This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft File: YDL2P9JhaBpA9zC5eHJR5jMozW4.mft (raw, json) Hash identifier: fg5Y7/3qrQUzM8+YWACQeJ3rWVfpW1M/dnCA0XIJpJY= Subject key identifier: 0E:46:D9:A5:AA:89:F6:16:C9:1E:C5:18:AD:68:63:09:E6:B3:D6:D0 Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E Certificate issuer: /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft Manifest number: 0139 Signing time: Fri 05 Dec 2025 02:39:10 +0000 Manifest this update: Fri 05 Dec 2025 02:39:09 +0000 Manifest next update: Fri 12 Dec 2025 02:39:09 +0000 Files and hashes: 1: YDL2P9JhaBpA9zC5eHJR5jMozW4.crl (hash: +mvy628aXbuvpy96ph70SuWYAUY0nKDUiAEnBS4eO+Q=) 2: 2FA6E74C0E0511F0971F7328C4F9AE02.roa (hash: ZuV1m3RVCFuLNu5PVZ3hMbWj1JgqSl1bBNnQdfczgAE=) 3: 8A27B986FFB811EFB6E16425C4F9AE02.roa (hash: g20Eco9SaLOp8CUCQLbxBAHWlc3BxmlgHVHA64eMjfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155098, serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Validity Not Before: Dec 5 02:39:09 2025 GMT Not After : Dec 12 02:39:09 2025 GMT Subject: CN=693245cd-e69f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b1:4c:ba:01:49:4d:81:86:0d:76:d6:93:df: fe:cb:dc:2a:fe:bf:bb:ed:db:03:d3:cf:e9:23:3a: 11:9c:a6:c8:b1:b3:5e:15:e3:bd:2a:3e:b3:e1:d3: 38:57:70:9e:5d:a4:df:63:56:02:e1:09:2d:bd:1b: 32:15:3d:09:3e:ac:29:f9:3a:5c:47:f4:c7:8e:c2: 99:84:1d:09:b2:75:e7:b6:89:c5:bb:80:25:e5:ed: 98:a6:65:9e:15:14:7c:5e:a9:cc:1f:ae:89:86:75: 39:42:7e:6c:43:70:da:10:28:27:98:a1:0f:96:00: 14:e2:a2:2b:40:ba:0b:e4:0c:aa:56:20:f2:c2:36: 17:07:4b:60:a5:52:5a:f0:b2:80:99:24:18:ff:70: 5d:b7:e1:c4:58:7b:bc:c0:fb:64:41:b5:a4:d3:92: 14:dd:0f:b9:2d:6c:10:5b:33:d0:a2:fe:69:90:1a: 84:e5:c1:81:14:aa:ea:d2:6e:51:5f:35:a2:c7:76: a2:b1:fd:6b:2f:61:f1:a0:af:ab:3c:06:e3:6e:b7: eb:1c:2b:d6:26:73:70:35:99:39:28:f0:cb:9b:58: 87:52:51:21:35:f9:d0:e2:bb:8c:ce:f1:dc:06:db: ba:4b:3d:21:4b:e9:40:75:1e:6f:e9:a3:95:01:28: fd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:46:D9:A5:AA:89:F6:16:C9:1E:C5:18:AD:68:63:09:E6:B3:D6:D0 X509v3 Authority Key Identifier: keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:fe:97:bc:d3:44:23:fe:00:23:93:77:17:04:73:18:f9:1e: 6b:ef:95:40:64:27:bd:93:3c:84:2b:38:73:39:fd:96:c0:7d: 7d:c3:00:38:e6:26:62:fe:2e:c7:c3:b9:8f:52:19:42:4a:36: dd:cf:88:2a:3c:38:77:8a:f8:cb:5f:60:38:f9:6b:b0:53:70: ed:36:ed:4e:b9:50:b8:b5:f0:c9:92:e5:06:7c:da:2b:d4:ab: 5d:f2:66:60:62:21:7e:bb:49:70:3f:33:28:8d:56:7c:31:ef: 74:33:1e:77:49:60:dd:2f:80:75:8d:13:51:7b:58:8e:95:bc: 68:04:3a:e2:c0:77:6a:1c:02:b3:27:d7:7f:1d:0d:c7:f5:9a: 13:ac:96:3b:0b:f9:d3:f4:7a:38:0e:85:e3:24:2a:53:d5:63: 14:a0:0d:a7:50:b5:0a:04:4a:26:b4:b9:8d:e5:8d:8a:0d:ba: 9d:3a:89:16:62:99:fd:f5:30:0d:6b:42:e0:5f:1c:96:9b:d3: 00:21:aa:68:5d:da:bc:e0:e1:93:4e:9a:5f:88:0b:2d:70:5a: fb:b2:e7:64:bf:db:91:de:12:b2:3d:0a:b1:85:d9:19:61:63: c9:49:59:17:7e:da:05:e0:4d:ef:a4:f9:e7:fa:d6:b2:45:7d: 0c:9f:d5:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUwOTgxMTAvBgNVBAUTKDYwMzJGNjNGRDI2MTY4MUE0MEY3MzBCOTc4NzI1MUU2 MzMyOENENkUwHhcNMjUxMjA1MDIzOTA5WhcNMjUxMjEyMDIzOTA5WjAYMRYwFAYD VQQDEw02OTMyNDVjZC1lNjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17FMugFJTYGGDXbWk9/+y9wq/r+77dsD08/pIzoRnKbIsbNeFeO9Kj6z4dM4 V3CeXaTfY1YC4QktvRsyFT0JPqwp+TpcR/THjsKZhB0JsnXntonFu4Al5e2YpmWe FRR8XqnMH66JhnU5Qn5sQ3DaECgnmKEPlgAU4qIrQLoL5AyqViDywjYXB0tgpVJa 8LKAmSQY/3Bdt+HEWHu8wPtkQbWk05IU3Q+5LWwQWzPQov5pkBqE5cGBFKrq0m5R XzWix3aisf1rL2HxoK+rPAbjbrfrHCvWJnNwNZk5KPDLm1iHUlEhNfnQ4ruMzvHc Btu6Sz0hS+lAdR5v6aOVASj9bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5G2aWq ifYWyR7FGK1oYwnms9bQMB8GA1UdIwQYMBaAFGAy9j/SYWgaQPcwuXhyUeYzKM1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTA5OC9CMkIxQTJCOEZD NzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFCcEE5ekM1ZUhKUjVqTW96 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lETDJQOUpoYUJwQTl6QzVlSEpSNWpNb3pXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTA5OC9CMkIxQTJCOEZDNzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFC cEE5ekM1ZUhKUjVqTW96VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9/pe800Qj/gAjk3cXBHMY+R5r75VAZCe9kzyEKzhzOf2WwH19wwA4 5iZi/i7Hw7mPUhlCSjbdz4gqPDh3ivjLX2A4+WuwU3DtNu1OuVC4tfDJkuUGfNor 1Ktd8mZgYiF+u0lwPzMojVZ8Me90Mx53SWDdL4B1jRNRe1iOlbxoBDriwHdqHAKz J9d/HQ3H9ZoTrJY7C/nT9Ho4DoXjJCpT1WMUoA2nULUKBEomtLmN5Y2KDbqdOokW Ypn99TANa0LgXxyWm9MAIapoXdq84OGTTppfiAstcFr7sudkv9uR3hKyPQqxhdkZ YWPJSVkXftoF4E3vpPnn+tayRX0Mn9VW -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:43 2025 by rpki-client