This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft File: yW0SR_XLoniur1KTUbX4HKVxcKM.mft (raw, json) Hash identifier: oBiu4i/8tCB+WTg2PwCFzQTaz9mjfBxP8tD+Rqg3WaM= Subject key identifier: BC:E8:3B:73:70:42:87:41:C5:9D:45:6F:ED:83:6A:A5:5E:F4:FB:F8 Authority key identifier: C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 Certificate issuer: /CN=A9190E6C/serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Certificate serial: 0DAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft Manifest number: 0DA3 Signing time: Sat 06 Dec 2025 17:20:33 +0000 Manifest this update: Sat 06 Dec 2025 17:20:32 +0000 Manifest next update: Sat 13 Dec 2025 17:20:32 +0000 Files and hashes: 1: yW0SR_XLoniur1KTUbX4HKVxcKM.crl (hash: DBnn2ByizMbZyRm2rwQ6QvewHkZObw1n6ISjmt+2AvA=) 2: 07C8CFD0E18F11EF82714B13C4F9AE02.roa (hash: pHVkzfX7SG48uWlsj9xFm7ATtwnDNjsznm3glTtz9F0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3503 (0xdaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190E6C, serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Validity Not Before: Dec 6 17:20:32 2025 GMT Not After : Dec 13 17:20:32 2025 GMT Subject: CN=693465e1-2d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:e3:e0:26:40:9e:69:74:14:5d:b7:ea:6b:9c: 00:1e:a4:0e:0e:ed:99:f2:9d:ed:8b:f0:09:21:b5: 4c:eb:97:66:0b:72:d0:49:6c:19:b8:ce:00:e7:6c: b1:e8:7a:27:b6:5f:3e:94:36:77:38:d4:55:88:48: f4:c9:7e:87:03:c6:d3:ff:ee:28:64:93:7b:9e:f8: f6:eb:87:f5:4d:fd:72:b9:51:a3:cb:65:e7:28:d4: e5:3c:ba:e1:9e:06:cf:fd:55:03:9b:77:8a:1a:07: be:76:b4:5b:18:6b:2a:7b:76:ec:b6:79:a6:32:71: 6e:85:24:5d:ce:9d:c8:30:61:99:10:50:fd:bf:95: 68:a2:24:0a:85:3f:c6:a7:33:ec:f5:f0:46:23:78: f7:86:a9:65:af:a5:6c:46:c9:3f:e9:b5:18:5d:a9: 54:59:53:4f:f3:ee:23:9a:0c:62:7b:26:43:dd:6e: 83:04:bd:39:3f:5a:a6:31:3f:70:72:a4:5c:94:8c: 4c:2a:f8:8b:e1:9f:5d:79:54:cc:e5:37:49:06:39: 37:73:bf:74:36:0f:16:8d:ec:49:f8:c2:1e:1d:37: f8:99:9c:2a:b7:5c:9d:05:38:76:40:87:9e:a3:21: 1e:09:ca:ae:18:88:50:fa:ef:b1:e5:08:29:48:e3: 7e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E8:3B:73:70:42:87:41:C5:9D:45:6F:ED:83:6A:A5:5E:F4:FB:F8 X509v3 Authority Key Identifier: keyid:C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:1b:13:9b:bb:40:fa:0d:db:44:8a:9e:0d:26:f4:c9:52:9c: c6:08:6a:51:e3:0a:98:d3:f7:30:e6:16:3d:f1:61:15:c1:c8: 55:c5:a8:92:d2:21:c2:df:73:8f:2a:b8:d7:0d:70:7e:36:51: 03:ce:b1:71:d2:f8:f4:b0:c5:71:aa:ce:0f:d1:df:6a:22:07: 31:df:89:c2:61:0d:0f:ac:ae:fc:30:74:0b:1b:45:64:19:7c: 82:b6:d3:85:1a:cf:9e:cb:3f:a0:c6:e3:60:8d:92:5b:be:f5: 7d:51:96:88:15:1d:0a:07:35:a0:2f:3c:69:e9:21:4c:99:10: 3c:bc:49:a6:95:21:17:11:c5:09:29:d7:15:8f:32:d0:44:bc: a6:36:d5:5f:b2:f0:f2:cd:ca:d8:7d:c7:b0:3d:34:35:ef:54: 51:50:27:12:db:52:13:70:df:32:6f:89:f6:1c:bf:88:17:70: 3b:1e:00:4b:8c:71:ff:88:bb:e1:05:96:0b:c6:9e:c3:13:48: aa:27:ea:7a:ca:81:9e:31:84:ff:ac:6e:e2:59:f7:8d:ce:6e: de:ad:79:b7:3a:70:b2:e8:f2:0f:b4:e9:cb:c3:ba:ce:eb:02: be:dd:82:b0:e9:13:62:a3:7f:4e:8e:4f:1e:12:74:c3:73:02: 00:21:9e:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBFNkMxMTAvBgNVBAUTKEM5NkQxMjQ3RjVDQkEyNzhBRUFGNTI5MzUxQjVGODFD QTU3MTcwQTMwHhcNMjUxMjA2MTcyMDMyWhcNMjUxMjEzMTcyMDMyWjAYMRYwFAYD VQQDEw02OTM0NjVlMS0yZDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8uPgJkCeaXQUXbfqa5wAHqQODu2Z8p3ti/AJIbVM65dmC3LQSWwZuM4A52yx 6Hontl8+lDZ3ONRViEj0yX6HA8bT/+4oZJN7nvj264f1Tf1yuVGjy2XnKNTlPLrh ngbP/VUDm3eKGge+drRbGGsqe3bstnmmMnFuhSRdzp3IMGGZEFD9v5VooiQKhT/G pzPs9fBGI3j3hqllr6VsRsk/6bUYXalUWVNP8+4jmgxieyZD3W6DBL05P1qmMT9w cqRclIxMKviL4Z9deVTM5TdJBjk3c790Ng8WjexJ+MIeHTf4mZwqt1ydBTh2QIee oyEeCcquGIhQ+u+x5QgpSON+UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzoO3Nw QodBxZ1Fb+2DaqVe9Pv4MB8GA1UdIwQYMBaAFMltEkf1y6J4rq9Sk1G1+BylcXCj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEU2Qy85QzY5QTczMkQ0 OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9uaXVyMUtUVWJYNEhLVnhj S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXMFNSX1hMb25pdXIxS1RVYlg0SEtWeGNLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEU2Qy85QzY5QTczMkQ0OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9u aXVyMUtUVWJYNEhLVnhjS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDhGxObu0D6DdtEip4NJvTJUpzGCGpR4wqY0/cw5hY98WEVwchVxaiS 0iHC33OPKrjXDXB+NlEDzrFx0vj0sMVxqs4P0d9qIgcx34nCYQ0PrK78MHQLG0Vk GXyCttOFGs+eyz+gxuNgjZJbvvV9UZaIFR0KBzWgLzxp6SFMmRA8vEmmlSEXEcUJ KdcVjzLQRLymNtVfsvDyzcrYfcewPTQ171RRUCcS21ITcN8yb4n2HL+IF3A7HgBL jHH/iLvhBZYLxp7DE0iqJ+p6yoGeMYT/rG7iWfeNzm7erXm3OnCy6PIPtOnLw7rO 6wK+3YKw6RNio39Ojk8eEnTDcwIAIZ7x -----END CERTIFICATE-----Generated at Sun Dec 7 03:43:04 2025 by rpki-client