This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft File: Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft (raw, json) Hash identifier: UWG0856HcxX9bhyCzkyRZHVHDEiHfj2b3iDv3N+756Q= Subject key identifier: 2D:4B:05:13:CB:0A:23:59:AD:27:08:E2:84:71:8A:5C:1A:76:EB:56 Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E Certificate serial: 3565 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft Manifest number: 3524 Signing time: Sat 06 Dec 2025 15:09:02 +0000 Manifest this update: Sat 06 Dec 2025 15:09:02 +0000 Manifest next update: Sat 13 Dec 2025 15:09:02 +0000 Files and hashes: 1: Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl (hash: 8bSDLA1pAnuj5n697Ylj9qxXbFO7M6VqBmb8Al1jZ+E=) 2: 1DECCD5252E911ED8BAAA80AC4F9AE02.roa (hash: xgfzW7X0mO381OQpL4HCmTyzFDztP7GfC8p08A8wr6E=) 3: 93441F8211CB11EEB8151734C4F9AE02.roa (hash: Vktc7b/W/qyCDQCLU/0lBgnB36d7rVRYjTdYFnrUKeM=) 4: 8D6AE850AD3911F0992C7B7CC4F9AE02.roa (hash: y0Rm6jcN2MRyG4F58GapbPK7TstkLchGmKqdVJWxG0c=) 5: 8E7802B4AD3911F0992C7B7CC4F9AE02.roa (hash: rTLfOfzmwp0rf+wcVJi0l7182o5t6aqIyjX8zXv57Bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13669 (0x3565) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E Validity Not Before: Dec 6 15:09:02 2025 GMT Not After : Dec 13 15:09:02 2025 GMT Subject: CN=6934470e-6d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c7:65:07:6b:de:ef:fc:32:6a:36:fa:8c:98: 4c:db:8c:07:a3:0d:86:01:a9:bd:65:76:15:6f:76: 7f:6a:cb:17:a4:cd:66:78:6d:be:40:73:7f:f2:18: cf:17:7e:49:e2:61:33:6b:ca:a4:2c:b6:4c:ee:3b: 5e:91:48:24:45:fd:f9:17:12:17:2a:44:bf:ac:3c: 53:ec:0a:72:0b:94:1a:01:50:3e:b7:b9:3f:7f:33: 01:a1:42:6f:fc:59:cd:fb:37:d3:89:de:c8:bd:f7: cc:0b:3f:24:93:d4:31:a0:d4:e7:74:cd:d3:e8:73: 88:47:98:ec:69:50:a5:a0:8b:6b:f8:51:84:f5:a7: c2:b4:95:00:58:45:9b:7d:2a:f4:d5:f0:bf:39:68: 44:df:56:67:16:e0:4c:a6:39:0c:29:74:2c:af:70: f2:99:ba:c6:b0:1c:f7:f1:d2:18:a9:5b:3e:f8:83: 3f:60:d0:57:9e:8f:e9:bd:a6:95:3b:7f:8e:77:57: 04:1e:01:d6:d9:f1:36:b7:4f:31:82:f5:bb:f8:e9: 54:44:f1:81:6f:54:81:2f:79:94:ee:0a:b6:5a:d2: 2c:25:bc:53:df:48:cb:df:9c:3d:92:f9:88:ea:78: e7:03:ff:71:7f:7c:b6:21:3e:5d:ba:c0:6a:c0:73: ec:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4B:05:13:CB:0A:23:59:AD:27:08:E2:84:71:8A:5C:1A:76:EB:56 X509v3 Authority Key Identifier: keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:c9:0d:45:a2:f1:20:56:c0:8a:2a:7d:ad:a9:2e:a4:d4:52: a5:a1:fb:f8:22:c3:63:92:c4:49:f8:83:38:91:30:7c:a1:d1: cb:68:8b:3f:8c:88:2b:ca:89:c4:c3:16:f1:29:36:49:6c:df: 22:e4:58:0b:e0:c9:3a:c7:8d:32:4a:18:34:24:2a:ab:85:11: a6:f3:f5:bb:45:ab:64:f2:e6:6d:5d:00:4d:62:29:a7:3f:70: b7:e7:bf:bb:0a:41:e7:54:d4:d5:65:d1:10:8a:6e:b1:bc:f4: b4:0a:ef:04:58:99:d6:48:b0:87:c3:e0:b0:f7:9d:25:f8:29: a4:96:86:6c:0a:eb:0b:08:1e:74:51:d7:9e:f9:de:6a:4e:05: 10:4a:b7:47:4a:7b:d0:21:25:68:c0:28:34:b6:4a:7b:63:3f: 7e:87:28:85:b0:08:b7:ba:c9:78:5a:bc:34:4c:0d:ec:96:df: e5:0d:7e:63:56:aa:4c:43:15:a6:46:94:89:b6:de:f9:fa:49: 36:ba:2e:46:4d:95:b4:2a:eb:aa:12:89:a1:1a:0f:d5:52:06: 81:b4:7a:68:3a:f0:60:73:6c:ad:89:ae:71:90:93:f2:8e:f2: 3d:8b:21:60:7b:ee:9f:c7:f8:6b:f2:04:f8:c7:da:00:41:60: 92:9d:35:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGNzYxMTAvBgNVBAUTKDYzRUM0RTYzODBGQUFFQTUxMTA3RTlDNDBDMkYxMDU4 RTA4Rjg1NkUwHhcNMjUxMjA2MTUwOTAyWhcNMjUxMjEzMTUwOTAyWjAYMRYwFAYD VQQDEw02OTM0NDcwZS02ZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MdlB2ve7/wyajb6jJhM24wHow2GAam9ZXYVb3Z/assXpM1meG2+QHN/8hjP F35J4mEza8qkLLZM7jtekUgkRf35FxIXKkS/rDxT7ApyC5QaAVA+t7k/fzMBoUJv /FnN+zfTid7IvffMCz8kk9QxoNTndM3T6HOIR5jsaVCloItr+FGE9afCtJUAWEWb fSr01fC/OWhE31ZnFuBMpjkMKXQsr3DymbrGsBz38dIYqVs++IM/YNBXno/pvaaV O3+Od1cEHgHW2fE2t08xgvW7+OlURPGBb1SBL3mU7gq2WtIsJbxT30jL35w9kvmI 6njnA/9xf3y2IT5dusBqwHPsdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1LBRPL CiNZrScI4oRxilwadutWMB8GA1UdIwQYMBaAFGPsTmOA+q6lEQfpxAwvEFjgj4Vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY3Ni85NDRFMzg5MjFE QUIxMUUyQkIzMENBQTkwOEIwMkNEMi9ZLXhPWTRENnJxVVJCLW5FREM4UVdPQ1Bo VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kteE9ZNEQ2cnFVUkItbkVEQzhRV09DUGhXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkY3Ni85NDRFMzg5MjFEQUIxMUUyQkIzMENBQTkwOEIwMkNEMi9ZLXhPWTRENnJx VVJCLW5FREM4UVdPQ1BoVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoyQ1FovEgVsCKKn2tqS6k1FKlofv4IsNjksRJ+IM4kTB8odHLaIs/ jIgryonEwxbxKTZJbN8i5FgL4Mk6x40yShg0JCqrhRGm8/W7Ratk8uZtXQBNYimn P3C357+7CkHnVNTVZdEQim6xvPS0Cu8EWJnWSLCHw+Cw950l+CmkloZsCusLCB50 Udee+d5qTgUQSrdHSnvQISVowCg0tkp7Yz9+hyiFsAi3usl4Wrw0TA3slt/lDX5j VqpMQxWmRpSJtt75+kk2ui5GTZW0KuuqEomhGg/VUgaBtHpoOvBgc2ytia5xkJPy jvI9iyFge+6fx/hr8gT4x9oAQWCSnTVy -----END CERTIFICATE-----Generated at Sat Dec 6 19:12:28 2025 by rpki-client