This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft File: Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft (raw, json) Hash identifier: c9chbHMH3KvYkg9IgoSeABJlkgWDeSSEXJEnAqdSbKA= Subject key identifier: C3:9F:08:92:96:70:06:1C:A2:7C:A8:B1:50:7E:7C:8F:1C:E2:49:F3 Authority key identifier: 63:F3:59:A6:9E:DC:38:63:48:6F:46:D6:14:1F:9B:5C:01:43:23:FB Certificate issuer: /CN=A9110C2F/serialNumber=63F359A69EDC3863486F46D6141F9B5C014323FB Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft Manifest number: 12 Signing time: Thu 18 Dec 2025 14:51:33 +0000 Manifest this update: Thu 18 Dec 2025 14:51:33 +0000 Manifest next update: Thu 25 Dec 2025 14:51:33 +0000 Files and hashes: 1: Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl (hash: YvUNtq7EYEa4Rpo8WwxuN/CSNvHFKG4RWnlul/Xg0CU=) 2: 357B8ABEC67F11F08B0CE042C4F9AE02.roa (hash: dAZhfHEyAhFn87WTTiMynuTaHzxmw7BH+vzWlYaWz5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:51:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C2F, serialNumber=63F359A69EDC3863486F46D6141F9B5C014323FB Validity Not Before: Dec 18 14:51:33 2025 GMT Not After : Dec 25 14:51:33 2025 GMT Subject: CN=694414f5-1b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6b:ca:cd:be:93:70:88:b8:00:b3:b8:10:48: a9:cd:57:01:1c:fd:f5:71:28:c8:1c:fe:2c:a3:9f: a8:94:19:38:2e:66:b7:38:8f:33:23:f0:6b:e7:c9: bd:d3:60:6a:f8:d9:b9:6f:ab:d2:39:35:d0:65:b9: 6a:67:7f:56:09:d1:0f:eb:2f:07:e3:21:42:58:e1: d7:5a:ef:66:16:bd:f4:f2:f2:c0:35:25:7a:04:81: e1:85:57:48:cf:d3:9b:83:7c:f1:ee:a4:ce:7e:6f: 0f:c7:4f:f2:58:91:2d:20:87:42:71:d5:ff:b4:88: 79:41:be:b0:b1:ca:6f:a4:06:1c:fb:6a:13:23:7c: ac:f4:5f:f5:2e:7a:bd:40:fa:16:cc:a4:d6:70:08: 3e:a7:6d:7f:35:c0:fb:02:56:7c:cc:9d:cc:0d:da: a1:89:5c:da:8e:f4:84:d6:2b:1d:03:e3:08:c7:72: 3f:c3:a1:9d:ce:93:a8:4e:83:02:c4:41:53:b9:f9: 3c:37:e9:1d:51:ae:d2:83:4c:32:50:31:6e:3a:c6: e3:8e:b7:89:a4:e1:16:68:b6:af:5e:8f:e3:9d:3c: f0:93:cc:bd:a8:3e:bf:91:a8:a4:c9:fe:fb:52:3d: 7e:6a:44:30:dd:57:ad:71:a0:bf:ec:b3:7a:81:5b: 8d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9F:08:92:96:70:06:1C:A2:7C:A8:B1:50:7E:7C:8F:1C:E2:49:F3 X509v3 Authority Key Identifier: keyid:63:F3:59:A6:9E:DC:38:63:48:6F:46:D6:14:1F:9B:5C:01:43:23:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:89:74:14:9b:59:fe:cf:8a:28:ed:73:6d:d4:09:64:6a:eb: