This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft File: yZ1gB81HfYmzWcM8k8qptbsQYBo.mft (raw, json) Hash identifier: tGMnzYXgCC99qB2SQazapcf/KK5pLwRpBKE1KUmtpUs= Subject key identifier: 53:E0:50:3E:B2:37:F1:C3:71:F6:40:C5:3C:A0:83:BC:EF:13:5E:97 Authority key identifier: C9:9D:60:07:CD:47:7D:89:B3:59:C3:3C:93:CA:A9:B5:BB:10:60:1A Certificate issuer: /CN=A9173F03/serialNumber=C99D6007CD477D89B359C33C93CAA9B5BB10601A Certificate serial: 0C97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft Manifest number: 0C87 Signing time: Sat 20 Dec 2025 18:07:45 +0000 Manifest this update: Sat 20 Dec 2025 18:07:44 +0000 Manifest next update: Sat 27 Dec 2025 18:07:44 +0000 Files and hashes: 1: yZ1gB81HfYmzWcM8k8qptbsQYBo.crl (hash: mGkX6FZ39KeoFZb2K7MrjB4qR8+SbL/SyQnfTjbpYEg=) 2: 1F3C6E3C6E6811EF93F0A64EC4F9AE02.roa (hash: KCbvW2+iTb2FhCUJSCAthuyvDnx7MU5+U8PZ8z1pu+g=) 3: 7D16D03C861A11EF99D32B66C4F9AE02.roa (hash: LFZ6uBkW6voau17buZXmD8B1WuozeZe536RV9ixDxuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.crl rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3223 (0xc97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173F03, serialNumber=C99D6007CD477D89B359C33C93CAA9B5BB10601A Validity Not Before: Dec 20 18:07:44 2025 GMT Not After : Dec 27 18:07:44 2025 GMT Subject: CN=6946e5f1-366b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8e:76:24:8e:92:ba:fb:b0:3f:c5:de:0c:30: db:da:e0:1f:23:64:44:0e:6a:38:3b:4b:fc:ec:59: 1d:7c:4e:b0:fe:98:ad:29:ed:c2:89:e1:5c:21:4f: 1c:fd:fb:8a:05:9f:4b:62:c7:d6:27:07:ee:a0:d7: 94:c2:5c:cc:cf:ae:41:ab:33:3c:40:ca:16:79:56: a4:75:c9:a4:a0:4d:61:be:38:43:06:2d:43:5c:9b: 31:7f:43:fd:5c:ef:73:d4:3b:d4:ca:e6:8f:ab:fc: cc:16:0d:9c:bb:0e:d9:b8:19:64:d6:28:60:14:28: 84:bb:eb:c9:e8:ae:4d:e0:5e:ee:09:7b:81:82:96: 3c:1c:32:cc:7e:4e:b2:a8:da:06:e7:25:3b:d2:47: df:12:59:18:e2:d5:01:fd:29:f8:f3:ad:fd:6c:d7: cd:5e:e3:c3:a9:f1:11:c7:04:3b:8f:f9:e0:a1:0a: b2:e1:0a:c5:9e:75:7f:84:19:45:cb:48:94:dc:32: 2b:ee:e9:2d:30:15:c2:93:86:d2:f9:9d:87:26:82: 0b:72:7b:1d:25:22:51:c1:f1:e9:19:d1:bd:1b:56: b9:d7:cf:f4:a9:35:c0:a6:0e:a8:8f:29:3d:4f:a6: 65:75:d1:67:05:06:e7:39:15:6c:3b:5b:f5:c7:88: 60:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E0:50:3E:B2:37:F1:C3:71:F6:40:C5:3C:A0:83:BC:EF:13:5E:97 X509v3 Authority Key Identifier: