This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft File: MYjUHQwG76LJaocHNWno4QNE4s0.mft (raw, json) Hash identifier: YzlxMaYi7jMA0u48YEdlY3Pwq5dqGiLIsY+6lZFvW0o= Subject key identifier: 7F:98:18:6E:9B:1C:A1:76:CB:C2:10:1B:57:99:F5:F0:81:84:6C:7F Authority key identifier: 31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD Certificate issuer: /CN=A9147CA8/serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft Manifest number: 0A Signing time: Fri 05 Dec 2025 05:17:24 +0000 Manifest this update: Fri 05 Dec 2025 05:17:24 +0000 Manifest next update: Fri 12 Dec 2025 05:17:24 +0000 Files and hashes: 1: MYjUHQwG76LJaocHNWno4QNE4s0.crl (hash: 2hWxEQ1Ng8QRND92BEZKAIQgKOeWVKaEvFVALLUBjv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CA8, serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD Validity Not Before: Dec 5 05:17:24 2025 GMT Not After : Dec 12 05:17:24 2025 GMT Subject: CN=69326ae4-2107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:98:9c:1d:7a:d1:15:62:98:b2:05:de:7f:69: e2:fc:02:7e:c0:ea:c3:48:1e:f7:2c:14:3f:57:dd: 8e:af:03:ff:25:95:2d:7e:5d:75:98:1a:7a:a2:b8: ee:5c:b7:4b:c7:a4:48:c1:f8:e7:db:e1:52:c3:1d: 9e:c9:f5:b3:5c:e1:86:05:75:96:f4:50:58:7c:7e: 6b:33:0b:a8:10:0d:1d:35:87:8b:f9:2a:e0:1c:63: af:6b:78:26:b2:65:ac:b6:07:17:65:92:79:01:99: 80:2d:f7:42:be:0d:95:1a:6c:1d:a5:7a:f2:96:2a: 62:1b:c3:be:6a:2d:3d:27:19:df:0e:9e:62:bd:4a: c4:f2:e1:01:eb:85:ef:2b:05:7f:44:5b:6c:89:2e: ce:41:92:b2:0a:f8:30:29:2e:40:80:37:53:24:8c: d6:5e:30:bb:8b:b8:06:08:e2:d8:7d:9e:fc:fe:91: 56:ca:b4:f6:17:86:53:03:24:e4:f5:3e:08:6b:67: 1b:f8:b1:f3:65:ec:83:c8:44:9d:8b:7f:75:e5:53: 0a:0d:71:b4:2a:4f:02:66:37:af:41:12:d1:76:e1: d5:84:8f:28:5f:24:3c:6f:57:ba:a3:f9:68:91:75: 1a:5e:43:00:82:fa:73:cc:92:ec:bc:ac:d8:86:21: fb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:98:18:6E:9B:1C:A1:76:CB:C2:10:1B:57:99:F5:F0:81:84:6C:7F X509v3 Authority Key Identifier: keyid:31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:a4:72:46:00:8d:14:2f:48:f5:67:1f:12:c2:c5:12:b8:95: 74:eb:63:67:cf:84:62:f1:0e:06:1f:09:53:f1:c4:84:b0:27: f4:f0:b9:77:36:76:29:ec:93:55:97:7b:29:81:8e:e7:b3:c5: 1b:55:67:11:0f:94:60:18:9f:8d:33:e8:07:d2:67:9d:55:eb: 4f:79:ae:08:46:d3:f5:f8:22:08:9d:b0:80:59:d3:27:9b:6d: a0:17:52:84:58:d2:4c:2e:83:55:5c:57:e7:da:dd:36:a4:c1: 23:10:d7:91:3a:ac:9f:7a:ac:1a:35:e4:cf:1f:df:1a:d4:c2: 93:28:9d:26:a4:62:aa:8f:2e:be:9a:ef:d3:88:a9:1a:2e:9e: 4e:d5:72:cb:8a:f7:1b:19:c0:68:7d:48:6f:39:da:fd:63:71: b5:aa:c3:6e:2b:5b:19:6d:bd:c6:20:bd:d0:71:07:bd:2f:56: e1:18:7e:39:57:f7:60:e6:5a:ff:c9:30:e1:ff:86:6a:8c:06: 77:5e:09:9a:f8:62:9f:c0:09:f8:59:85:dd:c9:27:0f:01:0a: fd:23:05:ad:6e:01:b1:d7:a7:49:21:47:71:44:9f:86:ab:18: db:84:17:3b:63:bc:7e:74:54:9a:22:57:b1:19:c7:28:47:b8: b8:ea:5d:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 N0NBODExMC8GA1UEBRMoMzE4OEQ0MUQwQzA2RUZBMkM5NkE4NzA3MzU2OUU4RTEw MzQ0RTJDRDAeFw0yNTEyMDUwNTE3MjRaFw0yNTEyMTIwNTE3MjRaMBgxFjAUBgNV BAMTDTY5MzI2YWU0LTIxMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4mJwdetEVYpiyBd5/aeL8An7A6sNIHvcsFD9X3Y6vA/8llS1+XXWYGnqiuO5c t0vHpEjB+Ofb4VLDHZ7J9bNc4YYFdZb0UFh8fmszC6gQDR01h4v5KuAcY69reCay Zay2BxdlknkBmYAt90K+DZUabB2levKWKmIbw75qLT0nGd8OnmK9SsTy4QHrhe8r BX9EW2yJLs5BkrIK+DApLkCAN1MkjNZeMLuLuAYI4th9nvz+kVbKtPYXhlMDJOT1 PghrZxv4sfNl7IPIRJ2Lf3XlUwoNcbQqTwJmN69BEtF24dWEjyhfJDxvV7qj+WiR dRpeQwCC+nPMkuy8rNiGIfvjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUf5gYbpsc oXbLwhAbV5n18IGEbH8wHwYDVR0jBBgwFoAUMYjUHQwG76LJaocHNWno4QNE4s0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3Q0E4LzJEOThDQzVBQzUw NjExRjA4QzZCQTMyQkM0RjlBRTAyL01ZalVIUXdHNzZMSmFvY0hOV25vNFFORTRz MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVlqVUhRd0c3NkxKYW9jSE5Xbm80UU5FNHMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 Q0E4LzJEOThDQzVBQzUwNjExRjA4QzZCQTMyQkM0RjlBRTAyL01ZalVIUXdHNzZM SmFvY0hOV25vNFFORTRzMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAESkckYAjRQvSPVnHxLCxRK4lXTrY2fPhGLxDgYfCVPxxISwJ/TwuXc2 dinsk1WXeymBjuezxRtVZxEPlGAYn40z6AfSZ51V6095rghG0/X4IgidsIBZ0yeb baAXUoRY0kwug1VcV+fa3TakwSMQ15E6rJ96rBo15M8f3xrUwpMonSakYqqPLr6a 79OIqRounk7VcsuK9xsZwGh9SG852v1jcbWqw24rWxltvcYgvdBxB70vVuEYfjlX 92DmWv/JMOH/hmqMBndeCZr4Yp/ACfhZhd3JJw8BCv0jBa1uAbHXp0khR3FEn4ar GNuEFztjvH50VJoiV7EZxyhHuLjqXV0= -----END CERTIFICATE-----Generated at Sat Dec 6 17:17:09 2025 by rpki-client