This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft File: YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft (raw, json) Hash identifier: CyLIa/Y3MltkryhWsgVYEt7s0S6AmwxCQ2/Lcgr9iVQ= Subject key identifier: 85:C2:50:23:2A:DC:D8:72:57:CB:36:EB:B5:1F:30:A7:14:8D:CE:6D Authority key identifier: 60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5 Certificate issuer: /CN=A917799C/serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft Manifest number: 52 Signing time: Fri 05 Dec 2025 05:05:04 +0000 Manifest this update: Fri 05 Dec 2025 05:05:04 +0000 Manifest next update: Fri 12 Dec 2025 05:05:04 +0000 Files and hashes: 1: YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl (hash: vb5WrEHG+0kJqxMyDa7Ub38g/pG5uy55Hd63F2lmq48=) 2: 05939A1C554611F09F737331C4F9AE02.roa (hash: wHvbvusPDO6yRWHfYUtmsZklb3g0w6TjKvsCHWFb4uE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917799C, serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5 Validity Not Before: Dec 5 05:05:04 2025 GMT Not After : Dec 12 05:05:04 2025 GMT Subject: CN=69326800-c2db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:73:d5:1f:09:13:8a:92:52:09:00:7b:65:52: dc:ca:01:48:72:27:22:49:f1:c9:cd:52:72:78:d4: 42:0d:ba:cf:74:2a:4a:39:87:5c:ff:d4:28:f3:2d: d2:2f:65:c4:7f:10:fb:b1:0f:af:e1:7e:53:2b:74: 71:db:fc:07:3b:0b:86:38:7f:ae:c9:1a:dd:84:4e: ce:37:c2:c2:6e:b0:dc:b6:82:b9:5b:ed:22:b5:70: 95:34:a9:fd:2b:41:7c:58:bd:09:72:2f:73:07:3c: 18:f6:e4:a0:c6:62:33:b2:16:b8:85:f0:e2:93:f3: df:e5:a2:fe:c0:9a:43:d9:a2:65:85:7c:17:12:23: b7:f9:f4:9a:cf:0c:90:d0:94:95:c0:49:8c:0d:db: ae:81:56:36:31:32:b5:bb:63:f1:45:c6:d6:a1:71: bb:c6:3b:87:71:51:c5:0c:f3:aa:49:ae:1c:84:a1: e5:c7:d1:5b:3c:c7:10:69:72:2d:cd:56:4c:d8:fd: 05:bf:9f:e0:79:42:c5:34:96:9a:06:12:e4:d3:38: d9:7a:0b:10:56:26:61:7e:34:5c:41:c0:0e:0c:10: 9f:82:2b:5c:13:df:f4:7f:e8:97:e4:d6:cc:bb:b0: 59:7c:a8:1c:3d:da:85:ae:c4:c9:69:88:a2:d4:be: d8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C2:50:23:2A:DC:D8:72:57:CB:36:EB:B5:1F:30:A7:14:8D:CE:6D X509v3 Authority Key Identifier: keyid:60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:21:65:49:27:d4:43:3d:bf:88:9f:96:90:54:be:9d:8c:0c: cb:ab:bb:ec:33:a9:61:2f:be:c9:08:4f:d1:46:24:73:56:0c: 65:56:a2:b4:d3:0b:96:e8:87:db:f6:6c:94:28:e8:75:ae:4a: d9:3d:d9:58:fe:33:66:6b:9b:69:ce:c0:88:d0:71:04:b4:bb: e9:80:5a:2d:06:e2:54:9f:ce:3b:8f:69:2b:47:30:61:6f:10: a7:2d:be:81:60:f9:12:ff:22:1d:c0:c1:4e:d2:76:6f:0a:b8: 7f:af:c1:2a:56:93:73:47:c6:65:b0:72:5f:16:03:84:00:14: 22:84:86:ce:6f:90:98:00:40:44:b0:7c:78:f1:86:ae:2b:89: 1b:1a:88:5b:ef:5b:9d:5d:3a:7b:b5:94:c2:fd:fd:5a:7f:5c: 96:92:26:7b:bb:d8:ab:dd:f0:53:b8:30:9e:c0:af:5d:88:68: 7b:72:40:7b:f9:ab:56:87:48:e6:de:3a:9b:e8:0b:25:23:34: 7c:e2:54:89:8b:45:0c:97:6d:bf:0c:f1:19:6e:9c:67:6d:64: 43:35:30:a7:e1:4a:b6:e7:91:6c:12:df:bf:16:ff:80:38:91: b8:b3:92:88:52:c1:da:b9:43:30:d5:ea:14:bf:f0:cf:01:54: ee:0d:19:31 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Nzk5QzExMC8GA1UEBRMoNjAwMjUwRjYzODM2RkI0QzJGMjNGNDg3RDcxNEJGMzJG NzU5QTVCNTAeFw0yNTEyMDUwNTA1MDRaFw0yNTEyMTIwNTA1MDRaMBgxFjAUBgNV BAMTDTY5MzI2ODAwLWMyZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuc9UfCROKklIJAHtlUtzKAUhyJyJJ8cnNUnJ41EINus90Kko5h1z/1CjzLdIv ZcR/EPuxD6/hflMrdHHb/Ac7C4Y4f67JGt2ETs43wsJusNy2grlb7SK1cJU0qf0r QXxYvQlyL3MHPBj25KDGYjOyFriF8OKT89/lov7AmkPZomWFfBcSI7f59JrPDJDQ lJXASYwN266BVjYxMrW7Y/FFxtahcbvGO4dxUcUM86pJrhyEoeXH0Vs8xxBpci3N VkzY/QW/n+B5QsU0lpoGEuTTONl6CxBWJmF+NFxBwA4MEJ+CK1wT3/R/6Jfk1sy7 sFl8qBw92oWuxMlpiKLUvtgtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhcJQIyrc 2HJXyzbrtR8wpxSNzm0wHwYDVR0jBBgwFoAUYAJQ9jg2+0wvI/SH1xS/MvdZpbUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3OTlDLzM1RUJEOEU4NTU0 NDExRjA5MzQyQUMwQ0M0RjlBRTAyL1lBSlE5amcyLTB3dklfU0gxeFNfTXZkWnBi VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWUFKUTlqZzItMHd2SV9TSDF4U19NdmRacGJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 OTlDLzM1RUJEOEU4NTU0NDExRjA5MzQyQUMwQ0M0RjlBRTAyL1lBSlE5amcyLTB3 dklfU0gxeFNfTXZkWnBiVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB0hZUkn1EM9v4iflpBUvp2MDMuru+wzqWEvvskIT9FGJHNWDGVWorTT C5boh9v2bJQo6HWuStk92Vj+M2Zrm2nOwIjQcQS0u+mAWi0G4lSfzjuPaStHMGFv EKctvoFg+RL/Ih3AwU7Sdm8KuH+vwSpWk3NHxmWwcl8WA4QAFCKEhs5vkJgAQESw fHjxhq4riRsaiFvvW51dOnu1lML9/Vp/XJaSJnu72Kvd8FO4MJ7Ar12IaHtyQHv5 q1aHSObeOpvoCyUjNHziVImLRQyXbb8M8RlunGdtZEM1MKfhSrbnkWwS378W/4A4 kbizkohSwdq5QzDV6hS/8M8BVO4NGTE= -----END CERTIFICATE-----Generated at Sun Dec 7 00:02:41 2025 by rpki-client