This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft File: YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft (raw, json) Hash identifier: vOhtySt9X6FXpWq0HZpOtd52s+MfFItwSNVVw4CVbQI= Subject key identifier: E7:FB:53:4E:C3:95:C0:84:83:28:3B:00:9D:FE:6B:CD:6C:E3:B3:22 Authority key identifier: 60:AB:3C:FF:AB:88:A5:13:42:B8:16:F0:59:01:9F:07:3E:95:00:AA Certificate issuer: /CN=A913A839/serialNumber=60AB3CFFAB88A51342B816F059019F073E9500AA Certificate serial: 0AA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft Manifest number: 0A9F Signing time: Sun 28 Dec 2025 19:00:34 +0000 Manifest this update: Sun 28 Dec 2025 19:00:33 +0000 Manifest next update: Sun 04 Jan 2026 19:00:33 +0000 Files and hashes: 1: YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl (hash: RvHISYcYsg3GfcpCxyEA7lxXnBnOCEzC1fxpq5Oyp5c=) 2: 0DCB1BDC6C3111EA8F4E9B70C4F9AE02.roa (hash: oNJE5bj6Ow/7pljSaqdBQ3poJgn7jCyxhJR6Se/yVrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 19:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2726 (0xaa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A839, serialNumber=60AB3CFFAB88A51342B816F059019F073E9500AA Validity Not Before: Dec 28 19:00:33 2025 GMT Not After : Jan 4 19:00:33 2026 GMT Subject: CN=69517e52-8947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:58:a9:2f:e4:83:fe:97:82:7c:12:60:03:55: db:fb:3c:ae:fd:28:a1:e0:86:54:7e:13:c7:99:76: 45:cb:6b:42:b6:7b:d5:86:6b:bb:fe:3b:62:d6:62: 39:73:6e:02:50:c5:16:2d:c4:c1:52:b0:39:5f:18: 3f:64:3b:26:66:ee:74:7b:9e:a4:a7:7c:78:d9:83: 49:ab:7d:9c:61:43:fc:46:60:31:d1:6e:44:53:02: ca:d3:82:0b:65:7d:a8:80:f7:30:d1:3a:03:e7:5a: 34:19:73:05:37:69:3b:80:f3:55:b1:47:0d:14:bb: 5e:ca:08:d9:ba:1c:a2:16:03:78:ae:4a:02:2d:97: 8c:fb:10:a8:21:13:87:ba:d0:6e:ae:89:35:68:ee: ff:91:ff:96:05:9d:a5:98:a2:ed:14:e8:fa:a6:50: c3:53:b8:d9:6b:3e:8d:fe:f1:bf:36:70:8b:e9:e9: 50:51:8b:52:c7:d0:f7:94:8c:fe:93:6e:61:1d:27: e5:36:69:86:6c:43:de:2f:09:70:b8:a4:3e:01:5c: 33:1f:7a:82:1d:bc:a0:c5:4c:4f:e4:fa:a7:65:ec: 7b:69:b1:79:77:42:a9:f4:c7:59:60:52:9a:05:0e: 8c:e6:31:c3:39:ce:80:2a:02:67:ee:a1:14:db:d2: 8e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FB:53:4E:C3:95:C0:84:83:28:3B:00:9D:FE:6B:CD:6C:E3:B3:22 X509v3 Authority Key Identifier: keyid:60:AB:3C:FF:AB:88:A5:13:42:B8:16:F0:59:01:9F:07:3E:95:00:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:65:09:ac:58:f1:79:03:4d:6d:b7:f9:02:e2:10:85:0a:60: 