This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft File: YWPctdU7SHLhWVY-kPxeQa0ALC0.mft (raw, json) Hash identifier: OXrE7kQLh5GvkjyO4AwthdUIuUrgN0ab0GlD3qbS4yk= Subject key identifier: BB:4E:6B:89:EB:58:D5:D9:04:4B:ED:73:7F:EB:53:81:80:22:B3:75 Authority key identifier: 61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D Certificate issuer: /CN=A9174282/serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D Certificate serial: 04DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft Manifest number: 04D5 Signing time: Thu 04 Dec 2025 22:22:08 +0000 Manifest this update: Thu 04 Dec 2025 22:22:07 +0000 Manifest next update: Thu 11 Dec 2025 22:22:07 +0000 Files and hashes: 1: YWPctdU7SHLhWVY-kPxeQa0ALC0.crl (hash: wCeiAdmC1yT2IM3+a5DyaVvXMBYkvBpXG+TGDTbQRpA=) 2: BDE72518479C11EC8861323FC4F9AE02.roa (hash: BWw+T22BkT4RWRTHKZZjPZLkInjp8GW8fJQ94reWXKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1243 (0x4db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174282, serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D Validity Not Before: Dec 4 22:22:07 2025 GMT Not After : Dec 11 22:22:07 2025 GMT Subject: CN=6932098f-8436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:40:34:e3:19:24:88:9d:22:fa:80:b0:c2:15: 7a:0e:52:94:70:25:d1:e8:7c:e5:89:a3:f2:6a:be: 56:ce:a6:d1:5e:f4:09:b5:7f:83:e3:e5:80:b2:4a: 07:f4:e8:ad:80:6b:fd:55:6e:d7:38:2e:99:53:10: 37:f6:c4:7d:56:9a:45:80:19:8e:82:9c:02:06:bb: 48:71:b3:6f:9f:80:43:60:a8:6f:b8:11:1c:6d:d1: ba:1e:d5:d3:0a:5a:c3:b9:ae:c4:de:a6:7a:39:b8: d5:c9:fe:38:77:d5:7a:38:07:21:82:29:87:33:b8: 7e:c3:b6:d5:8d:8b:5a:45:15:4d:e3:8e:2e:16:37: 77:6e:58:d5:26:a9:93:3b:d5:c8:56:e2:2c:a5:6e: 1e:6d:cf:5d:35:b1:65:2f:81:03:81:e4:28:48:64: e9:ff:12:3e:3a:69:e7:b8:92:30:96:3b:e0:0d:14: 63:60:ac:b0:0b:26:34:7b:22:e2:57:51:17:98:c6: a1:41:6b:71:bf:7f:81:d8:43:cb:ca:00:65:b8:98: b8:7e:5a:d0:6a:18:0f:ba:a6:26:42:f2:24:eb:5e: 61:46:bf:1c:f5:d3:c8:9e:bf:cd:a9:32:5e:ee:a3: 1d:76:35:f4:c9:90:f3:75:95:e2:ae:23:af:0a:86: 10:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4E:6B:89:EB:58:D5:D9:04:4B:ED:73:7F:EB:53:81:80:22:B3:75 X509v3 Authority Key Identifier: keyid:61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d8:6d:f6:af:30:e5:b1:a8:e9:c1:9f:56:2b:16:18:23:31: 45:e9:e3:7a:c7:9a:5f:15:3f:73:d6:12:f0:40:78:ee:ca:02: 01:f2:a4:20:13:fe:0d:e4:61:03:ef:3f:b7:95:56:13:b1:10: 68:b3:6c:33:9c:11:ba:00:d2:c8:50:28:2d:e3:43:ee:78:c9: 63:d7:67:e0:38:8d:7b:ee:e1:4b:36:48:4f:f3:ee:ef:41:4a: f1:47:e8:4b:59:d0:73:08:f6:d5:98:e0:b7:35:9e:8f:72:51: 88:e5:b5:7c:db:18:fe:58:9a:80:cf:07:bf:b7:c8:d7:e7:13: c4:79:c1:7b:5b:43:9e:0a:d7:6c:32:94:c3:93:97:dd:ad:ae: be:12:e5:de:80:21:8d:4c:27:66:b7:c9:6b:8b:7b:ce:04:ac: cd:5f:d2:49:fe:39:d0:11:02:13:f2:cc:3d:ef:ae:96:a1:e8: 80:19:b6:c8:2f:45:36:a2:7e:6e:d8:0c:65:fb:87:0c:9f:7e: c9:5f:6a:a3:cd:17:3d:97:57:4e:51:35:4e:64:e5:59:e4:93: dc:13:05:9c:bd:de:59:10:5d:b6:ce:6f:15:0c:08:63:96:e1: a8:76:64:d4:8c:74:27:a1:8e:ae:24:c0:2c:3e:a9:19:e8:f3: 96:b7:2b:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQyODIxMTAvBgNVBAUTKDYxNjNEQ0I1RDUzQjQ4NzJFMTU5NTYzRTkwRkM1RTQx QUQwMDJDMkQwHhcNMjUxMjA0MjIyMjA3WhcNMjUxMjExMjIyMjA3WjAYMRYwFAYD VQQDEw02OTMyMDk4Zi04NDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UA04xkkiJ0i+oCwwhV6DlKUcCXR6HzliaPyar5WzqbRXvQJtX+D4+WAskoH 9OitgGv9VW7XOC6ZUxA39sR9VppFgBmOgpwCBrtIcbNvn4BDYKhvuBEcbdG6HtXT ClrDua7E3qZ6ObjVyf44d9V6OAchgimHM7h+w7bVjYtaRRVN444uFjd3bljVJqmT O9XIVuIspW4ebc9dNbFlL4EDgeQoSGTp/xI+OmnnuJIwljvgDRRjYKywCyY0eyLi V1EXmMahQWtxv3+B2EPLygBluJi4flrQahgPuqYmQvIk615hRr8c9dPInr/NqTJe 7qMddjX0yZDzdZXiriOvCoYQ5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtOa4nr WNXZBEvtc3/rU4GAIrN1MB8GA1UdIwQYMBaAFGFj3LXVO0hy4VlWPpD8XkGtACwt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDI4Mi85NzE0MzM3NjQ3 OTgxMUVDQjAzRDU1MzhDNEY5QUUwMi9ZV1BjdGRVN1NITGhXVlkta1B4ZVFhMEFM QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lXUGN0ZFU3U0hMaFdWWS1rUHhlUWEwQUxDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDI4Mi85NzE0MzM3NjQ3OTgxMUVDQjAzRDU1MzhDNEY5QUUwMi9ZV1BjdGRVN1NI TGhXVlkta1B4ZVFhMEFMQzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb2G32rzDlsajpwZ9WKxYYIzFF6eN6x5pfFT9z1hLwQHjuygIB8qQg E/4N5GED7z+3lVYTsRBos2wznBG6ANLIUCgt40PueMlj12fgOI177uFLNkhP8+7v QUrxR+hLWdBzCPbVmOC3NZ6PclGI5bV82xj+WJqAzwe/t8jX5xPEecF7W0OeCtds MpTDk5fdra6+EuXegCGNTCdmt8lri3vOBKzNX9JJ/jnQEQIT8sw9766WoeiAGbbI L0U2on5u2Axl+4cMn37JX2qjzRc9l1dOUTVOZOVZ5JPcEwWcvd5ZEF22zm8VDAhj luGodmTUjHQnoY6uJMAsPqkZ6POWtysY -----END CERTIFICATE-----Generated at Sun Dec 7 00:03:22 2025 by rpki-client