This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft File: yhlef9JZjYWjbJnsSBs1dMBuOxc.mft (raw, json) Hash identifier: vfjhqVt60VtrhamktD6xVwVWjFqULhE2Yj/KIo8eSv8= Subject key identifier: 91:E4:EA:D3:90:AC:AA:40:2D:89:E6:27:E6:D4:B6:1E:56:5F:A6:37 Authority key identifier: CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17 Certificate issuer: /CN=A919DA63/serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17 Certificate serial: 0862 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft Manifest number: 085C Signing time: Sat 06 Dec 2025 19:47:44 +0000 Manifest this update: Sat 06 Dec 2025 19:47:44 +0000 Manifest next update: Sat 13 Dec 2025 19:47:44 +0000 Files and hashes: 1: yhlef9JZjYWjbJnsSBs1dMBuOxc.crl (hash: qBDgj4mGTRl8W1Q1awmgDjPkgRs4byIFO7Cre4ku+to=) 2: B65C355AE1E411EAAD5D8545C4F9AE02.roa (hash: EHew2Al89yfLEVdXGaRbj1T8KtGh2w0PUC3MBSskoUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2146 (0x862) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DA63, serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17 Validity Not Before: Dec 6 19:47:44 2025 GMT Not After : Dec 13 19:47:44 2025 GMT Subject: CN=69348860-8e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:08:2e:78:95:d9:53:c3:7b:d3:66:05:7a:3d: 43:cd:1e:e6:52:1a:c2:c0:26:94:14:03:20:f2:50: c9:88:24:e8:d7:9f:b1:78:79:a2:a7:15:2b:69:5d: 14:89:65:d8:76:b7:fa:93:4f:80:96:69:1f:ca:41: 78:fa:55:a2:71:af:be:b8:d5:af:9f:8a:b5:cb:b0: b5:bc:94:a7:86:70:75:85:6e:6e:9a:e5:10:df:c9: 8c:3f:5e:6f:61:9a:f1:e5:ad:6b:7c:40:41:4d:da: ad:b3:29:9f:cb:2f:fe:5c:77:e1:7e:4b:34:eb:ba: fe:5f:5e:80:21:35:d7:c4:e9:58:a4:7b:d1:01:f8: 35:16:9d:03:eb:60:ed:e5:1f:70:fc:22:90:4d:1e: e8:48:fc:7f:31:d0:97:65:7f:25:08:e8:29:6c:b5: 00:73:ba:89:dc:08:de:18:9a:dd:dc:c6:1d:3b:51: fc:eb:23:0d:0e:8e:8e:90:60:93:da:15:4f:e0:71: 46:a2:40:e9:9d:6b:a9:58:d4:4e:92:2d:00:1a:85: 22:4c:4a:68:db:ce:cd:f4:91:6a:bf:9d:3e:e5:07: a4:df:11:5c:2b:92:be:da:c7:0e:46:2b:a3:1e:6c: f8:35:83:2e:5f:7d:e1:5b:7e:b3:f2:3a:48:3f:75: 28:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E4:EA:D3:90:AC:AA:40:2D:89:E6:27:E6:D4:B6:1E:56:5F:A6:37 X509v3 Authority Key Identifier: keyid:CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:0a:67:b0:97:c1:49:19:c6:48:ee:fb:c0:1f:07:bc:6f:90: 49:35:77:e5:78:c5:7f:0a:6b:0c:d5:4d:3d:c5:58:6c:6c:ae: 9a:15:f7:e8:1e:db:46:07:f3:32:aa:3d:cd:b1:64:d0:59:a5: c8:aa:b1:76:a9:5d:2a:99:2a:e4:08:e4:e0:3a:4d:50:a3:7a: f4:79:5e:70:8b:2d:9f:f3:bc:5a:7b:28:f9:d5:13:15:ff:1b: 35:5a:fd:88:23:a6:bf:e7:4a:35:45:7f:f0:be:11:32:2d:b3: 6d:bc:e3:60:7f:95:a9:37:e1:19:0c:f9:b5:0c:d1:56:c4:50: 8e:41:00:17:18:7a:88:e6:33:ad:96:95:f4:0a:06:ac:50:b9: f8:76:d2:2a:ad:05:04:38:0b:13:8c:db:34:6c:27:93:1c:d8: d4:97:46:7b:d5:32:34:71:bb:24:e5:95:75:f6:64:dd:ae:f2: 52:70:22:e0:0b:21:c2:da:45:43:94:f0:9a:e0:ac:a0:c0:90: 94:14:72:73:f7:3c:21:5a:65:79:a3:18:d1:ed:26:e6:b2:b8: d7:d5:2b:8d:0d:43:78:d7:0a:85:38:f6:74:a4:c4:1c:df:1f: 5b:a0:34:08:98:62:d0:ee:db:83:f5:2d:c4:b0:bb:d3:37:a8: fa:e3:ac:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURBNjMxMTAvBgNVBAUTKENBMTk1RTdGRDI1OThEODVBMzZDOTlFQzQ4MUIzNTc0 QzA2RTNCMTcwHhcNMjUxMjA2MTk0NzQ0WhcNMjUxMjEzMTk0NzQ0WjAYMRYwFAYD VQQDEw02OTM0ODg2MC04ZTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwgueJXZU8N702YFej1DzR7mUhrCwCaUFAMg8lDJiCTo15+xeHmipxUraV0U iWXYdrf6k0+AlmkfykF4+lWica++uNWvn4q1y7C1vJSnhnB1hW5umuUQ38mMP15v YZrx5a1rfEBBTdqtsymfyy/+XHfhfks067r+X16AITXXxOlYpHvRAfg1Fp0D62Dt 5R9w/CKQTR7oSPx/MdCXZX8lCOgpbLUAc7qJ3AjeGJrd3MYdO1H86yMNDo6OkGCT 2hVP4HFGokDpnWupWNROki0AGoUiTEpo287N9JFqv50+5Qek3xFcK5K+2scORiuj Hmz4NYMuX33hW36z8jpIP3UoEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHk6tOQ rKpALYnmJ+bUth5WX6Y3MB8GA1UdIwQYMBaAFMoZXn/SWY2Fo2yZ7EgbNXTAbjsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REE2My8wMUJGN0JFRUUx RTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZV2piSm5zU0JzMWRNQnVP eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lobGVmOUpaallXamJKbnNTQnMxZE1CdU94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REE2My8wMUJGN0JFRUUxRTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZ V2piSm5zU0JzMWRNQnVPeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgCmewl8FJGcZI7vvAHwe8b5BJNXfleMV/CmsM1U09xVhsbK6aFffo HttGB/Myqj3NsWTQWaXIqrF2qV0qmSrkCOTgOk1Qo3r0eV5wiy2f87xaeyj51RMV /xs1Wv2II6a/50o1RX/wvhEyLbNtvONgf5WpN+EZDPm1DNFWxFCOQQAXGHqI5jOt lpX0CgasULn4dtIqrQUEOAsTjNs0bCeTHNjUl0Z71TI0cbsk5ZV19mTdrvJScCLg CyHC2kVDlPCa4KygwJCUFHJz9zwhWmV5oxjR7SbmsrjX1SuNDUN41wqFOPZ0pMQc 3x9boDQImGLQ7tuD9S3EsLvTN6j646xp -----END CERTIFICATE-----Generated at Sat Dec 6 23:25:31 2025 by rpki-client