This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft File: ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft (raw, json) Hash identifier: A8IflcqZBRjcB+R1jCNJVHjguVZr6j8/vdvlTlJIYa4= Subject key identifier: CD:55:F9:B0:57:ED:86:77:6B:38:DB:EA:65:86:C9:5A:27:1A:74:70 Authority key identifier: CB:0C:33:0E:38:37:94:8F:E5:DD:FA:60:47:32:77:5D:4B:0C:F8:14 Certificate issuer: /CN=A915C645/serialNumber=CB0C330E3837948FE5DDFA604732775D4B0CF814 Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft Manifest number: E2 Signing time: Fri 05 Dec 2025 03:32:59 +0000 Manifest this update: Fri 05 Dec 2025 03:32:58 +0000 Manifest next update: Fri 12 Dec 2025 03:32:58 +0000 Files and hashes: 1: ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl (hash: YVnv3XDXRAopfrd347AWllcFXKQcf21cNCseL4NdHHo=) 2: 86998830806F11EF91F9E57CC4F9AE02.roa (hash: zuZnWcJxNflnoIsWXIqoUOj1sGwHZyfS7R+rQUgHs48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C645, serialNumber=CB0C330E3837948FE5DDFA604732775D4B0CF814 Validity Not Before: Dec 5 03:32:58 2025 GMT Not After : Dec 12 03:32:58 2025 GMT Subject: CN=6932526b-dfcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:be:2d:8d:9e:24:9b:b9:22:72:c6:83:f9:2c: d7:69:bd:05:df:19:2c:e8:bd:66:d5:ae:04:96:61: 36:00:12:11:c2:51:2e:3c:57:1c:10:21:06:19:5b: a3:a9:55:86:22:29:32:61:bb:35:9a:78:1a:e3:c5: 52:e2:89:60:b2:6e:1e:70:e7:c4:18:02:9d:3e:c6: 47:64:90:e6:08:ac:63:ad:17:03:57:c3:ef:d4:fc: ba:f9:e5:38:6d:18:92:db:db:8d:93:34:ae:2b:9a: 99:56:21:8b:fa:64:8d:12:d3:7b:43:23:e2:3c:e3: f5:09:45:69:31:1f:0e:f4:bd:72:7b:eb:bd:3e:6d: 36:59:8c:79:5e:98:92:45:75:b4:a9:42:3a:a3:37: 37:92:42:f0:3c:01:97:b9:3e:5a:7b:3f:8f:2b:5a: 8a:ba:19:4f:f7:b3:52:89:0d:c6:3e:a1:9d:2c:71: b6:b3:af:1e:75:40:d8:c8:8f:be:33:ed:24:0a:b0: 85:14:38:ae:aa:52:41:19:d8:43:b9:21:e5:52:d6: cf:75:a5:26:3e:10:31:3a:30:07:9b:1f:3d:b2:4c: d7:f5:75:51:ac:21:e2:2c:a2:3c:d3:d0:16:78:ab: 96:05:06:ee:1c:08:ed:b4:6f:5c:bc:4f:f7:d5:0e: 12:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:55:F9:B0:57:ED:86:77:6B:38:DB:EA:65:86:C9:5A:27:1A:74:70 X509v3 Authority Key Identifier: keyid:CB:0C:33:0E:38:37:94:8F:E5:DD:FA:60:47:32:77:5D:4B:0C:F8:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:ed:9e:f0:fc:60:34:72:dd:dd:53:35:04:f1:bc:83:e3:c7: