This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft File: YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft (raw, json) Hash identifier: CMOGjEhHf4durR815XYpkVz7zA144fkYzXeyjSsUL6g= Subject key identifier: 52:0B:0D:F6:90:B2:6D:0A:81:2F:B9:28:99:BE:DF:61:6C:F0:82:A8 Authority key identifier: 61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40 Certificate issuer: /CN=A914F7F0/serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft Manifest number: 0108 Signing time: Wed 31 Dec 2025 04:06:17 +0000 Manifest this update: Wed 31 Dec 2025 04:06:16 +0000 Manifest next update: Wed 07 Jan 2026 04:06:16 +0000 Files and hashes: 1: YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl (hash: ZNonMsaT2AHpQiLErq36WkBF2RQtDxOa5uyq6nCup20=) 2: 9A826D9059D611EF814F004DC4F9AE02.roa (hash: 3aT0muq2AP76fHDV6M45dsCuBJOlUCEA5kwKeP8ww7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 04:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F7F0, serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940 Validity Not Before: Dec 31 04:06:16 2025 GMT Not After : Jan 7 04:06:16 2026 GMT Subject: CN=6954a138-9840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:14:92:77:ab:02:5b:06:a0:0c:b4:d5:59:42: 61:13:17:e7:ba:69:e1:fa:1f:a2:82:d2:db:b4:81: 7a:ba:47:9e:49:b3:82:83:bc:b4:77:ae:0f:4a:3f: e8:3f:48:2b:70:bf:e8:f8:a3:3a:e1:72:ed:b9:6e: 45:4e:55:c3:13:9b:aa:76:e2:03:56:6f:69:b1:76: 7c:17:44:70:95:7d:7e:95:66:7b:57:f7:15:bf:25: 09:e3:9a:20:dd:52:41:f2:29:c2:d4:2e:b3:b2:aa: 70:70:da:ed:15:3a:7d:84:c6:60:86:95:2c:2d:a4: 81:ec:56:bc:9a:f2:36:56:d5:e9:ea:2a:4e:c1:d6: e5:36:78:2b:bc:65:ad:a2:ae:65:e7:d4:87:00:0e: 1b:6d:28:23:b3:e3:81:85:6e:07:b3:32:47:e4:e2: b6:5b:e5:7e:6e:35:11:6f:a3:24:92:a2:cb:b1:b8: fb:93:15:f5:9f:da:af:e5:f7:60:2a:4f:ee:25:ed: 11:14:07:81:bc:96:03:b1:16:20:91:14:ae:49:11: c8:11:87:39:fc:ca:57:53:35:5c:4a:e9:9a:38:f6: 04:9c:e8:85:85:85:a1:cd:75:a4:72:83:36:63:db: 82:fb:0c:3d:bd:3f:df:4b:8b:73:16:c5:5b:91:aa: a1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0B:0D:F6:90:B2:6D:0A:81:2F:B9:28:99:BE:DF:61:6C:F0:82:A8 X509v3 Authority Key Identifier: keyid:61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:ab:ed:00:fd:67:c8:b3:2a:10:2f:06:34:e2:cc:eb:2f:03: 9e:b9:ab:9f:57:c2:70:90:bf:bf:ba:6a:9c:4a:fc:18:8e:6c: 96:fa:8f:02:12:54:fe:3e:d2:07:ba:74:54:9f:4c:79:21:71: cd:3a:4e:55:82:7f:3c:fa:ce:92:15:9d:51:b5:a9:fb:06:7c: 20:44:8c:57:93:2b:61:78:9b:08:8d:95:e5:bf:ca:d5:a5:bb: 11:84:75:21:9a:73:a0:c9:8e:10:e9:d8:5d:60:ea:ed:5e:bd: 2c:64:a8:fb:4e:ec:ca:39:af:b1:26:72:59:ba:e3:7e:ea:c9: e0:83:21:73:f2:2c:3b:03:f7:b8:79:e2:db:01:b2:8b:6a:42: d2:1d:41:84:bb:4a:5d:64:58:ad:54:83:3a:4e:73:3e:26:d9: 31:9e:e2:72:51:f7:92:1d:2d:29:4e:0f:25:29:45:82:a3:4e: 03:b2:d5:5f:2c:e7:2e:d1:d8:f2:3c:1f:b6:b1:e3:33:e8:4a: 48:8a:0d:72:53:ea:72:18:5d:0e:4c:aa:74:92:9b:1a:49:b3: ac:bd:8e:05:7e:9d:51:96:9f:4c:d3:c2:ed:29:85:f2:e3:fa: d9:08:75:4a:28:f2:9f:4c:97:3e:86:73:a9:b9:ef:90:0c:54: 10:45:46:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY3RjAxMTAvBgNVBAUTKDYxMUNCNTU2Qzg3QkMwNDlBNUE0M0VCMUYyOTcxMDdF RkYxQjc5NDAwHhcNMjUxMjMxMDQwNjE2WhcNMjYwMTA3MDQwNjE2WjAYMRYwFAYD VQQDDA02OTU0YTEzOC05ODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhSSd6sCWwagDLTVWUJhExfnumnh+h+igtLbtIF6ukeeSbOCg7y0d64PSj/o P0grcL/o+KM64XLtuW5FTlXDE5uqduIDVm9psXZ8F0RwlX1+lWZ7V/cVvyUJ45og 3VJB8inC1C6zsqpwcNrtFTp9hMZghpUsLaSB7Fa8mvI2VtXp6ipOwdblNngrvGWt oq5l59SHAA4bbSgjs+OBhW4HszJH5OK2W+V+bjURb6MkkqLLsbj7kxX1n9qv5fdg Kk/uJe0RFAeBvJYDsRYgkRSuSRHIEYc5/MpXUzVcSumaOPYEnOiFhYWhzXWkcoM2 Y9uC+ww9vT/fS4tzFsVbkaqhowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFILDfaQ sm0KgS+5KJm+32Fs8IKoMB8GA1UdIwQYMBaAFGEctVbIe8BJpaQ+sfKXEH7/G3lA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjdGMC9DNzRFQjY5QTU5 RDUxMUVGODNEMjhCNEJDNEY5QUUwMi9ZUnkxVnNoN3dFbWxwRDZ4OHBjUWZ2OGJl VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSeTFWc2g3d0VtbHBENng4cGNRZnY4YmVVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjdGMC9DNzRFQjY5QTU5RDUxMUVGODNEMjhCNEJDNEY5QUUwMi9ZUnkxVnNoN3dF bWxwRDZ4OHBjUWZ2OGJlVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAq+0A/WfIsyoQLwY04szrLwOeuaufV8JwkL+/umqcSvwYjmyW+o8C ElT+PtIHunRUn0x5IXHNOk5Vgn88+s6SFZ1Rtan7BnwgRIxXkytheJsIjZXlv8rV pbsRhHUhmnOgyY4Q6dhdYOrtXr0sZKj7TuzKOa+xJnJZuuN+6snggyFz8iw7A/e4 eeLbAbKLakLSHUGEu0pdZFitVIM6TnM+JtkxnuJyUfeSHS0pTg8lKUWCo04DstVf LOcu0djyPB+2seMz6EpIig1yU+pyGF0OTKp0kpsaSbOsvY4Ffp1Rlp9M08LtKYXy 4/rZCHVKKPKfTJc+hnOpue+QDFQQRUZl -----END CERTIFICATE-----Generated at Thu Jan 1 03:51:09 2026 by rpki-client