This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft File: YmmU0Zdivg-YhPpO8NymbD9TAqg.mft (raw, json) Hash identifier: PmDNGoPHHMMoORSzFFZ6WkfXggwHpnTLIzguZv4JSYk= Subject key identifier: DA:48:EF:C5:35:B3:15:17:C0:FD:4B:38:FD:0F:19:FB:B2:BC:B8:AF Authority key identifier: 62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 Certificate issuer: /CN=A9157E6E/serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Certificate serial: 1BD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft Manifest number: 1BCB Signing time: Wed 31 Dec 2025 16:05:12 +0000 Manifest this update: Wed 31 Dec 2025 16:05:11 +0000 Manifest next update: Wed 07 Jan 2026 16:05:11 +0000 Files and hashes: 1: YmmU0Zdivg-YhPpO8NymbD9TAqg.crl (hash: JM6G1Qel2RRWcds5bl6Ylr//16B2JIW28TZTRSHdn0g=) 2: B8F865A2147B11E7B5BEC457C4F9AE02.roa (hash: CIx5a/KDORd4MxJLQ+psYC26naN8iQLI+AuxYnr9L/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 16:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7125 (0x1bd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E6E, serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Validity Not Before: Dec 31 16:05:11 2025 GMT Not After : Jan 7 16:05:11 2026 GMT Subject: CN=695549b8-fdad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:78:fe:32:84:2e:3d:27:c7:d6:53:e4:7c:d2: ee:dd:77:a1:d0:03:de:74:f5:34:39:56:18:49:e8: 43:dc:ce:64:e8:dd:d9:d8:9a:d6:63:5c:d8:33:38: cd:20:5b:43:94:3b:de:56:12:71:8b:7c:3e:d7:26: 77:9c:d3:6c:12:0b:1a:c2:a2:de:69:a6:94:4a:53: 2f:6f:c9:93:35:f0:7a:ab:f9:72:89:0f:8e:d8:81: 02:c3:be:74:2d:cc:52:70:87:6a:e8:0e:52:00:80: 8d:5e:47:a8:c5:76:98:3b:6f:a1:cd:1c:cd:18:6b: fa:7b:c0:7c:07:7f:d1:2e:6a:6c:db:8d:11:91:67: 63:76:e1:96:88:21:7c:88:61:4a:63:82:61:35:61: 6e:c6:61:8a:a3:c8:57:0f:16:76:0d:be:83:2c:13: ac:27:c9:4e:04:86:b6:77:66:bf:75:4a:bf:1d:83: 7b:96:0c:01:2a:9a:41:d1:e8:4e:e4:62:b0:6d:3c: c4:e2:c0:07:1e:f2:49:57:cc:6c:cf:e2:c1:bb:07: 01:bc:56:a2:7b:03:3b:ac:92:9a:06:6c:25:ea:4a: ab:11:4c:98:ac:c3:8c:89:8e:ae:c8:fe:bd:86:d4: 91:88:30:d3:d1:42:be:0c:17:ce:40:fc:5c:05:2f: 21:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:48:EF:C5:35:B3:15:17:C0:FD:4B:38:FD:0F:19:FB:B2:BC:B8:AF X509v3 Authority Key Identifier: keyid:62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:ba:f6:f3:ee:f7:0f:75:5f:21:8f:4c:e2:92:96:82:cb:60: 98:ec:6d:fb:fc:89:12:5c:4b:d3:97:79:d6:80:51:c9:d0:be: 13:ec:8e:3a:b6:db:37:aa:0c:4c:2e:12:89:77:e4:97:5a:d0: 2f:a4:e0:84:3c:04:40:e6:cc:a6:7c:8e:f0:3e:20:27:aa:b1: 32:b7:da:cc:0a:88:0b:7d:fb:f6:05:5f:79:bb:95:c0:28:f6: b1:2c:4c:de:4a:fd:8a:f4:62:d6:55:4b:4c:fe:14:75:76:ab: 45:47:da:28:77:8f:03:7c:b3:af:ef:26:8a:53:e9:dc:89:ad: a4:63:62:bf:37:4f:07:50:0e:56:bd:b3:26:3d:9b:c4:a6:08: 9a:fa:25:a3:52:d6:2e:9f:55:54:a3:54:b4:0a:7d:2a:c8:a7: 49:77:b7:a2:9c:fd:54:03:78:a2:3e:a4:e3:73:76:13:18:c9: 4a:49:56:aa:2c:2f:c4:6e:75:23:e2:ca:24:fa:74:56:ea:b5: a3:18:2f:d9:a4:77:79:92:a9:03:47:9f:81:78:e9:7e:1f:3b: d2:5a:46:12:1e:1c:ba:8a:e8:54:77:01:5c:00:e2:ba:4b:ae: 69:b3:48:db:a2:53:ae:1a:7c:d6:f1:55:2a:7e:ed:62:0c:0f: 1f:45:02:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFNkUxMTAvBgNVBAUTKDYyNjk5NEQxOTc2MkJFMEY5ODg0RkE0RUYwRENBNjZD M0Y1MzAyQTgwHhcNMjUxMjMxMTYwNTExWhcNMjYwMTA3MTYwNTExWjAYMRYwFAYD VQQDDA02OTU1NDliOC1mZGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3j+MoQuPSfH1lPkfNLu3Xeh0APedPU0OVYYSehD3M5k6N3Z2JrWY1zYMzjN IFtDlDveVhJxi3w+1yZ3nNNsEgsawqLeaaaUSlMvb8mTNfB6q/lyiQ+O2IECw750 LcxScIdq6A5SAICNXkeoxXaYO2+hzRzNGGv6e8B8B3/RLmps240RkWdjduGWiCF8 iGFKY4JhNWFuxmGKo8hXDxZ2Db6DLBOsJ8lOBIa2d2a/dUq/HYN7lgwBKppB0ehO 5GKwbTzE4sAHHvJJV8xsz+LBuwcBvFaiewM7rJKaBmwl6kqrEUyYrMOMiY6uyP69 htSRiDDT0UK+DBfOQPxcBS8hWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpI78U1 sxUXwP1LOP0PGfuyvLivMB8GA1UdIwQYMBaAFGJplNGXYr4PmIT6TvDcpmw/UwKo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U2RS84MzBDNjk3MDBE RUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZnLVloUHBPOE55bWJEOVRB cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltbVUwWmRpdmctWWhQcE84TnltYkQ5VEFxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0U2RS84MzBDNjk3MDBERUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZn LVloUHBPOE55bWJEOVRBcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhuvbz7vcPdV8hj0zikpaCy2CY7G37/IkSXEvTl3nWgFHJ0L4T7I46 tts3qgxMLhKJd+SXWtAvpOCEPARA5symfI7wPiAnqrEyt9rMCogLffv2BV95u5XA KPaxLEzeSv2K9GLWVUtM/hR1dqtFR9ood48DfLOv7yaKU+ncia2kY2K/N08HUA5W vbMmPZvEpgia+iWjUtYun1VUo1S0Cn0qyKdJd7einP1UA3iiPqTjc3YTGMlKSVaq LC/EbnUj4sok+nRW6rWjGC/ZpHd5kqkDR5+BeOl+HzvSWkYSHhy6iuhUdwFcAOK6 S65ps0jbolOuGnzW8VUqfu1iDA8fRQIA -----END CERTIFICATE-----Generated at Thu Jan 1 05:48:03 2026 by rpki-client