This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft File: Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft (raw, json) Hash identifier: peWUh4s4fjPjORK7XptKV1f/FO/0hccvSVWm1k3ZEeQ= Subject key identifier: 2B:E3:E6:79:44:6B:93:95:EE:55:40:98:4E:B9:18:CB:0D:E6:4D:75 Authority key identifier: 63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00 Certificate issuer: /CN=A913EE46/serialNumber=63515B364113848FA554D2842F5841877CF6AF00 Certificate serial: 02D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft Manifest number: 02D1 Signing time: Fri 19 Dec 2025 00:35:33 +0000 Manifest this update: Fri 19 Dec 2025 00:35:33 +0000 Manifest next update: Fri 26 Dec 2025 00:35:33 +0000 Files and hashes: 1: Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl (hash: rMZOE1DN5WhoEOUGTUeE4GidmGaiACWHi6t6vn0Auho=) 2: 9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa (hash: JWAO5OM1htkOqA8zsEncfXnArds8hOb3Z7zkeDNiSm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 726 (0x2d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EE46, serialNumber=63515B364113848FA554D2842F5841877CF6AF00 Validity Not Before: Dec 19 00:35:33 2025 GMT Not After : Dec 26 00:35:33 2025 GMT Subject: CN=69449dd5-2ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5b:4e:ed:da:27:ea:5f:1e:d6:73:89:ee:31: 1c:73:55:5a:b4:89:62:93:73:04:13:09:39:a2:51: 84:1e:92:c2:ab:ec:0a:46:79:16:53:ba:4c:96:7f: 4b:ec:3e:64:75:00:73:79:b3:c9:98:ea:fc:d5:76: dd:c9:e4:c7:8c:cd:82:2f:5f:78:9e:68:ca:9d:58: c9:1d:72:c1:0d:7d:d5:b2:7d:1c:45:fd:74:50:a8: d1:69:e8:7c:4e:c6:3c:ee:f2:3b:5d:1b:a4:3e:06: 15:3c:57:87:6a:ee:f8:8f:ea:fa:88:5d:11:e4:c0: c9:3c:d3:9a:1b:a0:ee:50:a5:d5:3f:7b:af:40:37: 88:ad:a5:39:f2:d6:55:e2:bc:b0:6d:c4:88:00:20: cf:88:22:ae:97:14:fd:b8:69:42:9b:24:41:2b:81: c1:14:9a:a3:85:cb:1d:94:2e:2a:98:7d:87:cd:d5: 7f:59:09:93:c3:e2:e6:93:d6:33:10:d6:e1:a7:5e: e7:4a:a4:0d:79:a5:ea:94:63:a9:1c:65:16:fa:24: 06:3c:04:4d:1f:03:8a:d9:2e:1d:c6:ac:b2:68:e7: 01:ed:24:60:87:e9:a1:b8:e4:0c:4d:3b:d8:44:fb: 75:92:44:d3:13:dd:1f:03:c0:26:ae:7e:4c:75:e6: 87:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E3:E6:79:44:6B:93:95:EE:55:40:98:4E:B9:18:CB:0D:E6:4D:75 X509v3 Authority Key Identifier: keyid:63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:0d:36:a6:ca:a6:45:35:d3:7b:6e:7e:06:5e:3b:64:96:eb: df:d5:20:57:a0:dd:92:c4:ce:d6:bf:8b:22:c9:d7:f8:6e:5e: 2c:ff:2a:60:9f:fd:13:83:a3:e4:50:03:81:0f:61:0f:9a:27: ed:3b:f6:97:21:31:f0:0e:22:8a:fb:aa:03:09:d0:0f:be:c9: 42:7b:b3:bc:33:cc:0f:e3:5f:e8:dd:7f:b7:da:3b:c9:95:12: 9e:f2:4b:fb:79:42:39:16:44:a9:8a:32:9c:3f:cd:1b:f1:ea: e9:23:b0:e2:a2:69:8a:d2:ce:70:4d:21:5a:4e:e7:ae:c4:dd: 04:4d:ea:e3:1b:ab:70:41:23:06:94:4f:b1:92:f2:3b:ae:be: 59:c9:98:74:92:34:2c:06:c6:cf:d8:a9:ee:69:a6:fe:58:4f: 0d:23:20:46:00:7f:b4:69:ee:06:2a:9e:28:bc:5b:12:67:0f: 5c:99:9a:d2:97:46:4d:48:b5:75:8e:6c:d2:1d:b2:27:c1:c1: 5f:c6:c1:51:73:89:51:57:a4:a9:94:e1:88:2e:4e:de:99:b8: fa:c9:cb:e2:fc:d2:8e:01:c5:a0:a1:74:f4:61:1d:ff:a1:66: 16:79:7d:00:57:85:d6:c8:fa:2d:53:35:73:79:6e:ef:1c:18: 8b:ca:76:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VFNDYxMTAvBgNVBAUTKDYzNTE1QjM2NDExMzg0OEZBNTU0RDI4NDJGNTg0MTg3 N0NGNkFGMDAwHhcNMjUxMjE5MDAzNTMzWhcNMjUxMjI2MDAzNTMzWjAYMRYwFAYD VQQDDA02OTQ0OWRkNS0yZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArltO7don6l8e1nOJ7jEcc1VatIlik3MEEwk5olGEHpLCq+wKRnkWU7pMln9L 7D5kdQBzebPJmOr81XbdyeTHjM2CL194nmjKnVjJHXLBDX3Vsn0cRf10UKjRaeh8 TsY87vI7XRukPgYVPFeHau74j+r6iF0R5MDJPNOaG6DuUKXVP3uvQDeIraU58tZV 4rywbcSIACDPiCKulxT9uGlCmyRBK4HBFJqjhcsdlC4qmH2HzdV/WQmTw+Lmk9Yz ENbhp17nSqQNeaXqlGOpHGUW+iQGPARNHwOK2S4dxqyyaOcB7SRgh+mhuOQMTTvY RPt1kkTTE90fA8Amrn5MdeaHwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvj5nlE a5OV7lVAmE65GMsN5k11MB8GA1UdIwQYMBaAFGNRWzZBE4SPpVTShC9YQYd89q8A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUU0Ni9BRTgyRTEyNjEy RUQxMUVEOUU0RDc2MEVDNEY5QUUwMi9ZMUZiTmtFVGhJLWxWTktFTDFoQmgzejJy d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxRmJOa0VUaEktbFZOS0VMMWhCaDN6MnJ3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUU0Ni9BRTgyRTEyNjEyRUQxMUVEOUU0RDc2MEVDNEY5QUUwMi9ZMUZiTmtFVGhJ LWxWTktFTDFoQmgzejJyd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtDTamyqZFNdN7bn4GXjtkluvf1SBXoN2SxM7Wv4siydf4bl4s/ypg n/0Tg6PkUAOBD2EPmiftO/aXITHwDiKK+6oDCdAPvslCe7O8M8wP41/o3X+32jvJ lRKe8kv7eUI5FkSpijKcP80b8erpI7DiommK0s5wTSFaTueuxN0ETerjG6twQSMG lE+xkvI7rr5ZyZh0kjQsBsbP2Knuaab+WE8NIyBGAH+0ae4GKp4ovFsSZw9cmZrS l0ZNSLV1jmzSHbInwcFfxsFRc4lRV6SplOGILk7embj6ycvi/NKOAcWgoXT0YR3/ oWYWeX0AV4XWyPotUzVzeW7vHBiLynY+ -----END CERTIFICATE-----Generated at Fri Dec 19 20:31:57 2025 by rpki-client