This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft File: YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft (raw, json) Hash identifier: K+tn4pda4fIHiqDuQa8gVpThqXDvpVGpt9EnqjmVpZ4= Subject key identifier: 96:CF:86:42:2D:EE:3C:74:84:47:58:92:34:A9:D9:FD:AC:12:1A:03 Authority key identifier: 61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40 Certificate issuer: /CN=A914F7F0/serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft Manifest number: 0101 Signing time: Wed 17 Dec 2025 04:37:49 +0000 Manifest this update: Wed 17 Dec 2025 04:37:49 +0000 Manifest next update: Wed 24 Dec 2025 04:37:49 +0000 Files and hashes: 1: YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl (hash: d6RLC9XcKHgL7WWmhLIXYPhepkALPQ0G3i6V0JInlyo=) 2: 9A826D9059D611EF814F004DC4F9AE02.roa (hash: 3aT0muq2AP76fHDV6M45dsCuBJOlUCEA5kwKeP8ww7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 04:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F7F0, serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940 Validity Not Before: Dec 17 04:37:49 2025 GMT Not After : Dec 24 04:37:49 2025 GMT Subject: CN=6942339d-aa21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7f:90:8f:c1:6f:0c:65:6d:a8:6d:7d:e7:65: 15:0a:42:53:3e:f1:87:ac:de:e5:dd:a1:e6:6f:7f: b8:e5:08:42:e7:94:9a:05:f9:e0:33:f7:57:29:00: ee:9f:b2:d3:aa:11:1b:c5:dc:66:f8:45:b0:ec:2b: a4:6a:07:e7:cd:dc:f9:28:29:bc:75:19:b2:c5:7a: a6:06:07:d2:27:5d:51:60:42:34:cd:a8:79:d7:38: 2e:b9:ce:64:9d:4f:d5:e6:8b:4b:58:e9:7b:79:ef: a1:a6:1b:be:8b:71:62:7e:0b:36:95:9c:5f:70:46: 23:db:f0:c9:f1:b0:59:33:3f:21:ae:ae:db:d9:70: b7:85:95:4b:20:35:a7:b6:82:e7:0b:b7:6d:14:04: 03:ec:73:fc:6b:89:c3:dc:7a:f7:19:52:5c:5a:09: 3b:65:d0:81:a3:e2:23:6a:9e:39:e0:89:3f:64:ed: fd:42:08:26:fd:76:fd:3b:ce:06:bf:55:08:12:aa: bb:57:3f:a1:2f:fc:e5:85:d4:d5:e6:8f:47:33:a6: b6:d3:a4:da:7a:04:82:9b:7d:35:cc:ec:c6:b0:e3: 0f:38:79:a7:bc:11:b9:46:f5:51:f1:3e:9b:2f:88: 94:f8:f9:af:93:3e:d4:c3:cb:df:1d:37:81:89:74: 8b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CF:86:42:2D:EE:3C:74:84:47:58:92:34:A9:D9:FD:AC:12:1A:03 X509v3 Authority Key Identifier: keyid:61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:20:09:26:b6:a8:28:97:d8:aa:0c:32:10:2a:8b:db:9c:1f: c9:c9:20:0a:fc:28:74:22:81:72:26:bd:bc:b7:7f:90:0b:56: 1f:6d:dc:51:e8:cc:64:a9:4c:b9:8b:d7:dc:63:e9:4d:14:0c: 04:a6:3a:6c:d2:73:cc:26:1b:5b:b3:92:34:20:07:5b:c6:a2: da:4b:3b:ac:c8:3c:72:ec:28:67:1f:ad:7c:f1:6a:b2:40:dd: 83:20:f6:65:75:6e:bb:cf:9a:9c:4d:42:68:0c:3b:e5:d7:ea: c4:83:7f:f9:20:47:d4:01:07:93:b4:51:07:b4:c5:b6:04:b1: 50:d6:38:af:c2:29:f9:15:55:56:38:f5:13:8c:05:93:40:28: eb:fc:6c:58:07:05:c0:85:06:2d:06:ab:24:a5:96:52:8e:8f: b5:03:a5:ea:ac:6c:72:15:b3:8d:43:56:77:77:01:f8:b3:77: 18:9c:2d:da:d6:7a:78:7d:4f:70:cf:45:c2:61:9c:9c:1e:7b: 10:63:87:06:21:dc:37:b3:04:71:97:7a:ad:f5:7f:a3:c0:b6: b1:3b:b2:92:c4:da:69:bd:44:4c:6e:d8:72:31:a7:0e:a7:7c: 94:75:21:bb:8f:c3:67:90:03:50:11:14:6b:32:15:c2:69:cf: df:79:b1:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY3RjAxMTAvBgNVBAUTKDYxMUNCNTU2Qzg3QkMwNDlBNUE0M0VCMUYyOTcxMDdF RkYxQjc5NDAwHhcNMjUxMjE3MDQzNzQ5WhcNMjUxMjI0MDQzNzQ5WjAYMRYwFAYD VQQDDA02OTQyMzM5ZC1hYTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1H+Qj8FvDGVtqG1952UVCkJTPvGHrN7l3aHmb3+45QhC55SaBfngM/dXKQDu n7LTqhEbxdxm+EWw7Cukagfnzdz5KCm8dRmyxXqmBgfSJ11RYEI0zah51zguuc5k nU/V5otLWOl7ee+hphu+i3Fifgs2lZxfcEYj2/DJ8bBZMz8hrq7b2XC3hZVLIDWn toLnC7dtFAQD7HP8a4nD3Hr3GVJcWgk7ZdCBo+Ijap454Ik/ZO39Qggm/Xb9O84G v1UIEqq7Vz+hL/zlhdTV5o9HM6a206TaegSCm301zOzGsOMPOHmnvBG5RvVR8T6b L4iU+Pmvkz7Uw8vfHTeBiXSLbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbPhkIt 7jx0hEdYkjSp2f2sEhoDMB8GA1UdIwQYMBaAFGEctVbIe8BJpaQ+sfKXEH7/G3lA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjdGMC9DNzRFQjY5QTU5 RDUxMUVGODNEMjhCNEJDNEY5QUUwMi9ZUnkxVnNoN3dFbWxwRDZ4OHBjUWZ2OGJl VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSeTFWc2g3d0VtbHBENng4cGNRZnY4YmVVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjdGMC9DNzRFQjY5QTU5RDUxMUVGODNEMjhCNEJDNEY5QUUwMi9ZUnkxVnNoN3dF bWxwRDZ4OHBjUWZ2OGJlVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuIAkmtqgol9iqDDIQKovbnB/JySAK/Ch0IoFyJr28t3+QC1YfbdxR 6MxkqUy5i9fcY+lNFAwEpjps0nPMJhtbs5I0IAdbxqLaSzusyDxy7ChnH6188Wqy QN2DIPZldW67z5qcTUJoDDvl1+rEg3/5IEfUAQeTtFEHtMW2BLFQ1jivwin5FVVW OPUTjAWTQCjr/GxYBwXAhQYtBqskpZZSjo+1A6XqrGxyFbONQ1Z3dwH4s3cYnC3a 1np4fU9wz0XCYZycHnsQY4cGIdw3swRxl3qt9X+jwLaxO7KSxNppvURMbthyMacO p3yUdSG7j8NnkANQERRrMhXCac/febGZ -----END CERTIFICATE-----Generated at Thu Dec 18 18:31:59 2025 by rpki-client