This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft File: YhuBwQnlqnjYKfMKV9o1MwglT2k.mft (raw, json) Hash identifier: QTQgjsB8kBL97/CV8idaK6PkxFL27zq/bOImpsQrYCM= Subject key identifier: 44:AE:E4:10:67:D2:05:8B:BB:8E:CD:41:42:90:4B:C7:95:C5:4C:5E Authority key identifier: 62:1B:81:C1:09:E5:AA:78:D8:29:F3:0A:57:DA:35:33:08:25:4F:69 Certificate issuer: /CN=A9138D62/serialNumber=621B81C109E5AA78D829F30A57DA353308254F69 Certificate serial: 049C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft Manifest number: 0495 Signing time: Thu 04 Dec 2025 22:33:32 +0000 Manifest this update: Thu 04 Dec 2025 22:33:32 +0000 Manifest next update: Thu 11 Dec 2025 22:33:32 +0000 Files and hashes: 1: YhuBwQnlqnjYKfMKV9o1MwglT2k.crl (hash: XaBJLb3BuzV09IgjTZtc5bkDg3melBoZkzXOPlN3zUo=) 2: 31E51BB65FD311EC9AA5DA4EC4F9AE02.roa (hash: fiRDq8Ve2DGr8VfowojUVTWRBK4XLT82cjdE+awZmkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.crl rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1180 (0x49c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138D62, serialNumber=621B81C109E5AA78D829F30A57DA353308254F69 Validity Not Before: Dec 4 22:33:32 2025 GMT Not After : Dec 11 22:33:32 2025 GMT Subject: CN=69320c3c-7f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:37:97:21:fa:65:08:e6:36:df:12:e9:9b:29: f4:e9:de:62:4d:05:bc:5d:3e:53:74:b8:de:2b:b3: 45:c1:f9:88:10:fc:84:c6:a9:99:f7:ca:55:cc:83: 2e:89:67:94:74:63:c2:e8:fd:d7:ed:ee:14:80:35: 8b:21:f4:7c:38:24:b3:bd:a5:af:a9:52:f0:41:94: 85:69:8b:33:9f:b5:72:fc:f2:fe:2b:bb:ad:64:d0: 41:aa:c9:ad:cb:de:b2:de:64:36:5b:1a:f1:05:c8: 81:99:51:53:ff:e6:05:c1:fd:db:3a:07:ea:c9:96: 17:4d:7a:9a:f2:13:79:57:74:d8:e5:8d:6f:74:1f: a7:e3:f2:88:dc:88:ec:17:4a:a7:ed:5c:f2:58:bd: 8a:5d:a9:03:62:16:cd:9a:04:f6:52:55:b0:e9:e9: 3b:b9:67:be:e1:80:4c:83:68:94:30:d9:54:64:48: e2:29:d5:fc:e5:c1:1e:39:21:e0:77:9b:ee:74:26: ba:7c:b6:a0:ff:8f:b6:b2:4b:e1:e8:61:b4:32:80: 8f:95:0f:f0:4c:d8:10:71:0d:45:3a:de:4b:7b:37: 97:6d:dc:9a:96:ba:07:1f:e4:52:32:d4:35:b1:c7: 3c:0a:11:bc:29:76:93:97:39:c7:53:5b:8f:f5:1d: f2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AE:E4:10:67:D2:05:8B:BB:8E:CD:41:42:90:4B:C7:95:C5:4C:5E X509v3 Authority Key Identifier: keyid:62:1B:81:C1:09:E5:AA:78:D8:29:F3:0A:57:DA:35:33:08:25:4F:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:63:e6:e3:67:6a:6a:85:6a:6c:41:62:ae:2c:86:25:7e:c4: 