This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft File: cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft (raw, json) Hash identifier: qHhq2YRed0OEaWP6ciMdn3n935p4cLLMXHG+f8Y7rZE= Subject key identifier: 12:35:E5:3B:70:6A:B8:8A:48:31:9C:70:68:BB:9E:01:FB:37:B7:05 Authority key identifier: 71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7 Certificate issuer: /CN=A917174E/serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7 Certificate serial: 0E74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft Manifest number: 0E73 Signing time: Fri 26 Dec 2025 17:23:09 +0000 Manifest this update: Fri 26 Dec 2025 17:23:09 +0000 Manifest next update: Fri 02 Jan 2026 17:23:09 +0000 Files and hashes: 1: cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl (hash: 4Njx6O7EGGn/jMWpN/R37B4TqCgEl2yaqaLaFoqIhxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 17:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3700 (0xe74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917174E, serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7 Validity Not Before: Dec 26 17:23:09 2025 GMT Not After : Jan 2 17:23:09 2026 GMT Subject: CN=694ec47d-810f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ed:eb:35:04:8d:df:21:d1:0d:97:41:c4:3a: 09:67:bb:3e:71:c0:5f:d9:39:29:8b:80:ea:3b:dd: 0b:e2:83:51:54:30:16:4d:31:ba:e1:92:36:2b:57: bb:8d:e3:7a:78:3b:08:d0:1a:da:5e:74:4e:b3:41: 72:3f:a3:1b:c0:64:ea:01:14:ab:85:94:af:ac:ef: 62:2e:5b:49:9d:9e:67:45:2d:19:a6:db:ec:94:12: 82:34:9d:9c:48:23:98:6b:68:70:bf:64:ef:de:6d: fa:c2:a2:50:68:c1:7b:da:3a:2e:38:28:b0:fb:47: d5:63:9b:76:ea:da:66:33:14:e6:70:6e:82:8a:ba: 02:0e:64:cf:2b:8c:26:47:a4:17:be:ba:65:67:8c: fa:25:7f:55:62:b1:e9:e8:16:b8:75:2e:c8:e0:cc: 87:06:ea:83:93:38:51:5c:3d:28:15:7a:e5:96:93: 80:df:4b:e0:5b:36:4f:7b:51:1f:0b:ea:ad:99:f5: 5d:46:60:40:03:74:f4:bb:ed:9f:d7:31:4d:57:be: d5:c2:0c:86:13:d3:f1:af:09:88:0a:6a:ad:cb:19: 33:fb:c5:4f:f4:96:58:75:fb:ff:7a:5b:f9:1b:f3: 80:4c:21:ac:e0:34:73:07:f3:c9:c0:f3:be:9e:65: 38:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:35:E5:3B:70:6A:B8:8A:48:31:9C:70:68:BB:9E:01:FB:37:B7:05 X509v3 Authority Key Identifier: keyid:71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:13:e3:92:83:1b:4a:ac:1d:3a:64:d5:86:71:ae:af:16:6c: 0c:4c:75:83:d8:36:4b:3f:53:96:d5:cd:5c:80:b2:a1:c6:93: 33:86:7b:d8:fa:34:62:0c:8f:84:44:3b:67:33:a0:5d:d9:d4: 7e:b8:22:f7:da:28:f2:94:75:39:06:f9:cb:bc:04:21:4a:fc: f3:13:76:36:83:a0:fb:5e:bb:b1:d2:58:2f:33:67:6a:4a:4a: 8e:0d:7c:ed:5f:07:0d:a2:1d:52:37:0a:20:8a:f6:42:07:50: f1:24:69:bb:f4:d8:ba:6f:db:bc:5f:d4:77:f7:de:a3:8e:62: cd:e4:4e:9b:9e:7f:9f:24:35:55:06:24:52:85:b5:20:96:63: 31:98:b8:00:35:31:52:a4:9b:b5:99:36:08:83:08:2e:d0:90: 27:74:e2:04:0c:b2:6f:56:37:b4:80:29:e0:b3:65:9c:b8:c8: 5a:e1:b6:41:03:02:73:37:3f:90:eb:95:26:e1:bc:de:de:2c: bd:2f:00:57:5c:ee:35:38:d0:74:f1:cc:b1:b9:1c:b1:47:5f: eb:d7:08:6f:02:bf:b9:54:45:0b:c8:2e:38:e4:92:b0:6f:e2: fe:d9:b6:a7:15:34:72:ff:16:43:97:60:33:19:44:d4:81:d5: f4:6c:18:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3NEUxMTAvBgNVBAUTKDcxODA3MzA5OEFGMDM5NkZEOEUzMzA5QTFCOUZCNkYz RUVCMTdBRTcwHhcNMjUxMjI2MTcyMzA5WhcNMjYwMTAyMTcyMzA5WjAYMRYwFAYD VQQDDA02OTRlYzQ3ZC04MTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnu3rNQSN3yHRDZdBxDoJZ7s+ccBf2Tkpi4DqO90L4oNRVDAWTTG64ZI2K1e7 jeN6eDsI0BraXnROs0FyP6MbwGTqARSrhZSvrO9iLltJnZ5nRS0ZptvslBKCNJ2c SCOYa2hwv2Tv3m36wqJQaMF72jouOCiw+0fVY5t26tpmMxTmcG6CiroCDmTPK4wm R6QXvrplZ4z6JX9VYrHp6Ba4dS7I4MyHBuqDkzhRXD0oFXrllpOA30vgWzZPe1Ef C+qtmfVdRmBAA3T0u+2f1zFNV77VwgyGE9PxrwmICmqtyxkz+8VP9JZYdfv/elv5 G/OATCGs4DRzB/PJwPO+nmU4IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBI15Ttw ariKSDGccGi7ngH7N7cFMB8GA1UdIwQYMBaAFHGAcwmK8Dlv2OMwmhuftvPusXrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTc0RS81NEFBMTQ5Q0FB RjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09XX1k0ekNhRzUtMjgtNnhl dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NZQnpDWXJ3T1dfWTR6Q2FHNS0yOC02eGV1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTc0RS81NEFBMTQ5Q0FBRjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09X X1k0ekNhRzUtMjgtNnhldWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlE+OSgxtKrB06ZNWGca6vFmwMTHWD2DZLP1OW1c1cgLKhxpMzhnvY +jRiDI+ERDtnM6Bd2dR+uCL32ijylHU5BvnLvAQhSvzzE3Y2g6D7Xrux0lgvM2dq SkqODXztXwcNoh1SNwogivZCB1DxJGm79Ni6b9u8X9R3996jjmLN5E6bnn+fJDVV BiRShbUglmMxmLgANTFSpJu1mTYIgwgu0JAndOIEDLJvVje0gCngs2WcuMha4bZB AwJzNz+Q65Um4bze3iy9LwBXXO41ONB08cyxuRyxR1/r1whvAr+5VEULyC445JKw b+L+2banFTRy/xZDl2AzGUTUgdX0bBhJ -----END CERTIFICATE-----Generated at Sun Dec 28 07:32:40 2025 by rpki-client