This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft File: YfcrXpPnk13XngQ1yBj4-acQ9ok.mft (raw, json) Hash identifier: BlEI0D765Efnq7N2HOV2KDdU21MWMU873ea0accpiqs= Subject key identifier: 2D:55:57:8E:1B:9B:6E:80:95:96:63:8A:D8:11:3A:83:7E:F2:41:2A Authority key identifier: 61:F7:2B:5E:93:E7:93:5D:D7:9E:04:35:C8:18:F8:F9:A7:10:F6:89 Certificate issuer: /CN=A913FE55/serialNumber=61F72B5E93E7935DD79E0435C818F8F9A710F689 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft Manifest number: 5B Signing time: Fri 05 Dec 2025 05:00:47 +0000 Manifest this update: Fri 05 Dec 2025 05:00:46 +0000 Manifest next update: Fri 12 Dec 2025 05:00:46 +0000 Files and hashes: 1: YfcrXpPnk13XngQ1yBj4-acQ9ok.crl (hash: rNvhAP8IWb9+aHfErv/WI29EbteprgtvQiK6spq8je4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.crl rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FE55, serialNumber=61F72B5E93E7935DD79E0435C818F8F9A710F689 Validity Not Before: Dec 5 05:00:46 2025 GMT Not After : Dec 12 05:00:46 2025 GMT Subject: CN=693266ff-9d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dd:58:b8:c4:31:4c:94:ed:5c:41:b9:ac:18: 9c:d5:a8:ce:ae:57:9b:af:21:d8:df:1e:ff:8e:6e: 1f:13:31:1b:25:eb:c4:e7:f5:aa:0f:a2:e4:8c:77: 06:29:d0:20:94:cd:f4:cf:87:99:97:d4:18:e6:9d: a9:a0:e3:5e:9f:99:9e:bc:e3:db:52:95:04:d5:18: 8a:82:c6:09:d8:d8:06:bc:6b:26:52:75:07:d6:3f: ac:fc:2f:12:ad:b0:51:f2:93:b6:1b:dc:fb:30:f4: db:7e:9a:86:b3:2d:90:87:ca:cc:b3:6e:71:12:2d: e3:2e:f6:e3:73:64:5a:59:e5:9f:5f:13:b3:4c:0e: 39:da:cc:4f:ef:b0:1e:d6:0f:1c:04:2c:2b:59:7c: 14:54:c2:e1:f8:69:7e:61:8c:f3:a9:e3:af:80:8e: a6:9b:39:f5:1f:5e:90:58:33:9f:44:34:92:c4:30: fe:ef:49:77:b9:ff:20:e5:28:94:4e:8d:76:9c:ad: be:bc:36:39:df:48:29:fc:20:6f:47:c8:92:77:1d: 2d:71:7d:a3:a6:f8:4e:dc:1e:be:82:a1:6c:4c:53: a5:64:a5:46:5b:19:78:aa:3b:df:9c:76:30:ac:a0: 2d:2f:c5:67:20:03:3f:15:b5:30:6f:24:63:ff:a4: e8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:55:57:8E:1B:9B:6E:80:95:96:63:8A:D8:11:3A:83:7E:F2:41:2A X509v3 Authority Key Identifier: keyid:61:F7:2B:5E:93:E7:93:5D:D7:9E:04:35:C8:18:F8:F9:A7:10:F6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:cc:25:71:ee:bb:07:54:fb:35:7d:51:6f:02:8d:67:fd:11: b8:2c:70:d5:ef:75:06:17:9c:ec:9e:69:8e:fa:32:b6:c9:f4: