This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft File: Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft (raw, json) Hash identifier: EFvPYHTWr9p9FSKek32aJ9aidBCxuKlK5Q+R/0XldiQ= Subject key identifier: 84:AF:B2:65:7E:A6:75:A1:BC:54:F2:91:19:B9:5F:F0:4F:AF:8F:76 Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E Certificate serial: 3575 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft Manifest number: 352F Signing time: Thu 18 Dec 2025 15:14:07 +0000 Manifest this update: Thu 18 Dec 2025 15:14:07 +0000 Manifest next update: Thu 25 Dec 2025 15:14:07 +0000 Files and hashes: 1: Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl (hash: KEsHk5hoFxAGzFidj+QwCe7Lr/oBKwHtuczdD7T97hM=) 2: 1DECCD5252E911ED8BAAA80AC4F9AE02.roa (hash: XwBBgkLccrCOQa/KYpZw9ulkTxWOJIkjA80pfYyhDlg=) 3: 8D6AE850AD3911F0992C7B7CC4F9AE02.roa (hash: /55M0NnZWX6DXIC45V+UWpM/vfw1N0aS3pMri6ZFvUM=) 4: 93441F8211CB11EEB8151734C4F9AE02.roa (hash: km2MH0Iw6GW5QwrXI89g4lBCI72LIAO4pZvcSNjM0vw=) 5: 0F3E8640D99D11F08333CF1766D3641D.roa (hash: pS2BtCG96+96mJXvMihVypxW8GWS5Zzf8IoBuSz2UP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13685 (0x3575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E Validity Not Before: Dec 18 15:14:07 2025 GMT Not After : Dec 25 15:14:07 2025 GMT Subject: CN=69441a3f-3a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:60:8a:49:3d:c3:2b:a4:43:6a:85:b4:8b:09: 5f:be:86:4b:c1:28:5b:a8:20:eb:db:cc:26:6d:13: 4f:2b:12:65:f7:b9:85:89:80:49:44:6a:a4:30:8f: cc:63:f7:37:bc:15:73:37:03:db:0d:18:88:c0:33: 07:ae:b1:cd:09:aa:39:22:7d:ff:a3:ea:33:32:0e: bc:72:7b:51:11:f2:bb:81:45:dd:1a:07:db:45:fd: 2c:2d:bd:99:70:ba:db:80:c2:34:a5:1d:2e:58:3e: 49:0b:d4:77:34:c0:8c:17:7a:ee:da:a4:20:57:01: ab:23:0b:70:e0:c3:98:ea:cd:1b:6e:3d:23:3c:8c: 51:0a:cb:0b:1a:66:d5:f7:dc:14:e4:4c:3b:3a:f2: c2:2e:f2:72:e4:fb:99:5a:f3:8d:b7:e1:20:85:f5: 41:2d:96:b8:80:1f:29:55:23:e2:3f:92:9b:87:4d: d9:65:3b:2f:f1:d1:06:dc:ae:5e:3c:d8:70:fc:a2: c0:7c:0a:06:f4:0c:f4:66:0a:38:b4:10:17:a1:5c: 56:69:55:f4:d4:32:04:1c:f8:d1:37:3e:5c:de:de: 2c:df:2b:63:f0:50:a8:a4:1c:22:03:56:b8:2e:5c: ae:96:ba:e5:ad:c9:a3:95:47:c2:e0:dc:89:72:34: c2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AF:B2:65:7E:A6:75:A1:BC:54:F2:91:19:B9:5F:F0:4F:AF:8F:76 X509v3 Authority Key Identifier: keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:af:37:c2:93:e8:83:40:91:10:42:17:ac:49:37:0a:ca:70: 