : Dec 13 20:25:19 2025 GMT Subject: CN=6934912f-9cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:be:b0:2c:60:50:8e:6c:1f:27:36:87:0d:c2: be:5a:b3:b7:bb:9c:98:97:e1:c1:98:7c:1c:69:b7: 51:fe:f2:7d:eb:6a:ca:af:2e:d6:0c:98:84:12:6a: 57:b7:46:51:98:25:af:59:3f:95:d3:82:c3:18:eb: a3:a0:89:12:0e:30:84:76:db:99:80:7d:30:64:1b: 85:77:bd:d2:35:c8:db:07:67:d7:da:3e:b4:aa:de: 70:51:d7:e7:10:35:0a:37:72:84:e3:56:d8:41:f5: 46:31:db:0d:c5:75:ea:54:72:0f:d3:51:46:e4:5b: 2a:93:f9:12:8e:1e:ce:69:b0:69:cf:de:43:d8:7b: b0:7e:3f:9b:d8:70:9b:8a:51:0b:c0:e0:57:81:82: c8:7f:d2:49:29:3f:9e:f6:c3:c9:d6:3f:f6:d5:88: d8:11:1b:05:18:7b:34:18:66:d1:ca:da:98:a8:56: 4c:28:e0:2a:05:fd:81:1e:b9:71:fd:26:35:b8:e1: 14:31:bb:11:cd:14:7f:ad:38:a5:87:ca:d0:45:d7: 0d:b9:83:32:0d:0d:56:24:3a:17:d5:35:30:17:00: cb:ca:5e:22:d1:f7:c4:bf:ba:67:45:40:14:3f:db: 43:74:05:24:53:b3:1d:71:5a:d3:ba:e0:ff:7a:4a: ea:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:33:D8:69:9B:A0:08:C0:5B:C2:EE:D8:84:02:8D:D7:75:01:CE:5B X509v3 Authority Key Identifier: keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:28:90:54:46:ed:98:59:cc:52:a2:2e:99:b2:15:53:64:62: 8c:4e:6d:1b:ff:3a:94:ac:a1:5a:30:a8:d4:51:9a:09:a0:5c: d3:36:d7:53:01:6d:f0:e8:c9:45:60:6a:7d:40:77:52:dd:66: 82:b6:ab:98:4c:4c:97:b1:9e:93:2f:c3:2d:3f:46:08:d1:82: 13:f3:d9:fa:c8:3a:5e:dc:86:37:e0:0a:8e:75:72:75:bf:40: 66:d6:c3:3f:a6:2b:2b:e3:8c:10:7b:4d:e3:8f:89:c4:dc:86: a1:35:83:02:d7:39:9a:44:fb:d5:52:38:43:e9:19:96:6e:b9: 57:c2:6f:24:34:e2:31:92:e2:91:d4:d7:5b:9a:3b:95:fe:ca: 84:c5:49:9f:17:de:8f:df:45:58:aa:2e:4f:39:74:7f:51:a6: f4:08:59:a4:08:8b:af:b4:c9:21:37:99:f1:05:95:7b:87:c0: 01:ac:ae:a1:3c:20:72:2f:90:f1:a6:bf:b1:e7:26:a5:b2:0f: e6:c3:30:83:2e:ba:2c:8f:41:56:0d:70:c0:15:e3:16:8e:79: b7:61:5c:9d:e5:39:28:fb:f5:91:66:98:f0:67:d3:f2:87:73: 4a:d8:4e:a9:02:3f:6f:b9:a0:14:41:38:bc:f8:0e:21:e9:de: fc:c6:40:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzOEYxMTAvBgNVBAUTKEM4ODhEMUVFRTA0QkVGM0U4MTVGMDlEREZBMTkxOTNE Njk5QjRGNDcwHhcNMjUxMjA2MjAyNTE5WhcNMjUxMjEzMjAyNTE5WjAYMRYwFAYD VQQDEw02OTM0OTEyZi05Y2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy76wLGBQjmwfJzaHDcK+WrO3u5yYl+HBmHwcabdR/vJ962rKry7WDJiEEmpX t0ZRmCWvWT+V04LDGOujoIkSDjCEdtuZgH0wZBuFd73SNcjbB2fX2j60qt5wUdfn EDUKN3KE41bYQfVGMdsNxXXqVHIP01FG5Fsqk/kSjh7OabBpz95D2Huwfj+b2HCb ilELwOBXgYLIf9JJKT+e9sPJ1j/21YjYERsFGHs0GGbRytqYqFZMKOAqBf2BHrlx /SY1uOEUMbsRzRR/rTilh8rQRdcNuYMyDQ1WJDoX1TUwFwDLyl4i0ffEv7pnRUAU P9tDdAUkU7MdcVrTuuD/ekrqQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgz2Gmb oAjAW8Lu2IQCjdd1Ac5bMB8GA1UdIwQYMBaAFMiI0e7gS+8+gV8J3foZGT1pm09H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDM4Ri9DNzU5MEJENjI1 QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6NkJYd25kLWhrWlBXbWJU MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJalI3dUJMN3o2Qlh3bmQtaGtaUFdtYlQwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDM4Ri9DNzU5MEJENjI1QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6 NkJYd25kLWhrWlBXbWJUMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaKJBURu2YWcxSoi6ZshVTZGKMTm0b/zqUrKFaMKjUUZoJoFzTNtdT AW3w6MlFYGp9QHdS3WaCtquYTEyXsZ6TL8MtP0YI0YIT89n6yDpe3IY34AqOdXJ1 v0Bm1sM/pisr44wQe03jj4nE3IahNYMC1zmaRPvVUjhD6RmWbrlXwm8kNOIxkuKR 1NdbmjuV/sqExUmfF96P30VYqi5POXR/Uab0CFmkCIuvtMkhN5nxBZV7h8ABrK6h PCByL5Dxpr+x5yalsg/mwzCDLrosj0FWDXDAFeMWjnm3YVyd5Tko+/WRZpjwZ9Py h3NK2E6pAj9vuaAUQTi8+A4h6d78xkBL -----END CERTIFICATE-----Generated at Sat Dec 6 23:45:36 2025 by rpki-client