This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft File: yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft (raw, json) Hash identifier: qtqPb/yEYlHTLJKlYiN5l+W0ZMMsSguXqb6kndarM6g= Subject key identifier: 0E:81:CD:F5:34:3A:CA:08:64:E1:14:66:91:FB:EB:66:69:FF:9E:9A Authority key identifier: C9:12:B0:54:CA:43:A9:34:C1:77:57:33:D8:4B:F1:6E:48:56:BE:F0 Certificate issuer: /CN=A917E1FA/serialNumber=C912B054CA43A934C1775733D84BF16E4856BEF0 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft Manifest number: 5E Signing time: Fri 05 Dec 2025 04:59:37 +0000 Manifest this update: Fri 05 Dec 2025 04:59:36 +0000 Manifest next update: Fri 12 Dec 2025 04:59:36 +0000 Files and hashes: 1: yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl (hash: QZzf1NsYq6mHJFhyc8+IgQHCNuZ4RkxAAnzBpN0SkDs=) 2: 7354ACC0472811F0ADE2D44BC4F9AE02.roa (hash: wcclgPl4R6E/Zzr/USbPvSIER4uFng9U6618g1EWkBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FA, serialNumber=C912B054CA43A934C1775733D84BF16E4856BEF0 Validity Not Before: Dec 5 04:59:36 2025 GMT Not After : Dec 12 04:59:36 2025 GMT Subject: CN=693266b8-4d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f1:a4:2b:9c:70:f1:95:e8:9e:3e:ac:fc:d4: 2a:0f:ee:91:c8:0b:d6:ef:61:e6:c9:9a:29:98:5d: 02:9f:58:8e:1b:ea:dd:09:04:b8:10:c4:f0:f0:9e: ea:20:20:a6:68:f6:40:71:e4:da:19:f7:75:e8:98: fb:c9:59:e8:ee:92:4d:71:1c:3d:8e:48:9a:8a:ad: 92:ae:78:ea:0c:08:7c:e3:bc:4f:3c:03:4c:2d:5f: 2a:35:fb:00:a7:e5:19:e6:a1:a5:41:1e:83:d2:ec: 23:3f:05:ac:56:83:fb:b3:66:d8:fb:a8:12:e3:8d: a2:c4:99:d5:00:71:54:0f:85:78:1c:ff:a4:40:fe: 42:ce:a5:6b:23:66:d1:6e:74:f0:69:f5:b7:b9:4e: 2e:5d:7c:a3:ca:ac:76:ca:b5:06:fa:db:b8:51:b6: db:b2:eb:49:0f:a8:84:78:9f:c4:63:62:7f:47:4f: 02:0c:2e:e2:ac:61:34:fe:ba:bc:38:5b:b5:1c:0b: 15:60:6d:ab:7d:3c:89:b3:94:5e:69:66:9a:1a:78: 8b:10:d0:9f:94:ed:b0:8f:eb:24:de:11:45:61:ae: dd:5b:23:73:95:84:90:d7:8f:25:a3:3a:76:6c:43: 54:44:5c:af:0f:e5:b7:e8:15:b8:1c:2c:01:d4:b3: 63:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:81:CD:F5:34:3A:CA:08:64:E1:14:66:91:FB:EB:66:69:FF:9E:9A X509v3 Authority Key Identifier: keyid:C9:12:B0:54:CA:43:A9:34:C1:77:57:33:D8:4B:F1:6E:48:56:BE:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:80:74:95:9d:f9:97:43:71:c1:3d:df:c1:84:6c:cd:91:20: