This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft File: yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft (raw, json) Hash identifier: hGw8fZ344iC7//trr/glK7Fc6MAD3m6CuWYyZp1kS5s= Subject key identifier: A7:27:3E:C9:7F:B5:5E:DB:EA:88:63:3E:3F:15:4C:3A:09:CB:89:3F Authority key identifier: C9:12:B0:54:CA:43:A9:34:C1:77:57:33:D8:4B:F1:6E:48:56:BE:F0 Certificate issuer: /CN=A917E1FA/serialNumber=C912B054CA43A934C1775733D84BF16E4856BEF0 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft Manifest number: 6A Signing time: Mon 29 Dec 2025 06:00:06 +0000 Manifest this update: Mon 29 Dec 2025 06:00:06 +0000 Manifest next update: Mon 05 Jan 2026 06:00:06 +0000 Files and hashes: 1: yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl (hash: XwZY+8WflYNdra+3NniPw/NTdtg+B52uspS1hMrWq4o=) 2: 7354ACC0472811F0ADE2D44BC4F9AE02.roa (hash: wcclgPl4R6E/Zzr/USbPvSIER4uFng9U6618g1EWkBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 06:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FA, serialNumber=C912B054CA43A934C1775733D84BF16E4856BEF0 Validity Not Before: Dec 29 06:00:06 2025 GMT Not After : Jan 5 06:00:06 2026 GMT Subject: CN=695218e6-fcee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0f:7c:e2:0a:e2:e0:18:00:1c:b1:60:46:01: 39:28:34:78:35:e1:21:1a:8e:bb:b5:43:a9:de:36: 48:a8:0a:44:2f:72:98:01:cb:6e:ed:42:50:5e:47: 8b:f8:3b:02:bd:b5:df:76:e6:a3:64:2c:ae:f0:be: 16:a3:17:27:1a:fe:49:ac:cb:f7:3e:9d:19:7f:9e: 9e:41:a6:41:3c:47:90:92:cf:24:d4:e6:51:d2:5f: c5:47:b1:92:4c:d2:52:a8:11:18:3c:5d:cc:e0:df: 59:57:60:47:d8:8b:7e:db:7e:56:16:5b:aa:ff:3b: 16:78:6c:58:55:91:d6:a8:f9:5d:f8:b6:f4:6f:a3: b1:9c:89:e4:20:1b:43:fb:14:8c:a0:8d:85:de:1c: 8d:fe:7b:24:19:6d:4b:96:f5:4f:a5:77:d0:80:6d: e0:ec:7f:e4:56:fb:b8:56:6a:a4:5f:bd:f0:49:43: a1:6c:8b:1c:e3:d1:30:c4:cd:ce:8f:cc:6d:2b:66: 56:14:cc:56:07:2f:b2:49:3c:3c:05:43:71:18:a7: 16:97:70:38:31:6e:66:ad:ab:54:f3:86:75:86:5c: 9d:5d:4e:d9:f4:51:d4:4d:56:67:60:83:80:23:6c: 60:79:f3:38:d6:7b:e9:73:72:12:e0:5e:40:4b:98: 72:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:27:3E:C9:7F:B5:5E:DB:EA:88:63:3E:3F:15:4C:3A:09:CB:89:3F X509v3 Authority Key Identifier: keyid:C9:12:B0:54:CA:43:A9:34:C1:77:57:33:D8:4B:F1:6E:48:56:BE:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:a2:f3:b7:e5:0d:50:12:c3:10:15:ee:2d:f0:dc:a4:60:0b: