This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft File: cyJU29YY8YhtTfkgE5O_34ueAg4.mft (raw, json) Hash identifier: H+/efFIBHfKA51rzh+HI6Ob1CxZVvnLy72op3VecGMo= Subject key identifier: 67:94:16:57:82:08:3E:E0:B7:B9:9A:13:0B:7F:E2:64:DB:C6:BD:3C Authority key identifier: 73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E Certificate issuer: /CN=A91142EA/serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E Certificate serial: 0718 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft Manifest number: 201F Signing time: Fri 26 Dec 2025 15:51:38 +0000 Manifest this update: Fri 26 Dec 2025 15:51:38 +0000 Manifest next update: Fri 02 Jan 2026 15:51:38 +0000 Files and hashes: 1: cyJU29YY8YhtTfkgE5O_34ueAg4.crl (hash: cL7BwZJDyun9W7ReJ615Qclo9PTatDIdVIHItqIU1Ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 15:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1816 (0x718) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91142EA, serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E Validity Not Before: Dec 26 15:51:38 2025 GMT Not After : Jan 2 15:51:38 2026 GMT Subject: CN=694eaf0a-4f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:25:65:80:2f:66:37:89:99:03:81:6b:db:37: a5:35:c5:e7:85:e8:be:fd:cf:7e:21:b4:96:58:04: 10:ec:be:dc:74:5d:9a:b6:df:03:a0:49:0f:6c:40: fc:17:32:b2:0e:b3:57:be:2a:3f:a1:bc:25:2e:d5: 47:de:fd:f7:76:91:68:b5:5d:ee:1d:31:e8:e5:89: 8a:79:18:4e:aa:f7:af:18:f4:69:f1:bd:17:2c:fb: 16:12:8a:d5:94:15:35:46:7b:f1:ec:15:8a:e7:5e: 07:72:7f:6a:33:98:d6:46:4b:ab:4b:79:f7:54:fa: 69:1d:b0:df:05:55:6f:fa:f9:b3:11:34:e2:51:fd: 37:53:79:63:0c:ea:d3:44:2e:98:c4:37:fa:9c:63: 8d:ac:e8:f0:60:1e:6a:b4:fb:07:fd:95:d3:61:8e: 00:d1:a0:3c:02:a9:0e:3b:9d:0a:e0:0a:b7:54:1d: 21:8b:cd:d3:4f:a1:45:8c:cd:c6:73:8c:f8:72:6c: d8:22:93:41:90:6a:64:9f:da:9b:4e:7a:7d:6e:45: f6:95:09:94:a4:2b:ba:ed:d5:f0:75:69:3e:3e:b5: c0:e8:ff:ae:86:67:e3:c9:f3:9f:41:31:05:4a:e9: 19:8e:6d:a5:0d:a0:03:77:c1:bf:26:24:13:c3:91: dd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:94:16:57:82:08:3E:E0:B7:B9:9A:13:0B:7F:E2:64:DB:C6:BD:3C X509v3 Authority Key Identifier: keyid:73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:30:8a:ea:c6:a6:95:2d:ae:e0:03:f6:d9:f3:52:f6:31:2a: bf:da:e1:30:da:64:6d:8e:c6:25:d6:02:56:63:0c:f3:89:94: 36:d5:e8:6d:89:65:15:7b:5d:4a:d2:10:38:e2:d4:11:83:78: 70:a8:3a:ff:17:9f:fd:73:07:1a:57:a8:d6:9a:5e:29:5c:26: 8e:32:e1:a6:e8:84:22:9b:57:98:d7:39:dc:59:aa:04:9a:4b: 61:d7:25:38:a8:0c:b3:75:54:7a:24:79:34:d2:d0:c6:d7:a0: 34:b4:ff:de:0e:57:41:af:b8:79:5e:49:54:22:86:12:16:c2: 3b:17:c6:d7:f4:70:a8:4f:ab:3b:b4:ff:9a:6f:9a:d6:20:ab: b5:16:91:0b:8d:f7:cd:c7:82:cd:fb:72:db:93:df:5f:19:88: 19:ff:4b:e7:99:9d:9c:ae:5e:ac:88:e2:29:7e:04:89:cc:14: f0:1c:98:f1:09:e7:a4:8f:90:59:e0:34:5f:3a:3c:27:a8:a8: 31:63:93:c0:6d:d5:a7:3e:6b:89:83:99:30:7e:d3:e1:a9:ad: 88:66:9d:83:56:97:b7:59:0e:0b:11:de:8f:48:1f:b8:21:43: 5a:f6:72:55:64:9a:38:7c:b8:2f:0d:3b:bc:08:09:7e:ba:a3: 25:a8:87:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQyRUExMTAvBgNVBAUTKDczMjI1NERCRDYxOEYxODg2RDRERjkyMDEzOTNCRkRG OEI5RTAyMEUwHhcNMjUxMjI2MTU1MTM4WhcNMjYwMTAyMTU1MTM4WjAYMRYwFAYD VQQDDA02OTRlYWYwYS00ZjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyVlgC9mN4mZA4Fr2zelNcXnhei+/c9+IbSWWAQQ7L7cdF2att8DoEkPbED8 FzKyDrNXvio/obwlLtVH3v33dpFotV3uHTHo5YmKeRhOqvevGPRp8b0XLPsWEorV lBU1Rnvx7BWK514Hcn9qM5jWRkurS3n3VPppHbDfBVVv+vmzETTiUf03U3ljDOrT RC6YxDf6nGONrOjwYB5qtPsH/ZXTYY4A0aA8AqkOO50K4Aq3VB0hi83TT6FFjM3G c4z4cmzYIpNBkGpkn9qbTnp9bkX2lQmUpCu67dXwdWk+PrXA6P+uhmfjyfOfQTEF SukZjm2lDaADd8G/JiQTw5HdYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeUFleC CD7gt7maEwt/4mTbxr08MB8GA1UdIwQYMBaAFHMiVNvWGPGIbU35IBOTv9+LngIO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDJFQS9GNTMzMkQ3RTg0 QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9jeUpVMjlZWThZaHRUZmtnRTVPXzM0dWVB ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N5SlUyOVlZOFlodFRma2dFNU9fMzR1ZUFnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDJFQS9GNTMzMkQ3RTg0QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9jeUpVMjlZWThZ aHRUZmtnRTVPXzM0dWVBZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfMIrqxqaVLa7gA/bZ81L2MSq/2uEw2mRtjsYl1gJWYwzziZQ21eht iWUVe11K0hA44tQRg3hwqDr/F5/9cwcaV6jWml4pXCaOMuGm6IQim1eY1zncWaoE mkth1yU4qAyzdVR6JHk00tDG16A0tP/eDldBr7h5XklUIoYSFsI7F8bX9HCoT6s7 tP+ab5rWIKu1FpELjffNx4LN+3Lbk99fGYgZ/0vnmZ2crl6siOIpfgSJzBTwHJjx Ceekj5BZ4DRfOjwnqKgxY5PAbdWnPmuJg5kwftPhqa2IZp2DVpe3WQ4LEd6PSB+4 IUNa9nJVZJo4fLgvDTu8CAl+uqMlqIdK -----END CERTIFICATE-----Generated at Sat Dec 27 08:10:26 2025 by rpki-client