fb:7c:1f:fb:23:f8:64:39:fb:b0:1e:ee:16:f2:b3:56:b2:7f: f8:9a:ea:54:26:48:01:f8:6a:7d:a0:1b:7a:b8:f7:0b:e1:b8: 5e:05:ee:b0:ff:3c:13:34:c5:3a:32:f7:5c:e6:21:f7:62:b3: 29:99:1e:ef:5a:b5:48:3a:cc:c6:a4:8f:9b:c0:70:01:0d:1a: 46:ca:a3:10:5d:68:00:34:9f:db:17:b2:11:e5:f3:62:5f:8c: a4:b4:eb:87:84:ee:d5:00:03:ed:7a:2b:2d:9f:c7:46:e8:3d: a5:48:5a:c5:6e:b3:b7:93:c4:e5:1f:e0:84:2b:dc:c0:0b:03: 76:f4:9b:b0:f7:13:9c:05:22:7b:ea:9c:39:4c:f1:a2:c4:67: 93:a0:ec:04:53:d3:29:a6:fa:1f:21:b5:20:95:70:22:6d:76: f7:52:73:62:00:26:48:c4:f7:5a:12:f9:b0:60:bb:f6:b3:b8: d6:e1:5e:25:88:2b:81:94:fd:ca:52:8d:47:85:4e:10:57:95: 19:5b:96:3e:e7:83:79:b7:cc:6e:c7:d6:f7:45:50:2b:50:ab: 71:cd:cf:db:ff:e9:d3:be:63:9e:ed:51:9b:58:49:36:6b:6f: d1:24:33:be -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MEMyRjExMC8GA1UEBRMoNjNGMzU5QTY5RURDMzg2MzQ4NkY0NkQ2MTQxRjlCNUMw MTQzMjNGQjAeFw0yNTEyMTgxNDUxMzNaFw0yNTEyMjUxNDUxMzNaMBgxFjAUBgNV BAMMDTY5NDQxNGY1LTFiOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4a8rNvpNwiLgAs7gQSKnNVwEc/fVxKMgc/iyjn6iUGTguZrc4jzMj8Gvnyb3T YGr42blvq9I5NdBluWpnf1YJ0Q/rLwfjIUJY4dda72YWvfTy8sA1JXoEgeGFV0jP 05uDfPHupM5+bw/HT/JYkS0gh0Jx1f+0iHlBvrCxym+kBhz7ahMjfKz0X/Uuer1A +hbMpNZwCD6nbX81wPsCVnzMncwN2qGJXNqO9ITWKx0D4wjHcj/DoZ3Ok6hOgwLE QVO5+Tw36R1RrtKDTDJQMW46xuOOt4mk4RZotq9ej+OdPPCTzL2oPr+RqKTJ/vtS PX5qRDDdV61xoL/ss3qBW41tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUw58IkpZw BhyifKixUH58jxziSfMwHwYDVR0jBBgwFoAUY/NZpp7cOGNIb0bWFB+bXAFDI/sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwQzJGLzFBNkFFOTdDQzVB ODExRjA5M0E3RjAyQ0M0RjlBRTAyL1lfTlpwcDdjT0dOSWIwYldGQi1iWEFGRElf cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWV9OWnBwN2NPR05JYjBiV0ZCLWJYQUZESV9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw QzJGLzFBNkFFOTdDQzVBODExRjA5M0E3RjAyQ0M0RjlBRTAyL1lfTlpwcDdjT0dO SWIwYldGQi1iWEFGRElfcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG2JdBSbWf7Piijtc23UCWRq6/t8H/sj+GQ5+7Ae7hbys1ayf/ia6lQm SAH4an2gG3q49wvhuF4F7rD/PBM0xToy91zmIfdisymZHu9atUg6zMakj5vAcAEN GkbKoxBdaAA0n9sXshHl82JfjKS064eE7tUAA+16Ky2fx0boPaVIWsVus7eTxOUf 4IQr3MALA3b0m7D3E5wFInvqnDlM8aLEZ5Og7ART0ymm+h8htSCVcCJtdvdSc2IA JkjE91oS+bBgu/azuNbhXiWIK4GU/cpSjUeFThBXlRlblj7ng3m3zG7H1vdFUCtQ q3HNz9v/6dO+Y57tUZtYSTZrb9EkM74= -----END CERTIFICATE-----Generated at Sat Dec 20 00:28:04 2025 by rpki-client