This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft File: ny5XiO95WFurdhmHfTlierLl1Rk.mft (raw, json) Hash identifier: /FnOT9ukxi6bTCLpREYgxY6eN5H+WX1HDYoiQBWNSRs= Subject key identifier: 5A:75:1B:2A:E1:93:9E:F2:D4:C7:51:E7:E9:A9:2E:4C:43:99:F9:DF Authority key identifier: 9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19 Certificate issuer: /CN=A913A7A6/serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519 Certificate serial: 0A84 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft Manifest number: 0A7C Signing time: Tue 30 Dec 2025 19:04:50 +0000 Manifest this update: Tue 30 Dec 2025 19:04:50 +0000 Manifest next update: Tue 06 Jan 2026 19:04:50 +0000 Files and hashes: 1: ny5XiO95WFurdhmHfTlierLl1Rk.crl (hash: piy5ibRP74+zMNvKCowTuJRxd08vvHB7ingERr4ZMhA=) 2: 4DAFC184ADC011ED897A4050C4F9AE02.roa (hash: Za3bISDsY9jXSiAUyE8K8a9BeVgovmO/YNcIsWrBq60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 19:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2692 (0xa84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A7A6, serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519 Validity Not Before: Dec 30 19:04:50 2025 GMT Not After : Jan 6 19:04:50 2026 GMT Subject: CN=69542252-d8a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9b:87:02:bd:31:9e:5c:10:64:19:aa:60:8a: 54:e7:28:82:42:bc:29:0a:07:8c:9e:96:af:77:de: d1:7a:b8:07:f3:a9:39:5d:3c:85:bb:43:d7:17:c2: df:31:58:c7:66:69:9a:ef:36:b9:39:6b:ae:49:16: be:dd:7f:85:09:1e:f4:d2:99:10:c4:0b:ea:bb:a7: 4c:f2:29:5c:4d:52:f2:1a:1f:02:da:ad:d1:9f:b2: a2:e8:d8:6f:54:dd:85:e2:9e:61:08:a4:60:64:7f: 5d:5c:ad:22:58:09:31:9a:e6:b6:c1:50:81:98:fb: bc:db:e9:f6:f9:9b:78:e8:17:9e:48:e3:d1:b4:b6: 27:dc:68:de:cc:3c:7b:e5:a2:86:9f:9b:fa:67:97: 82:56:d4:56:62:b9:2e:9a:6b:64:e9:74:5a:df:3f: 75:ad:d8:2f:60:67:d7:9e:65:4e:f7:67:0b:97:2d: fd:89:8e:e3:d8:82:88:18:30:8e:12:7f:ce:3a:42: 88:2e:06:a7:2c:8e:56:d1:2c:55:67:8d:03:3d:5e: 33:fd:63:58:74:e0:77:73:7e:6a:63:c4:2e:fd:7b: e1:11:30:a0:7b:83:e9:7c:99:6e:8d:03:e9:ab:7f: 32:6f:3c:c0:d5:47:ff:94:66:23:c2:60:d0:9a:71: 86:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:75:1B:2A:E1:93:9E:F2:D4:C7:51:E7:E9:A9:2E:4C:43:99:F9:DF X509v3 Authority Key Identifier: keyid:9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e3:a3:38:90:81:0d:44:d8:22:5e:13:54:0b:95:21:8c:7f: b3:3c:8e:66:a6:c5:7b:5f:17:db:36:71:79:a4:48:e4:d6:e0: 9a:55:10:05:94:14:54:d5:d8:08:43:91:fa:46:61:0f:af:39: 98:0b:b5:43:04:d5:56:67:bb:9a:6e:f8:14:5e:f4:0c:ac:23: ca:b7:ec:14:d0:d8:57:da:64:5a:4e:74:91:6f:74:61:84:aa: 38:61:d0:bd:2e:64:c2:8f:c0:1c:0c:2a:4b:2b:b9:0a:0a:21: 11:2b:98:55:00:6c:44:a2:e6:8e:19:f3:61:f2:7a:fc:bf:f8: aa:4d:85:44:26:1a:24:b8:2e:5d:62:de:e4:60:95:88:82:e5: e4:2b:a9:c8:65:b9:7f:f4:4b:78:75:c1:92:f1:94:c4:48:d2: de:85:38:4e:f6:58:e9:f4:ca:97:70:e4:68:d5:88:d4:f9:e5: da:03:3b:a9:9e:9f:13:35:be:36:aa:1b:a6:a3:f9:73:b6:98: 76:01:34:03:be:93:8e:89:74:84:48:0d:3f:78:cb:ca:6e:ba: 1a:8f:48:d8:e3:ea:a9:51:dc:f1:74:69:de:67:f9:0f:3d:6f: 84:fb:ec:6f:9b:50:74:a0:6b:69:cd:31:b3:89:99:01:93:1d: f6:19:53:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E3QTYxMTAvBgNVBAUTKDlGMkU1Nzg4RUY3OTU4NUJBQjc2MTk4NzdEMzk2MjdB QjJFNUQ1MTkwHhcNMjUxMjMwMTkwNDUwWhcNMjYwMTA2MTkwNDUwWjAYMRYwFAYD VQQDDA02OTU0MjI1Mi1kOGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlZuHAr0xnlwQZBmqYIpU5yiCQrwpCgeMnpavd97RergH86k5XTyFu0PXF8Lf MVjHZmma7za5OWuuSRa+3X+FCR700pkQxAvqu6dM8ilcTVLyGh8C2q3Rn7Ki6Nhv VN2F4p5hCKRgZH9dXK0iWAkxmua2wVCBmPu82+n2+Zt46BeeSOPRtLYn3GjezDx7 5aKGn5v6Z5eCVtRWYrkummtk6XRa3z91rdgvYGfXnmVO92cLly39iY7j2IKIGDCO En/OOkKILganLI5W0SxVZ40DPV4z/WNYdOB3c35qY8Qu/XvhETCge4PpfJlujQPp q38ybzzA1Uf/lGYjwmDQmnGG4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFp1Gyrh k57y1MdR5+mpLkxDmfnfMB8GA1UdIwQYMBaAFJ8uV4jveVhbq3YZh305Ynqy5dUZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTdBNi80NTdBOEU4Mjcz QjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9ueTVYaU85NVdGdXJkaG1IZlRsaWVyTGwx UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL255NVhpTzk1V0Z1cmRobUhmVGxpZXJMbDFSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTdBNi80NTdBOEU4MjczQjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9ueTVYaU85NVdG dXJkaG1IZlRsaWVyTGwxUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa46M4kIENRNgiXhNUC5UhjH+zPI5mpsV7XxfbNnF5pEjk1uCaVRAF lBRU1dgIQ5H6RmEPrzmYC7VDBNVWZ7uabvgUXvQMrCPKt+wU0NhX2mRaTnSRb3Rh hKo4YdC9LmTCj8AcDCpLK7kKCiERK5hVAGxEouaOGfNh8nr8v/iqTYVEJhokuC5d Yt7kYJWIguXkK6nIZbl/9Et4dcGS8ZTESNLehThO9ljp9MqXcORo1YjU+eXaAzup np8TNb42qhumo/lztph2ATQDvpOOiXSESA0/eMvKbroaj0jY4+qpUdzxdGneZ/kP PW+E++xvm1B0oGtpzTGziZkBkx32GVO+ -----END CERTIFICATE-----Generated at Wed Dec 31 09:07:22 2025 by rpki-client