fb:49:21:3d:5c:d9:92:41:1e:ef:42:f0:8b:72:7a:56:a4:a9: 19:e1:2c:81:27:fb:27:2f:b5:5d:87:7f:26:eb:ed:37:e6:2e: de:17:d8:6a:ff:c3:51:db:c9:47:17:2b:e5:bd:ea:8a:01:d1: c1:00:0e:37:0b:49:5d:3c:e1:e5:e7:13:34:a5:e2:31:09:dd: 66:47:9b:b5:1f:77:4c:55:0c:1d:41:c1:38:88:b4:b2:01:63: c7:ab:22:2a:d1:05:73:c5:0d:fd:e5:75:8b:9e:de:ff:31:1c: 89:26:39:92:68:b4:5a:dd:2f:d6:1e:b0:36:0b:2b:04:d4:8c: eb:b8:1d:f7:32:22:85:e2:0a:48:d1:b9:91:08:aa:ef:4c:24: e6:63:43:5c:6f:ea:42:87:99:3a:b8:1d:0d:53:c5:80:6e:a6: 7e:be:67:cd:40:af:86:6d:d3:ba:11:5c:52:eb:93:f4:a2:32: 4a:dc:45:52:9d:83:f5:cf:a2:c6:bf:90:54:dd:60:94:04:d5: 6a:ab:c4:b9:80:2c:de:57:1d:39:31:97:da:b9:35:8e:88:9a: cd:bb:06:d5:e0:2a:38:de:7d:8d:c9:5c:4a:d7:b5:19:29:a0: a6:39:0e:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM2NDUxMTAvBgNVBAUTKENCMEMzMzBFMzgzNzk0OEZFNURERkE2MDQ3MzI3NzVE NEIwQ0Y4MTQwHhcNMjUxMjA1MDMzMjU4WhcNMjUxMjEyMDMzMjU4WjAYMRYwFAYD VQQDEw02OTMyNTI2Yi1kZmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu74tjZ4km7kicsaD+SzXab0F3xks6L1m1a4ElmE2ABIRwlEuPFccECEGGVuj qVWGIikyYbs1mnga48VS4olgsm4ecOfEGAKdPsZHZJDmCKxjrRcDV8Pv1Py6+eU4 bRiS29uNkzSuK5qZViGL+mSNEtN7QyPiPOP1CUVpMR8O9L1ye+u9Pm02WYx5XpiS RXW0qUI6ozc3kkLwPAGXuT5aez+PK1qKuhlP97NSiQ3GPqGdLHG2s68edUDYyI++ M+0kCrCFFDiuqlJBGdhDuSHlUtbPdaUmPhAxOjAHmx89skzX9XVRrCHiLKI809AW eKuWBQbuHAjttG9cvE/31Q4ScQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1V+bBX 7YZ3azjb6mWGyVonGnRwMB8GA1UdIwQYMBaAFMsMMw44N5SP5d36YEcyd11LDPgU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzY0NS8xRUVFQkQyMjgw NkYxMUVGOEI0NUQ3NzlDNEY5QUUwMi95d3d6RGpnM2xJX2wzZnBnUnpKM1hVc00t QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l3d3pEamczbElfbDNmcGdSekozWFVzTS1CUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzY0NS8xRUVFQkQyMjgwNkYxMUVGOEI0NUQ3NzlDNEY5QUUwMi95d3d6RGpnM2xJ X2wzZnBnUnpKM1hVc00tQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq7Z7w/GA0ct3dUzUE8byD48f7SSE9XNmSQR7vQvCLcnpWpKkZ4SyB J/snL7Vdh38m6+035i7eF9hq/8NR28lHFyvlveqKAdHBAA43C0ldPOHl5xM0peIx Cd1mR5u1H3dMVQwdQcE4iLSyAWPHqyIq0QVzxQ395XWLnt7/MRyJJjmSaLRa3S/W HrA2CysE1IzruB33MiKF4gpI0bmRCKrvTCTmY0Ncb+pCh5k6uB0NU8WAbqZ+vmfN QK+GbdO6EVxS65P0ojJK3EVSnYP1z6LGv5BU3WCUBNVqq8S5gCzeVx05MZfauTWO iJrNuwbV4Co43n2NyVxK17UZKaCmOQ6v -----END CERTIFICATE-----Generated at Sun Dec 7 00:55:34 2025 by rpki-client