This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft File: y3nZvhDc9wJG_GlGNFiuyiQly44.mft (raw, json) Hash identifier: Lz0QRiY5No0uYJ/cP0LnwI6xP2DhMloDrPmSrPw6QoU= Subject key identifier: 18:1B:91:4D:AF:3C:2B:FC:23:C8:55:B1:CD:AC:00:3A:E9:8C:2E:6B Authority key identifier: CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E Certificate issuer: /CN=A912756D/serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft Manifest number: F1 Signing time: Sun 21 Dec 2025 04:26:32 +0000 Manifest this update: Sun 21 Dec 2025 04:26:31 +0000 Manifest next update: Sun 28 Dec 2025 04:26:31 +0000 Files and hashes: 1: y3nZvhDc9wJG_GlGNFiuyiQly44.crl (hash: RsexM7wJKryVBFkaWDLKAkUD66KIk1GN87FpJQRlL2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912756D, serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E Validity Not Before: Dec 21 04:26:31 2025 GMT Not After : Dec 28 04:26:31 2025 GMT Subject: CN=694776f8-a4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a1:e2:0e:6b:f6:59:cc:14:e0:60:82:ae:c1: d1:22:74:83:1b:38:9e:cd:9c:18:b5:87:5d:b9:1c: 9c:ff:f4:b9:47:fa:c3:2b:ad:6c:60:18:72:bc:9d: f7:33:25:65:01:4d:a3:b6:ce:08:c0:24:34:d7:65: ea:c9:dc:82:7c:f3:1c:c5:f6:64:85:35:42:cf:82: f7:2c:83:ea:3e:69:64:d8:a1:8c:de:f2:ab:cf:1b: fc:8c:d5:0c:e2:51:ed:df:e5:e7:6f:a6:f5:23:3a: 71:3e:44:85:1c:10:fe:a0:b6:d5:32:07:c1:12:e0: 64:5b:a9:c6:60:de:85:26:ec:38:92:ef:cc:67:60: d2:f2:fd:77:17:fd:a1:c9:58:f1:b4:59:9f:43:d4: 40:65:91:c1:45:33:47:94:48:83:18:3e:73:b7:68: d2:54:d7:95:c1:0a:fc:1d:27:2e:58:dd:17:54:d0: ff:1b:2a:f4:31:fa:48:28:39:02:a6:19:9c:c0:86: 62:53:d2:cd:50:e1:a3:d5:6d:75:78:c6:cc:29:96: c1:20:40:f1:bf:f6:68:9b:b6:5e:d9:d9:7b:dc:12: 45:db:07:88:db:a5:1a:e5:40:af:93:79:8c:91:49: c3:09:77:6b:ae:03:2c:91:7e:cf:70:49:89:90:dc: 10:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1B:91:4D:AF:3C:2B:FC:23:C8:55:B1:CD:AC:00:3A:E9:8C:2E:6B X509v3 Authority Key Identifier: keyid:CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:02:53:19:df:a9:29:58:8c:23:e8:d8:fb:99:aa:e9:77:5a: 97:63:b6:25:87:2c:2a:3d:39:5a:27:4f:c8:56:45:87:d9:63: 2b:53:7c:ac:d1:db:d8:98:b7:91:63:89:f9:40:46:8b:c0:50: 7c:93:5a:eb:44:cb:de:69:3b:09:e7:f3:1a:b8:90:ed:d7:c9: 40:96:94:c7:92:f2:af:09:d6:3d:fa:ae:f1:8a:dd:c6:68:aa: 53:b4:90:4f:62:d5:03:23:9c:35:0b:7d:02:67:32:9d:13:21: 37:ea:d9:3a:cf:a2:54:0d:b6:e1:c9:89:5b:7c:14:d2:57:a9: 22:21:9e:89:df:93:a8:f1:ea:7e:36:99:0b:f4:59:58:d9:30: b4:1e:4c:f5:2f:6e:1a:cb:ba:42:f3:c2:12:54:58:3d:14:53: 70:e8:14:8a:31:7b:a3:e3:b5:77:06:65:17:c4:bb:12:7b:4f: 4e:b0:f3:31:6f:f2:76:74:e2:8a:77:ec:0d:a7:50:00:7c:ed: 73:5c:4d:47:77:71:d4:3f:88:e2:83:0f:01:5b:74:56:d2:0e: 74:58:27:58:42:c7:e5:e2:c2:11:f7:24:c9:d1:e5:af:31:50: dc:8a:99:a4:17:f4:8d:69:e1:82:dc:00:37:e6:0a:61:85:91: 7c:71:34:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1NkQxMTAvBgNVBAUTKENCNzlEOUJFMTBEQ0Y3MDI0NkZDNjk0NjM0NThBRUNB MjQyNUNCOEUwHhcNMjUxMjIxMDQyNjMxWhcNMjUxMjI4MDQyNjMxWjAYMRYwFAYD VQQDDA02OTQ3NzZmOC1hNGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKHiDmv2WcwU4GCCrsHRInSDGziezZwYtYdduRyc//S5R/rDK61sYBhyvJ33 MyVlAU2jts4IwCQ012XqydyCfPMcxfZkhTVCz4L3LIPqPmlk2KGM3vKrzxv8jNUM 4lHt3+Xnb6b1IzpxPkSFHBD+oLbVMgfBEuBkW6nGYN6FJuw4ku/MZ2DS8v13F/2h yVjxtFmfQ9RAZZHBRTNHlEiDGD5zt2jSVNeVwQr8HScuWN0XVND/Gyr0MfpIKDkC phmcwIZiU9LNUOGj1W11eMbMKZbBIEDxv/Zom7Ze2dl73BJF2weI26Ua5UCvk3mM kUnDCXdrrgMskX7PcEmJkNwQbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgbkU2v PCv8I8hVsc2sADrpjC5rMB8GA1UdIwQYMBaAFMt52b4Q3PcCRvxpRjRYrsokJcuO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzU2RC84RENBMzJDRTZC NTQxMUVGQjhBOEE2MUFDNEY5QUUwMi95M25admhEYzl3SkdfR2xHTkZpdXlpUWx5 NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzblp2aERjOXdKR19HbEdORml1eWlRbHk0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzU2RC84RENBMzJDRTZCNTQxMUVGQjhBOEE2MUFDNEY5QUUwMi95M25admhEYzl3 SkdfR2xHTkZpdXlpUWx5NDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqAlMZ36kpWIwj6Nj7marpd1qXY7YlhywqPTlaJ0/IVkWH2WMrU3ys 0dvYmLeRY4n5QEaLwFB8k1rrRMveaTsJ5/MauJDt18lAlpTHkvKvCdY9+q7xit3G aKpTtJBPYtUDI5w1C30CZzKdEyE36tk6z6JUDbbhyYlbfBTSV6kiIZ6J35Oo8ep+ NpkL9FlY2TC0Hkz1L24ay7pC88ISVFg9FFNw6BSKMXuj47V3BmUXxLsSe09OsPMx b/J2dOKKd+wNp1AAfO1zXE1Hd3HUP4jigw8BW3RW0g50WCdYQsfl4sIR9yTJ0eWv MVDcipmkF/SNaeGC3AA35gphhZF8cTQS -----END CERTIFICATE-----Generated at Mon Dec 22 03:23:52 2025 by rpki-client