This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft File: yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft (raw, json) Hash identifier: IaaoX1f2KDt1J8R3Q1hdNsayLoq9r0bxFAzqb7edfY4= Subject key identifier: F9:EC:D5:34:7E:CB:F7:63:2E:47:11:71:5F:74:C2:72:09:68:C2:0E Authority key identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E Certificate issuer: /CN=A9147B4B/serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft Manifest number: AE Signing time: Fri 05 Dec 2025 04:11:01 +0000 Manifest this update: Fri 05 Dec 2025 04:11:01 +0000 Manifest next update: Fri 12 Dec 2025 04:11:00 +0000 Files and hashes: 1: yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl (hash: LaWWLYJlgmYxnb0Q2ZTv4R+R+OMxyiARG3oJfjRth4E=) 2: 7C5A543CBCB711F08806E909C4F9AE02.roa (hash: HXfuoPPOISLeZAGMxM2ZOv5/N+2c2faqMDjmBCaUAco=) 3: 7CC84384BCB711F0BD57E909C4F9AE02.roa (hash: tocgZbNLUZnmK5o3KUZfzLRaDTzgiDSR8jQubC3UCN0=) 4: 7D3521CABCB711F08B02E909C4F9AE02.roa (hash: tiXzdvk4f16pfcNtq9TYm0SwIe0myuwqn57Pwl16shU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B4B, serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E Validity Not Before: Dec 5 04:11:01 2025 GMT Not After : Dec 12 04:11:00 2025 GMT Subject: CN=69325b55-95df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:36:c9:a6:24:e8:a6:9e:e9:8f:e1:10:61:fd: 29:c9:be:d2:af:5c:49:07:43:bf:1e:bb:14:29:08: cb:3b:5f:f1:3b:1f:33:c4:bb:46:29:e2:b0:6f:9f: 87:97:1b:d3:31:7a:1c:ff:7d:df:df:e7:e1:c0:42: d7:9d:22:21:29:a0:d0:40:b5:70:2e:57:40:9d:a4: 8d:a5:1f:21:b3:00:14:51:89:66:8d:62:27:51:a3: da:33:06:f5:0b:f1:32:a1:bd:f0:8e:5f:22:0b:af: a1:2b:b2:c8:0c:25:98:52:65:88:f1:69:76:1b:6d: e5:b7:f6:50:12:5e:cf:c4:90:27:47:c0:50:a5:59: 2c:6a:23:2f:dd:d5:1d:80:71:2c:94:4e:7e:84:0f: 33:93:f5:b6:09:5c:3a:fd:cf:f4:7a:ad:d7:3f:60: 2e:60:2a:ed:84:3c:a7:b5:90:8c:da:71:9e:a8:e4: e9:d7:3a:15:c1:5c:7c:2a:48:28:7b:50:cc:35:86: 45:d4:f8:94:0e:60:e7:b0:1d:e2:4f:1d:af:ef:a1: 85:20:75:1b:ea:c2:2f:93:c2:81:57:49:32:2b:b2: dd:d9:8d:3a:8f:3a:0b:f1:87:f0:15:2c:4d:a9:a1: bd:3c:cd:85:a7:85:85:31:9d:0b:20:52:26:45:da: c5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EC:D5:34:7E:CB:F7:63:2E:47:11:71:5F:74:C2:72:09:68:C2:0E X509v3 Authority Key Identifier: keyid:C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:f5:d4:1e:4a:4f:c3:2a:bd:2f:60:71:a4:98:42:9f:a0:d5: 