This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft File: y7RecR9QOMR1deb07gwOjFZ744g.mft (raw, json) Hash identifier: C1MGvTanOpYLBpnMME4brtBrzftdSDtuGemx6h3ZhUk= Subject key identifier: CA:DC:84:E2:6B:6F:BC:87:96:B2:F2:95:80:94:66:2D:04:6C:B7:51 Authority key identifier: CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88 Certificate issuer: /CN=A9186CDF/serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388 Certificate serial: 07DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft Manifest number: 0FC1 Signing time: Thu 04 Dec 2025 20:11:39 +0000 Manifest this update: Thu 04 Dec 2025 20:11:38 +0000 Manifest next update: Thu 11 Dec 2025 20:11:38 +0000 Files and hashes: 1: y7RecR9QOMR1deb07gwOjFZ744g.crl (hash: Yz+flSJ+xhuBL2NZAcnqCAzOcm9OAGouJT1JLkuIs0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:11:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2013 (0x7dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186CDF, serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388 Validity Not Before: Dec 4 20:11:38 2025 GMT Not After : Dec 11 20:11:38 2025 GMT Subject: CN=6931eafb-70aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:05:81:71:91:59:bb:cd:69:d9:f0:1a:6b:b8: 0d:4e:02:e8:11:60:a7:b7:b6:1b:86:d2:00:df:93: eb:df:be:af:01:e9:4e:9c:d2:9b:51:97:ea:09:cb: 85:7b:39:05:70:72:72:57:ec:a7:c6:80:1d:27:a7: 94:74:6a:26:18:76:6a:78:91:7c:79:29:80:26:f8: d0:74:cf:03:36:71:0c:cc:6d:d9:94:00:84:17:6e: 00:01:cf:d6:6d:ab:c3:57:4b:2b:64:a7:0e:aa:c3: b8:46:bc:03:ca:06:22:f6:e6:67:20:ee:b7:09:c6: 3b:be:44:54:5e:d4:62:7d:e0:0f:2b:a3:85:f7:b7: 5d:4c:05:d1:80:68:2a:04:9b:bf:b5:76:81:d2:cc: 65:e8:ae:be:40:6d:94:5b:01:07:ce:b5:88:1d:1c: 15:a4:8b:bf:60:79:3d:6c:86:95:bc:2d:63:15:ed: 6c:df:83:53:3b:d3:48:8e:8e:ec:61:e0:bc:a1:61: 0f:24:49:7b:6c:81:60:8b:e8:36:b7:c8:89:ef:25: e5:0b:fa:47:2e:e7:3a:17:3b:4c:8d:b6:94:7a:c1: 45:77:f5:4e:d6:a8:07:30:83:05:ba:a4:d0:2c:e7: 26:44:22:bc:78:71:2d:5d:6f:93:29:0b:56:59:21: a6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DC:84:E2:6B:6F:BC:87:96:B2:F2:95:80:94:66:2D:04:6C:B7:51 X509v3 Authority Key Identifier: keyid:CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:de:69:05:5c:12:26:f0:b9:8b:07:2b:37:52:d1:52:cc:2e: c1:cc:67:1c:23:5d:76:71:e2:43:bb:59:3a:9f:e7:4a:2f:35: 65:ae:14:04:7e:57:a0:96:be:44:91:bb:e0:29:7d:46:b8:8c: 4d:ce:03:a7:39:79:f5:19:ad:bb:d9:09:f3:ed:f7:d8:a3:de: c2:42:c5:d1:c6:5d:73:08:36:2d:43:2e:e6:b4:2b:3c:88:f0: 89:4b:49:b6:38:a9:65:92:e9:89:9b:1b:2b:d8:04:77:21:8f: 12:3c:f7:6b:e9:1c:f8:6c:5d:67:a4:4d:d4:a6:9f:f6:0b:26: 1b:eb:fa:f6:b5:9e:37:72:16:5f:50:bf:2b:27:a2:23:cc:64: a8:f0:0d:72:f9:32:bd:4e:61:d8:bb:21:7b:bd:10:32:9c:fc: b9:60:6b:bc:9a:1f:48:0e:80:27:78:33:a3:a0:89:83:9b:26: 9b:23:a2:c5:cd:d9:f7:e7:d0:aa:0c:42:f4:f5:a1:16:19:9f: dc:b8:c6:72:ec:e4:81:e6:b4:28:de:82:39:d3:d0:2b:58:b7: 36:8e:14:9b:68:f7:a9:85:e6:5d:88:40:cf:5a:15:cf:c4:40: 00:90:9f:05:67:80:6d:6c:28:85:c8:ec:8f:bf:db:5d:a2:71: 61:5d:b9:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDREYxMTAvBgNVBAUTKENCQjQ1RTcxMUY1MDM4QzQ3NTc1RTZGNEVFMEMwRThD NTY3QkUzODgwHhcNMjUxMjA0MjAxMTM4WhcNMjUxMjExMjAxMTM4WjAYMRYwFAYD VQQDEw02OTMxZWFmYi03MGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAWBcZFZu81p2fAaa7gNTgLoEWCnt7YbhtIA35Pr376vAelOnNKbUZfqCcuF ezkFcHJyV+ynxoAdJ6eUdGomGHZqeJF8eSmAJvjQdM8DNnEMzG3ZlACEF24AAc/W bavDV0srZKcOqsO4RrwDygYi9uZnIO63CcY7vkRUXtRifeAPK6OF97ddTAXRgGgq BJu/tXaB0sxl6K6+QG2UWwEHzrWIHRwVpIu/YHk9bIaVvC1jFe1s34NTO9NIjo7s YeC8oWEPJEl7bIFgi+g2t8iJ7yXlC/pHLuc6FztMjbaUesFFd/VO1qgHMIMFuqTQ LOcmRCK8eHEtXW+TKQtWWSGmHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrchOJr b7yHlrLylYCUZi0EbLdRMB8GA1UdIwQYMBaAFMu0XnEfUDjEdXXm9O4MDoxWe+OI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkNERi80NDgxRjBBODEx REUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9NUjFkZWIwN2d3T2pGWjc0 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3UmVjUjlRT01SMWRlYjA3Z3dPakZaNzQ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkNERi80NDgxRjBBODExREUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9N UjFkZWIwN2d3T2pGWjc0NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA03mkFXBIm8LmLBys3UtFSzC7BzGccI112ceJDu1k6n+dKLzVlrhQE fleglr5EkbvgKX1GuIxNzgOnOXn1Ga272Qnz7ffYo97CQsXRxl1zCDYtQy7mtCs8 iPCJS0m2OKllkumJmxsr2AR3IY8SPPdr6Rz4bF1npE3Upp/2CyYb6/r2tZ43chZf UL8rJ6IjzGSo8A1y+TK9TmHYuyF7vRAynPy5YGu8mh9IDoAneDOjoImDmyabI6LF zdn359CqDEL09aEWGZ/cuMZy7OSB5rQo3oI509ArWLc2jhSbaPepheZdiEDPWhXP xEAAkJ8FZ4BtbCiFyOyPv9tdonFhXbku -----END CERTIFICATE-----Generated at Sat Dec 6 14:34:06 2025 by rpki-client