This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft File: yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft (raw, json) Hash identifier: qTfuMmSVHXUPLhqn9eVWF+/rGWMeo3tc3TzalNlka6I= Subject key identifier: 30:0F:E6:A8:45:BF:0A:93:3A:6B:FA:6C:B7:7F:ED:45:C2:A0:88:4B Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 Certificate issuer: /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Certificate serial: 07D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft Manifest number: 07C5 Signing time: Thu 18 Dec 2025 20:50:18 +0000 Manifest this update: Thu 18 Dec 2025 20:50:18 +0000 Manifest next update: Thu 25 Dec 2025 20:50:18 +0000 Files and hashes: 1: yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl (hash: lsikQ5jPmQHKSnKgoHi5+v408+WQy9n2JZy2aUeEtnM=) 2: 5C95BDC0C12E11EEA47CBB59C4F9AE02.roa (hash: pfFLA6S00NJF9wnUh3eyO3xPwlEBQIG4Qg4AiW8MLVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2008 (0x7d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912438F, serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Validity Not Before: Dec 18 20:50:18 2025 GMT Not After : Dec 25 20:50:18 2025 GMT Subject: CN=6944690a-3e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e0:4e:e0:33:dd:d9:f4:91:b0:25:97:e5:0d: 5c:09:17:a6:78:b3:3b:33:0e:56:40:82:6c:b8:5b: 74:f1:62:76:fd:11:d8:f5:9d:26:56:37:5e:da:d6: 61:a6:15:3d:7b:c0:2a:52:3d:80:61:d7:74:16:af: 4a:63:81:3f:5a:92:45:1f:62:a4:05:30:fc:1b:a2: ff:cc:17:5f:8c:0e:e9:17:16:d2:5e:c6:8c:a2:82: a4:b3:54:9b:7d:94:01:8c:e3:95:94:6c:c5:5e:f4: bb:b7:0d:d8:80:88:79:8c:e4:94:80:42:2b:86:36: be:2f:85:05:c1:f5:ad:dc:3a:54:f0:f8:25:57:8c: 7d:0d:8c:3c:4e:68:5e:28:2a:5d:f4:d4:d0:4f:e5: 19:e6:ce:5d:f5:1f:5c:95:71:ee:8b:cb:80:f2:20: 3d:15:5a:d3:54:f2:c8:65:15:7b:23:f1:7d:3b:19: f9:85:52:83:ff:f0:2a:6b:ef:ae:a2:f3:62:75:2b: cc:55:67:b7:80:65:01:11:82:94:5e:c8:61:cf:d3: 2b:47:24:06:cd:b8:49:cb:b6:0c:eb:7e:11:2a:90: 0a:8b:33:86:0e:bf:39:68:64:e1:a5:a4:aa:9a:c3: 57:10:4a:5b:a5:be:db:a6:cf:c3:ca:7e:22:b6:f3: 91:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:0F:E6:A8:45:BF:0A:93:3A:6B:FA:6C:B7:7F:ED:45:C2:A0:88:4B X509v3 Authority Key Identifier: keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:07:02:91:3e:2f:bf:e6:10:ec:4d:85:50:2e:95:bc:5b:fd: 77:d3:17:17:4e:7b:a4:c1:a8:33:63:38:e9:0c:b2:6a:e5:5a: e2:14:dd:57:df:82:92:05:4a:99:28:34:04:a9:01:e8:25:19: a7:ee:1b:22:a0:14:6e:6b:a4:05:a4:5e:b8:6d:7b:5d:d4:a4: fe:a3:8c:8e:14:ea:d9:b9:df:22:fb:7d:dd:f9:b5:79:ca:ca: b4:90:0f:3a:83:c7:e3:b8:59:85:f5:cb:cd:79:57:fe:d4:2e: 93:c2:06:42:a4:9e:4c:08:74:a4:81:45:cd:d1:bd:ff:dd:2a: dc:f9:0f:d6:32:f3:6d:6f:c3:33:ba:50:ca:93:13:9e:26:7d: 7c:c7:f5:76:15:d4:b5:46:96:5a:20:3b:b7:45:b6:c6:37:45: e7:53:46:c0:91:f7:42:39:43:54:a0:50:36:01:0b:5a:a1:ac: d9:6a:63:b3:42:1f:90:43:4f:bc:4b:0f:5c:08:d7:d8:39:7a: 6b:d4:cb:dc:5e:ac:29:29:1e:a2:ad:ae:82:e7:41:8e:6f:12: 43:ca:e7:83:4b:b7:93:76:08:97:65:c1:70:a2:1d:66:bf:3c: e5:93:c5:80:7a:2a:8b:bc:da:a1:28:5e:da:80:50:40:95:9e: 70:00:fa:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzOEYxMTAvBgNVBAUTKEM4ODhEMUVFRTA0QkVGM0U4MTVGMDlEREZBMTkxOTNE Njk5QjRGNDcwHhcNMjUxMjE4MjA1MDE4WhcNMjUxMjI1MjA1MDE4WjAYMRYwFAYD VQQDDA02OTQ0NjkwYS0zZTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzeBO4DPd2fSRsCWX5Q1cCRemeLM7Mw5WQIJsuFt08WJ2/RHY9Z0mVjde2tZh phU9e8AqUj2AYdd0Fq9KY4E/WpJFH2KkBTD8G6L/zBdfjA7pFxbSXsaMooKks1Sb fZQBjOOVlGzFXvS7tw3YgIh5jOSUgEIrhja+L4UFwfWt3DpU8PglV4x9DYw8Tmhe KCpd9NTQT+UZ5s5d9R9clXHui8uA8iA9FVrTVPLIZRV7I/F9Oxn5hVKD//Aqa++u ovNidSvMVWe3gGUBEYKUXshhz9MrRyQGzbhJy7YM634RKpAKizOGDr85aGThpaSq msNXEEpbpb7bps/Dyn4itvORbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAP5qhF vwqTOmv6bLd/7UXCoIhLMB8GA1UdIwQYMBaAFMiI0e7gS+8+gV8J3foZGT1pm09H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDM4Ri9DNzU5MEJENjI1 QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6NkJYd25kLWhrWlBXbWJU MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJalI3dUJMN3o2Qlh3bmQtaGtaUFdtYlQwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDM4Ri9DNzU5MEJENjI1QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6 NkJYd25kLWhrWlBXbWJUMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWBwKRPi+/5hDsTYVQLpW8W/130xcXTnukwagzYzjpDLJq5VriFN1X 34KSBUqZKDQEqQHoJRmn7hsioBRua6QFpF64bXtd1KT+o4yOFOrZud8i+33d+bV5 ysq0kA86g8fjuFmF9cvNeVf+1C6TwgZCpJ5MCHSkgUXN0b3/3Src+Q/WMvNtb8Mz ulDKkxOeJn18x/V2FdS1RpZaIDu3RbbGN0XnU0bAkfdCOUNUoFA2AQtaoazZamOz Qh+QQ0+8Sw9cCNfYOXpr1MvcXqwpKR6ira6C50GObxJDyueDS7eTdgiXZcFwoh1m vzzlk8WAeiqLvNqhKF7agFBAlZ5wAPqd -----END CERTIFICATE-----Generated at Fri Dec 19 18:57:39 2025 by rpki-client