This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft File: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft (raw, json) Hash identifier: DC+bTBDEyfwfFbjfP13U/Jf9xruch6z1xikq1JvCegA= Subject key identifier: A0:5C:9E:9F:BF:4D:22:2C:16:B0:0C:79:DF:56:D4:04:95:5C:4D:87 Authority key identifier: 63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6 Certificate issuer: /CN=A914D0AF/serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft Manifest number: 0499 Signing time: Thu 04 Dec 2025 22:48:36 +0000 Manifest this update: Thu 04 Dec 2025 22:48:36 +0000 Manifest next update: Thu 11 Dec 2025 22:48:36 +0000 Files and hashes: 1: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl (hash: gAZZv+DTezOuhrXKdWn7tVe3Kz1HmhkewDf2wk3Xc54=) 2: F83346DA410211F097F43F85C4F9AE02.roa (hash: EnqZyVfj3TKzoAvrOL6tNqUILt/NgCo/Yq0hgyekdPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D0AF, serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6 Validity Not Before: Dec 4 22:48:36 2025 GMT Not After : Dec 11 22:48:36 2025 GMT Subject: CN=69320fc4-80e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ec:55:05:89:fb:6a:5e:89:d8:cf:13:24:81: e3:a1:c3:f1:cb:96:d3:39:e5:69:68:a8:5a:3b:c2: f7:09:c5:ac:b6:12:9a:96:31:2b:1d:64:c2:2b:c3: 7b:44:4c:e0:79:69:40:a5:03:72:cb:46:84:33:91: bd:8e:95:5c:d3:8b:35:70:09:d2:c8:a4:8e:e7:f5: 75:a3:a7:ca:05:0b:01:0e:07:93:4e:1c:31:d1:7a: f9:5e:cb:c1:53:6d:88:ce:bb:fd:d5:7b:69:ba:96: a1:68:81:24:63:a5:30:77:43:57:29:8f:e0:4a:bc: dc:30:7b:b0:2a:5d:77:25:4b:fe:9a:ef:81:fb:c0: e7:b0:93:de:ef:00:8c:3e:2f:75:02:64:ad:40:2e: 68:e6:ba:38:1c:7f:73:23:d6:dc:d6:ec:f4:1d:98: 74:16:f8:79:65:7f:d4:59:12:4c:c4:42:1c:0b:e4: 89:9a:c6:92:e2:07:45:f0:9c:eb:51:db:a0:66:47: b1:5d:a2:3a:37:bd:1c:31:9c:b2:a0:e3:d1:24:84: 4d:b5:dd:2b:40:e2:6f:d3:47:a0:cd:47:79:db:17: b9:1d:6a:6b:d9:b6:df:10:38:e1:ac:c4:5a:09:17: be:12:c7:2e:17:87:b1:57:5f:f1:35:5f:9e:a8:c2: f3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:5C:9E:9F:BF:4D:22:2C:16:B0:0C:79:DF:56:D4:04:95:5C:4D:87 X509v3 Authority Key Identifier: keyid:63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:b8:74:80:b3:e1:dd:7a:bf:39:e0:88:fb:95:6c:8b:e9:0b: a3:c4:5e:73:46:6c:51:60:68:38:74:a8:8d:fc:9c:fd:3f:cc: 9c:cd:c0:cc:f4:c1:51:3f:cc:5d:0e:a5:1f:f0:9d:e9:3a:a3: 9f:e0:80:ee:5f:bb:e3:61:22:81:b8:9c:8b:74:b1:01:88:5b: 9d:9f:0a:ef:20:c3:7a:6b:f2:2b:cd:d1:96:60:57:99:99:69: 23:40:4d:4f:c8:dc:52:21:9a:9b:42:8d:f8:52:f3:5b:f9:ac: 8d:92:d9:c6:9c:f6:dc:4e:18:00:87:b2:70:ab:61:47:da:38: 5e:65:94:ce:f3:21:e9:c6:77:e5:48:f8:3c:f0:a0:58:54:dc: 4b:62:08:fb:90:df:28:3e:42:43:46:c5:30:13:df:0e:56:90: f8:08:f9:c1:39:8a:31:34:bc:2c:67:10:dd:23:e0:e1:96:3e: db:73:0b:8b:7f:7a:cb:04:94:13:39:da:64:a3:99:7b:10:7e: 38:2b:2c:88:4d:e2:a4:dc:e3:62:fe:b6:cb:b3:5b:e5:43:9e: 07:1c:2c:ca:19:aa:a5:6f:1c:52:bc:ee:e4:b5:bd:f3:e4:25: 63:f9:8b:1d:2c:4f:16:87:07:d5:6a:51:98:6f:23:38:cb:3a: 6f:c8:a5:87 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RDBBRjExMC8GA1UEBRMoNjNCNzAxQjcyNzA2RjMxOTBCRUY4QkZCRkEzNEZGQTMz RjRGNkJENjAeFw0yNTEyMDQyMjQ4MzZaFw0yNTEyMTEyMjQ4MzZaMBgxFjAUBgNV BAMTDTY5MzIwZmM0LTgwZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC17FUFiftqXonYzxMkgeOhw/HLltM55WloqFo7wvcJxay2EpqWMSsdZMIrw3tE TOB5aUClA3LLRoQzkb2OlVzTizVwCdLIpI7n9XWjp8oFCwEOB5NOHDHRevley8FT bYjOu/3Ve2m6lqFogSRjpTB3Q1cpj+BKvNwwe7AqXXclS/6a74H7wOewk97vAIw+ L3UCZK1ALmjmujgcf3Mj1tzW7PQdmHQW+Hllf9RZEkzEQhwL5ImaxpLiB0XwnOtR 26BmR7Fdojo3vRwxnLKg49EkhE213StA4m/TR6DNR3nbF7kdamvZtt8QOOGsxFoJ F74Sxy4Xh7FXX/E1X56owvOlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoFyen79N IiwWsAx531bUBJVcTYcwHwYDVR0jBBgwFoAUY7cBtycG8xkL74v7+jT/oz9Pa9Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREMEFGLzFFMzM5QjM2ODhE RTExRUM4QThCMTYyOEM0RjlBRTAyL1k3Y0J0eWNHOHhrTDc0djctalRfb3o5UGE5 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWTdjQnR5Y0c4eGtMNzR2Ny1qVF9vejlQYTlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE MEFGLzFFMzM5QjM2ODhERTExRUM4QThCMTYyOEM0RjlBRTAyL1k3Y0J0eWNHOHhr TDc0djctalRfb3o5UGE5WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGO4dICz4d16vzngiPuVbIvpC6PEXnNGbFFgaDh0qI38nP0/zJzNwMz0 wVE/zF0OpR/wnek6o5/ggO5fu+NhIoG4nIt0sQGIW52fCu8gw3pr8ivN0ZZgV5mZ aSNATU/I3FIhmptCjfhS81v5rI2S2cac9txOGACHsnCrYUfaOF5llM7zIenGd+VI +DzwoFhU3EtiCPuQ3yg+QkNGxTAT3w5WkPgI+cE5ijE0vCxnEN0j4OGWPttzC4t/ essElBM52mSjmXsQfjgrLIhN4qTc42L+tsuzW+VDngccLMoZqqVvHFK87uS1vfPk JWP5ix0sTxaHB9VqUZhvIzjLOm/IpYc= -----END CERTIFICATE-----Generated at Sat Dec 6 18:28:12 2025 by rpki-client