01:cd:6a:77:78:61:18:21:a2:1b:45:cf:9d:db:e3:ab:5c:f7: 92:81:f0:88:fb:c9:c9:17:e7:40:05:67:cf:1c:38:ce:7b:12: a7:45:64:81:2b:02:fb:d9:54:4e:fa:92:f8:85:75:fd:41:ba: 98:7b:fe:73:7b:6a:ce:e6:e5:6c:1f:cf:09:11:4e:26:50:21: a6:c6:be:72:fe:43:df:b3:8b:48:e2:c5:ed:a1:ff:cb:2b:69: 1b:75:7a:cb:77:57:f9:f6:01:3a:97:0e:a5:52:c3:4a:8b:38: 87:77:82:72:42:2e:c4:f7:fb:86:d1:7b:72:a2:0f:9c:cf:36: 1c:53:1f:79:fa:8f:78:00:aa:4b:33:0f:bd:f1:c3:87:3f:a3: 64:9d:e2:6d:d2:a8:be:7f:63:5a:7a:d7:86:01:3c:fc:39:fc: 56:74:a1:9a:35:db:d7:b3:50:d2:25:20:0f:cd:3f:95:fa:f1: 8b:d8:12:dc:83:c0:5a:d2:00:7a:39:67:df:5e:f1:21:bc:b5: db:d1:9c:b3:95:f9:4c:93:a2:5f:1a:c0:6f:70:34:8d:f7:3c: 5a:00:0c:e9:4d:fd:8e:02:b5:1f:8c:38:32:be:d9:b1:9f:39: 66:c9:3c:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhENjIxMTAvBgNVBAUTKDYyMUI4MUMxMDlFNUFBNzhEODI5RjMwQTU3REEzNTMz MDgyNTRGNjkwHhcNMjUxMjA0MjIzMzMyWhcNMjUxMjExMjIzMzMyWjAYMRYwFAYD VQQDEw02OTMyMGMzYy03ZjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTeXIfplCOY23xLpmyn06d5iTQW8XT5TdLjeK7NFwfmIEPyExqmZ98pVzIMu iWeUdGPC6P3X7e4UgDWLIfR8OCSzvaWvqVLwQZSFaYszn7Vy/PL+K7utZNBBqsmt y96y3mQ2WxrxBciBmVFT/+YFwf3bOgfqyZYXTXqa8hN5V3TY5Y1vdB+n4/KI3Ijs F0qn7VzyWL2KXakDYhbNmgT2UlWw6ek7uWe+4YBMg2iUMNlUZEjiKdX85cEeOSHg d5vudCa6fLag/4+2skvh6GG0MoCPlQ/wTNgQcQ1FOt5LezeXbdyalroHH+RSMtQ1 scc8ChG8KXaTlznHU1uP9R3yQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFESu5BBn 0gWLu47NQUKQS8eVxUxeMB8GA1UdIwQYMBaAFGIbgcEJ5ap42CnzClfaNTMIJU9p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEQ2Mi9CQ0I0MEE1ODVG Q0YxMUVDOENGMUUwN0JDNEY5QUUwMi9ZaHVCd1FubHFuallLZk1LVjlvMU13Z2xU MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lodUJ3UW5scW5qWUtmTUtWOW8xTXdnbFQyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEQ2Mi9CQ0I0MEE1ODVGQ0YxMUVDOENGMUUwN0JDNEY5QUUwMi9ZaHVCd1FubHFu allLZk1LVjlvMU13Z2xUMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvY+bjZ2pqhWpsQWKuLIYlfsQBzWp3eGEYIaIbRc+d2+OrXPeSgfCI +8nJF+dABWfPHDjOexKnRWSBKwL72VRO+pL4hXX9QbqYe/5ze2rO5uVsH88JEU4m UCGmxr5y/kPfs4tI4sXtof/LK2kbdXrLd1f59gE6lw6lUsNKiziHd4JyQi7E9/uG 0Xtyog+czzYcUx95+o94AKpLMw+98cOHP6NkneJt0qi+f2NaeteGATz8OfxWdKGa NdvXs1DSJSAPzT+V+vGL2BLcg8Ba0gB6OWffXvEhvLXb0ZyzlflMk6JfGsBvcDSN 9zxaAAzpTf2OArUfjDgyvtmxnzlmyTwl -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:22 2025 by rpki-client