60:b4:22:9b:45:d3:d3:2d:01:70:a0:17:3b:87:74:d2:c6:75: 79:67:50:ca:d2:d9:2b:f2:73:75:02:19:b3:87:67:9b:e2:e5: b2:e6:0a:3f:e5:94:94:73:9f:4d:a3:52:3c:59:00:8e:70:ff: e8:46:fb:5e:e7:d6:91:fc:0f:e0:ba:70:d5:d2:68:56:6b:f7: d4:34:73:bf:0d:91:0f:a3:b7:1e:ce:46:75:91:f8:84:1f:97: 6c:94:75:f2:c7:95:a0:03:35:5a:d9:c5:3d:31:56:56:06:32: 32:3c:97:de:6e:26:13:61:e9:40:7d:22:bd:1b:25:23:a8:3f: c8:1c:8f:9f:81:04:ba:60:e2:df:7d:43:70:db:a2:81:07:2b: 29:56:86:ee:35:f6:1a:02:0a:de:9a:e1:06:59:ac:dc:a1:6b: 7a:40:c1:41:e3:4e:c3:bb:8f:6c:40:16:0f:f6:9b:bf:f7:58: 1a:db:16:68:90:29:72:70:37:da:c9:76:df:0d:3e:72:a2:93: 56:44:6f:ed:23:67:31:1a:0c:dc:4c:bf:ad:a8:2d:1a:7a:0c: 1c:db:64:b3:ed:5c:83:65:df:d0:f8:39:12:9a:ef:ae:2f:0d: 16:6c:a4:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E4MzkxMTAvBgNVBAUTKDYwQUIzQ0ZGQUI4OEE1MTM0MkI4MTZGMDU5MDE5RjA3 M0U5NTAwQUEwHhcNMjUxMjI4MTkwMDMzWhcNMjYwMTA0MTkwMDMzWjAYMRYwFAYD VQQDDA02OTUxN2U1Mi04OTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlipL+SD/peCfBJgA1Xb+zyu/Sih4IZUfhPHmXZFy2tCtnvVhmu7/jti1mI5 c24CUMUWLcTBUrA5Xxg/ZDsmZu50e56kp3x42YNJq32cYUP8RmAx0W5EUwLK04IL ZX2ogPcw0ToD51o0GXMFN2k7gPNVsUcNFLteygjZuhyiFgN4rkoCLZeM+xCoIROH utBurok1aO7/kf+WBZ2lmKLtFOj6plDDU7jZaz6N/vG/NnCL6elQUYtSx9D3lIz+ k25hHSflNmmGbEPeLwlwuKQ+AVwzH3qCHbygxUxP5PqnZex7abF5d0Kp9MdZYFKa BQ6M5jHDOc6AKgJn7qEU29KOGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOf7U07D lcCEgyg7AJ3+a81s47MiMB8GA1UdIwQYMBaAFGCrPP+riKUTQrgW8FkBnwc+lQCq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTgzOS9DMEUwM0NGNDZD MkYxMUVBOENFQzk0NkVDNEY5QUUwMi9ZS3M4XzZ1SXBSTkN1QmJ3V1FHZkJ6NlZB S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lLczhfNnVJcFJOQ3VCYndXUUdmQno2VkFLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTgzOS9DMEUwM0NGNDZDMkYxMUVBOENFQzk0NkVDNEY5QUUwMi9ZS3M4XzZ1SXBS TkN1QmJ3V1FHZkJ6NlZBS28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuZQmsWPF5A01tt/kC4hCFCmBgtCKbRdPTLQFwoBc7h3TSxnV5Z1DK 0tkr8nN1Ahmzh2eb4uWy5go/5ZSUc59No1I8WQCOcP/oRvte59aR/A/gunDV0mhW a/fUNHO/DZEPo7cezkZ1kfiEH5dslHXyx5WgAzVa2cU9MVZWBjIyPJfebiYTYelA fSK9GyUjqD/IHI+fgQS6YOLffUNw26KBByspVobuNfYaAgremuEGWazcoWt6QMFB 407Du49sQBYP9pu/91ga2xZokClycDfayXbfDT5yopNWRG/tI2cxGgzcTL+tqC0a egwc22Sz7VyDZd/Q+DkSmu+uLw0WbKQg -----END CERTIFICATE-----Generated at Sun Dec 28 22:16:40 2025 by rpki-client