This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft File: ny5XiO95WFurdhmHfTlierLl1Rk.mft (raw, json) Hash identifier: wIy6hVb3SAm5jWtmHrl3Gkw0uSCpKILh8BQdvLdRjgI= Subject key identifier: 0F:CD:59:C0:98:04:38:1A:ED:EE:50:C1:0A:8D:99:B6:75:D2:BF:9D Authority key identifier: 9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19 Certificate issuer: /CN=A913A7A6/serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519 Certificate serial: 0A7F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft Manifest number: 0A77 Signing time: Sat 20 Dec 2025 19:05:29 +0000 Manifest this update: Sat 20 Dec 2025 19:05:29 +0000 Manifest next update: Sat 27 Dec 2025 19:05:29 +0000 Files and hashes: 1: ny5XiO95WFurdhmHfTlierLl1Rk.crl (hash: pbn08lhYL9TxyqV+6ObiUTycAZzJapd9hXOmORh3cxU=) 2: 4DAFC184ADC011ED897A4050C4F9AE02.roa (hash: Za3bISDsY9jXSiAUyE8K8a9BeVgovmO/YNcIsWrBq60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:05:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2687 (0xa7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A7A6, serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519 Validity Not Before: Dec 20 19:05:29 2025 GMT Not After : Dec 27 19:05:29 2025 GMT Subject: CN=6946f379-8388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a6:2f:47:89:14:74:63:f9:ed:03:08:9f:a3: f5:34:45:ef:21:aa:6e:ae:78:f6:fb:d1:28:1d:e7: a7:63:79:5b:4e:93:70:b4:35:ef:e0:d2:0d:43:74: 7a:6f:11:30:05:c2:3f:49:35:69:b5:9c:a1:ed:17: fb:6b:b2:a7:fe:b6:e0:1d:36:62:54:a2:5d:aa:fc: e0:ab:ee:88:5a:c7:d3:b9:0d:5b:92:d9:73:e8:4f: 4f:1c:13:4a:92:6e:3e:79:48:f2:db:54:9d:cc:f9: f9:d0:62:3b:6c:31:61:51:97:0d:17:3a:87:0b:20: 74:50:08:52:a9:28:97:5b:da:9d:36:47:7d:cc:2a: 74:4c:76:27:76:04:0e:0c:d6:6d:ac:45:e1:fa:d1: 4c:e0:4e:f0:e1:4e:1b:68:79:ea:79:98:1d:2b:5e: ef:f2:8d:6f:49:0c:4e:db:50:73:e2:e8:b1:a8:ea: 7b:5f:3b:49:89:92:fe:60:f6:e7:22:3c:ce:c2:9e: f0:96:f5:ac:ab:e0:b2:61:bb:e3:42:df:80:79:b8: 4b:ad:4b:3b:44:95:5d:ff:9f:46:c3:b9:cf:26:4c: 14:74:fc:4b:d2:97:06:f9:71:cb:3a:74:9b:0c:6f: cb:b4:b9:db:39:53:fc:46:c0:ee:ef:7b:e5:7d:21: b2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CD:59:C0:98:04:38:1A:ED:EE:50:C1:0A:8D:99:B6:75:D2:BF:9D X509v3 Authority Key Identifier: keyid:9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:49:e3:49:e5:06:08:46:ff:46:f2:46:05:cb:35:ef:c6:2a: e1:b6:7e:46:62:ad:c8:48:b7:52:f4:af:bd:64:97:d2:af:43: d3:ed:09:1a:93:d0:a8:4f:9d:b6:9c:f3:e1:3a:57:ba:cc:cd: 8d:26:45:df:59:fd:aa:f8:6b:4f:ff:42:0e:c9:8a:66:b0:86: f8:c5:ab:c1:44:82:c1:cc:42:9c:e4:08:7b:68:d6:51:0f:a1: ae:8f:17:bd:c1:18:79:77:6b:ca:40:ba:e3:b9:7d:98:50:6a: db:12:d9:a3:3b:cd:cb:1d:72:c7:4d:24:73:fd:67:e9:9f:37: d7:5a:c5:b1:7d:06:74:a1:01:57:18:41:da:6a:48:39:d2:3c: 95:0a:ff:d1:2d:0d:e7:84:38:e1:45:ec:3c:72:dc:24:e2:9d: ad:6c:e2:8f:9f:b4:28:be:92:99:ad:4b:9b:39:51:3c:db:97: c5:c5:ba:7f:0d:26:87:77:34:46:4b:11:21:35:23:06:7b:48: de:6e:45:3a:15:e9:09:65:69:92:11:4a:d3:f0:22:26:97:a6: 9c:0c:61:e8:f1:42:10:dd:51:25:39:c4:6d:f5:9c:f1:08:6c: 4e:3e:74:66:84:3a:75:f5:ee:9a:eb:38:6b:12:95:23:74:52: 2d:68:1a:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E3QTYxMTAvBgNVBAUTKDlGMkU1Nzg4RUY3OTU4NUJBQjc2MTk4NzdEMzk2MjdB QjJFNUQ1MTkwHhcNMjUxMjIwMTkwNTI5WhcNMjUxMjI3MTkwNTI5WjAYMRYwFAYD VQQDDA02OTQ2ZjM3OS04Mzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6YvR4kUdGP57QMIn6P1NEXvIapurnj2+9EoHeenY3lbTpNwtDXv4NINQ3R6 bxEwBcI/STVptZyh7Rf7a7Kn/rbgHTZiVKJdqvzgq+6IWsfTuQ1bktlz6E9PHBNK km4+eUjy21SdzPn50GI7bDFhUZcNFzqHCyB0UAhSqSiXW9qdNkd9zCp0THYndgQO DNZtrEXh+tFM4E7w4U4baHnqeZgdK17v8o1vSQxO21Bz4uixqOp7XztJiZL+YPbn IjzOwp7wlvWsq+CyYbvjQt+AebhLrUs7RJVd/59Gw7nPJkwUdPxL0pcG+XHLOnSb DG/LtLnbOVP8RsDu73vlfSGyZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/NWcCY BDga7e5QwQqNmbZ10r+dMB8GA1UdIwQYMBaAFJ8uV4jveVhbq3YZh305Ynqy5dUZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTdBNi80NTdBOEU4Mjcz QjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9ueTVYaU85NVdGdXJkaG1IZlRsaWVyTGwx UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL255NVhpTzk1V0Z1cmRobUhmVGxpZXJMbDFSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTdBNi80NTdBOEU4MjczQjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9ueTVYaU85NVdG dXJkaG1IZlRsaWVyTGwxUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUSeNJ5QYIRv9G8kYFyzXvxirhtn5GYq3ISLdS9K+9ZJfSr0PT7Qka k9CoT522nPPhOle6zM2NJkXfWf2q+GtP/0IOyYpmsIb4xavBRILBzEKc5Ah7aNZR D6Gujxe9wRh5d2vKQLrjuX2YUGrbEtmjO83LHXLHTSRz/WfpnzfXWsWxfQZ0oQFX GEHaakg50jyVCv/RLQ3nhDjhRew8ctwk4p2tbOKPn7QovpKZrUubOVE825fFxbp/ DSaHdzRGSxEhNSMGe0jebkU6FekJZWmSEUrT8CIml6acDGHo8UIQ3VElOcRt9Zzx CGxOPnRmhDp19e6a6zhrEpUjdFItaBow -----END CERTIFICATE-----Generated at Mon Dec 22 00:13:45 2025 by rpki-client