This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft File: y-PSoWWxlLlY7sO2qURXdyo6CSo.mft (raw, json) Hash identifier: dRQE162ob4oGUWHcbBzr4qNBm7pWV1kxPWdoLoVCDf4= Subject key identifier: 44:5B:24:95:CB:9B:92:B3:5F:9E:2E:AC:CB:D7:38:13:58:AB:BF:2E Authority key identifier: CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A Certificate issuer: /CN=A9154FE7/serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A Certificate serial: 0885 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft Manifest number: 0877 Signing time: Sat 06 Dec 2025 19:44:25 +0000 Manifest this update: Sat 06 Dec 2025 19:44:24 +0000 Manifest next update: Sat 13 Dec 2025 19:44:24 +0000 Files and hashes: 1: y-PSoWWxlLlY7sO2qURXdyo6CSo.crl (hash: vUMEQsOsmWuZHr2Eh3SRXoQEY1qb0Lwicj6KzhqaoQs=) 2: 4B3AC7DC5FC811ED869A6956C4F9AE02.roa (hash: h/ONFX5RBxxUCv61ioAJ3Q3fkstH618CVb7fuwaMYno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.crl rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2181 (0x885) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154FE7, serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A Validity Not Before: Dec 6 19:44:24 2025 GMT Not After : Dec 13 19:44:24 2025 GMT Subject: CN=69348798-7227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ef:df:ef:64:ce:1e:6b:fb:56:a4:69:ff:09: f2:9d:23:79:89:d6:57:40:16:b3:b7:39:16:88:f2: 89:00:0a:b5:ab:b6:b3:c5:1a:90:5d:ef:83:39:b0: 72:55:6e:a4:b6:2a:64:62:3c:98:58:23:b8:17:1a: 88:77:7a:73:7a:e0:81:78:b8:40:3a:15:bf:56:90: 2c:8c:88:e6:81:7e:26:ac:56:f7:a8:88:51:4e:84: be:80:dd:7c:d9:1d:f4:92:5d:fc:88:f1:8d:5d:46: 0b:9b:1a:1f:10:fa:e6:cb:aa:d7:5f:59:cb:cf:6b: e6:8d:d1:d5:e7:ba:8c:d7:28:76:f5:b9:d9:fa:fe: 60:74:e6:ce:44:45:e2:a9:4c:8b:10:e3:2b:3d:8f: 20:d1:f5:1a:65:aa:30:86:86:89:92:f1:c6:8f:df: f6:0a:ba:bb:5b:93:2e:fc:bc:70:01:35:2e:a6:a7: 62:bf:2e:d7:b1:d0:99:4e:2f:a0:66:4e:70:ae:18: aa:59:8b:43:d3:bb:02:ba:c5:00:3a:9a:20:23:53: 60:90:a5:6b:36:6b:f6:07:f6:64:70:47:e6:ee:30: 65:0a:f0:ac:a3:10:c4:0a:11:32:d9:69:ce:f6:a5: 14:8c:f8:09:9b:c9:3e:f4:4a:41:23:2c:9c:db:80: 5e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5B:24:95:CB:9B:92:B3:5F:9E:2E:AC:CB:D7:38:13:58:AB:BF:2E X509v3 Authority Key Identifier: keyid:CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:57:e6:49:e9:9a:25:a0:19:7a:9a:14:5a:4a:c4:5e:3b:5b: 72:73:17:c2:93:99:7f:18:b7:e8:b3:80:6c:d9:d7:0d:2c:11: dd:8a:8d:00:4a:d9:53:41:f9:5b:ef:01:51:7c:80:08:ab:84: 38:48:c3:d4:d6:68:6e:ed:72:57:1a:ba:10:96:e1:dd:63:78: da:3e:57:48:22:1c:7a:0c:22:48:49:a8:08:2c:36:7c:51:c7: 72:e2:cb:8e:cc:d2:c4:93:9e:06:fa:80:5e:b1:7b:d6:77:40: fa:4c:29:79:51:67:ed:51:8a:7d:bd:51:d0:1b:f2:e0:6b:7f: d1:4e:02:c3:a4:15:8c:69:65:03:95:ef:40:1e:14:42:ad:f0: 3a:ea:31:4e:59:9e:e6:82:e2:74:46:50:d8:69:97:a9:ae:9e: d2:1b:63:3d:02:49:72:8e:47:7d:b6:58:11:38:50:ef:e8:6a: 4c:9a:12:75:4e:d8:f6:31:a9:f4:00:37:7d:d6:a2:b6:c1:c1: 17:e1:07:e9:cc:26:27:eb:09:60:ea:33:10:e5:b2:94:81:7b: 63:bd:d5:87:2a:68:5f:a2:81:7f:49:24:9b:a7:39:28:d0:11: 8e:5c:23:a3:ea:49:d1:dd:c4:c5:1e:b8:33:64:66:34:08:73: e8:ee:45:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRGRTcxMTAvBgNVBAUTKENCRTNEMkExNjVCMTk0Qjk1OEVFQzNCNkE5NDQ1Nzc3 MkEzQTA5MkEwHhcNMjUxMjA2MTk0NDI0WhcNMjUxMjEzMTk0NDI0WjAYMRYwFAYD VQQDEw02OTM0ODc5OC03MjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxu/f72TOHmv7VqRp/wnynSN5idZXQBaztzkWiPKJAAq1q7azxRqQXe+DObBy VW6ktipkYjyYWCO4FxqId3pzeuCBeLhAOhW/VpAsjIjmgX4mrFb3qIhRToS+gN18 2R30kl38iPGNXUYLmxofEPrmy6rXX1nLz2vmjdHV57qM1yh29bnZ+v5gdObOREXi qUyLEOMrPY8g0fUaZaowhoaJkvHGj9/2Crq7W5Mu/LxwATUupqdivy7XsdCZTi+g Zk5wrhiqWYtD07sCusUAOpogI1NgkKVrNmv2B/ZkcEfm7jBlCvCsoxDEChEy2WnO 9qUUjPgJm8k+9EpBIyyc24Be1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERbJJXL m5KzX54urMvXOBNYq78uMB8GA1UdIwQYMBaAFMvj0qFlsZS5WO7DtqlEV3cqOgkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEZFNy81QTJEODlFQURC N0QxMUVBQkNGM0VDM0VDNEY5QUUwMi95LVBTb1dXeGxMbFk3c08ycVVSWGR5bzZD U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ktUFNvV1d4bExsWTdzTzJxVVJYZHlvNkNTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEZFNy81QTJEODlFQURCN0QxMUVBQkNGM0VDM0VDNEY5QUUwMi95LVBTb1dXeGxM bFk3c08ycVVSWGR5bzZDU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRV+ZJ6ZoloBl6mhRaSsReO1tycxfCk5l/GLfos4Bs2dcNLBHdio0A StlTQflb7wFRfIAIq4Q4SMPU1mhu7XJXGroQluHdY3jaPldIIhx6DCJISagILDZ8 Ucdy4suOzNLEk54G+oBesXvWd0D6TCl5UWftUYp9vVHQG/Lga3/RTgLDpBWMaWUD le9AHhRCrfA66jFOWZ7mguJ0RlDYaZeprp7SG2M9Aklyjkd9tlgROFDv6GpMmhJ1 Ttj2Man0ADd91qK2wcEX4QfpzCYn6wlg6jMQ5bKUgXtjvdWHKmhfooF/SSSbpzko 0BGOXCOj6knR3cTFHrgzZGY0CHPo7kWm -----END CERTIFICATE-----Generated at Sun Dec 7 06:37:43 2025 by rpki-client