a4:20:7e:63:88:e9:35:73:e1:e3:b6:2a:2a:29:67:e5:90:0b: 40:bb:d4:53:80:0a:af:84:a8:49:ad:34:f8:f6:98:6f:b2:f6: 87:06:b6:94:5f:c5:1d:52:f8:1c:20:fa:e3:e9:2c:5e:0b:13: f9:01:03:ec:52:43:ab:70:df:25:0b:7a:0e:29:e3:ad:1e:70: a7:40:83:57:c9:b4:7e:7b:eb:80:7e:eb:66:5e:73:81:1c:bc: f3:85:b1:92:f6:be:88:03:f0:26:67:75:42:fa:9b:d2:e4:fa: 29:cc:6e:91:a7:f4:d8:64:9e:be:0e:f0:2c:09:8d:92:cf:1e: 1b:cc:72:a6:1c:e5:ea:07:4f:14:6c:04:61:b3:e5:68:b5:a6: ed:f0:c8:63:de:2a:47:b0:98:27:3c:80:40:3e:b9:4e:2f:b3: fa:c2:cf:fa:51:90:bd:35:7c:76:dc:64:08:12:73:9f:08:90: 37:a1:0a:66:bc:d2:4d:32:88:92:1e:49:ae:b2:e0:09:5c:c4: 00:71:34:ea:47:e4:1b:90:ac:c6:bc:55:52:c9:b4:c3:c6:6a: 49:ae:3d:bf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RkU1NTExMC8GA1UEBRMoNjFGNzJCNUU5M0U3OTM1REQ3OUUwNDM1QzgxOEY4RjlB NzEwRjY4OTAeFw0yNTEyMDUwNTAwNDZaFw0yNTEyMTIwNTAwNDZaMBgxFjAUBgNV BAMTDTY5MzI2NmZmLTlkNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCr3Vi4xDFMlO1cQbmsGJzVqM6uV5uvIdjfHv+Obh8TMRsl68Tn9aoPouSMdwYp 0CCUzfTPh5mX1Bjmnamg416fmZ6849tSlQTVGIqCxgnY2Aa8ayZSdQfWP6z8LxKt sFHyk7Yb3Psw9Nt+moazLZCHysyzbnESLeMu9uNzZFpZ5Z9fE7NMDjnazE/vsB7W DxwELCtZfBRUwuH4aX5hjPOp46+AjqabOfUfXpBYM59ENJLEMP7vSXe5/yDlKJRO jXacrb68NjnfSCn8IG9HyJJ3HS1xfaOm+E7cHr6CoWxMU6VkpUZbGXiqO9+cdjCs oC0vxWcgAz8VtTBvJGP/pOgLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULVVXjhub boCVlmOK2BE6g37yQSowHwYDVR0jBBgwFoAUYfcrXpPnk13XngQ1yBj4+acQ9okw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGRTU1LzJENDU3ODAwNDcz QjExRjA4MzM2Rjc1Q0M0RjlBRTAyL1lmY3JYcFBuazEzWG5nUTF5Qmo0LWFjUTlv ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWZjclhwUG5rMTNYbmdRMXlCajQtYWNROW9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG RTU1LzJENDU3ODAwNDczQjExRjA4MzM2Rjc1Q0M0RjlBRTAyL1lmY3JYcFBuazEz WG5nUTF5Qmo0LWFjUTlvay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFjMJXHuuwdU+zV9UW8CjWf9EbgscNXvdQYXnOyeaY76MrbJ9KQgfmOI 6TVz4eO2KiopZ+WQC0C71FOACq+EqEmtNPj2mG+y9ocGtpRfxR1S+Bwg+uPpLF4L E/kBA+xSQ6tw3yULeg4p460ecKdAg1fJtH5764B+62Zec4EcvPOFsZL2vogD8CZn dUL6m9Lk+inMbpGn9Nhknr4O8CwJjZLPHhvMcqYc5eoHTxRsBGGz5Wi1pu3wyGPe KkewmCc8gEA+uU4vs/rCz/pRkL01fHbcZAgSc58IkDehCma80k0yiJIeSa6y4Alc xABxNOpH5BuQrMa8VVLJtMPGakmuPb8= -----END CERTIFICATE-----Generated at Sat Dec 6 22:44:41 2025 by rpki-client