This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft File: YoQgfQ0noui_TS6xT7EpytT2zD8.mft (raw, json) Hash identifier: OGLM4DcORFVENCqpNDhPKgo3BmMaTR0u5Zj3CRqPtDc= Subject key identifier: 7F:67:A7:1A:13:9D:0E:38:47:13:49:80:34:B2:89:FD:77:5F:46:70 Authority key identifier: 62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F Certificate issuer: /CN=A914275E/serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F Certificate serial: 0F12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft Manifest number: 0EF7 Signing time: Sat 20 Dec 2025 17:19:17 +0000 Manifest this update: Sat 20 Dec 2025 17:19:17 +0000 Manifest next update: Sat 27 Dec 2025 17:19:17 +0000 Files and hashes: 1: YoQgfQ0noui_TS6xT7EpytT2zD8.crl (hash: FkocHWEr4dJidZikHWx9OZMua8Lo9s6+vEvHUZK3hEA=) 2: 50E999AA911911E9BEF5F94EC4F9AE02.roa (hash: oCjpYZp3Jq8v9CYytKf/Jy8pzYlTc/kezyUqPc+tK1E=) 3: 58105BCA5ACB11EA84F2392EC4F9AE02.roa (hash: VOr56XdXHCfTJb7vCteXD3c/7SeyxHXCJjM/HYRl50c=) 4: 504E3B04911911E9BEF5F94EC4F9AE02.roa (hash: XFUDQ5YpEwqHQdCoCuZZOQlERoKAxzu3Gpexl3i5/54=) 5: 2012E112712611EB8BCB2B84C4F9AE02.roa (hash: yrTYzTGLD7DdI6Sq4pABNT1xu81eDL8OtDlxoy9a6BI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3858 (0xf12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914275E, serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F Validity Not Before: Dec 20 17:19:17 2025 GMT Not After : Dec 27 17:19:17 2025 GMT Subject: CN=6946da95-1b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:94:62:b2:22:97:d9:08:72:b3:6e:1a:ea:6d: 0d:42:48:14:58:25:0d:28:04:b6:5c:17:a6:4a:d3: 21:cf:67:de:e3:25:49:94:78:9f:63:59:17:2f:6c: f5:33:2e:51:cb:e8:0d:7e:33:0b:e0:8d:7e:20:f7: 5e:66:30:b9:88:e1:c4:b6:36:33:53:5d:c6:6c:88: e6:ed:b9:f8:a1:ab:0c:ba:9a:f9:e8:4b:68:de:22: e8:ae:c2:9c:0b:6d:56:f0:93:a4:3b:a8:c7:2f:3a: 81:ba:8c:02:4d:4e:0d:be:25:b3:ea:b0:08:3b:25: ad:98:34:ba:e5:62:9c:86:1d:94:59:e5:96:de:88: 1b:6c:0f:ab:aa:1c:53:26:16:9b:ca:00:a1:2f:c2: f7:75:16:27:82:47:e2:fa:01:d2:f5:e0:ab:b4:2c: 9e:0d:7b:76:c4:1e:e0:76:f9:10:a6:65:53:f1:79: a9:6d:2f:63:02:37:dc:65:96:28:9f:d9:24:05:22: 9f:be:df:ae:fb:67:01:cd:f1:50:db:b1:9c:dc:85: d9:69:53:fc:0d:22:b9:7d:9d:16:6c:63:88:2c:5a: 68:1e:4c:8a:02:ca:e6:8b:35:66:f3:17:2a:10:12: 27:55:39:92:76:6a:9c:a8:5a:63:d6:30:99:0f:9a: df:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:67:A7:1A:13:9D:0E:38:47:13:49:80:34:B2:89:FD:77:5F:46:70 X509v3 Authority Key