This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft File: LYDKYjgbJHmcBConufMnPeEiLO4.mft (raw, json) Hash identifier: fcR+u5LHhFFmdF6WXlomoFdjI/mpeha6zeEuA9Dsl70= Subject key identifier: 76:C5:71:6E:C2:07:07:B5:0C:8E:E6:FF:33:A9:5A:2B:F5:45:7E:6A Authority key identifier: 2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE Certificate issuer: /CN=A9163272/serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft Manifest number: 020A Signing time: Fri 19 Dec 2025 01:30:02 +0000 Manifest this update: Fri 19 Dec 2025 01:30:01 +0000 Manifest next update: Fri 26 Dec 2025 01:30:01 +0000 Files and hashes: 1: LYDKYjgbJHmcBConufMnPeEiLO4.crl (hash: uIEQLj6bn5RuoXt9JnKU+faw5go+dUmLPymaV75JQmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163272, serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE Validity Not Before: Dec 19 01:30:01 2025 GMT Not After : Dec 26 01:30:01 2025 GMT Subject: CN=6944aa9a-503d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:75:58:13:8d:d1:e2:67:24:ac:69:42:1f:9e: 07:f8:7d:20:fb:b7:6d:a9:7a:b4:f2:d6:16:5d:0c: bc:a7:05:e2:87:e5:8b:73:07:1e:49:cf:45:ff:c5: 52:66:5b:1d:93:f5:13:02:4c:c6:4a:8a:69:86:fd: 2f:e3:47:bc:33:24:09:e7:a6:0f:5f:0e:54:37:7b: ec:0f:42:63:9b:18:d7:30:cc:38:24:59:45:37:ca: ec:e5:72:50:75:2d:56:a9:2e:8f:f5:60:28:4d:6c: 06:fc:97:f5:54:92:64:0c:f8:fd:7c:e5:7a:4b:e5: 51:90:55:6d:38:5c:97:46:c9:15:8b:6a:a5:4a:77: 88:a8:2f:15:1b:f5:08:b4:5d:ed:72:d6:2d:f4:24: ee:3c:16:d2:03:43:e6:73:18:33:c7:fd:54:78:02: 5c:8c:c5:d0:d6:e4:65:c2:69:9a:23:d7:8b:14:3e: 01:a7:e0:84:58:0b:ff:20:65:e1:d0:29:f8:2c:71: f7:93:d3:a2:95:f4:5a:ff:1b:aa:ae:8e:55:f1:09: 48:29:db:08:af:a0:1e:5a:da:fe:32:4e:a4:af:c1: 02:d6:f5:ee:b0:d2:6a:30:6b:93:65:f9:5a:fe:ee: 28:a5:ee:f7:4a:9e:31:3a:bc:02:db:bc:ee:96:07: f6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C5:71:6E:C2:07:07:B5:0C:8E:E6:FF:33:A9:5A:2B:F5:45:7E:6A X509v3 Authority Key Identifier: keyid:2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d8:80:35:0b:31:ca:5c:39:ab:5c:f0:2a:14:63:40:99:6b: a3:49:be:d2:11:54:b4:88:5b:9e:e4:05:2b:6b:71:bd:b7:92: 9c:25:33:a5:8d:b7:9a:c1:bb:f3:d6:1a:0c:5b:50:f0:6b:ad: 1c:d2:d9:f9:b0:ed:46:c8:0d:7c:00:28:c8:ee:0f:cc:5a:cf: 26:9a:37:2c:62:7d:7e:a4:dd:a1:41:47:42:25:9f:ce:95:ad: 8c:3a:d1:70:82:11:37:02:6c:56:63:3e:39:7a:78:cb:1c:ee: 69:46:c6:ba:7b:0e:cb:0c:be:4a:3d:3f:03:cc:d5:cf:ec:d5: 44:7d:7a:ea:f6:e1:40:bf:cf:b0:2b:0a:dd:e3:1f:f6:16:0c: 3a:20:6a:3a:db:8d:cf:1f:3c:b0:a8:22:32:2d:bc:cd:6e:32: 52:e4:56:97:95:71:e8:f6:7f:81:6f:a3:7d:78:ce:ee:72:43: 3e:92:26:3d:08:30:79:e0:ba:af:97:e3:9d:0d:1d:cf:eb:9b: b2:47:23:dc:ab:77:8a:af:34:06:c3:c1:d0:f0:6f:2d:ad:66: 58:78:85:12:b3:59:7a:b3:04:95:02:96:29:ee:0c:bf:72:11: eb:b3:58:bb:f3:cd:05:f0:a7:42:d3:0f:95:d1:a8:54:c3:a9: 59:27:dd:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyNzIxMTAvBgNVBAUTKDJEODBDQTYyMzgxQjI0Nzk5QzA0MkEyN0I5RjMyNzNE RTEyMjJDRUUwHhcNMjUxMjE5MDEzMDAxWhcNMjUxMjI2MDEzMDAxWjAYMRYwFAYD VQQDDA02OTQ0YWE5YS01MDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHVYE43R4mckrGlCH54H+H0g+7dtqXq08tYWXQy8pwXih+WLcwceSc9F/8VS Zlsdk/UTAkzGSopphv0v40e8MyQJ56YPXw5UN3vsD0JjmxjXMMw4JFlFN8rs5XJQ dS1WqS6P9WAoTWwG/Jf1VJJkDPj9fOV6S+VRkFVtOFyXRskVi2qlSneIqC8VG/UI tF3tctYt9CTuPBbSA0Pmcxgzx/1UeAJcjMXQ1uRlwmmaI9eLFD4Bp+CEWAv/IGXh 0Cn4LHH3k9OilfRa/xuqro5V8QlIKdsIr6AeWtr+Mk6kr8EC1vXusNJqMGuTZfla /u4ope73Sp4xOrwC27zulgf2WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbFcW7C Bwe1DI7m/zOpWiv1RX5qMB8GA1UdIwQYMBaAFC2AymI4GyR5nAQqJ7nzJz3hIizu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzI3Mi9ERjI2NjlENkI2 ODIxMUVEQTBBQjk5MUJDNEY5QUUwMi9MWURLWWpnYkpIbWNCQ29udWZNblBlRWlM TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xZREtZamdiSkhtY0JDb251Zk1uUGVFaUxPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzI3Mi9ERjI2NjlENkI2ODIxMUVEQTBBQjk5MUJDNEY5QUUwMi9MWURLWWpnYkpI bWNCQ29udWZNblBlRWlMTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK2IA1CzHKXDmrXPAqFGNAmWujSb7SEVS0iFue5AUra3G9t5KcJTOl jbeawbvz1hoMW1Dwa60c0tn5sO1GyA18ACjI7g/MWs8mmjcsYn1+pN2hQUdCJZ/O la2MOtFwghE3AmxWYz45enjLHO5pRsa6ew7LDL5KPT8DzNXP7NVEfXrq9uFAv8+w Kwrd4x/2Fgw6IGo6243PHzywqCIyLbzNbjJS5FaXlXHo9n+Bb6N9eM7uckM+kiY9 CDB54Lqvl+OdDR3P65uyRyPcq3eKrzQGw8HQ8G8trWZYeIUSs1l6swSVApYp7gy/ chHrs1i7880F8KdC0w+V0ahUw6lZJ91k -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:11 2025 by rpki-client