This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft File: YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft (raw, json) Hash identifier: qUYBJl42+e4JBZUuMgLSkRcKo3ER8UY7wpfKvDe8PwI= Subject key identifier: AF:D5:BA:64:CC:4D:7C:AE:2D:24:20:E5:FB:17:94:CB:0D:CD:9F:28 Authority key identifier: 60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44 Certificate issuer: /CN=A9148488/serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344 Certificate serial: 0A1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft Manifest number: 0A17 Signing time: Sat 06 Dec 2025 19:01:11 +0000 Manifest this update: Sat 06 Dec 2025 19:01:10 +0000 Manifest next update: Sat 13 Dec 2025 19:01:10 +0000 Files and hashes: 1: YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl (hash: eGVSvyGrivdkmWyGMqIXv4iDvBJ+ZDfKIKG6Vbhkkb8=) 2: 5C8929C8839011EAB5B82263C4F9AE02.roa (hash: Jr5A5EFDHOtjVbEZUPlRHjoDRI+w8P0c18JoA/Eyebg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2589 (0xa1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148488, serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344 Validity Not Before: Dec 6 19:01:10 2025 GMT Not After : Dec 13 19:01:10 2025 GMT Subject: CN=69347d76-9f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b6:ee:96:0b:ce:8d:3a:5f:0f:27:cf:68:85: 54:a2:fe:4a:41:10:19:30:8b:6b:b3:d5:3a:21:64: ba:bd:24:73:67:da:8d:77:0b:1a:42:75:73:9f:a3: 6e:78:21:f2:a1:2e:eb:85:c7:33:b2:39:f1:c1:14: 63:b2:59:9e:ab:63:d0:fa:6a:76:a9:86:f2:f4:c9: ad:ab:28:be:66:4a:e7:2c:41:d4:b6:f8:4d:2f:35: 4b:25:6b:3e:9c:20:5a:07:2a:cc:c9:c9:f5:f2:0c: bc:8a:1f:ab:70:c7:76:8d:6a:30:4d:74:b4:10:79: f4:d1:04:fd:74:3f:29:bf:30:a8:7a:de:35:f6:30: 74:cf:84:5c:64:92:22:c8:95:ac:8f:62:61:f2:fe: f1:f4:73:d1:2a:ac:93:08:95:3e:11:d7:4a:13:7d: 97:5e:13:6d:1f:38:7e:f6:6a:0d:8f:47:98:d0:90: 7e:cc:02:ae:43:69:3f:7f:c8:9d:a8:a5:39:f6:fe: 89:68:3d:20:6d:8a:44:f1:e6:16:55:e6:63:6f:b8: 94:d4:2f:98:2f:86:ec:ee:0a:fe:8b:86:96:d1:d7: 42:61:2b:9f:5b:1d:2a:10:b3:48:5e:77:25:2e:5a: 1a:d3:39:55:d9:52:3c:27:83:c9:db:e7:88:52:e3: 4b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D5:BA:64:CC:4D:7C:AE:2D:24:20:E5:FB:17:94:CB:0D:CD:9F:28 X509v3 Authority Key Identifier: keyid:60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:75:57:8c:6f:61:a4:8c:e3:b5:ef:79:7d:49:88:5c:6d:bf: 4b:af:4c:c6:0e:c6:6e:64:fb:d9:64:9b:62:f3:f1:0c:6e:20: e9:4f:98:39:6e:b5:6c:5d:af:26:4f:08:49:cf:80:2a:af:0b: 15:95:57:a5:33:9e:6a:ea:50:4c:c9:a8:0a:0a:c4:04:1c:5b: 3d:18:84:8f:4d:b3:08:c1:77:78:46:ec:a7:52:54:0a:9e:6f: 05:65:83:8f:df:1c:d3:2d:db:4b:69:8b:49:9a:f4:5a:bd:3e: 4e:ba:53:eb:d7:37:c9:f6:69:16:c7:29:df:bc:03:72:ce:5d: 8c:81:a5:a0:5d:fb:a4:9e:eb:4f:bd:21:ec:97:71:23:95:ec: ee:fc:b4:ed:f3:30:1d:1c:f0:c4:56:a8:62:88:6d:a9:af:88: c6:1b:c6:ac:53:62:c8:ca:0e:17:cf:38:7e:1f:83:c0:65:cc: da:c6:6e:ad:24:03:5f:35:e4:e4:b3:dd:6c:e3:02:74:49:34: 70:3f:26:22:65:c9:1e:69:e6:ec:03:13:eb:ec:52:1d:9e:6d: 2a:e3:03:a9:87:2c:59:f9:3a:60:11:cb:9b:cb:d9:33:61:5b: 62:58:8f:8c:f7:64:64:5b:b7:6b:f7:c0:fa:3d:00:8f:fd:0d: 45:7f:44:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0ODgxMTAvBgNVBAUTKDYwNzZDNTEzOUQ0Q0NGREVCQ0E0NEExNEJEQjczMTY4 ODhGQTYzNDQwHhcNMjUxMjA2MTkwMTEwWhcNMjUxMjEzMTkwMTEwWjAYMRYwFAYD VQQDEw02OTM0N2Q3Ni05Zjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrbulgvOjTpfDyfPaIVUov5KQRAZMItrs9U6IWS6vSRzZ9qNdwsaQnVzn6Nu eCHyoS7rhcczsjnxwRRjslmeq2PQ+mp2qYby9Mmtqyi+ZkrnLEHUtvhNLzVLJWs+ nCBaByrMycn18gy8ih+rcMd2jWowTXS0EHn00QT9dD8pvzCoet419jB0z4RcZJIi yJWsj2Jh8v7x9HPRKqyTCJU+EddKE32XXhNtHzh+9moNj0eY0JB+zAKuQ2k/f8id qKU59v6JaD0gbYpE8eYWVeZjb7iU1C+YL4bs7gr+i4aW0ddCYSufWx0qELNIXncl Lloa0zlV2VI8J4PJ2+eIUuNLXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/VumTM TXyuLSQg5fsXlMsNzZ8oMB8GA1UdIwQYMBaAFGB2xROdTM/evKRKFL23MWiI+mNE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ4OC81RDI2ODM0QTgz OEYxMUVBQjcwMzE4NjJDNEY5QUUwMi9ZSGJGRTUxTXo5NjhwRW9VdmJjeGFJajZZ MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lIYkZFNTFNejk2OHBFb1V2YmN4YUlqNlkwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ4OC81RDI2ODM0QTgzOEYxMUVBQjcwMzE4NjJDNEY5QUUwMi9ZSGJGRTUxTXo5 NjhwRW9VdmJjeGFJajZZMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXdVeMb2GkjOO173l9SYhcbb9Lr0zGDsZuZPvZZJti8/EMbiDpT5g5 brVsXa8mTwhJz4AqrwsVlVelM55q6lBMyagKCsQEHFs9GISPTbMIwXd4RuynUlQK nm8FZYOP3xzTLdtLaYtJmvRavT5OulPr1zfJ9mkWxynfvANyzl2MgaWgXfuknutP vSHsl3Ejlezu/LTt8zAdHPDEVqhiiG2pr4jGG8asU2LIyg4Xzzh+H4PAZczaxm6t JANfNeTks91s4wJ0STRwPyYiZckeaebsAxPr7FIdnm0q4wOphyxZ+TpgEcuby9kz YVtiWI+M92RkW7dr98D6PQCP/Q1Ff0Qh -----END CERTIFICATE-----Generated at Sat Dec 6 23:04:13 2025 by rpki-client