This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft File: cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft (raw, json) Hash identifier: S6l8hFm4LO+p7VO53E2lyMuGIIQkKvdEVvJWhHRSABc= Subject key identifier: 64:57:52:16:A1:7D:3F:A1:5F:54:2A:3E:16:B1:6C:3A:19:2A:87:2F Authority key identifier: 71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7 Certificate issuer: /CN=A917174E/serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7 Certificate serial: 0E70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft Manifest number: 0E6F Signing time: Thu 18 Dec 2025 17:32:16 +0000 Manifest this update: Thu 18 Dec 2025 17:32:15 +0000 Manifest next update: Thu 25 Dec 2025 17:32:15 +0000 Files and hashes: 1: cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl (hash: GVOhH8sBQRxlBgcDb+ctZHF/fkeXJxn7PcCifnD13QE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3696 (0xe70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917174E, serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7 Validity Not Before: Dec 18 17:32:15 2025 GMT Not After : Dec 25 17:32:15 2025 GMT Subject: CN=69443aa0-caf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b6:d2:24:54:00:8a:db:ee:b4:d4:e6:24:e7: e4:8c:40:09:66:1f:3b:07:95:fb:4f:d4:1e:a0:4e: ec:93:4c:15:bd:ef:76:17:fb:03:28:c7:fa:98:49: af:92:74:1a:a3:c8:0d:77:f9:ca:11:1e:cb:3b:43: 09:e7:a7:b0:b4:44:21:71:e9:8b:e0:c9:d9:35:ba: bf:a7:cb:ed:e5:c5:3f:91:85:12:dd:d2:15:f0:37: 81:a2:3f:16:12:d2:d0:0e:25:e4:ea:02:43:c1:dd: 5e:29:3b:8d:eb:8f:03:7a:4c:e1:9e:56:60:55:98: 0d:8b:e9:e7:36:f8:b1:ad:6d:4e:1f:2f:b9:32:2f: 81:02:b4:62:55:bc:ca:69:bf:2a:f0:22:1f:ee:cd: 20:03:b9:30:26:ef:0e:12:09:de:68:e6:ca:97:b0: 40:cf:85:62:01:d0:32:8d:ba:9c:84:da:fb:64:21: ee:34:5f:40:f3:88:3b:7f:51:ff:a4:71:a1:f2:40: b9:ff:c2:d8:14:c9:c0:49:f6:97:38:85:94:15:2a: 5e:72:59:14:f6:90:56:ac:b8:74:57:91:17:a9:00: 14:b3:96:13:d0:ff:a4:75:06:1b:6c:cf:58:e0:9c: 90:0b:c9:16:49:8f:a5:4f:8e:79:6f:e9:25:86:fd: df:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:57:52:16:A1:7D:3F:A1:5F:54:2A:3E:16:B1:6C:3A:19:2A:87:2F X509v3 Authority Key Identifier: keyid:71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:6e:54:e9:7b:53:ee:66:a2:d9:f2:c9:9e:df:84:f9:4a:b7: 8f:e9:80:bc:3c:90:5e:70:0c:63:45:10:c0:bb:ed:93:42:c5: 22:50:cb:c8:40:26:88:ee:2b:31:03:ef:9f:09:5a:a1:c7:e8: d3:2f:78:a4:d3:6c:46:97:e6:87:86:46:1f:e7:50:ae:9b:82: 71:4f:b4:79:9f:fd:0f:38:10:9c:c0:52:3d:b5:e6:ee:aa:80: 97:fc:dc:1e:e3:f6:54:86:af:52:47:95:83:c8:0b:33:3d:dc: 5e:40:4b:61:04:7b:03:fe:e8:00:b9:c2:cd:9b:9e:01:e9:31: ba:55:f6:a2:d4:f0:e4:d0:34:d5:ab:07:c4:58:73:a3:31:bf: 45:15:ef:f6:c1:68:a9:28:55:e1:67:48:dd:9a:33:f6:6c:4d: 51:5c:5a:d0:59:5d:d3:5c:b1:e7:1c:00:58:24:e2:d2:17:91: d2:09:f3:ab:47:53:ff:e8:dc:a0:9a:e8:1f:08:e8:2d:ec:5e: 3d:b6:fa:c3:6e:2e:c7:cd:03:8c:3b:88:73:91:a9:95:6e:67: 1f:73:4f:07:0c:06:46:2a:bd:73:cf:4e:f2:55:f4:8b:fa:b1: fd:b7:84:06:3e:82:f2:73:92:61:12:ec:a8:2a:f6:25:68:8d: 1f:eb:a8:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3NEUxMTAvBgNVBAUTKDcxODA3MzA5OEFGMDM5NkZEOEUzMzA5QTFCOUZCNkYz RUVCMTdBRTcwHhcNMjUxMjE4MTczMjE1WhcNMjUxMjI1MTczMjE1WjAYMRYwFAYD VQQDDA02OTQ0M2FhMC1jYWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkrbSJFQAitvutNTmJOfkjEAJZh87B5X7T9QeoE7sk0wVve92F/sDKMf6mEmv knQao8gNd/nKER7LO0MJ56ewtEQhcemL4MnZNbq/p8vt5cU/kYUS3dIV8DeBoj8W EtLQDiXk6gJDwd1eKTuN648DekzhnlZgVZgNi+nnNvixrW1OHy+5Mi+BArRiVbzK ab8q8CIf7s0gA7kwJu8OEgneaObKl7BAz4ViAdAyjbqchNr7ZCHuNF9A84g7f1H/ pHGh8kC5/8LYFMnASfaXOIWUFSpeclkU9pBWrLh0V5EXqQAUs5YT0P+kdQYbbM9Y 4JyQC8kWSY+lT455b+klhv3fBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRXUhah fT+hX1QqPhaxbDoZKocvMB8GA1UdIwQYMBaAFHGAcwmK8Dlv2OMwmhuftvPusXrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTc0RS81NEFBMTQ5Q0FB RjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09XX1k0ekNhRzUtMjgtNnhl dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NZQnpDWXJ3T1dfWTR6Q2FHNS0yOC02eGV1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTc0RS81NEFBMTQ5Q0FBRjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09X X1k0ekNhRzUtMjgtNnhldWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXblTpe1PuZqLZ8sme34T5SreP6YC8PJBecAxjRRDAu+2TQsUiUMvI QCaI7isxA++fCVqhx+jTL3ik02xGl+aHhkYf51Cum4JxT7R5n/0POBCcwFI9tebu qoCX/Nwe4/ZUhq9SR5WDyAszPdxeQEthBHsD/ugAucLNm54B6TG6Vfai1PDk0DTV qwfEWHOjMb9FFe/2wWipKFXhZ0jdmjP2bE1RXFrQWV3TXLHnHABYJOLSF5HSCfOr R1P/6NygmugfCOgt7F49tvrDbi7HzQOMO4hzkamVbmcfc08HDAZGKr1zz07yVfSL +rH9t4QGPoLyc5JhEuyoKvYlaI0f66ji -----END CERTIFICATE-----Generated at Fri Dec 19 23:56:32 2025 by rpki-client