This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft File: yhlef9JZjYWjbJnsSBs1dMBuOxc.mft (raw, json) Hash identifier: moDLcQKIEWVyXzqf4cIcGlGnDA6c2a/9i/LOtbMnnDQ= Subject key identifier: E8:CC:8F:75:BE:4E:2A:CF:E1:47:AD:F7:B9:00:9E:7C:14:E2:F7:A1 Authority key identifier: CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17 Certificate issuer: /CN=A919DA63/serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17 Certificate serial: 0868 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft Manifest number: 0862 Signing time: Thu 18 Dec 2025 20:10:26 +0000 Manifest this update: Thu 18 Dec 2025 20:10:26 +0000 Manifest next update: Thu 25 Dec 2025 20:10:26 +0000 Files and hashes: 1: yhlef9JZjYWjbJnsSBs1dMBuOxc.crl (hash: szi5RYc+HhsEc7OpxImTLOHKpNkyAcwCpgAbNacs+yM=) 2: B65C355AE1E411EAAD5D8545C4F9AE02.roa (hash: EHew2Al89yfLEVdXGaRbj1T8KtGh2w0PUC3MBSskoUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:10:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2152 (0x868) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DA63, serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17 Validity Not Before: Dec 18 20:10:26 2025 GMT Not After : Dec 25 20:10:26 2025 GMT Subject: CN=69445fb2-ba41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:df:3a:ef:be:50:12:92:25:51:97:8a:d9:74: 6b:a6:c5:a4:23:79:5b:ed:a1:ea:f9:43:d6:1e:45: 4b:ff:41:b0:9d:d9:55:a7:3d:10:a8:f7:32:0f:52: d9:33:29:29:54:67:b9:ef:dc:71:f8:c0:3a:70:7b: de:cc:97:3e:23:39:17:86:47:a4:4a:be:0f:3b:82: b1:9d:2b:ce:76:78:74:50:8a:42:2b:72:3c:8f:03: af:4d:23:70:e9:8f:75:b7:b0:37:de:2a:df:02:bc: 3d:1c:32:86:d4:d1:71:27:08:77:91:75:9d:a2:06: 50:0f:7d:e3:1b:e7:e4:7b:5e:a8:2b:75:ee:d8:10: a1:eb:65:cb:f6:e2:d3:32:3a:61:5b:14:0d:c5:d1: da:81:dc:8c:dd:d3:02:9a:4e:9b:7a:e3:c5:44:10: cd:a6:73:f3:18:74:99:a7:24:19:a1:c8:f4:13:3f: 4f:21:dc:7e:b9:3c:10:ba:4d:a9:10:32:7e:eb:7e: 24:ef:0e:86:ab:fc:f2:62:37:02:e9:fd:6a:ca:bd: 98:ee:b2:03:1d:5e:e8:19:5b:e8:0e:68:0c:47:2c: 17:d1:a9:2f:1c:6d:08:27:ee:b3:3e:39:99:20:34: 6c:6a:b8:3f:d1:0b:03:53:00:4c:54:24:64:4c:0c: 25:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:CC:8F:75:BE:4E:2A:CF:E1:47:AD:F7:B9:00:9E:7C:14:E2:F7:A1 X509v3 Authority Key Identifier: keyid:CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:0a:19:70:a8:f7:59:96:5a:ea:23:b2:da:f7:1c:25:f1:a0: d3:a2:be:05:fd:a4:be:26:c7:57:68:2f:10:97:d0:07:92:02: c7:7e:b4:8c:40:46:69:f3:cc:ac:d3:0d:da:1d:71:08:d7:44: 9a:97:c7:5c:46:15:02:99:55:90:bd:6e:62:72:5c:60:8b:20: 7b:a6:29:00:84:16:d1:1a:dc:83:64:8a:91:da:cf:88:c2:e1: f4:54:47:65:0e:4a:c6:f2:bc:a9:aa:0d:6f:ae:ad:98:80:7a: d3:32:0e:c1:29:0e:f4:60:d8:8b:e1:5e:1d:c6:e3:94:8c:0b: 6d:d0:01:ab:6b:d5:d5:be:e7:46:cd:75:71:cb:03:4d:fb:87: 5d:59:9a:0a:03:6c:dd:a8:71:67:45:42:1c:c2:52:49:4d:61: 9a:02:0d:d9:7e:ec:33:51:56:b9:69:a2:cb:e0:a6:e7:7a:24: af:0e:a0:d3:6d:04:94:5f:5f:14:46:a4:c3:21:ce:e7:60:02: 80:54:de:44:02:12:2a:c1:bc:d0:4c:58:d7:44:57:1d:46:41: f4:6d:db:e1:f0:f8:04:2b:19:59:21:a1:40:f2:d1:3b:3e:a8: 3c:50:e9:4e:45:ec:8a:0a:8a:b1:fe:2d:56:e2:f1:85:ce:b0: 92:3d:d3:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURBNjMxMTAvBgNVBAUTKENBMTk1RTdGRDI1OThEODVBMzZDOTlFQzQ4MUIzNTc0 QzA2RTNCMTcwHhcNMjUxMjE4MjAxMDI2WhcNMjUxMjI1MjAxMDI2WjAYMRYwFAYD VQQDDA02OTQ0NWZiMi1iYTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs986775QEpIlUZeK2XRrpsWkI3lb7aHq+UPWHkVL/0GwndlVpz0QqPcyD1LZ MykpVGe579xx+MA6cHvezJc+IzkXhkekSr4PO4KxnSvOdnh0UIpCK3I8jwOvTSNw 6Y91t7A33irfArw9HDKG1NFxJwh3kXWdogZQD33jG+fke16oK3Xu2BCh62XL9uLT MjphWxQNxdHagdyM3dMCmk6beuPFRBDNpnPzGHSZpyQZocj0Ez9PIdx+uTwQuk2p EDJ+634k7w6Gq/zyYjcC6f1qyr2Y7rIDHV7oGVvoDmgMRywX0akvHG0IJ+6zPjmZ IDRsarg/0QsDUwBMVCRkTAwlxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjMj3W+ TirP4Uet97kAnnwU4vehMB8GA1UdIwQYMBaAFMoZXn/SWY2Fo2yZ7EgbNXTAbjsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REE2My8wMUJGN0JFRUUx RTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZV2piSm5zU0JzMWRNQnVP eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lobGVmOUpaallXamJKbnNTQnMxZE1CdU94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REE2My8wMUJGN0JFRUUxRTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZ V2piSm5zU0JzMWRNQnVPeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGChlwqPdZllrqI7La9xwl8aDTor4F/aS+JsdXaC8Ql9AHkgLHfrSM QEZp88ys0w3aHXEI10Sal8dcRhUCmVWQvW5iclxgiyB7pikAhBbRGtyDZIqR2s+I wuH0VEdlDkrG8rypqg1vrq2YgHrTMg7BKQ70YNiL4V4dxuOUjAtt0AGra9XVvudG zXVxywNN+4ddWZoKA2zdqHFnRUIcwlJJTWGaAg3ZfuwzUVa5aaLL4KbneiSvDqDT bQSUX18URqTDIc7nYAKAVN5EAhIqwbzQTFjXRFcdRkH0bdvh8PgEKxlZIaFA8tE7 Pqg8UOlOReyKCoqx/i1W4vGFzrCSPdNQ -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:13 2025 by rpki-client