This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft File: y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft (raw, json) Hash identifier: CCKYD7s6tTbxCZCMzNq50h0CjbpChyDs2bzD6OOMbo8= Subject key identifier: 74:B8:D0:05:77:FF:E9:D6:7B:F4:7C:D0:3D:C0:A8:91:25:C5:AB:25 Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 Certificate issuer: /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Certificate serial: 01A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft Manifest number: 0197 Signing time: Fri 05 Dec 2025 01:43:59 +0000 Manifest this update: Fri 05 Dec 2025 01:43:59 +0000 Manifest next update: Fri 12 Dec 2025 01:43:58 +0000 Files and hashes: 1: y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl (hash: eA/HPlANfQyXXbFovPWUrgUHXRNOCeucTZMDx12Cd6g=) 2: A910F37297CE11F0885B0A30C4F9AE02.roa (hash: cQK647yMwwLX45q9mOT0EIccACxOtmPbIGvaw9w+/pc=) 3: 6A0C1182CA9D11F084B0E810C4F9AE02.roa (hash: TaQe7pVCJcOvg3Dz/rOBAa2x20/W94Gc+N+7uDAQWBE=) 4: B752E03A97CE11F0ADE43030C4F9AE02.roa (hash: UlT/oF85OcS2SKCUgl+PsPTlbGKhNl+SEibXUqkYmEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159FAF, serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Validity Not Before: Dec 5 01:43:59 2025 GMT Not After : Dec 12 01:43:58 2025 GMT Subject: CN=693238df-a8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2a:3a:ab:2d:31:83:79:ca:7c:ba:36:0c:d0: 98:2a:b4:c6:26:ce:09:eb:a6:4f:bf:28:31:ea:11: 66:63:16:9a:41:09:44:fa:1e:57:fe:8b:f5:8b:8e: 43:0d:1f:fb:84:4c:2f:79:86:31:7c:dc:e4:dc:51: 28:83:a4:78:aa:a6:f7:ed:e3:2b:9a:11:6a:5e:0b: 06:1b:5f:33:bc:46:63:2c:fd:3d:f9:5e:ca:8a:d7: 30:83:0d:89:a2:e2:66:f4:a0:e7:0e:9a:9b:a8:65: 4f:7a:83:a4:8f:56:a0:18:f8:1c:78:6c:ce:47:ca: b0:fd:ad:00:7c:a7:d5:7b:2f:44:4a:d4:62:10:f3: da:8f:5f:ef:ce:d1:08:a8:cd:94:42:ca:95:27:c9: ec:0d:54:26:fd:73:90:6f:dd:ea:bd:f5:ec:5e:89: 61:69:af:6e:ca:14:a5:af:00:c5:20:c5:06:23:b2: 42:56:91:18:60:52:3d:64:e1:29:44:75:08:05:40: eb:ff:dd:32:67:31:f2:2c:40:fe:89:e7:b4:0b:dc: 31:92:de:27:38:23:3a:ca:c8:ec:2d:0e:fc:af:a8: 35:c5:23:96:d1:77:aa:92:c2:90:3b:5e:72:52:9c: 0b:6e:b0:ec:af:85:c2:04:8e:ea:89:5a:dd:77:68: f0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B8:D0:05:77:FF:E9:D6:7B:F4:7C:D0:3D:C0:A8:91:25:C5:AB:25 X509v3 Authority Key Identifier: keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:c2:34:7d:a2:e9:a7:5e:d4:a9:65:6a:4a:43:d9:6b:f1:4d: 06:17:69:44:10:ba:f8:52:ed:a6:80:3a:f6:a7:97:53:97:0a: 7b:41:58:1f:9d:18:fd:68:f7:5a:5d:34:cf:c7:b3:51:d3:90: e7:d3:0b:4a:4a:47:a5:05:cf:33:e7:1f:9d:e7:d4:b2:a1:14: 45:4f:46:19:cb:b0:50:7f:a0:26:d6:c8:7e:39:83:ed:dc:3e: 1c:3f:b1:da:b4:11:db:d7:31:5a:72:98:1b:10:2d:64:55:01: b5:3b:f8:3e:c7:40:1f:60:88:b6:4e:a0:36:d6:4d:e1:4f:a0: 26:e0:e0:a8:c4:a1:9a:c5:54:4a:9c:80:13:6f:27:26:31:b9: 14:2a:6a:33:2b:98:da:c1:95:9e:23:c7:89:af:66:06:2e:55: 03:0a:fb:47:97:ba:1c:56:ef:5f:a6:05:84:69:6b:ce:49:dc: c1:66:5a:be:a2:07:b2:5b:61:aa:a1:fb:b2:0f:94:95:0a:9b: a6:28:38:1d:7f:ed:65:58:b1:d4:a6:2c:99:9b:bc:4c:3c:de: 6a:31:3d:40:c8:09:e8:dc:91:78:1b:4b:45:74:97:7a:67:fa: 38:46:ab:00:51:0c:a6:92:e9:8f:f1:c0:41:6b:ca:dc:a4:0f: bb:90:b1:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlGQUYxMTAvBgNVBAUTKENCRUM2RjE4MzkwNTQ4NzUyMUM3OTQ3QjRGN0JGRDZD Qjc4REE0NzkwHhcNMjUxMjA1MDE0MzU5WhcNMjUxMjEyMDE0MzU4WjAYMRYwFAYD VQQDEw02OTMyMzhkZi1hOGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5So6qy0xg3nKfLo2DNCYKrTGJs4J66ZPvygx6hFmYxaaQQlE+h5X/ov1i45D DR/7hEwveYYxfNzk3FEog6R4qqb37eMrmhFqXgsGG18zvEZjLP09+V7Kitcwgw2J ouJm9KDnDpqbqGVPeoOkj1agGPgceGzOR8qw/a0AfKfVey9EStRiEPPaj1/vztEI qM2UQsqVJ8nsDVQm/XOQb93qvfXsXolhaa9uyhSlrwDFIMUGI7JCVpEYYFI9ZOEp RHUIBUDr/90yZzHyLED+iee0C9wxkt4nOCM6ysjsLQ78r6g1xSOW0XeqksKQO15y UpwLbrDsr4XCBI7qiVrdd2jwvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHS40AV3 /+nWe/R80D3AqJElxaslMB8GA1UdIwQYMBaAFMvsbxg5BUh1IceUe097/Wy3jaR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUZBRi8xMjk1NzVDNDZF NDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNIVWh4NVI3VDN2OWJMZU5w SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kteHZHRGtGU0hVaHg1UjdUM3Y5YkxlTnBIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUZBRi8xMjk1NzVDNDZFNDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNI VWh4NVI3VDN2OWJMZU5wSGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCwjR9oumnXtSpZWpKQ9lr8U0GF2lEELr4Uu2mgDr2p5dTlwp7QVgf nRj9aPdaXTTPx7NR05Dn0wtKSkelBc8z5x+d59SyoRRFT0YZy7BQf6Am1sh+OYPt 3D4cP7HatBHb1zFacpgbEC1kVQG1O/g+x0AfYIi2TqA21k3hT6Am4OCoxKGaxVRK nIATbycmMbkUKmozK5jawZWeI8eJr2YGLlUDCvtHl7ocVu9fpgWEaWvOSdzBZlq+ ogeyW2GqofuyD5SVCpumKDgdf+1lWLHUpiyZm7xMPN5qMT1AyAno3JF4G0tFdJd6 Z/o4RqsAUQymkumP8cBBa8rcpA+7kLEb -----END CERTIFICATE-----Generated at Sat Dec 6 12:18:39 2025 by rpki-client