keyid:C9:9D:60:07:CD:47:7D:89:B3:59:C3:3C:93:CA:A9:B5:BB:10:60:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:aa:a4:4e:89:3b:24:d5:8c:94:c2:00:75:42:70:be:20:78: 9e:0a:05:1f:96:59:c8:f4:57:b8:be:bb:4e:93:1e:82:11:43: ba:2b:16:eb:c4:2a:10:b8:54:58:c4:57:46:73:f8:c4:0c:23: a7:f8:50:48:78:6a:17:97:58:bb:42:81:2c:2b:2b:79:b6:77: fd:1a:95:fe:26:51:ac:e1:6e:11:ab:50:56:69:98:4e:a0:d9: 09:1a:9a:c6:fa:5d:f0:fb:df:26:91:1a:2d:9e:fe:e2:2a:f8: bc:7b:88:8f:9c:e9:1a:d4:85:e6:e5:ed:49:24:c0:76:39:0a: 31:02:70:7a:4f:d9:a8:1a:84:a8:4c:44:1f:f9:ad:86:f0:00: 57:a0:a1:5f:83:b7:28:b4:49:c2:51:76:2e:2f:06:9e:08:94: de:e4:18:db:a3:59:b2:27:4a:7d:bd:57:5d:90:1d:55:5c:72: 5f:45:c4:51:43:82:19:dd:07:c2:70:8b:6e:b9:3b:b4:d8:a4: 3c:4c:4a:7b:51:fb:a7:c0:18:9d:ef:d1:eb:80:7e:e8:1d:65: 76:50:7b:c1:93:9b:31:36:64:9e:f7:16:dc:dd:45:ec:cb:91: ca:d3:14:95:e2:59:6d:cf:82:bb:64:41:c8:ad:2a:4e:51:c2: 1b:ff:10:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNGMDMxMTAvBgNVBAUTKEM5OUQ2MDA3Q0Q0NzdEODlCMzU5QzMzQzkzQ0FBOUI1 QkIxMDYwMUEwHhcNMjUxMjIwMTgwNzQ0WhcNMjUxMjI3MTgwNzQ0WjAYMRYwFAYD VQQDDA02OTQ2ZTVmMS0zNjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwI52JI6SuvuwP8XeDDDb2uAfI2REDmo4O0v87FkdfE6w/pitKe3CieFcIU8c /fuKBZ9LYsfWJwfuoNeUwlzMz65BqzM8QMoWeVakdcmkoE1hvjhDBi1DXJsxf0P9 XO9z1DvUyuaPq/zMFg2cuw7ZuBlk1ihgFCiEu+vJ6K5N4F7uCXuBgpY8HDLMfk6y qNoG5yU70kffElkY4tUB/Sn48639bNfNXuPDqfERxwQ7j/ngoQqy4QrFnnV/hBlF y0iU3DIr7uktMBXCk4bS+Z2HJoILcnsdJSJRwfHpGdG9G1a518/0qTXApg6ojyk9 T6ZlddFnBQbnORVsO1v1x4hgJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPgUD6y N/HDcfZAxTygg7zvE16XMB8GA1UdIwQYMBaAFMmdYAfNR32Js1nDPJPKqbW7EGAa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0YwMy82NEY2QzI4RTBE RTExMUVBOTk2Njk4ODVDNEY5QUUwMi95WjFnQjgxSGZZbXpXY004azhxcHRic1FZ Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laMWdCODFIZllteldjTThrOHFwdGJzUVlCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0YwMy82NEY2QzI4RTBERTExMUVBOTk2Njk4ODVDNEY5QUUwMi95WjFnQjgxSGZZ bXpXY004azhxcHRic1FZQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKqqROiTsk1YyUwgB1QnC+IHieCgUfllnI9Fe4vrtOkx6CEUO6Kxbr xCoQuFRYxFdGc/jEDCOn+FBIeGoXl1i7QoEsKyt5tnf9GpX+JlGs4W4Rq1BWaZhO oNkJGprG+l3w+98mkRotnv7iKvi8e4iPnOka1IXm5e1JJMB2OQoxAnB6T9moGoSo TEQf+a2G8ABXoKFfg7cotEnCUXYuLwaeCJTe5Bjbo1myJ0p9vVddkB1VXHJfRcRR Q4IZ3QfCcItuuTu02KQ8TEp7UfunwBid79HrgH7oHWV2UHvBk5sxNmSe9xbc3UXs y5HK0xSV4lltz4K7ZEHIrSpOUcIb/xDm -----END CERTIFICATE-----Generated at Sun Dec 21 06:09:30 2025 by rpki-client