This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft File: YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft (raw, json) Hash identifier: /M7u+SDCjEngPxiUyiFWSgHTiZYfjqPQhPny2L6W9Fs= Subject key identifier: D0:08:1F:7E:D1:E1:AD:91:D1:1F:7E:47:2F:16:13:B6:B7:F8:36:29 Authority key identifier: 61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40 Certificate issuer: /CN=A914F7F0/serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940 Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft Manifest number: 0104 Signing time: Tue 23 Dec 2025 04:03:48 +0000 Manifest this update: Tue 23 Dec 2025 04:03:48 +0000 Manifest next update: Tue 30 Dec 2025 04:03:48 +0000 Files and hashes: 1: YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl (hash: /MP+bc5y5exrl2eSR9NsEoer3LBXgB1NlqJFTcksSjw=) 2: 9A826D9059D611EF814F004DC4F9AE02.roa (hash: 3aT0muq2AP76fHDV6M45dsCuBJOlUCEA5kwKeP8ww7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F7F0, serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940 Validity Not Before: Dec 23 04:03:48 2025 GMT Not After : Dec 30 04:03:48 2025 GMT Subject: CN=694a14a4-bd81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:37:a7:9c:c3:fa:9d:f9:ff:97:42:01:ae:49: 6a:4f:a9:b1:76:45:a1:79:8a:d6:95:e2:d9:91:30: db:44:3a:02:39:f7:69:45:3f:3d:1e:76:9c:d5:77: a5:4e:a9:60:9c:44:d7:51:67:64:f7:30:17:2a:6d: 9a:56:6c:5f:9d:11:d6:a7:99:67:a8:fe:93:21:45: 58:0e:f2:09:98:a9:49:ac:4f:bf:a1:74:6f:af:f3: e6:4f:d9:46:0d:fd:01:a6:d0:6e:d2:d1:42:81:b2: 46:42:53:25:0b:da:e4:ed:b8:f7:e9:b0:6b:6c:c8: 8e:c5:81:be:7b:f4:cc:02:dd:dd:63:77:a4:ea:8b: 2f:12:2a:14:2d:d2:44:15:0b:69:09:68:fb:9c:6c: fb:fc:91:c0:c4:53:9e:b0:54:60:f0:eb:75:6b:e7: b3:a1:2d:9f:cb:52:be:9d:0b:21:78:99:70:cd:9b: 87:23:44:b1:95:7b:a5:c0:4d:2a:44:34:e9:5f:e9: 3a:45:a8:48:d2:6b:f1:83:8e:4c:e0:84:8a:88:ef: 4e:b2:5e:c6:37:d2:88:bb:ae:6f:88:d2:cf:be:64: c1:0d:d8:df:63:71:ec:b4:59:ec:a0:18:5a:6f:99: f4:b2:e9:8e:6d:68:42:9f:b1:c5:ef:ef:93:8b:59: 52:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:08:1F:7E:D1:E1:AD:91:D1:1F:7E:47:2F:16:13:B6:B7:F8:36:29 X509v3 Authority Key Identifier: keyid:61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:c2:94:cc:f8:02:23:3d:f3:ed:a4:f1:dc:ed:dc:3f:7a:ca: 7f:1e:dd:65:f3:53:7b:80:49:ef:4d:29:e3:f8:1f:6c:96:7d: 4f:8a:03:67:c7:94:97:ca:f3:14:ad:fb:00:01:e2:80:e8:f7: 88:e6:de:10:00:eb:a7:db:75:7a:eb:3d:b1:f4:a1:3f:25:61: 22:7c:ae:5c:3a:39:f5:34:d9:31:b6:0d:a1:f9:ea:69:88:66: de:f2:68:63:62:73:4f:02:28:6d:a3:0d:6e:74:b3:0a:e5:10: 5e:58:2b:d9:3e:7c:31:ee:8a:f1:70:af:55:ea:cf:2f:b0:c3: cb:df:ed:1c:0e:6d:1b:cd:6a:62:bb:86:f9:ee:d1:79:42:ff: 6b:dc:a9:c1:46:79:0f:88:ad:30:2f:88:f6:e5:d2:6c:bc:be: f0:a5:21:d1:eb:20:2b:74:6d:d8:78:28:f3:bb:fb:f2:2e:13: f4:91:30:02:af:23:47:ef:9a:9b:16:61:1a:33:37:cb:b3:bc: 2b:39:06:09:b7:c8:34:71:bc:24:ae:01:41:f9:1a:45:cf:1d: af:0e:fa:b8:d1:f1:39:0b:b6:d7:d0:93:26:90:67:4c:e2:96: d4:29:10:e6:83:ed:48:17:17:2b:7e:e8:e3:2d:43:fa:80:e6: c2:d4:d2:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY3RjAxMTAvBgNVBAUTKDYxMUNCNTU2Qzg3QkMwNDlBNUE0M0VCMUYyOTcxMDdF RkYxQjc5NDAwHhcNMjUxMjIzMDQwMzQ4WhcNMjUxMjMwMDQwMzQ4WjAYMRYwFAYD VQQDDA02OTRhMTRhNC1iZDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTennMP6nfn/l0IBrklqT6mxdkWheYrWleLZkTDbRDoCOfdpRT89Hnac1Xel TqlgnETXUWdk9zAXKm2aVmxfnRHWp5lnqP6TIUVYDvIJmKlJrE+/oXRvr/PmT9lG Df0BptBu0tFCgbJGQlMlC9rk7bj36bBrbMiOxYG+e/TMAt3dY3ek6osvEioULdJE FQtpCWj7nGz7/JHAxFOesFRg8Ot1a+ezoS2fy1K+nQsheJlwzZuHI0SxlXulwE0q RDTpX+k6RahI0mvxg45M4ISKiO9Osl7GN9KIu65viNLPvmTBDdjfY3HstFnsoBha b5n0sumObWhCn7HF7++Ti1lSUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAIH37R 4a2R0R9+Ry8WE7a3+DYpMB8GA1UdIwQYMBaAFGEctVbIe8BJpaQ+sfKXEH7/G3lA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjdGMC9DNzRFQjY5QTU5 RDUxMUVGODNEMjhCNEJDNEY5QUUwMi9ZUnkxVnNoN3dFbWxwRDZ4OHBjUWZ2OGJl VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSeTFWc2g3d0VtbHBENng4cGNRZnY4YmVVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjdGMC9DNzRFQjY5QTU5RDUxMUVGODNEMjhCNEJDNEY5QUUwMi9ZUnkxVnNoN3dF bWxwRDZ4OHBjUWZ2OGJlVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEwpTM+AIjPfPtpPHc7dw/esp/Ht1l81N7gEnvTSnj+B9sln1PigNn x5SXyvMUrfsAAeKA6PeI5t4QAOun23V66z2x9KE/JWEifK5cOjn1NNkxtg2h+epp iGbe8mhjYnNPAihtow1udLMK5RBeWCvZPnwx7orxcK9V6s8vsMPL3+0cDm0bzWpi u4b57tF5Qv9r3KnBRnkPiK0wL4j25dJsvL7wpSHR6yArdG3YeCjzu/vyLhP0kTAC ryNH75qbFmEaMzfLs7wrOQYJt8g0cbwkrgFB+RpFzx2vDvq40fE5C7bX0JMmkGdM 4pbUKRDmg+1IFxcrfujjLUP6gObC1NLY -----END CERTIFICATE-----Generated at Tue Dec 23 09:29:17 2025 by rpki-client