This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft File: ycx5T_y0zfLZ373rdjgJuH0tj1c.mft (raw, json) Hash identifier: fdh2PIGhFDP/ChV+T99Z4MIw+BF7PBFmZUhrhje1b68= Subject key identifier: 2B:EE:09:95:C9:6C:A0:36:A4:57:A8:A3:F4:FB:00:3E:F4:CB:C5:20 Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 Certificate issuer: /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Certificate serial: 255B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft Manifest number: 253E Signing time: Sat 06 Dec 2025 15:30:44 +0000 Manifest this update: Sat 06 Dec 2025 15:30:44 +0000 Manifest next update: Sat 13 Dec 2025 15:30:44 +0000 Files and hashes: 1: ycx5T_y0zfLZ373rdjgJuH0tj1c.crl (hash: m+flkD5t+0XJjDxfcxekEZ3sJ5M5Y6a2bV4Ky59g5dg=) 2: 297BC4140D4611E794585E2FC4F9AE02.roa (hash: 2tz7LMjITp7vanRGF3Qd5TIIIj7fKWHmsVgw8s6O7nY=) 3: 04CC562A444E11E88204061CC4F9AE02.roa (hash: W5nO0Dm01E1L0J0RrwxDTx9HsKlaz3AShpTaXk9sHks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9563 (0x255b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Validity Not Before: Dec 6 15:30:44 2025 GMT Not After : Dec 13 15:30:44 2025 GMT Subject: CN=69344c24-df46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:74:46:7a:68:ab:70:70:e8:ac:54:29:91:84: 48:93:5e:8d:27:f2:90:06:fa:ee:cd:59:1e:4f:31: 2f:44:74:3a:6c:d8:0e:6a:dc:f4:3d:fe:73:92:9c: 1c:46:3e:98:fb:0c:c3:17:18:07:1d:e9:62:2c:dc: 24:ea:4a:39:6e:73:e1:a2:02:ae:11:6a:1a:2d:77: 2e:bb:e9:95:5c:19:29:1b:60:ce:56:09:e5:ba:73: 1d:10:37:0f:60:5c:73:fc:cb:06:f2:d9:43:d5:55: ad:99:8d:3c:5b:53:fd:59:a2:cf:87:a8:dd:d9:69: b6:fa:c8:83:e1:b2:f6:69:b6:58:fb:c7:c1:b4:34: 83:35:ff:e3:b9:6f:9c:85:d1:79:25:da:7c:c6:db: f6:00:40:b8:1d:7b:0f:9a:45:4f:cb:e7:5a:b1:1e: 6e:91:d6:8a:ee:94:93:8c:06:66:47:e0:94:0d:82: 8e:c9:8b:76:ff:b2:c6:8f:59:c8:41:12:85:ee:65: e9:ae:2b:79:ca:cb:cb:07:fa:fd:dc:f7:16:be:07: 89:83:0c:9f:84:54:60:a3:ac:69:b4:ff:8c:e7:0f: 87:32:68:73:80:6e:83:92:cd:09:9b:eb:56:c2:a3: f7:f2:31:77:aa:4a:3d:ef:4e:25:5f:22:08:14:f6: da:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EE:09:95:C9:6C:A0:36:A4:57:A8:A3:F4:FB:00:3E:F4:CB:C5:20 X509v3 Authority Key Identifier: keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:3d:59:c2:8e:75:34:c0:af:a4:e2:d3:96:7d:33:ed:49:42: d8:58:de:d4:6c:db:b2:c8:66:14:e4:d3:d5:88:a7:b6:d1:9f: 9a:41:62:a3:69:8c:07:22:97:9f:61:16:6e:54:6e:93:a9:a2: cd:9a:b9:e3:73:fd:5b:21:99:ec:5e:bb:b5:b0:13:03:8e:d5: 02:77:cf:de:b3:7a:b7:83:6f:17:d8:42:75:91:c9:f8:6c:d1: e5:32:f1:bc:78:a3:45:36:2d:1c:a9:c1:0b:bc:5f:7e:cc:ee: 07:80:19:7a:37:8b:d6:98:c8:2e:ab:ee:5b:6c:7c:90:b0:62: e8:72:95:c9:48:a2:64:94:fe:79:ad:37:da:92:f9:d8:27:40: 6e:ba:e1:aa:f1:48:9f:b9:44:a8:9f:1f:b7:ef:a1:d2:a0:44: 94:60:19:40:f8:bc:99:28:b7:92:f0:85:1d:c3:77:38:e5:18: 14:cf:cb:99:20:a8:8b:84:9d:52:ee:30:57:6f:0b:8b:83:63: b2:db:ca:a4:0b:50:84:d5:6d:ff:7c:b5:4c:f5:92:a3:2e:a4: 1b:67:47:84:1c:19:19:bf:84:8d:a5:6f:15:7c:82:68:8a:0a: 40:da:bd:2a:4b:e5:40:a0:53:db:e6:2f:b5:89:ec:32:3f:ae: d3:19:22:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0NTYxMTAvBgNVBAUTKEM5Q0M3OTRGRkNCNENERjJEOURGQkRFQjc2MzgwOUI4 N0QyRDhGNTcwHhcNMjUxMjA2MTUzMDQ0WhcNMjUxMjEzMTUzMDQ0WjAYMRYwFAYD VQQDEw02OTM0NGMyNC1kZjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHRGemircHDorFQpkYRIk16NJ/KQBvruzVkeTzEvRHQ6bNgOatz0Pf5zkpwc Rj6Y+wzDFxgHHeliLNwk6ko5bnPhogKuEWoaLXcuu+mVXBkpG2DOVgnlunMdEDcP YFxz/MsG8tlD1VWtmY08W1P9WaLPh6jd2Wm2+siD4bL2abZY+8fBtDSDNf/juW+c hdF5Jdp8xtv2AEC4HXsPmkVPy+dasR5ukdaK7pSTjAZmR+CUDYKOyYt2/7LGj1nI QRKF7mXprit5ysvLB/r93PcWvgeJgwyfhFRgo6xptP+M5w+HMmhzgG6Dks0Jm+tW wqP38jF3qko9704lXyIIFPbaOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvuCZXJ bKA2pFeoo/T7AD70y8UgMB8GA1UdIwQYMBaAFMnMeU/8tM3y2d+963Y4Cbh9LY9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ1Ni82MTU0RDE2ODM3 MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpmTFozNzNyZGpnSnVIMHRq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ljeDVUX3kwemZMWjM3M3JkamdKdUgwdGoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ1Ni82MTU0RDE2ODM3MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpm TFozNzNyZGpnSnVIMHRqMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0PVnCjnU0wK+k4tOWfTPtSULYWN7UbNuyyGYU5NPViKe20Z+aQWKj aYwHIpefYRZuVG6TqaLNmrnjc/1bIZnsXru1sBMDjtUCd8/es3q3g28X2EJ1kcn4 bNHlMvG8eKNFNi0cqcELvF9+zO4HgBl6N4vWmMguq+5bbHyQsGLocpXJSKJklP55 rTfakvnYJ0BuuuGq8UifuUSonx+376HSoESUYBlA+LyZKLeS8IUdw3c45RgUz8uZ IKiLhJ1S7jBXbwuLg2Oy28qkC1CE1W3/fLVM9ZKjLqQbZ0eEHBkZv4SNpW8VfIJo igpA2r0qS+VAoFPb5i+1iewyP67TGSKx -----END CERTIFICATE-----Generated at Sun Dec 7 04:20:24 2025 by rpki-client