This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft File: YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft (raw, json) Hash identifier: 0qErc6pqnDN74RP709mV5Fv3B5a5isTY961edITo8NQ= Subject key identifier: 26:54:F1:9B:55:AB:98:C9:DA:44:2E:D0:BF:C0:57:7D:7D:58:03:FF Authority key identifier: 60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44 Certificate issuer: /CN=A9148488/serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344 Certificate serial: 0A24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft Manifest number: 0A1E Signing time: Sat 20 Dec 2025 19:15:09 +0000 Manifest this update: Sat 20 Dec 2025 19:15:08 +0000 Manifest next update: Sat 27 Dec 2025 19:15:08 +0000 Files and hashes: 1: YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl (hash: fs3oQJ1w89hfczPMYMkVjI4nH2bRfkgxWPp1r+ax4BI=) 2: 5C8929C8839011EAB5B82263C4F9AE02.roa (hash: Jr5A5EFDHOtjVbEZUPlRHjoDRI+w8P0c18JoA/Eyebg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2596 (0xa24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148488, serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344 Validity Not Before: Dec 20 19:15:08 2025 GMT Not After : Dec 27 19:15:08 2025 GMT Subject: CN=6946f5bd-d49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2a:4b:fb:3f:90:b1:ba:8f:8c:e5:f5:d0:2a: 92:a2:f6:d7:73:7d:f3:d1:f0:96:69:0a:2b:5f:f2: a8:a5:03:c3:44:ce:24:23:1b:47:18:5d:57:09:8f: e2:75:80:08:83:f2:04:d7:b8:da:1e:91:cd:b1:31: 52:01:9d:96:4a:d6:ca:d3:55:84:b8:55:62:9c:5b: 3b:e9:64:e1:22:54:89:4c:ac:96:c5:3c:81:4b:bb: 80:b1:d4:6b:d4:9f:ff:14:23:31:db:73:2d:17:11: 0d:51:b7:c0:55:6c:26:2a:fb:12:12:e6:9d:f9:3b: 3e:dc:78:9b:08:a5:dc:95:56:05:62:38:d4:84:71: 30:f6:5f:00:14:58:2a:56:63:4b:fe:42:6a:80:2c: 72:f1:42:ab:55:11:5c:18:e9:f1:22:c3:fa:75:54: ea:e3:4c:fb:fd:c2:76:80:73:f1:76:26:7a:b2:69: 6e:31:59:1f:e7:01:f5:e1:f3:3e:b9:97:ae:a6:9a: c2:d4:01:80:fa:e6:73:8b:c7:00:ca:f9:ce:9b:1e: cc:9c:6f:2d:31:be:a9:ae:0a:7b:76:9b:a3:a4:ad: be:87:e3:42:ec:8a:c3:e9:b4:97:b8:30:4b:69:66: 5d:7b:8d:16:4b:f1:ea:1f:09:4d:1b:04:7e:3f:0d: 54:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:54:F1:9B:55:AB:98:C9:DA:44:2E:D0:BF:C0:57:7D:7D:58:03:FF X509v3 Authority Key Identifier: keyid:60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:be:f1:b9:13:ea:22:a5:e0:44:49:3b:9a:c8:8f:3e:e8:ff: 77:10:32:cc:4b:9e:fa:5a:86:7c:b0:f4:76:5b:88:eb:13:25: 90:fb:a0:af:72:18:ef:29:1b:fb:a5:3b:2e:cf:c1:f2:25:25: f2:3b:ab:1c:06:6c:c1:bf:2a:26:7f:6c:f4:3c:d9:5d:67:08: 14:02:4d:b9:63:f3:e3:4d:8d:2a:59:93:7e:04:c7:31:e5:11: 0b:53:ae:a4:5b:a7:fb:69:39:32:cf:08:4a:6f:f7:a5:31:7d: 0d:1c:d5:ba:f2:c0:0f:f0:55:46:6a:67:62:28:9c:5f:11:e1: c6:22:e1:66:1d:1a:77:62:2c:a7:e9:f4:2e:a3:47:6f:2f:55: 2b:c9:96:b9:b0:8e:09:97:30:48:7b:ee:f9:12:86:0e:08:a1: 4e:00:9e:2e:ab:9b:2e:ef:9a:f8:39:29:1a:92:02:73:a1:14: 94:37:d4:13:9f:df:36:55:c7:0c:7d:5f:f8:da:10:f5:21:a5: e8:40:d5:ec:60:1e:29:31:83:63:47:24:29:28:b9:61:79:e2: db:d1:96:bd:76:51:08:12:51:f6:74:4e:9b:ef:39:53:96:79: 11:15:b3:25:d3:b8:b8:17:2e:9a:4f:e5:50:cf:55:a5:f1:22: b5:7f:78:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0ODgxMTAvBgNVBAUTKDYwNzZDNTEzOUQ0Q0NGREVCQ0E0NEExNEJEQjczMTY4 ODhGQTYzNDQwHhcNMjUxMjIwMTkxNTA4WhcNMjUxMjI3MTkxNTA4WjAYMRYwFAYD VQQDDA02OTQ2ZjViZC1kNDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCpL+z+QsbqPjOX10CqSovbXc33z0fCWaQorX/KopQPDRM4kIxtHGF1XCY/i dYAIg/IE17jaHpHNsTFSAZ2WStbK01WEuFVinFs76WThIlSJTKyWxTyBS7uAsdRr 1J//FCMx23MtFxENUbfAVWwmKvsSEuad+Ts+3HibCKXclVYFYjjUhHEw9l8AFFgq VmNL/kJqgCxy8UKrVRFcGOnxIsP6dVTq40z7/cJ2gHPxdiZ6smluMVkf5wH14fM+ uZeupprC1AGA+uZzi8cAyvnOmx7MnG8tMb6prgp7dpujpK2+h+NC7IrD6bSXuDBL aWZde40WS/HqHwlNGwR+Pw1UtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZU8ZtV q5jJ2kQu0L/AV319WAP/MB8GA1UdIwQYMBaAFGB2xROdTM/evKRKFL23MWiI+mNE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ4OC81RDI2ODM0QTgz OEYxMUVBQjcwMzE4NjJDNEY5QUUwMi9ZSGJGRTUxTXo5NjhwRW9VdmJjeGFJajZZ MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lIYkZFNTFNejk2OHBFb1V2YmN4YUlqNlkwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ4OC81RDI2ODM0QTgzOEYxMUVBQjcwMzE4NjJDNEY5QUUwMi9ZSGJGRTUxTXo5 NjhwRW9VdmJjeGFJajZZMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDvvG5E+oipeBESTuayI8+6P93EDLMS576WoZ8sPR2W4jrEyWQ+6Cv chjvKRv7pTsuz8HyJSXyO6scBmzBvyomf2z0PNldZwgUAk25Y/PjTY0qWZN+BMcx 5RELU66kW6f7aTkyzwhKb/elMX0NHNW68sAP8FVGamdiKJxfEeHGIuFmHRp3Yiyn 6fQuo0dvL1UryZa5sI4JlzBIe+75EoYOCKFOAJ4uq5su75r4OSkakgJzoRSUN9QT n982VccMfV/42hD1IaXoQNXsYB4pMYNjRyQpKLlheeLb0Za9dlEIElH2dE6b7zlT lnkRFbMl07i4Fy6aT+VQz1Wl8SK1f3gf -----END CERTIFICATE-----Generated at Sun Dec 21 13:06:13 2025 by rpki-client