This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft File: CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft (raw, json) Hash identifier: sa7uDdVlKZ0LyyYF2QwoSQ4p9GK5MPAGAZOW2Rla1BU= Subject key identifier: F9:69:E3:49:B6:A9:92:25:F9:FC:CB:5C:8A:82:43:EC:23:C7:D7:FA Authority key identifier: 09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77 Certificate issuer: /CN=A913806E/serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477 Certificate serial: 081C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft Manifest number: 0815 Signing time: Tue 30 Dec 2025 20:19:00 +0000 Manifest this update: Tue 30 Dec 2025 20:19:00 +0000 Manifest next update: Tue 06 Jan 2026 20:19:00 +0000 Files and hashes: 1: CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl (hash: l4WYf/lSI3mc6SYvCTfOgswvVfFExcwTQiP62oZ9g34=) 2: 1AC2369A010911ECB732340DC4F9AE02.roa (hash: FLJlO0/U5xnVZ/RuP3SLCUdb/l/zTCs0DDA6x0gKds8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 20:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2076 (0x81c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913806E, serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477 Validity Not Before: Dec 30 20:19:00 2025 GMT Not After : Jan 6 20:19:00 2026 GMT Subject: CN=695433b4-d31a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:24:5a:49:e2:4c:e6:25:80:2c:91:68:2e:f3: 11:70:c9:6e:4d:e0:0b:23:08:90:27:2a:10:7c:38: 32:b8:76:75:3e:c3:08:ac:95:68:54:07:e5:51:42: e4:c9:ba:d4:10:51:57:03:84:fa:17:4a:e0:5b:5e: 0b:27:7e:de:50:fc:af:27:d8:ea:c3:96:87:35:96: 70:43:60:b4:cc:c3:ee:90:02:d3:bc:0f:af:17:dc: 79:93:7f:fe:49:59:3b:c1:4c:2b:f6:dc:19:c0:6d: d1:f1:26:f1:db:7e:1a:cc:fc:f1:08:95:01:4d:3a: e8:a5:22:63:bb:51:26:f4:3a:0e:1f:d5:ad:6b:f0: b5:b3:e3:bd:81:56:85:87:ca:27:c5:1b:c9:aa:a2: 79:cd:01:0e:63:cd:2c:a4:87:20:fe:6b:a9:94:60: 36:a9:8b:3a:e7:0f:71:38:03:7e:77:34:2a:32:d2: d8:53:66:19:ca:88:04:d7:6a:04:06:07:b8:92:92: 6d:37:40:fc:c1:77:ec:4d:09:80:88:6a:53:1a:16: e9:e9:64:88:5b:15:39:14:37:3b:ad:de:c9:b4:b7: 27:f4:68:e0:9c:74:64:62:72:a8:7f:76:b6:8c:30: c7:4f:11:c4:e5:03:b2:e1:1b:14:35:23:da:a6:63: 5e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:69:E3:49:B6:A9:92:25:F9:FC:CB:5C:8A:82:43:EC:23:C7:D7:FA X509v3 Authority Key Identifier: keyid:09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:08:59:c1:01:30:7e:17:41:88:c3:2d:dc:97:3b:be:1a:6e: 53:95:75:5b:d2:45:53:41:4a:67:5b:0d:d2:8b:d7:9e:22:cf: 18:9d:78:c6:8d:3a:94:a4:d1:36:92:61:e8:dd:dc:9b:a3:5d: 44:67:28:2d:b3:d9:34:21:1a:b5:12:f5:89:7d:83:a4:0c:76: 3f:94:2a:cb:a6:12:47:86:59:5d:e6:8a:94:e5:1b:d0:bb:c0: 03:41:75:9a:75:e0:21:f6:35:08:64:db:fd:bb:71:fe:05:00: dd:de:08:df:cb:6a:42:6f:e5:47:7a:d7:5d:55:ce:37:e3:79: ae:e0:b7:0d:9e:2f:bd:5b:be:8c:4a:df:0d:7e:1a:bb:01:1b: b8:86:81:8e:c2:48:22:b8:30:80:c4:fd:3e:d6:c4:86:6a:c8: 4a:0f:57:d3:01:dc:14:17:dc:10:e2:79:8b:42:6c:90:f3:de: 87:d6:4f:ab:2a:32:57:05:42:39:61:75:c0:0e:76:cf:f0:d2: 58:3c:00:4b:3a:27:71:15:39:57:9e:f6:c9:11:a2:d5:07:39: 77:14:f2:8b:b3:f2:17:bc:ea:04:69:ad:b1:04:7f:8e:f2:74: 05:dd:f0:f3:67:a2:75:34:de:d4:a7:e6:66:75:cb:f9:18:f7: 4d:a9:1a:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgwNkUxMTAvBgNVBAUTKDA5ODlFMTkxNTU4QkJDRTQ2RkFCN0I1M0U0QTczNUVF QURBOEQ0NzcwHhcNMjUxMjMwMjAxOTAwWhcNMjYwMTA2MjAxOTAwWjAYMRYwFAYD VQQDDA02OTU0MzNiNC1kMzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCRaSeJM5iWALJFoLvMRcMluTeALIwiQJyoQfDgyuHZ1PsMIrJVoVAflUULk ybrUEFFXA4T6F0rgW14LJ37eUPyvJ9jqw5aHNZZwQ2C0zMPukALTvA+vF9x5k3/+ SVk7wUwr9twZwG3R8Sbx234azPzxCJUBTTropSJju1Em9DoOH9Wta/C1s+O9gVaF h8onxRvJqqJ5zQEOY80spIcg/muplGA2qYs65w9xOAN+dzQqMtLYU2YZyogE12oE Bge4kpJtN0D8wXfsTQmAiGpTGhbp6WSIWxU5FDc7rd7JtLcn9GjgnHRkYnKof3a2 jDDHTxHE5QOy4RsUNSPapmNeWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlp40m2 qZIl+fzLXIqCQ+wjx9f6MB8GA1UdIwQYMBaAFAmJ4ZFVi7zkb6t7U+SnNe6tqNR3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODA2RS85REJGQUIzODAy MkYxMUVCOTMzMzE4M0NDNEY5QUUwMi9DWW5oa1ZXTHZPUnZxM3RUNUtjMTdxMm8x SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NZbmhrVldMdk9SdnEzdFQ1S2MxN3EybzFIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODA2RS85REJGQUIzODAyMkYxMUVCOTMzMzE4M0NDNEY5QUUwMi9DWW5oa1ZXTHZP UnZxM3RUNUtjMTdxMm8xSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDCFnBATB+F0GIwy3clzu+Gm5TlXVb0kVTQUpnWw3Si9eeIs8YnXjG jTqUpNE2kmHo3dybo11EZygts9k0IRq1EvWJfYOkDHY/lCrLphJHhlld5oqU5RvQ u8ADQXWadeAh9jUIZNv9u3H+BQDd3gjfy2pCb+VHetddVc4343mu4LcNni+9W76M St8Nfhq7ARu4hoGOwkgiuDCAxP0+1sSGashKD1fTAdwUF9wQ4nmLQmyQ896H1k+r KjJXBUI5YXXADnbP8NJYPABLOidxFTlXnvbJEaLVBzl3FPKLs/IXvOoEaa2xBH+O 8nQF3fDzZ6J1NN7Up+Zmdcv5GPdNqRoD -----END CERTIFICATE-----Generated at Wed Dec 31 02:02:23 2025 by rpki-client