7e:da:bc:9e:e6:05:70:c3:88:99:9e:4b:73:56:6c:0e:9c:e1: 20:91:82:44:a4:04:e2:09:02:00:1b:68:fe:8f:2d:b2:67:81: 25:02:72:cd:de:01:20:cf:1b:b7:21:bc:42:cf:1c:dd:55:72: bd:70:00:33:c7:ac:f2:04:bb:14:6b:f9:2d:03:9a:e6:2e:be: 37:53:06:40:26:06:ff:25:e6:14:ca:d4:b4:ed:77:cc:b0:f8: d3:fa:25:bc:cb:dd:ee:a9:aa:b7:8f:ec:90:81:ab:a7:84:53: 74:e6:3d:a7:7d:7b:38:69:2e:bd:ba:ff:7d:89:43:67:5e:5f: 72:04:c1:f7:40:54:a4:b6:dd:86:77:6e:d2:f7:53:75:03:82: c9:b2:75:d1:10:6d:a0:d0:f9:0f:16:e9:59:d7:9d:d9:fd:92: 65:63:8f:0a:48:b4:43:b8:e0:aa:31:eb:8f:e0:d2:ba:ad:e9: 2b:a2:9c:ed:c4:69:78:21:f7:4a:ce:b9:92:fa:2b:f0:d1:fa: f7:f2:b4:cc:3f:aa:47:3e:f3:e7:e0:c3:48:e4:1c:2b:94:94: 5e:67:08:20:14:6c:77:46:fc:8b:2c:6d:a0:66:6b:4c:25:2d: 7e:e9:74:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCNEIxMTAvBgNVBAUTKEM4NzdDREYyMkQyNUI2RTMzRkM1RTQ5NUJFNTVFNTlE MEE5NDk4N0UwHhcNMjUxMjA1MDQxMTAxWhcNMjUxMjEyMDQxMTAwWjAYMRYwFAYD VQQDEw02OTMyNWI1NS05NWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDbJpiTopp7pj+EQYf0pyb7Sr1xJB0O/HrsUKQjLO1/xOx8zxLtGKeKwb5+H lxvTMXoc/33f3+fhwELXnSIhKaDQQLVwLldAnaSNpR8hswAUUYlmjWInUaPaMwb1 C/Eyob3wjl8iC6+hK7LIDCWYUmWI8Wl2G23lt/ZQEl7PxJAnR8BQpVksaiMv3dUd gHEslE5+hA8zk/W2CVw6/c/0eq3XP2AuYCrthDyntZCM2nGeqOTp1zoVwVx8Kkgo e1DMNYZF1PiUDmDnsB3iTx2v76GFIHUb6sIvk8KBV0kyK7Ld2Y06jzoL8YfwFSxN qaG9PM2Fp4WFMZ0LIFImRdrFuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPns1TR+ y/djLkcRcV90wnIJaMIOMB8GA1UdIwQYMBaAFMh3zfItJbbjP8Xklb5V5Z0KlJh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0I0Qi9FMTU2QTA0Q0NG MzgxMUVGODQ4NEU5MkZDNEY5QUUwMi95SGZOOGkwbHR1TV94ZVNWdmxYbG5RcVVt SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lIZk44aTBsdHVNX3hlU1Z2bFhsblFxVW1INC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0I0Qi9FMTU2QTA0Q0NGMzgxMUVGODQ4NEU5MkZDNEY5QUUwMi95SGZOOGkwbHR1 TV94ZVNWdmxYbG5RcVVtSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB9dQeSk/DKr0vYHGkmEKfoNV+2rye5gVww4iZnktzVmwOnOEgkYJE pATiCQIAG2j+jy2yZ4ElAnLN3gEgzxu3IbxCzxzdVXK9cAAzx6zyBLsUa/ktA5rm Lr43UwZAJgb/JeYUytS07XfMsPjT+iW8y93uqaq3j+yQgaunhFN05j2nfXs4aS69 uv99iUNnXl9yBMH3QFSktt2Gd27S91N1A4LJsnXREG2g0PkPFulZ153Z/ZJlY48K SLRDuOCqMeuP4NK6rekropztxGl4IfdKzrmS+ivw0fr38rTMP6pHPvPn4MNI5Bwr lJReZwggFGx3RvyLLG2gZmtMJS1+6XSW -----END CERTIFICATE-----Generated at Sat Dec 6 16:13:39 2025 by rpki-client