Identifier: keyid:62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:0a:68:fa:b8:ef:ed:f1:b9:24:81:f1:62:a9:39:79:89:c8: c7:ab:14:7c:6b:67:35:b7:6c:14:ce:03:da:05:06:ab:ae:d6: ef:37:a9:b0:b0:46:f1:8c:a8:b5:39:20:df:e5:c5:1b:1f:bc: 3b:be:70:ab:b4:98:41:22:91:53:7d:85:a7:a6:9e:4e:35:15: 49:1a:8a:b4:1f:08:fa:52:fb:81:0c:86:22:d9:43:da:14:65: 86:5a:dc:a7:67:2b:0c:9a:fd:83:dc:1e:2d:9a:6c:c5:ac:7e: 7a:4f:e1:da:e7:44:47:a5:c3:b9:0d:32:7e:8c:92:09:ec:5b: 2c:4e:9e:6d:c1:4b:29:f1:e9:69:fb:65:5a:40:9c:1f:eb:fb: be:8b:20:3f:44:83:94:2b:97:6d:9f:f9:c6:b1:6f:e1:9f:fe: f6:79:46:b3:4d:11:88:26:a0:d7:19:98:27:fa:97:ca:48:85: 6c:3c:76:92:29:58:a8:ee:93:74:ee:61:69:98:57:23:bc:1e: 18:ef:d2:46:4d:30:c8:0f:01:16:d6:87:94:94:f4:57:ac:84: 0b:3c:4c:40:33:75:6d:0f:4d:5a:ef:1a:c3:72:46:14:e3:df: 77:99:3a:a3:40:3c:32:d6:45:72:df:55:2e:ed:45:ca:15:3d: 0c:89:64:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3NUUxMTAvBgNVBAUTKDYyODQyMDdEMEQyN0EyRThCRjREMkVCMTRGQjEyOUNB RDRGNkNDM0YwHhcNMjUxMjIwMTcxOTE3WhcNMjUxMjI3MTcxOTE3WjAYMRYwFAYD VQQDDA02OTQ2ZGE5NS0xYjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5RisiKX2Qhys24a6m0NQkgUWCUNKAS2XBemStMhz2fe4yVJlHifY1kXL2z1 My5Ry+gNfjML4I1+IPdeZjC5iOHEtjYzU13GbIjm7bn4oasMupr56Eto3iLorsKc C21W8JOkO6jHLzqBuowCTU4NviWz6rAIOyWtmDS65WKchh2UWeWW3ogbbA+rqhxT JhabygChL8L3dRYngkfi+gHS9eCrtCyeDXt2xB7gdvkQpmVT8XmpbS9jAjfcZZYo n9kkBSKfvt+u+2cBzfFQ27Gc3IXZaVP8DSK5fZ0WbGOILFpoHkyKAsrmizVm8xcq EBInVTmSdmqcqFpj1jCZD5rffwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9npxoT nQ44RxNJgDSyif13X0ZwMB8GA1UdIwQYMBaAFGKEIH0NJ6Lov00usU+xKcrU9sw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjc1RS80REY3REIwNDkx MTgxMUU5OTQ3OTNDNERDNEY5QUUwMi9Zb1FnZlEwbm91aV9UUzZ4VDdFcHl0VDJ6 RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lvUWdmUTBub3VpX1RTNnhUN0VweXRUMnpEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mjc1RS80REY3REIwNDkxMTgxMUU5OTQ3OTNDNERDNEY5QUUwMi9Zb1FnZlEwbm91 aV9UUzZ4VDdFcHl0VDJ6RDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPCmj6uO/t8bkkgfFiqTl5icjHqxR8a2c1t2wUzgPaBQarrtbvN6mw sEbxjKi1OSDf5cUbH7w7vnCrtJhBIpFTfYWnpp5ONRVJGoq0Hwj6UvuBDIYi2UPa FGWGWtynZysMmv2D3B4tmmzFrH56T+Ha50RHpcO5DTJ+jJIJ7FssTp5twUsp8elp +2VaQJwf6/u+iyA/RIOUK5dtn/nGsW/hn/72eUazTRGIJqDXGZgn+pfKSIVsPHaS KVio7pN07mFpmFcjvB4Y79JGTTDIDwEW1oeUlPRXrIQLPExAM3VtD01a7xrDckYU 4993mTqjQDwy1kVy31Uu7UXKFT0MiWSl -----END CERTIFICATE-----Generated at Sun Dec 21 20:57:33 2025 by rpki-client