ac:d3:b4:f0:6e:da:1b:b3:b2:fe:9c:0f:59:84:33:4b:9c:a7: 1e:59:fe:82:17:ca:3c:28:7c:14:50:1a:ea:9a:f6:4c:9a:9b: 94:08:12:84:8e:c7:8a:75:3e:63:53:ad:3f:82:fb:db:a2:5f: 44:68:8a:e8:98:91:ea:f6:ad:4e:3f:55:fe:33:1d:50:53:67: d7:28:70:4a:c2:ee:b9:a1:e2:77:e2:50:15:46:4d:96:8f:f1: 7b:16:9e:4a:40:9f:ff:7f:9c:d3:e2:0e:93:e2:f0:1c:c7:c0: 3f:5f:d7:d1:c9:b4:65:c9:e5:07:59:c5:6c:de:e6:f4:7e:77: 0e:0e:41:a7:6d:10:78:4e:7a:61:81:ee:fa:16:b1:4f:42:2d: e8:58:27:6e:b4:8a:d9:f9:4b:b1:35:ce:ed:ad:bf:00:48:cd: c6:52:4f:a1:60:89:d3:a2:37:de:23:7d:3f:eb:42:3d:74:89: 37:ce:6f:5e:dd:78:ed:ea:4d:0b:b1:04:43:f1:ad:ed:f8:d1: 21:20:9a:19:e7:ad:98:7c:ce:f4:fb:4e:10:b9:f5:93:94:45: f9:5d:78:d9:76:3a:03:7e:db:52:ed:42:19:4e:68:6a:aa:66: 2d:76:a2:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTFGQTExMC8GA1UEBRMoQzkxMkIwNTRDQTQzQTkzNEMxNzc1NzMzRDg0QkYxNkU0 ODU2QkVGMDAeFw0yNTEyMDUwNDU5MzZaFw0yNTEyMTIwNDU5MzZaMBgxFjAUBgNV BAMTDTY5MzI2NmI4LTRkOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDY8aQrnHDxleiePqz81CoP7pHIC9bvYebJmimYXQKfWI4b6t0JBLgQxPDwnuog IKZo9kBx5NoZ93XomPvJWejukk1xHD2OSJqKrZKueOoMCHzjvE88A0wtXyo1+wCn 5RnmoaVBHoPS7CM/BaxWg/uzZtj7qBLjjaLEmdUAcVQPhXgc/6RA/kLOpWsjZtFu dPBp9be5Ti5dfKPKrHbKtQb627hRttuy60kPqIR4n8RjYn9HTwIMLuKsYTT+urw4 W7UcCxVgbat9PImzlF5pZpoaeIsQ0J+U7bCP6yTeEUVhrt1bI3OVhJDXjyWjOnZs Q1REXK8P5bfoFbgcLAHUs2O/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDoHN9TQ6 yghk4RRmkfvrZmn/npowHwYDVR0jBBgwFoAUyRKwVMpDqTTBd1cz2EvxbkhWvvAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMUZBL0EyRDVFRTVFNDVB MzExRjA5NUVGRkQ0OEM0RjlBRTAyL3lSS3dWTXBEcVRUQmQxY3oyRXZ4YmtoV3Z2 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVJLd1ZNcERxVFRCZDFjejJFdnhia2hXdnZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MUZBL0EyRDVFRTVFNDVBMzExRjA5NUVGRkQ0OEM0RjlBRTAyL3lSS3dWTXBEcVRU QmQxY3oyRXZ4YmtoV3Z2QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEaAdJWd+ZdDccE938GEbM2RIKzTtPBu2huzsv6cD1mEM0ucpx5Z/oIX yjwofBRQGuqa9kyam5QIEoSOx4p1PmNTrT+C+9uiX0RoiuiYker2rU4/Vf4zHVBT Z9cocErC7rmh4nfiUBVGTZaP8XsWnkpAn/9/nNPiDpPi8BzHwD9f19HJtGXJ5QdZ xWze5vR+dw4OQadtEHhOemGB7voWsU9CLehYJ260itn5S7E1zu2tvwBIzcZST6Fg idOiN94jfT/rQj10iTfOb17deO3qTQuxBEPxre340SEgmhnnrZh8zvT7ThC59ZOU RfldeNl2OgN+21LtQhlOaGqqZi12ois= -----END CERTIFICATE-----Generated at Sat Dec 6 12:25:06 2025 by rpki-client