This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft File: y7aOmQU8HeJHirvi3_KrzsDRsUg.mft (raw, json) Hash identifier: LhrP/96p/zO2VmnaMTs0kF63exeyO+tChEFxdwhkcNw= Subject key identifier: EF:31:14:0D:AF:E7:E4:20:E4:81:69:4E:B6:8A:FF:13:0E:12:D7:5B Authority key identifier: CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 Certificate issuer: /CN=A9149905/serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Certificate serial: 34F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft Manifest number: 34EA Signing time: Sat 06 Dec 2025 14:50:09 +0000 Manifest this update: Sat 06 Dec 2025 14:50:09 +0000 Manifest next update: Sat 13 Dec 2025 14:50:09 +0000 Files and hashes: 1: y7aOmQU8HeJHirvi3_KrzsDRsUg.crl (hash: 01QuoMCfKIm2P4AnajaEITrCZUH9kaO6d5miyZHM110=) 2: A6D6CA7E022C11EBAC47A831C4F9AE02.roa (hash: w/zPMK06vnyoVLL/BGNp77uAUStxaD44YXARWWRfkvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13552 (0x34f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149905, serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Validity Not Before: Dec 6 14:50:09 2025 GMT Not After : Dec 13 14:50:09 2025 GMT Subject: CN=693442a1-1693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bd:72:2d:9a:c2:9d:aa:b5:0d:d1:c2:21:3a: bf:28:4c:6b:68:cb:49:8d:b8:c1:9e:9f:bd:50:34: 38:66:d3:a2:39:4a:88:53:a0:84:f1:d8:d2:6e:24: c4:db:ef:b8:eb:c0:e0:8e:fc:f3:1a:56:09:de:57: ee:f7:23:c2:31:b1:99:af:9b:1d:c1:b6:f9:0b:db: c5:2d:2b:0a:23:84:6a:43:72:32:8b:dd:97:d6:a0: 26:ba:be:b2:bf:1e:1f:f5:22:f9:ee:9f:c9:70:c2: 18:a0:c6:86:0e:36:c6:11:79:d5:6a:bb:e8:83:de: 6e:ed:0e:c5:a3:f7:8c:0c:8b:75:45:ca:1c:74:4e: 72:39:5f:6e:64:1f:b8:0e:ba:04:92:81:ec:69:8c: 59:33:45:a0:d6:47:ed:53:c0:06:9a:f0:a4:d9:98: 95:81:75:81:a6:13:6e:c8:17:7e:cd:a7:05:37:fb: 0a:ae:46:ee:b3:6d:b8:c8:28:e4:16:eb:e7:a8:44: 33:ac:d3:6b:e7:07:c1:23:dc:d0:d2:10:ef:f4:98: 16:4f:1a:40:f2:db:18:ac:82:d1:cc:64:88:e6:25: 78:e1:31:a2:12:7b:20:0a:55:f1:e8:31:61:a4:f9: 3c:e2:d4:ab:52:ec:8a:23:3f:6a:c0:1b:a1:3e:87: 5c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:31:14:0D:AF:E7:E4:20:E4:81:69:4E:B6:8A:FF:13:0E:12:D7:5B X509v3 Authority Key Identifier: keyid:CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:f9:e4:f5:af:e8:aa:d5:64:ba:d8:cc:64:e2:fc:da:ab:af: 34:06:f1:b7:61:30:7b:d1:46:7e:07:94:d3:54:f5:61:47:8b: 49:76:2d:a1:cb:86:e4:07:f7:c9:fd:04:59:8a:23:e3:94:78: 4b:7d:60:0e:79:27:1d:97:6c:e1:5a:7f:23:66:35:e2:a3:61: 91:d3:47:de:87:29:4e:fd:d3:c4:75:19:2a:c8:22:a1:a3:3b: ff:fd:e5:5e:ef:f9:b2:aa:25:6c:fb:7f:a2:8d:fc:0e:3c:c8: 00:dd:22:27:e9:81:08:98:4c:79:2f:b9:9f:41:1f:e2:87:31: fb:96:ed:b6:4c:17:0c:b4:9f:95:c5:3b:24:e1:88:0d:c0:15: 05:35:b4:3f:f1:bc:04:eb:97:d8:d4:2d:88:bc:79:3e:21:6d: dc:11:93:e5:c6:05:25:eb:2b:78:c7:e7:97:53:4e:b8:c9:57: ea:34:3e:77:ce:4b:d9:f6:16:e1:5e:56:62:63:8e:8d:e0:74: ea:22:ef:16:42:07:4e:59:fb:79:e4:f0:20:29:ce:0e:97:37: 29:48:4f:96:4e:6b:40:8b:f9:a8:68:66:90:05:ae:83:15:13: 4f:c3:88:10:92:f5:64:d9:a0:a5:da:54:3a:2f:9c:9e:ae:8e: 11:16:8a:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MDUxMTAvBgNVBAUTKENCQjY4RTk5MDUzQzFERTI0NzhBQkJFMkRGRjJBQkNF QzBEMUIxNDgwHhcNMjUxMjA2MTQ1MDA5WhcNMjUxMjEzMTQ1MDA5WjAYMRYwFAYD VQQDEw02OTM0NDJhMS0xNjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvr1yLZrCnaq1DdHCITq/KExraMtJjbjBnp+9UDQ4ZtOiOUqIU6CE8djSbiTE 2++468DgjvzzGlYJ3lfu9yPCMbGZr5sdwbb5C9vFLSsKI4RqQ3Iyi92X1qAmur6y vx4f9SL57p/JcMIYoMaGDjbGEXnVarvog95u7Q7Fo/eMDIt1RcocdE5yOV9uZB+4 DroEkoHsaYxZM0Wg1kftU8AGmvCk2ZiVgXWBphNuyBd+zacFN/sKrkbus224yCjk FuvnqEQzrNNr5wfBI9zQ0hDv9JgWTxpA8tsYrILRzGSI5iV44TGiEnsgClXx6DFh pPk84tSrUuyKIz9qwBuhPodcLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8xFA2v 5+Qg5IFpTraK/xMOEtdbMB8GA1UdIwQYMBaAFMu2jpkFPB3iR4q74t/yq87A0bFI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNS8zOTREMDY0QTFE OUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhlSkhpcnZpM19LcnpzRFJz VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3YU9tUVU4SGVKSGlydmkzX0tyenNEUnNVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkwNS8zOTREMDY0QTFEOUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhl SkhpcnZpM19LcnpzRFJzVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl+eT1r+iq1WS62Mxk4vzaq680BvG3YTB70UZ+B5TTVPVhR4tJdi2h y4bkB/fJ/QRZiiPjlHhLfWAOeScdl2zhWn8jZjXio2GR00fehylO/dPEdRkqyCKh ozv//eVe7/myqiVs+3+ijfwOPMgA3SIn6YEImEx5L7mfQR/ihzH7lu22TBcMtJ+V xTsk4YgNwBUFNbQ/8bwE65fY1C2IvHk+IW3cEZPlxgUl6yt4x+eXU064yVfqND53 zkvZ9hbhXlZiY46N4HTqIu8WQgdOWft55PAgKc4OlzcpSE+WTmtAi/moaGaQBa6D FRNPw4gQkvVk2aCl2lQ6L5yero4RForE -----END CERTIFICATE-----Generated at Sat Dec 6 20:28:56 2025 by rpki-client