This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft File: S-1YvEVE5-O16XicZ8Y77JHCfN0.mft (raw, json) Hash identifier: EoVf7zrvnnzGb11rUW30WXItwva3SXm7g5gCNjU7DJk= Subject key identifier: 89:83:80:46:AB:A7:20:43:E2:C0:4F:5E:74:90:C8:EF:03:B1:82:59 Authority key identifier: 4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD Certificate issuer: /CN=A912994F/serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD Certificate serial: 3542 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft Manifest number: 3511 Signing time: Sat 06 Dec 2025 15:08:02 +0000 Manifest this update: Sat 06 Dec 2025 15:08:01 +0000 Manifest next update: Sat 13 Dec 2025 15:08:01 +0000 Files and hashes: 1: S-1YvEVE5-O16XicZ8Y77JHCfN0.crl (hash: UMIh42MsXC052Js60Yv0/VdHHdPOxtAsbOeId8UHJMs=) 2: E3D2704667FC11F0AC42A91FC4F9AE02.roa (hash: PqNSkqyewmKuXRkADPgSAahXx6Qh7/X+wfZVSlj+tc8=) 3: BAD49C82AA9611F098799D0CC4F9AE02.roa (hash: VLtfIYb4y+A0nG+DSlk1wkc4Va6Hh11pLowd8yB4WrU=) 4: D257C8F88FAB11F0A7F64E1AC4F9AE02.roa (hash: hYZQfUT77wWm9wA8h4SPaexykIcEBdPcCnbabzBH2A4=) 5: 0188487C15AA11E685F66C3CC4F9AE02.roa (hash: XmZ8Xmav06mjCMLENRMHGPiJMlps0XR41qeutzh2QhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13634 (0x3542) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912994F, serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD Validity Not Before: Dec 6 15:08:01 2025 GMT Not After : Dec 13 15:08:01 2025 GMT Subject: CN=693446d2-c3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e3:6c:d3:77:12:23:25:74:93:82:3a:dd:db: ce:c0:96:35:ba:30:7a:6a:47:f1:3c:8f:17:1e:16: 02:53:07:37:c8:e7:b9:42:11:4f:1f:1f:56:10:15: 12:23:d6:c2:b8:69:6a:17:6d:b9:4e:f4:57:81:17: af:00:5b:82:d4:32:d3:1e:45:a4:c9:df:d3:78:f2: e1:a4:f4:72:b3:33:ec:a1:10:f7:d7:31:44:a6:46: 58:72:91:89:d5:1b:c6:69:ff:39:c7:14:34:2d:81: a0:11:3d:85:c8:8e:3e:10:bc:7c:bb:ec:fb:bb:ff: 74:52:47:e5:a8:38:3f:7b:62:72:be:a4:f5:11:df: e3:1f:6e:11:02:4f:17:c3:e0:2c:e6:66:73:67:a0: 5d:3c:70:f8:c0:92:3f:d5:f7:2b:d3:4e:38:6d:a1: 38:b2:e3:d9:b0:06:b1:57:7d:15:28:47:ec:c5:1d: 0f:be:ed:ca:d8:36:65:32:fe:f3:42:b3:7a:c4:5d: 81:68:d6:0e:bd:ff:cd:0f:0a:72:d0:94:cb:92:c8: 78:21:c0:a8:64:e8:88:cd:51:0f:da:a3:86:27:4d: 25:cf:4e:f2:77:d2:2d:75:24:ee:87:e8:5a:4c:b7: 6c:fb:b9:bd:4c:2a:fc:e0:b1:b3:7a:61:13:c2:2a: 88:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:83:80:46:AB:A7:20:43:E2:C0:4F:5E:74:90:C8:EF:03:B1:82:59 X509v3 Authority Key