This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft File: yUSBytAO-x3qepOcvimo9F8l4gs.mft (raw, json) Hash identifier: DTOACsuqE6e0xDWarXw+JiuQe+0xlM6596Cfjm6+c1g= Subject key identifier: 35:11:A1:0A:65:FC:CC:CE:C8:38:4E:05:BA:34:38:3D:88:11:CB:ED Authority key identifier: C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B Certificate issuer: /CN=A9113F63/serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B Certificate serial: 0261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft Manifest number: 025D Signing time: Tue 23 Dec 2025 00:38:33 +0000 Manifest this update: Tue 23 Dec 2025 00:38:32 +0000 Manifest next update: Tue 30 Dec 2025 00:38:32 +0000 Files and hashes: 1: yUSBytAO-x3qepOcvimo9F8l4gs.crl (hash: B9rw+u7ltwriVZarNHrS4FgVi7/HeJyNyzE/17CzXQk=) 2: 03D8DC4A40F011EDAD789E3AC4F9AE02.roa (hash: 21GXaY8jinl0FFe6J0Dy+QT51osw17hMflWFhu3HoLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 609 (0x261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113F63, serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B Validity Not Before: Dec 23 00:38:32 2025 GMT Not After : Dec 30 00:38:32 2025 GMT Subject: CN=6949e488-9551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1f:f6:b3:d5:6e:99:e8:88:7f:77:eb:37:40: fa:fe:2d:1c:cf:c9:04:d3:a3:d6:59:a0:ea:04:5e: 0b:21:22:d8:9d:0d:0d:19:c8:21:de:d0:12:51:a5: 4a:e7:08:f3:fd:1c:fd:96:98:ab:2d:49:78:98:35: 0d:b6:e4:bd:4e:d6:9b:db:53:5a:8d:90:4b:e9:f1: 36:47:54:a5:7b:47:5b:61:d3:9f:30:67:c4:24:99: 84:9f:c5:f8:3f:d0:d6:c0:d8:e7:37:8e:7b:03:9a: f2:6f:91:fa:5e:1b:4b:c0:3b:7f:0b:bf:6e:69:2e: 04:92:74:7c:6b:bc:53:66:79:df:cf:46:17:01:1e: 97:39:d2:9b:17:6e:a5:e6:9c:1a:65:19:b0:83:ae: 1d:b4:04:10:d6:17:50:06:f9:8e:aa:5d:f8:82:56: f1:f3:e4:62:11:28:d3:18:f2:8e:79:f7:58:e3:5e: 3b:e4:db:ba:20:58:25:d7:e6:94:a2:92:41:7c:1a: 2e:9f:00:c6:da:f8:11:52:f1:43:06:f8:80:8c:4a: f2:28:f9:e1:25:3c:c3:b2:07:c0:c9:d0:f9:51:7c: 9f:76:6d:a3:10:2b:29:75:2f:a7:5f:b2:3f:9b:95: e9:47:68:20:3a:41:11:da:14:ca:fd:f2:a9:7e:28: a6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:11:A1:0A:65:FC:CC:CE:C8:38:4E:05:BA:34:38:3D:88:11:CB:ED X509v3 Authority Key Identifier: keyid:C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:9a:62:67:41:ef:e5:3e:be:51:b1:4f:c7:61:fb:66:8b:d1: d6:11:43:91:62:a4:0e:65:7f:e9:7d:0d:54:50:51:21:85:52: 34:a4:ea:4d:e7:6c:bc:f2:cd:67:6e:6d:e8:00:c8:46:6a:d2: 57:6a:ab:a8:4c:c5:30:1a:da:b8:89:17:1b:a5:0c:34:52:5e: 20:a9:f9:87:84:66:43:9b:3a:f4:a0:5c:27:dc:b2:bb:25:4d: ed:f7:7a:b7:b3:9c:2d:0f:25:e3:ac:30:de:a1:9c:bc:b8:2b: 3f:78:d4:d1:21:7f:7c:eb:a5:8b:f2:23:92:d2:77:33:62:35: 34:f0:3f:3c:e4:e1:d9:be:d1:08:30:54:8f:1c:65:84:e0:34: fd:4e:0a:c0:4b:78:36:b1:6b:dd:44:2c:d8:9c:4f:3a:93:4d: d3:f8:4e:d4:46:3b:41:00:2f:e9:98:ef:f5:09:0b:bb:91:68: 1e:e6:7f:c0:dd:77:48:86:91:6b:e9:c6:62:3d:90:d0:3d:87: 29:55:b9:7d:b6:28:51:ed:27:a4:61:67:a0:6b:59:49:1e:b9: a5:05:d4:e0:67:fc:74:19:f4:36:ad:c1:e2:41:66:e4:7c:fe: 54:4e:9a:63:81:b4:90:fc:4b:dc:93:5b:10:72:1a:8d:b5:01: 3e:07:ad:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNGNjMxMTAvBgNVBAUTKEM5NDQ4MUNBRDAwRUZCMURFQTdBOTM5Q0JFMjlBOEY0 NUYyNUUyMEIwHhcNMjUxMjIzMDAzODMyWhcNMjUxMjMwMDAzODMyWjAYMRYwFAYD VQQDDA02OTQ5ZTQ4OC05NTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsh/2s9VumeiIf3frN0D6/i0cz8kE06PWWaDqBF4LISLYnQ0NGcgh3tASUaVK 5wjz/Rz9lpirLUl4mDUNtuS9Ttab21NajZBL6fE2R1Sle0dbYdOfMGfEJJmEn8X4 P9DWwNjnN457A5ryb5H6XhtLwDt/C79uaS4EknR8a7xTZnnfz0YXAR6XOdKbF26l 5pwaZRmwg64dtAQQ1hdQBvmOql34glbx8+RiESjTGPKOefdY41475Nu6IFgl1+aU opJBfBounwDG2vgRUvFDBviAjEryKPnhJTzDsgfAydD5UXyfdm2jECspdS+nX7I/ m5XpR2ggOkER2hTK/fKpfiimPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDURoQpl /MzOyDhOBbo0OD2IEcvtMB8GA1UdIwQYMBaAFMlEgcrQDvsd6nqTnL4pqPRfJeIL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0Y2My81MTlCNjRBNjQw RUMxMUVEQTg4RUI1MzNDNEY5QUUwMi95VVNCeXRBTy14M3FlcE9jdmltbzlGOGw0 Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVU0J5dEFPLXgzcWVwT2N2aW1vOUY4bDRncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0Y2My81MTlCNjRBNjQwRUMxMUVEQTg4RUI1MzNDNEY5QUUwMi95VVNCeXRBTy14 M3FlcE9jdmltbzlGOGw0Z3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAmmJnQe/lPr5RsU/HYftmi9HWEUORYqQOZX/pfQ1UUFEhhVI0pOpN 52y88s1nbm3oAMhGatJXaquoTMUwGtq4iRcbpQw0Ul4gqfmHhGZDmzr0oFwn3LK7 JU3t93q3s5wtDyXjrDDeoZy8uCs/eNTRIX9866WL8iOS0nczYjU08D885OHZvtEI MFSPHGWE4DT9TgrAS3g2sWvdRCzYnE86k03T+E7URjtBAC/pmO/1CQu7kWge5n/A 3XdIhpFr6cZiPZDQPYcpVbl9tihR7SekYWega1lJHrmlBdTgZ/x0GfQ2rcHiQWbk fP5UTppjgbSQ/Evck1sQchqNtQE+B60O -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:36 2025 by rpki-client