b4:27:e1:cf:6b:f0:6d:73:e0:7b:49:8a:40:67:1e:ac:ba:34: 2c:25:d6:e2:0f:32:ba:8d:b8:0a:f3:8b:7c:b1:7d:c5:4f:3e: 55:ac:f6:87:c3:2b:97:c3:72:b4:24:2d:2f:e0:68:0e:b7:82: ca:21:55:91:de:41:30:e4:60:46:e3:88:f9:a4:0b:58:7b:89: 57:4d:72:a9:d4:88:ea:08:a9:e3:ad:a4:6c:7a:04:29:63:b3: fc:e3:79:12:44:a6:f1:e0:0b:50:22:25:3e:d0:22:e0:89:87: 82:67:6d:09:67:7e:93:9c:3d:32:a2:bd:dd:37:11:e9:14:08: 7c:a7:08:d5:78:33:1b:7d:cb:9d:5f:8b:92:fb:c8:06:3f:35: 0b:23:58:ea:a8:41:2d:e0:2f:ca:a3:5a:cf:8e:18:0d:79:e7: 1f:be:30:d3:59:b4:d4:6e:15:d5:45:d2:d9:93:04:d3:ab:54: d2:55:89:85:a8:0e:c7:82:b9:5a:79:84:12:02:ac:5e:ea:27: 65:68:c3:c6:a9:4d:af:f8:38:15:3a:22:76:b3:46:5f:de:6e: 47:e1:8f:8a:d2:c6:e5:47:ea:85:1f:11:b2:87:bf:83:dd:65: e5:25:3a:6f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTFGQTExMC8GA1UEBRMoQzkxMkIwNTRDQTQzQTkzNEMxNzc1NzMzRDg0QkYxNkU0 ODU2QkVGMDAeFw0yNTEyMjkwNjAwMDZaFw0yNjAxMDUwNjAwMDZaMBgxFjAUBgNV BAMMDTY5NTIxOGU2LWZjZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5D3ziCuLgGAAcsWBGATkoNHg14SEajru1Q6neNkioCkQvcpgBy27tQlBeR4v4 OwK9td925qNkLK7wvhajFyca/kmsy/c+nRl/np5BpkE8R5CSzyTU5lHSX8VHsZJM 0lKoERg8Xczg31lXYEfYi37bflYWW6r/OxZ4bFhVkdao+V34tvRvo7GcieQgG0P7 FIygjYXeHI3+eyQZbUuW9U+ld9CAbeDsf+RW+7hWaqRfvfBJQ6Fsixzj0TDEzc6P zG0rZlYUzFYHL7JJPDwFQ3EYpxaXcDgxbmatq1TzhnWGXJ1dTtn0UdRNVmdgg4Aj bGB58zjWe+lzchLgXkBLmHJzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpyc+yX+1 XtvqiGM+PxVMOgnLiT8wHwYDVR0jBBgwFoAUyRKwVMpDqTTBd1cz2EvxbkhWvvAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMUZBL0EyRDVFRTVFNDVB MzExRjA5NUVGRkQ0OEM0RjlBRTAyL3lSS3dWTXBEcVRUQmQxY3oyRXZ4YmtoV3Z2 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVJLd1ZNcERxVFRCZDFjejJFdnhia2hXdnZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MUZBL0EyRDVFRTVFNDVBMzExRjA5NUVGRkQ0OEM0RjlBRTAyL3lSS3dWTXBEcVRU QmQxY3oyRXZ4YmtoV3Z2QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMKi87flDVASwxAV7i3w3KRgC7Qn4c9r8G1z4HtJikBnHqy6NCwl1uIP MrqNuArzi3yxfcVPPlWs9ofDK5fDcrQkLS/gaA63gsohVZHeQTDkYEbjiPmkC1h7 iVdNcqnUiOoIqeOtpGx6BCljs/zjeRJEpvHgC1AiJT7QIuCJh4JnbQlnfpOcPTKi vd03EekUCHynCNV4Mxt9y51fi5L7yAY/NQsjWOqoQS3gL8qjWs+OGA155x++MNNZ tNRuFdVF0tmTBNOrVNJViYWoDseCuVp5hBICrF7qJ2Vow8apTa/4OBU6InazRl/e bkfhj4rSxuVH6oUfEbKHv4PdZeUlOm8= -----END CERTIFICATE-----Generated at Tue Dec 30 20:20:26 2025 by rpki-client