This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft File: YHa9C6TbeXpypo_v-b-1WMRDmLI.mft (raw, json) Hash identifier: Z0iBi0AIPiVCVdnNc5v7BRp774AuP1AO/H3oL1WKUPg= Subject key identifier: 54:C0:FB:AA:7C:45:6E:33:7E:7E:E0:84:31:4E:42:3F:DA:B4:13:3C Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2 Certificate issuer: /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2 Certificate serial: 047F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft Manifest number: 0455 Signing time: Thu 04 Dec 2025 22:51:34 +0000 Manifest this update: Thu 04 Dec 2025 22:51:33 +0000 Manifest next update: Thu 11 Dec 2025 22:51:33 +0000 Files and hashes: 1: YHa9C6TbeXpypo_v-b-1WMRDmLI.crl (hash: STDbk2Fp+ZrZzdZh2I/3gDa6hn8RqzLHCNjHMFhv5rs=) 2: ED1A0478799811EF8437F77EC4F9AE02.roa (hash: cKCBs+iXK9mKTKUEcpQQ6Sz2FB2iRN0G07D7yQIwB0A=) 3: 844EFBDA766C11EF8CE33A86C4F9AE02.roa (hash: atopwMMKiv9hmzF2MWT9t/O+WABZDOgoXI2TZZKE0sM=) 4: B283BDAACF7C11F084EB1044C4F9AE02.roa (hash: WdQNREngzkkQGmItz4QAR4neKJoj1ZQOtux3fkTnadQ=) 5: 260D3330758A11EFAE7A8A39C4F9AE02.roa (hash: 8VvyEs0cT5gb0Pa9QyQkLFctUkO2J8xm2GTLEwroWxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1151 (0x47f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162EE1, serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2 Validity Not Before: Dec 4 22:51:33 2025 GMT Not After : Dec 11 22:51:33 2025 GMT Subject: CN=69321076-3532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:7a:6d:08:45:35:bd:2d:97:e1:cb:59:c3: ee:3e:0d:8b:45:10:ae:a5:7e:eb:2e:f3:d7:5a:7c: 61:8f:e2:cc:16:e4:57:bb:ee:01:13:fe:81:a4:e2: 85:21:cb:d2:b4:ad:a9:ac:1c:97:d7:5e:a6:46:63: f2:b9:1b:f0:ba:48:40:6a:01:63:63:96:e4:1d:05: ef:80:97:a0:d8:90:11:ae:60:12:c1:6b:ea:3f:58: e0:76:4f:45:b8:1e:a9:5c:de:b1:6e:db:65:1e:51: 45:2d:64:ad:66:b9:b1:5f:1b:cb:ee:34:c2:e8:83: f4:c9:85:00:1d:89:74:ae:8b:a6:b1:7f:7d:00:aa: 01:66:e8:6a:1f:e6:45:02:2b:e4:a2:f7:3b:d0:22: 9b:50:30:29:3a:af:e5:4b:b0:ba:df:33:07:01:51: 32:4b:f7:c0:a6:9f:4d:23:fc:29:d6:7c:59:53:10: cf:e0:fa:00:6e:81:ec:9f:ec:03:64:2b:59:d1:eb: b6:46:3d:ca:67:46:af:aa:3f:8f:79:66:9e:46:f7: 55:b7:01:22:87:a6:a2:37:76:7d:3d:1c:af:9b:0f: f8:bd:ec:cb:a5:f8:dd:2c:4d:c0:19:72:21:99:60: 04:bb:2c:46:a2:48:db:61:8b:7d:04:fd:0b:9b:33: 9f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C0:FB:AA:7C:45:6E:33:7E:7E:E0:84:31:4E:42:3F:DA:B4:13:3C X509v3 Authority Key Identifier: keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:c9:d9:e7:b2:7f:a7:38:5d:20:78:2c:c0:48:37:ad:8a:d4: 6c:a2:cc:80:54:1f:d7:ba:fd:39:21:fa:a5:5b:f0:ec:7a:60: e0:2c:84:29:88:d8:b5:5a:68:76:5f:d7:10:d0:9f:e5:b3:61: 55:4e:10:19:40:65:64:f1:5b:07:51:5d:2b:18:ac:ec:cb:6d: 44:ca:2e:4e:d1:d9:a6:4d:59:5e:cf:36:27:d0:a0:63:7c:49: 5b:c1:1e:c2:55:d6:a9:47:db:3c:19:80:8c:d7:bf:d6:57:85: 58:60:3f:20:51:83:7a:15:4b:1c:84:a5:24:a9:0c:6e:e4:c9: 1f:c5:12:78:92:26:79:d7:76:8f:1b:b4:7e:87:9c:20:73:66: 5f:31:18:1d:4e:a1:6d:87:5a:2b:a6:df:7a:26:bd:6c:55:03: 6d:1d:0d:ac:1f:41:ea:96:13:c9:37:3f:ac:ef:94:7c:6b:89: 36:7d:d7:23:51:36:fd:f0:36:97:9f:08:21:1a:dc:ca:fb:77: 43:79:28:0a:d0:ad:27:ed:e9:2b:1e:43:2d:da:1d:e9:ce:ea: 45:c6:7f:f5:b8:3c:87:f2:f2:ef:64:49:da:cd:a5:7f:36:ce: be:53:f5:88:36:8f:bd:6a:9a:a3:30:31:d1:ce:01:bf:49:ae: 4c:4d:f8:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJFRTExMTAvBgNVBAUTKDYwNzZCRDBCQTREQjc5N0E3MkE2OEZFRkY5QkZCNTU4 QzQ0Mzk4QjIwHhcNMjUxMjA0MjI1MTMzWhcNMjUxMjExMjI1MTMzWjAYMRYwFAYD VQQDEw02OTMyMTA3Ni0zNTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAso16bQhFNb0tl+HLWcPuPg2LRRCupX7rLvPXWnxhj+LMFuRXu+4BE/6BpOKF IcvStK2prByX116mRmPyuRvwukhAagFjY5bkHQXvgJeg2JARrmASwWvqP1jgdk9F uB6pXN6xbttlHlFFLWStZrmxXxvL7jTC6IP0yYUAHYl0roumsX99AKoBZuhqH+ZF Aivkovc70CKbUDApOq/lS7C63zMHAVEyS/fApp9NI/wp1nxZUxDP4PoAboHsn+wD ZCtZ0eu2Rj3KZ0avqj+PeWaeRvdVtwEih6aiN3Z9PRyvmw/4vezLpfjdLE3AGXIh mWAEuyxGokjbYYt9BP0LmzOfmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTA+6p8 RW4zfn7ghDFOQj/atBM8MB8GA1UdIwQYMBaAFGB2vQuk23l6cqaP7/m/tVjEQ5iy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkVFMS83NTJENDJFODhG RDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVYcHlwb192LWItMVdNUkRt TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lIYTlDNlRiZVhweXBvX3YtYi0xV01SRG1MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkVFMS83NTJENDJFODhGRDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVY cHlwb192LWItMVdNUkRtTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEydnnsn+nOF0geCzASDetitRsosyAVB/Xuv05IfqlW/DsemDgLIQp iNi1Wmh2X9cQ0J/ls2FVThAZQGVk8VsHUV0rGKzsy21Eyi5O0dmmTVlezzYn0KBj fElbwR7CVdapR9s8GYCM17/WV4VYYD8gUYN6FUschKUkqQxu5MkfxRJ4kiZ513aP G7R+h5wgc2ZfMRgdTqFth1orpt96Jr1sVQNtHQ2sH0HqlhPJNz+s75R8a4k2fdcj UTb98DaXnwghGtzK+3dDeSgK0K0n7ekrHkMt2h3pzupFxn/1uDyH8vLvZEnazaV/ Ns6+U/WINo+9apqjMDHRzgG/Sa5MTfju -----END CERTIFICATE-----Generated at Sat Dec 6 17:02:21 2025 by rpki-client