74:02:43:8a:5f:97:0d:fb:0d:fb:ac:63:c4:6b:e5:9b:b7:dc: 90:94:1b:64:36:dd:6c:e6:81:e1:30:17:96:6f:c7:7d:94:37: 6e:ca:7e:9d:dd:15:a8:d6:1f:54:c3:43:06:7f:70:0c:b9:1d: 09:7c:bc:5e:5d:5a:8b:4a:8c:76:fe:28:c0:36:9f:39:e8:cb: d4:92:ad:44:b0:ee:dd:bc:78:37:be:d3:a7:84:3b:4f:d1:a1: d3:1e:33:68:eb:c2:56:91:6a:fc:5e:b9:29:e0:92:de:90:70: 2b:65:53:a4:4c:7d:fb:87:d0:55:d2:17:94:dc:2b:99:4c:57: 49:62:a6:5e:06:84:02:30:8c:03:62:74:e5:58:42:ed:86:83: 6d:f3:5b:08:d3:3d:2a:0e:53:60:5f:a0:62:f1:56:bd:55:07: 44:1e:ef:1f:17:79:1a:b7:88:f5:b7:ee:26:fb:22:1d:a3:3b: bc:33:78:5a:46:92:eb:8e:54:91:c4:c3:f6:18:4a:78:51:b6: fa:37:18:3f:18:62:31:35:a8:d5:9c:69:b9:55:db:ad:72:48: 97:3b:3c:a0:e4:ae:5d:11:0a:a6:f6:b9:9c:51:28:88:bf:d3: 54:25:f5:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGNzYxMTAvBgNVBAUTKDYzRUM0RTYzODBGQUFFQTUxMTA3RTlDNDBDMkYxMDU4 RTA4Rjg1NkUwHhcNMjUxMjE4MTUxNDA3WhcNMjUxMjI1MTUxNDA3WjAYMRYwFAYD VQQDDA02OTQ0MWEzZi0zYTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmGCKST3DK6RDaoW0iwlfvoZLwShbqCDr28wmbRNPKxJl97mFiYBJRGqkMI/M Y/c3vBVzNwPbDRiIwDMHrrHNCao5In3/o+ozMg68cntREfK7gUXdGgfbRf0sLb2Z cLrbgMI0pR0uWD5JC9R3NMCMF3ru2qQgVwGrIwtw4MOY6s0bbj0jPIxRCssLGmbV 99wU5Ew7OvLCLvJy5PuZWvONt+EghfVBLZa4gB8pVSPiP5Kbh03ZZTsv8dEG3K5e PNhw/KLAfAoG9Az0Zgo4tBAXoVxWaVX01DIEHPjRNz5c3t4s3ytj8FCopBwiA1a4 LlyulrrlrcmjlUfC4NyJcjTCcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISvsmV+ pnWhvFTykRm5X/BPr492MB8GA1UdIwQYMBaAFGPsTmOA+q6lEQfpxAwvEFjgj4Vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY3Ni85NDRFMzg5MjFE QUIxMUUyQkIzMENBQTkwOEIwMkNEMi9ZLXhPWTRENnJxVVJCLW5FREM4UVdPQ1Bo VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kteE9ZNEQ2cnFVUkItbkVEQzhRV09DUGhXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkY3Ni85NDRFMzg5MjFEQUIxMUUyQkIzMENBQTkwOEIwMkNEMi9ZLXhPWTRENnJx VVJCLW5FREM4UVdPQ1BoVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbrzfCk+iDQJEQQhesSTcKynB0AkOKX5cN+w37rGPEa+Wbt9yQlBtk Nt1s5oHhMBeWb8d9lDduyn6d3RWo1h9Uw0MGf3AMuR0JfLxeXVqLSox2/ijANp85 6MvUkq1EsO7dvHg3vtOnhDtP0aHTHjNo68JWkWr8Xrkp4JLekHArZVOkTH37h9BV 0heU3CuZTFdJYqZeBoQCMIwDYnTlWELthoNt81sI0z0qDlNgX6Bi8Va9VQdEHu8f F3kat4j1t+4m+yIdozu8M3haRpLrjlSRxMP2GEp4Ubb6Nxg/GGIxNajVnGm5Vdut ckiXOzyg5K5dEQqm9rmcUSiIv9NUJfX8 -----END CERTIFICATE-----Generated at Sat Dec 20 12:59:50 2025 by rpki-client