This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft File: YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json) Hash identifier: nFvtEhFwP7lq8kVrg2JsoErPXPBu74MOWWF4sudaJ48= Subject key identifier: 0E:51:63:C1:E6:DC:91:1F:0F:4D:D8:2C:AC:EC:B6:1E:91:D7:91:FE Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Certificate serial: 0522 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft Manifest number: 050D Signing time: Sat 06 Dec 2025 22:25:46 +0000 Manifest this update: Sat 06 Dec 2025 22:25:46 +0000 Manifest next update: Sat 13 Dec 2025 22:25:46 +0000 Files and hashes: 1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: 7zhkpZRu9Y8uNlqWLEk/jqG4qx2VDp8W3uqKx9CMV24=) 2: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: FE6e27RdwbgfOIo+ikPTPJ/pdQA+p/z7qpPIRAny0BQ=) 3: 274A12F696FD11EF88F06237C4F9AE02.roa (hash: Pm0s4Nw0vjEdOt8OEH+67yrk/B68Gy2u6QwOvd+DpWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1314 (0x522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149FAB, serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Validity Not Before: Dec 6 22:25:46 2025 GMT Not After : Dec 13 22:25:46 2025 GMT Subject: CN=6934ad6a-c191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:73:94:de:6f:27:91:b1:e3:7e:48:23:40: 60:9e:92:33:66:50:90:01:1d:2c:0f:c8:1e:c8:0a: e6:31:92:58:4a:be:30:94:18:84:48:07:1e:d0:00: e6:73:fa:4f:07:a8:90:55:4d:71:23:2c:01:20:1a: 4d:76:2b:4e:ec:c8:e8:ba:f3:d2:63:13:76:84:dc: 15:1c:36:01:8f:8a:63:d7:d8:33:eb:b7:01:85:42: 87:4c:8f:ff:95:e8:bd:fa:fe:ad:9f:3b:fa:28:3f: 91:5a:7e:57:90:86:05:a0:a8:74:3a:c4:9b:a1:7a: ee:4c:02:ec:bc:02:c0:c5:52:cb:70:70:ae:aa:ef: 9f:c9:c2:c5:0a:03:ba:a1:11:22:e7:ef:67:4e:cf: e3:cf:8d:66:26:0c:ba:13:bf:5d:41:a4:ab:da:b0: 53:43:8c:c6:ac:18:32:3d:43:ce:04:11:22:a2:0a: a1:4f:13:44:6b:db:d8:08:13:ff:05:81:15:1e:88: 49:5d:03:63:a7:5c:7b:47:2f:d0:cb:f4:72:c3:c5: 13:41:bb:51:bd:c1:55:3a:b5:b3:e8:af:38:f0:dc: e3:1b:1f:07:29:9c:40:33:f0:4d:4d:a2:de:3c:87: 1d:50:e4:f4:33:ef:c1:e5:e8:05:30:07:37:d2:f6: 0a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:51:63:C1:E6:DC:91:1F:0F:4D:D8:2C:AC:EC:B6:1E:91:D7:91:FE X509v3 Authority Key Identifier: keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:83:03:6c:d2:1c:66:8f:96:2d:23:39:5e:12:dd:20:da:11: 59:0a:93:c0:bc:75:5d:a5:24:4d:e9:f4:93:50:90:42:c7:e7: ca:cb:08:af:9d:94:a2:06:a1:d1:1b:7a:ed:14:75:e7:eb:5e: 12:d0:05:60:fe:49:2c:58:9c:10:90:29:7b:7a:f6:6a:49:3e: e6:7a:84:2f:b1:d2:11:f6:2a:8f:33:fa:5f:c2:60:dd:01:59: ef:bc:6f:1b:66:59:f0:c3:0a:b3:c1:a7:e1:26:dc:7c:14:71: c6:e4:1a:3d:a1:67:ff:0b:1d:d9:94:a4:66:e0:df:a4:cb:85: 7c:bd:48:e8:ac:da:d3:7b:e8:42:86:f3:9d:1a:92:cc:9e:04: de:40:b8:12:bd:58:83:fa:b1:01:be:90:06:d9:c6:ef:c7:79: 23:a1:f1:a0:6b:23:9f:22:54:39:df:22:9b:1d:73:10:66:14: 5f:d9:8d:be:fc:fa:79:ec:15:ef:c3:9d:ef:98:31:91:a5:2b: 34:9b:ef:d5:56:bf:b5:a9:6c:2c:e0:3a:fa:d0:c5:bb:20:23: 0b:b2:c0:fa:fe:42:52:b5:1d:7b:51:84:d3:5e:e1:9a:4d:d0: e7:9f:18:38:1e:69:f7:dd:7f:3f:c8:5c:9c:aa:e0:23:3c:6f: c8:fc:4c:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGQUIxMTAvBgNVBAUTKDYwMjhFNzA2NTIwNkE5RTQ1RkZENEIyNEE1N0VFOEMz MzQwQzU3MzYwHhcNMjUxMjA2MjIyNTQ2WhcNMjUxMjEzMjIyNTQ2WjAYMRYwFAYD VQQDEw02OTM0YWQ2YS1jMTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshRzlN5vJ5Gx435II0BgnpIzZlCQAR0sD8geyArmMZJYSr4wlBiESAce0ADm c/pPB6iQVU1xIywBIBpNditO7MjouvPSYxN2hNwVHDYBj4pj19gz67cBhUKHTI// lei9+v6tnzv6KD+RWn5XkIYFoKh0OsSboXruTALsvALAxVLLcHCuqu+fycLFCgO6 oREi5+9nTs/jz41mJgy6E79dQaSr2rBTQ4zGrBgyPUPOBBEiogqhTxNEa9vYCBP/ BYEVHohJXQNjp1x7Ry/Qy/Ryw8UTQbtRvcFVOrWz6K848NzjGx8HKZxAM/BNTaLe PIcdUOT0M+/B5egFMAc30vYKtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5RY8Hm 3JEfD03YLKzsth6R15H+MB8GA1UdIwQYMBaAFGAo5wZSBqnkX/1LJKV+6MM0DFc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUZBQi85Q0QxODRCMjM3 MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3FlUmZfVXNrcFg3b3d6UU1W elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDam5CbElHcWVSZl9Vc2twWDdvd3pRTVZ6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUZBQi85Q0QxODRCMjM3MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3Fl UmZfVXNrcFg3b3d6UU1WelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClgwNs0hxmj5YtIzleEt0g2hFZCpPAvHVdpSRN6fSTUJBCx+fKywiv nZSiBqHRG3rtFHXn614S0AVg/kksWJwQkCl7evZqST7meoQvsdIR9iqPM/pfwmDd AVnvvG8bZlnwwwqzwafhJtx8FHHG5Bo9oWf/Cx3ZlKRm4N+ky4V8vUjorNrTe+hC hvOdGpLMngTeQLgSvViD+rEBvpAG2cbvx3kjofGgayOfIlQ53yKbHXMQZhRf2Y2+ /Pp57BXvw53vmDGRpSs0m+/VVr+1qWws4Dr60MW7ICMLssD6/kJStR17UYTTXuGa TdDnnxg4Hmn33X8/yFycquAjPG/I/Ewm -----END CERTIFICATE-----Generated at Sun Dec 7 00:59:09 2025 by rpki-client