This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft File: vY9TgeGI5FgPskcsJxoFQp4tXCI.mft (raw, json) Hash identifier: 21WHzrrj/IY7Hzv5z/mAv+/LyvCpe1Wev926+ftIk48= Subject key identifier: 12:43:BE:AC:9A:F7:8E:C8:EB:50:A7:EC:F8:E6:26:F8:CC:81:8B:40 Authority key identifier: BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22 Certificate issuer: /CN=A915D66D/serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22 Certificate serial: 1B5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft Manifest number: 1B53 Signing time: Thu 04 Dec 2025 16:00:17 +0000 Manifest this update: Thu 04 Dec 2025 16:00:16 +0000 Manifest next update: Thu 11 Dec 2025 16:00:16 +0000 Files and hashes: 1: vY9TgeGI5FgPskcsJxoFQp4tXCI.crl (hash: Ct06bVaXEDsQVRzq2nffmF4HzluWQdyckY+dql0s1Io=) 2: 59029A32233A11E78D48837AC4F9AE02.roa (hash: XfYeKxfatX6id5bBv2XHc88RkA9A8XtPbM07HmC0bY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 16:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7006 (0x1b5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D66D, serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22 Validity Not Before: Dec 4 16:00:16 2025 GMT Not After : Dec 11 16:00:16 2025 GMT Subject: CN=6931b010-9810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:21:f9:74:1e:f3:38:d2:d2:96:e9:5e:fb:ff: 2d:a2:3c:7a:f0:b1:c3:96:e3:86:c4:6d:55:31:85: 13:33:8e:18:db:b7:03:ad:a2:17:51:8f:b8:27:e7: c5:46:c5:3d:ce:e8:a7:f5:ac:f6:6d:e9:0c:ef:c6: ac:47:1a:19:b8:31:8d:b3:2d:2e:a0:74:d5:ab:99: 81:3e:c8:53:1a:4c:4d:a4:d7:6a:6d:7f:64:29:a7: da:64:be:ef:11:11:f0:11:6a:1e:81:15:d1:cb:28: de:04:4c:b1:23:9f:a6:10:8c:d7:f4:96:e3:32:39: 44:40:ec:2c:1a:ed:c2:cf:d4:cd:e7:8a:24:31:e8: a1:c2:e0:93:cf:79:4b:cf:c1:c1:16:5f:88:94:1b: 4c:43:6b:71:56:21:05:93:a5:6d:27:2b:ae:7f:11: e2:9c:48:45:c4:bd:c1:04:a4:7e:29:c2:bf:e1:fe: 8b:b4:52:96:5e:2c:a3:60:5c:e1:e4:60:18:6a:98: 90:fb:53:df:61:9a:c7:91:cd:30:94:a1:21:8b:f0: 96:f4:bc:9a:56:ed:1a:05:d3:64:ad:7b:16:ac:b0: 9c:71:bc:46:1a:74:1a:46:ef:c8:2c:c9:a3:04:87: 0c:e0:60:a3:cc:8d:03:d6:39:c0:cc:65:66:4a:60: 4e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:43:BE:AC:9A:F7:8E:C8:EB:50:A7:EC:F8:E6:26:F8:CC:81:8B:40 X509v3 Authority Key Identifier: keyid:BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:bb:dc:20:11:30:25:ac:f1:3c:4f:25:03:a1:35:75:16:15: f9:dc:e8:84:26:9d:3b:13:28:fd:50:e5:e9:1e:1e:7f:4c:38: 22:2c:c3:d1:8c:4d:00:83:81:82:78:15:61:f5:2e:87:c5:9c: 2e:f4:0b:e3:08:d3:af:a3:4a:04:0f:63:4a:ed:3f:0e:3d:b4: fa:d2:7c:76:02:91:34:21:c2:41:12:7b:69:2b:d8:89:f6:ca: e7:d5:af:a3:d3:d5:91:43:75:e6:27:7e:87:50:8f:a8:c6:04: fd:20:13:55:db:18:3c:72:13:23:b4:84:1d:d0:9e:ae:9b:c3: 08:88:f3:b9:8a:16:00:03:83:3d:83:49:b0:0b:6b:b5:93:0d: 45:ae:f3:c1:7a:b0:71:6b:bf:51:e0:a1:4b:77:d6:73:f9:d2: 65:af:16:95:c3:2d:70:54:aa:87:9b:8a:d2:e4:f2:1b:5b:89: 5b:fb:61:9a:2d:e6:7f:6d:22:d2:e1:a6:5f:19:c4:03:ff:0b: 14:62:a3:a7:2e:e5:e6:8b:b5:a9:da:91:f7:fc:98:65:5f:ef: c6:95:81:5a:9e:e2:86:20:8e:53:99:7e:ff:65:87:c1:07:70: 8a:19:1e:3e:14:3b:03:84:f3:12:a9:bc:e9:ff:fc:cd:94:03: 7c:47:dd:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NkQxMTAvBgNVBAUTKEJEOEY1MzgxRTE4OEU0NTgwRkIyNDcyQzI3MUEwNTQy OUUyRDVDMjIwHhcNMjUxMjA0MTYwMDE2WhcNMjUxMjExMTYwMDE2WjAYMRYwFAYD VQQDEw02OTMxYjAxMC05ODEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5SH5dB7zONLSlule+/8tojx68LHDluOGxG1VMYUTM44Y27cDraIXUY+4J+fF RsU9zuin9az2bekM78asRxoZuDGNsy0uoHTVq5mBPshTGkxNpNdqbX9kKafaZL7v ERHwEWoegRXRyyjeBEyxI5+mEIzX9JbjMjlEQOwsGu3Cz9TN54okMeihwuCTz3lL z8HBFl+IlBtMQ2txViEFk6VtJyuufxHinEhFxL3BBKR+KcK/4f6LtFKWXiyjYFzh 5GAYapiQ+1PfYZrHkc0wlKEhi/CW9LyaVu0aBdNkrXsWrLCccbxGGnQaRu/ILMmj BIcM4GCjzI0D1jnAzGVmSmBOeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJDvqya 947I61Cn7PjmJvjMgYtAMB8GA1UdIwQYMBaAFL2PU4HhiORYD7JHLCcaBUKeLVwi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY2RC8xRUIwOTI1NDIz MzkxMUU3QTA2QjI1NzlDNEY5QUUwMi92WTlUZ2VHSTVGZ1Bza2NzSnhvRlFwNHRY Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZZOVRnZUdJNUZnUHNrY3NKeG9GUXA0dFhDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY2RC8xRUIwOTI1NDIzMzkxMUU3QTA2QjI1NzlDNEY5QUUwMi92WTlUZ2VHSTVG Z1Bza2NzSnhvRlFwNHRYQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmu9wgETAlrPE8TyUDoTV1FhX53OiEJp07Eyj9UOXpHh5/TDgiLMPR jE0Ag4GCeBVh9S6HxZwu9AvjCNOvo0oED2NK7T8OPbT60nx2ApE0IcJBEntpK9iJ 9srn1a+j09WRQ3XmJ36HUI+oxgT9IBNV2xg8chMjtIQd0J6um8MIiPO5ihYAA4M9 g0mwC2u1kw1FrvPBerBxa79R4KFLd9Zz+dJlrxaVwy1wVKqHm4rS5PIbW4lb+2Ga LeZ/bSLS4aZfGcQD/wsUYqOnLuXmi7Wp2pH3/JhlX+/GlYFanuKGII5TmX7/ZYfB B3CKGR4+FDsDhPMSqbzp//zNlAN8R911 -----END CERTIFICATE-----Generated at Sat Dec 6 15:59:30 2025 by rpki-client