Identifier: keyid:4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:9d:27:3f:a8:9e:b6:2f:d8:66:72:fa:d8:cd:ec:d4:f5:8e: 15:1e:bc:da:5e:35:bf:18:09:c5:33:e3:e8:e1:c3:b4:68:5e: 07:5e:34:15:26:ce:21:64:3f:7c:7d:ef:2d:4b:a7:3d:84:76: 6f:79:39:38:06:da:77:8d:69:14:dd:cc:e1:f8:9c:11:20:08: b6:aa:d3:dc:4b:6c:4b:d6:42:71:db:40:4f:8d:08:c8:ca:a0: 5e:9a:9c:5f:9d:b7:41:be:3c:06:55:40:9a:19:31:09:75:4a: a9:99:23:7d:4e:2d:0b:e9:d0:5d:09:8a:23:88:bf:6b:78:db: cb:10:d6:4b:8d:3c:54:92:f7:6d:66:8a:8e:20:c0:e5:20:b4: be:39:bd:02:1a:e5:66:27:b1:e4:8d:7e:1c:ae:94:16:23:2b: c0:35:bc:c1:c3:5a:07:e7:19:f4:48:93:37:3d:81:de:9d:2f: 6e:2d:80:43:ce:11:71:da:34:c0:86:ec:ea:79:ec:7a:3a:93: 7b:1e:0c:1d:63:9b:8f:e9:f4:d7:07:be:cb:3f:ae:8e:b2:46: 21:8d:24:8e:e0:ce:68:0e:e0:f9:f6:d2:b6:88:6d:30:7e:2c: 01:c2:df:03:50:0e:e7:05:a2:93:a8:b9:0c:fe:ba:7d:5b:ec: 1f:37:15:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk5NEYxMTAvBgNVBAUTKDRCRUQ1OEJDNDU0NEU3RTNCNUU5Nzg5QzY3QzYzQkVD OTFDMjdDREQwHhcNMjUxMjA2MTUwODAxWhcNMjUxMjEzMTUwODAxWjAYMRYwFAYD VQQDEw02OTM0NDZkMi1jM2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3+Ns03cSIyV0k4I63dvOwJY1ujB6akfxPI8XHhYCUwc3yOe5QhFPHx9WEBUS I9bCuGlqF225TvRXgRevAFuC1DLTHkWkyd/TePLhpPRyszPsoRD31zFEpkZYcpGJ 1RvGaf85xxQ0LYGgET2FyI4+ELx8u+z7u/90UkflqDg/e2JyvqT1Ed/jH24RAk8X w+As5mZzZ6BdPHD4wJI/1fcr0044baE4suPZsAaxV30VKEfsxR0Pvu3K2DZlMv7z QrN6xF2BaNYOvf/NDwpy0JTLksh4IcCoZOiIzVEP2qOGJ00lz07yd9ItdSTuh+ha TLds+7m9TCr84LGzemETwiqIWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImDgEar pyBD4sBPXnSQyO8DsYJZMB8GA1UdIwQYMBaAFEvtWLxFROfjtel4nGfGO+yRwnzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTk0Ri9BMDI5QTUyNjFE QUExMUUyOUJGQzY3QTYwOEIwMkNEMi9TLTFZdkVWRTUtTzE2WGljWjhZNzdKSENm TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MtMVl2RVZFNS1PMTZYaWNaOFk3N0pIQ2ZOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTk0Ri9BMDI5QTUyNjFEQUExMUUyOUJGQzY3QTYwOEIwMkNEMi9TLTFZdkVWRTUt TzE2WGljWjhZNzdKSENmTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKnSc/qJ62L9hmcvrYzezU9Y4VHrzaXjW/GAnFM+Po4cO0aF4HXjQV Js4hZD98fe8tS6c9hHZveTk4Btp3jWkU3czh+JwRIAi2qtPcS2xL1kJx20BPjQjI yqBempxfnbdBvjwGVUCaGTEJdUqpmSN9Ti0L6dBdCYojiL9reNvLENZLjTxUkvdt ZoqOIMDlILS+Ob0CGuVmJ7HkjX4crpQWIyvANbzBw1oH5xn0SJM3PYHenS9uLYBD zhFx2jTAhuzqeex6OpN7HgwdY5uP6fTXB77LP66OskYhjSSO4M5oDuD59tK2iG0w fiwBwt8DUA7nBaKTqLkM/rp9W+wfNxXu -----END CERTIFICATE-----Generated at Sat Dec 6 22:24:38 2025 by rpki-client