This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft File: YHa9C6TbeXpypo_v-b-1WMRDmLI.mft (raw, json) Hash identifier: 51SJYB4CNouI28ChAziwhsvHr759KLyNGqjJQQLzRlk= Subject key identifier: CD:0A:81:58:47:40:4C:F0:D7:E5:2B:14:C2:FD:B6:DA:28:80:B0:E4 Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2 Certificate issuer: /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2 Certificate serial: 0488 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft Manifest number: 045E Signing time: Mon 22 Dec 2025 23:24:50 +0000 Manifest this update: Mon 22 Dec 2025 23:24:49 +0000 Manifest next update: Mon 29 Dec 2025 23:24:49 +0000 Files and hashes: 1: YHa9C6TbeXpypo_v-b-1WMRDmLI.crl (hash: CuxyWHY+D/WJ/v51Aw+CSeScXHwQ8BrBjPWO9rbzUCM=) 2: 260D3330758A11EFAE7A8A39C4F9AE02.roa (hash: 8VvyEs0cT5gb0Pa9QyQkLFctUkO2J8xm2GTLEwroWxk=) 3: 844EFBDA766C11EF8CE33A86C4F9AE02.roa (hash: atopwMMKiv9hmzF2MWT9t/O+WABZDOgoXI2TZZKE0sM=) 4: ED1A0478799811EF8437F77EC4F9AE02.roa (hash: cKCBs+iXK9mKTKUEcpQQ6Sz2FB2iRN0G07D7yQIwB0A=) 5: B283BDAACF7C11F084EB1044C4F9AE02.roa (hash: WdQNREngzkkQGmItz4QAR4neKJoj1ZQOtux3fkTnadQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1160 (0x488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162EE1, serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2 Validity Not Before: Dec 22 23:24:49 2025 GMT Not After : Dec 29 23:24:49 2025 GMT Subject: CN=6949d341-6e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ad:39:85:8f:c2:a4:5a:02:7b:1f:9d:00:02: 60:c5:b4:18:15:2f:54:20:09:7a:ba:7e:e4:89:c5: e7:79:30:dd:da:36:c1:1c:fc:3b:e5:3b:79:0c:10: a2:c5:18:5a:a5:f1:8f:44:a5:50:32:79:75:9a:16: 26:39:5c:a6:30:dd:04:ad:0c:35:e9:d4:98:2a:5d: c4:51:63:56:a9:59:68:1a:c2:2d:b3:e3:ca:83:db: 78:c1:61:60:d0:fa:d4:d6:74:6c:65:73:cf:97:37: f6:39:aa:7d:d0:f6:40:c4:b6:da:b3:01:e1:3e:e5: 65:a7:80:05:5d:50:a7:d2:dd:1a:33:a3:24:96:55: 13:4a:72:36:2a:9a:7f:cb:01:c3:49:4e:62:28:08: c0:e0:4d:c9:b2:80:a8:bc:ce:5a:93:e1:96:ae:57: b8:b2:bd:d3:fd:cf:48:31:d4:f2:fe:dd:7a:f9:3c: 78:9d:fb:b9:fa:4e:69:85:71:ab:74:49:39:d4:5c: bc:f5:89:7e:59:ce:53:84:41:c8:83:e8:58:bf:5c: ea:64:3b:82:c1:4a:32:34:bb:8e:97:87:c0:90:94: 03:bc:d2:cd:cb:bc:08:2d:19:5c:fd:3e:5e:87:60: 9c:aa:ee:05:29:24:51:3e:85:0b:6b:2b:99:45:39: b8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:0A:81:58:47:40:4C:F0:D7:E5:2B:14:C2:FD:B6:DA:28:80:B0:E4 X509v3 Authority Key Identifier: keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:78:2f:34:41:e1:b3:2e:bc:11:d9:31:3c:7c:44:9d:38:0c: 34:7c:e0:7e:22:56:95:12:e6:4e:5e:15:e1:12:ae:e9:9f:d8: 0b:9d:9b:d4:63:fc:3b:3a:5d:2d:1c:fe:29:6c:cf:00:5f:cf: ef:cb:5b:f6:8d:36:b7:3d:3d:7f:98:e3:33:2e:1f:3b:8e:6b: 78:f4:e1:2a:6f:51:27:c3:91:5a:36:91:05:2d:e3:73:ef:ac: 3d:86:87:8d:3a:ca:7a:33:8a:aa:ee:74:72:50:21:b7:08:db: cf:1d:c0:f3:5a:12:5f:43:6c:e8:9b:b1:99:58:b8:26:3f:4e: 5d:b3:ea:ef:da:21:95:64:b8:0b:fa:ef:12:0e:51:16:79:cf: ea:86:f3:3a:de:61:84:95:1a:aa:ee:2f:3d:a8:e9:90:af:05: 75:7e:45:f5:34:cb:57:62:11:9a:d8:41:fe:43:3d:b7:dc:18: 28:bb:6e:a8:43:09:fd:e6:a7:eb:36:02:07:3c:43:1c:c0:ec: 70:1d:51:40:fd:1f:77:15:11:e9:fa:43:d5:a8:52:9b:fe:27: 6e:8a:dc:3c:a5:dc:61:b5:81:14:eb:b2:43:3c:ef:75:3f:b2: d0:71:ab:e3:3e:4a:0c:98:49:d9:7a:9c:cc:1a:2d:ab:72:97: d3:f6:d5:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJFRTExMTAvBgNVBAUTKDYwNzZCRDBCQTREQjc5N0E3MkE2OEZFRkY5QkZCNTU4 QzQ0Mzk4QjIwHhcNMjUxMjIyMjMyNDQ5WhcNMjUxMjI5MjMyNDQ5WjAYMRYwFAYD VQQDDA02OTQ5ZDM0MS02ZTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwq05hY/CpFoCex+dAAJgxbQYFS9UIAl6un7kicXneTDd2jbBHPw75Tt5DBCi xRhapfGPRKVQMnl1mhYmOVymMN0ErQw16dSYKl3EUWNWqVloGsIts+PKg9t4wWFg 0PrU1nRsZXPPlzf2Oap90PZAxLbaswHhPuVlp4AFXVCn0t0aM6MkllUTSnI2Kpp/ ywHDSU5iKAjA4E3JsoCovM5ak+GWrle4sr3T/c9IMdTy/t16+Tx4nfu5+k5phXGr dEk51Fy89Yl+Wc5ThEHIg+hYv1zqZDuCwUoyNLuOl4fAkJQDvNLNy7wILRlc/T5e h2Ccqu4FKSRRPoULayuZRTm4lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0KgVhH QEzw1+UrFML9ttoogLDkMB8GA1UdIwQYMBaAFGB2vQuk23l6cqaP7/m/tVjEQ5iy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkVFMS83NTJENDJFODhG RDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVYcHlwb192LWItMVdNUkRt TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lIYTlDNlRiZVhweXBvX3YtYi0xV01SRG1MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkVFMS83NTJENDJFODhGRDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVY cHlwb192LWItMVdNUkRtTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgeC80QeGzLrwR2TE8fESdOAw0fOB+IlaVEuZOXhXhEq7pn9gLnZvU Y/w7Ol0tHP4pbM8AX8/vy1v2jTa3PT1/mOMzLh87jmt49OEqb1Enw5FaNpEFLeNz 76w9hoeNOsp6M4qq7nRyUCG3CNvPHcDzWhJfQ2zom7GZWLgmP05ds+rv2iGVZLgL +u8SDlEWec/qhvM63mGElRqq7i89qOmQrwV1fkX1NMtXYhGa2EH+Qz233Bgou26o Qwn95qfrNgIHPEMcwOxwHVFA/R93FRHp+kPVqFKb/iduitw8pdxhtYEU67JDPO91 P7LQcavjPkoMmEnZepzMGi2rcpfT9tX0 -----END CERTIFICATE-----Generated at Tue Dec 23 22:39:33 2025 by rpki-client