This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft File: k0_yOzjsbVimyqtwe3lVUcicMf0.mft (raw, json) Hash identifier: 0jZeKjBhqlYsdW6kDcrEe+EDRZxhefe7Qune0bErQPo= Subject key identifier: 56:F3:38:BB:0D:EA:9D:2B:9C:A7:FC:4A:3E:09:B8:85:CF:4C:EA:39 Authority key identifier: 93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD Certificate issuer: /CN=A917392B/serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD Certificate serial: 04DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft Manifest number: 04D8 Signing time: Sat 20 Dec 2025 23:03:50 +0000 Manifest this update: Sat 20 Dec 2025 23:03:49 +0000 Manifest next update: Sat 27 Dec 2025 23:03:49 +0000 Files and hashes: 1: k0_yOzjsbVimyqtwe3lVUcicMf0.crl (hash: u0+9mt9WYiNP8466b4lDRJlGDrFBcTIXFTIl/kuwklg=) 2: B7BE1DAC482511ECA1A68F13C4F9AE02.roa (hash: QSS01Cht+60Ca3lCH+aUYEQ83cHrjHOe9Xz/oSR4PIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1245 (0x4dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917392B, serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD Validity Not Before: Dec 20 23:03:49 2025 GMT Not After : Dec 27 23:03:49 2025 GMT Subject: CN=69472b56-0371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7b:ff:35:50:aa:39:cc:f5:9c:21:5c:f1:fd: 65:63:01:e4:62:b4:6c:37:fb:21:45:f8:bc:07:47: 7e:3e:37:e1:38:16:d9:6d:8c:50:2d:da:1a:83:d3: 19:8d:8a:dd:ff:20:3e:28:1d:32:cf:74:28:d6:3b: 74:f8:37:89:a9:36:f9:f1:d4:65:e4:b3:4a:58:a8: 28:8f:58:cb:f5:ae:5b:4d:78:7b:53:80:36:66:db: d2:13:4e:05:f6:f1:c4:73:07:87:b5:a2:3d:4d:8d: 89:8e:2d:39:56:ea:49:ee:b8:a8:33:f5:ee:2e:f7: aa:25:56:38:cc:b8:77:15:3b:b1:00:ba:c5:82:2a: 14:c4:54:62:9b:e2:15:fb:e1:37:28:69:fd:6c:0e: 14:eb:9c:fd:5f:98:f3:07:fe:c9:85:72:eb:72:6e: a5:06:f3:92:3e:8d:12:65:54:64:0e:1d:de:cf:6f: 4f:51:22:aa:29:1f:e8:3d:1d:0f:12:43:1c:97:fa: 9a:c0:6b:8e:53:9e:74:14:8f:3c:af:2e:1b:f5:fa: 8b:10:3c:9c:75:9d:c6:2e:24:21:70:45:66:a3:d7: a5:0e:29:b6:51:0c:2d:84:60:52:6a:5b:2c:da:1b: 92:d0:76:b1:38:7a:7b:ae:f4:aa:9f:60:f7:e9:94: 3e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F3:38:BB:0D:EA:9D:2B:9C:A7:FC:4A:3E:09:B8:85:CF:4C:EA:39 X509v3 Authority Key Identifier: keyid:93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:72:47:53:b2:f0:03:87:dd:30:e2:67:4d:61:5c:de:85:ae: 5c:61:44:2f:69:f3:3b:67:52:ba:72:4e:b9:b6:c3:30:73:ab: a4:a9:58:bc:3d:8b:5d:c3:87:25:33:3d:e9:45:8d:3f:49:9b: de:15:a7:96:0b:bc:2e:81:fc:56:2c:0d:61:4b:8a:7b:fd:d1: 91:b0:2c:a3:e9:a3:7e:d8:4b:b3:43:be:ea:92:16:66:3c:ad: 3b:90:be:49:2f:2d:35:64:c0:82:97:0d:2b:b6:d7:6e:75:76: 19:44:34:e1:c6:10:b8:57:a5:5c:99:80:7d:50:8f:e9:c9:54: a0:e9:ab:47:af:78:5f:d1:5f:ad:ad:b8:74:1e:3b:36:e5:19: 56:1f:b5:68:1a:8a:55:0c:e7:9d:b8:e4:d1:7d:c6:a4:2b:43: 0b:86:0e:74:14:4f:f0:fd:4f:98:e8:ce:64:1c:ae:c9:53:93: 4d:cc:17:a1:f3:be:c7:5e:5c:6c:91:b5:86:75:75:ad:67:08: a0:8a:1d:fd:43:ea:62:9e:71:22:e5:a8:93:c4:89:99:1a:c5: 8d:9e:bf:89:33:4c:fd:29:d7:3e:60:6f:6d:d1:cd:4e:0e:58: c9:e3:6b:a8:7b:fa:5f:cc:d5:29:a6:08:b5:ba:f1:e4:b4:79: 39:58:6f:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM5MkIxMTAvBgNVBAUTKDkzNEZGMjNCMzhFQzZENThBNkNBQUI3MDdCNzk1NTUx Qzg5QzMxRkQwHhcNMjUxMjIwMjMwMzQ5WhcNMjUxMjI3MjMwMzQ5WjAYMRYwFAYD VQQDDA02OTQ3MmI1Ni0wMzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXv/NVCqOcz1nCFc8f1lYwHkYrRsN/shRfi8B0d+PjfhOBbZbYxQLdoag9MZ jYrd/yA+KB0yz3Qo1jt0+DeJqTb58dRl5LNKWKgoj1jL9a5bTXh7U4A2ZtvSE04F 9vHEcweHtaI9TY2Jji05VupJ7rioM/XuLveqJVY4zLh3FTuxALrFgioUxFRim+IV ++E3KGn9bA4U65z9X5jzB/7JhXLrcm6lBvOSPo0SZVRkDh3ez29PUSKqKR/oPR0P EkMcl/qawGuOU550FI88ry4b9fqLEDycdZ3GLiQhcEVmo9elDim2UQwthGBSalss 2huS0HaxOHp7rvSqn2D36ZQ+0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbzOLsN 6p0rnKf8Sj4JuIXPTOo5MB8GA1UdIwQYMBaAFJNP8js47G1YpsqrcHt5VVHInDH9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzkyQi9CMjBEQUQ2NjQ4 MjMxMUVDOTM3NjgzMTJDNEY5QUUwMi9rMF95T3pqc2JWaW15cXR3ZTNsVlVjaWNN ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2swX3lPempzYlZpbXlxdHdlM2xWVWNpY01mMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzkyQi9CMjBEQUQ2NjQ4MjMxMUVDOTM3NjgzMTJDNEY5QUUwMi9rMF95T3pqc2JW aW15cXR3ZTNsVlVjaWNNZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3ckdTsvADh90w4mdNYVzeha5cYUQvafM7Z1K6ck65tsMwc6ukqVi8 PYtdw4clMz3pRY0/SZveFaeWC7wugfxWLA1hS4p7/dGRsCyj6aN+2EuzQ77qkhZm PK07kL5JLy01ZMCClw0rttdudXYZRDThxhC4V6VcmYB9UI/pyVSg6atHr3hf0V+t rbh0Hjs25RlWH7VoGopVDOeduOTRfcakK0MLhg50FE/w/U+Y6M5kHK7JU5NNzBeh 877HXlxskbWGdXWtZwigih39Q+pinnEi5aiTxImZGsWNnr+JM0z9Kdc+YG9t0c1O DljJ42uoe/pfzNUppgi1uvHktHk5WG9l -----END CERTIFICATE-----Generated at Sun Dec 21 21:51:29 2025 by rpki-client