This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft File: cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft (raw, json) Hash identifier: 1DG1jUzJJWCkeEkKapsv85Ns0AfhoDgO7bXoJNq06c0= Subject key identifier: 61:83:DE:0B:1D:73:EE:7D:2E:5F:6C:2D:7C:DB:27:27:91:50:D6:ED Authority key identifier: 71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7 Certificate issuer: /CN=A917174E/serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7 Certificate serial: 0E68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft Manifest number: 0E67 Signing time: Thu 04 Dec 2025 17:17:40 +0000 Manifest this update: Thu 04 Dec 2025 17:17:40 +0000 Manifest next update: Thu 11 Dec 2025 17:17:40 +0000 Files and hashes: 1: cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl (hash: 4w2WTQIpt5JZcWSrX2sxPzkL9XU3W3qldZe4h7G79nQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3688 (0xe68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917174E, serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7 Validity Not Before: Dec 4 17:17:40 2025 GMT Not After : Dec 11 17:17:40 2025 GMT Subject: CN=6931c234-6159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e1:fa:16:9f:01:9a:15:c3:9f:5c:c8:4d:29: 03:57:04:4d:dc:7a:d0:31:10:47:b6:ca:8c:8b:f0: 8d:a1:b9:c0:53:d8:79:3e:2b:fb:fd:a9:af:18:bd: ee:eb:d9:10:38:0c:81:75:14:83:e9:fa:6a:76:98: 63:ee:a5:78:81:76:4a:4a:e4:b5:16:9b:6f:a9:e2: 54:9d:9c:c9:ab:65:12:36:95:a3:fe:58:27:11:30: 10:1a:9e:60:d3:03:db:90:ab:d1:e6:93:17:c9:82: 64:88:b5:7c:30:f4:02:d2:05:dd:b2:45:ea:87:50: cb:19:a0:51:15:50:9b:6b:9e:5e:fc:d9:db:63:21: dd:ba:f1:51:7e:d0:04:bd:77:6a:d0:fe:c6:44:4d: 86:3a:0a:74:70:e5:70:cf:41:d7:aa:a3:af:88:7f: 4f:c0:5f:81:f9:37:88:be:04:a5:fa:f8:38:0b:2b: 91:85:eb:21:ca:48:1f:f9:47:90:b3:00:33:f8:7a: ca:cf:f1:9c:66:87:32:13:3d:a9:38:d8:7b:ca:d3: a3:b8:72:0d:76:9c:96:83:55:78:7c:2e:3b:49:23: af:ac:9f:61:48:38:5f:8d:17:47:77:66:bc:06:e8: ae:71:cf:2e:62:b3:28:ac:63:de:8f:8d:0c:05:b9: 5c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:83:DE:0B:1D:73:EE:7D:2E:5F:6C:2D:7C:DB:27:27:91:50:D6:ED X509v3 Authority Key Identifier: keyid:71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:4c:de:00:fe:cb:fd:53:6d:bc:43:40:90:28:a4:35:ec:28: 8b:6a:75:50:61:b8:79:9b:43:af:cb:2d:33:0e:83:8b:76:3e: 77:99:f1:ad:eb:af:13:99:23:30:20:d1:e2:f4:39:ae:0f:27: 7f:3c:4a:7f:30:bd:f8:67:2c:c4:ed:c6:25:5d:09:1a:35:7f: 25:66:90:82:94:20:fa:77:3d:16:e0:40:c3:54:d4:b6:96:f9: 42:fe:ec:58:26:83:06:c0:cf:91:37:7e:05:9f:44:9c:6e:12: e6:bb:12:ac:0c:36:26:b8:95:06:fd:68:18:c4:db:2b:93:07: 5c:ac:2f:bf:48:26:30:82:07:55:93:86:d8:61:c4:da:9d:d2: 1b:e1:1a:38:8d:fb:7e:9f:5e:37:1d:b4:c4:87:4d:f2:69:f8: c2:92:d0:e0:31:e3:e0:06:c4:21:1f:88:51:0f:87:b7:91:4a: 14:de:d8:4a:c1:bc:22:77:97:28:5e:cf:7d:06:73:da:60:e1: f2:32:ca:f2:78:62:7a:01:52:91:63:8c:d2:ed:44:4b:9b:11: 78:d0:92:15:ac:e1:81:20:e0:ac:4a:4b:7c:bd:ea:fa:11:5c: d9:80:bd:83:5b:77:0e:bd:f9:7e:90:f5:0a:3e:68:87:ac:08: ed:b6:b0:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3NEUxMTAvBgNVBAUTKDcxODA3MzA5OEFGMDM5NkZEOEUzMzA5QTFCOUZCNkYz RUVCMTdBRTcwHhcNMjUxMjA0MTcxNzQwWhcNMjUxMjExMTcxNzQwWjAYMRYwFAYD VQQDEw02OTMxYzIzNC02MTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuH6Fp8BmhXDn1zITSkDVwRN3HrQMRBHtsqMi/CNobnAU9h5Piv7/amvGL3u 69kQOAyBdRSD6fpqdphj7qV4gXZKSuS1FptvqeJUnZzJq2USNpWj/lgnETAQGp5g 0wPbkKvR5pMXyYJkiLV8MPQC0gXdskXqh1DLGaBRFVCba55e/NnbYyHduvFRftAE vXdq0P7GRE2GOgp0cOVwz0HXqqOviH9PwF+B+TeIvgSl+vg4CyuRheshykgf+UeQ swAz+HrKz/GcZocyEz2pONh7ytOjuHINdpyWg1V4fC47SSOvrJ9hSDhfjRdHd2a8 Buiucc8uYrMorGPej40MBblcgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGD3gsd c+59Ll9sLXzbJyeRUNbtMB8GA1UdIwQYMBaAFHGAcwmK8Dlv2OMwmhuftvPusXrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTc0RS81NEFBMTQ5Q0FB RjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09XX1k0ekNhRzUtMjgtNnhl dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NZQnpDWXJ3T1dfWTR6Q2FHNS0yOC02eGV1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTc0RS81NEFBMTQ5Q0FBRjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09X X1k0ekNhRzUtMjgtNnhldWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCTN4A/sv9U228Q0CQKKQ17CiLanVQYbh5m0Ovyy0zDoOLdj53mfGt 668TmSMwINHi9DmuDyd/PEp/ML34ZyzE7cYlXQkaNX8lZpCClCD6dz0W4EDDVNS2 lvlC/uxYJoMGwM+RN34Fn0ScbhLmuxKsDDYmuJUG/WgYxNsrkwdcrC+/SCYwggdV k4bYYcTandIb4Ro4jft+n143HbTEh03yafjCktDgMePgBsQhH4hRD4e3kUoU3thK wbwid5coXs99BnPaYOHyMsryeGJ6AVKRY4zS7URLmxF40JIVrOGBIOCsSkt8ver6 EVzZgL2DW3cOvfl+kPUKPmiHrAjttrAA -----END CERTIFICATE-----Generated at Sat Dec 6 12:21:23 2025 by rpki-client