This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft File: cyJU29YY8YhtTfkgE5O_34ueAg4.mft (raw, json) Hash identifier: hPOS2YV0SllPUAUa64Bwy7Li8hbrH9I+K97jPocualY= Subject key identifier: 25:E6:3B:2D:35:D2:02:71:65:56:20:57:0A:72:E5:4F:8D:45:39:10 Authority key identifier: 73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E Certificate issuer: /CN=A91142EA/serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E Certificate serial: 0716 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft Manifest number: 201B Signing time: Mon 22 Dec 2025 15:51:46 +0000 Manifest this update: Mon 22 Dec 2025 15:51:46 +0000 Manifest next update: Mon 29 Dec 2025 15:51:46 +0000 Files and hashes: 1: cyJU29YY8YhtTfkgE5O_34ueAg4.crl (hash: QUx5X7lkDRKN7GYl5YHi2mnFWp7XXcm+8YYf819DgDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:51:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1814 (0x716) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91142EA, serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E Validity Not Before: Dec 22 15:51:46 2025 GMT Not After : Dec 29 15:51:46 2025 GMT Subject: CN=69496912-4f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:65:2f:08:05:a6:87:da:70:69:68:a1:65:78: 81:ad:01:f1:17:9a:e5:67:b9:0c:a2:29:32:54:a6: d8:bf:6d:78:7f:08:5a:a5:5d:2f:ca:e6:30:ea:48: f4:73:be:bb:ea:55:b3:68:14:b3:90:4d:4f:14:3a: 18:cc:88:70:b5:f8:20:8a:7b:55:8e:d5:08:40:16: 11:f1:d7:b1:2f:2d:aa:1a:c0:8f:81:cc:a9:03:c2: 30:39:b4:b0:59:65:79:53:a0:e6:81:39:79:e9:2e: 3b:b4:c8:c2:86:08:70:5a:7c:d1:f7:75:65:a9:5a: 6f:6f:48:a4:be:b2:97:bd:61:7d:66:fe:cc:cd:99: ee:cb:4d:15:f6:b3:c7:7c:b7:34:36:d8:39:40:38: d0:38:28:7e:2a:22:a9:5a:93:92:5e:42:7c:f2:63: c1:8a:ac:0e:ef:08:41:15:ff:c9:03:05:ab:c5:09: 3b:67:89:11:61:47:90:bc:c1:3e:30:50:d1:1d:97: aa:5c:5f:8c:87:00:c8:91:28:94:7e:85:2f:7a:9e: 06:ea:ca:cb:b1:b7:09:53:8e:31:b9:5f:f6:3c:b6: 04:0c:f0:d5:c3:ca:1a:66:de:28:a9:86:ba:63:d1: 9c:ab:6c:9c:0b:3e:fc:0e:3a:c7:64:05:06:75:48: 17:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E6:3B:2D:35:D2:02:71:65:56:20:57:0A:72:E5:4F:8D:45:39:10 X509v3 Authority Key Identifier: keyid:73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:16:a6:87:78:dd:5e:bd:d4:27:b8:fb:30:81:35:ee:8c:a6: 4f:43:e0:46:92:62:57:13:58:e0:52:be:a9:6b:7f:56:b3:bf: f4:17:70:89:89:50:75:7d:96:d7:85:2d:62:e7:ca:b3:37:9c: 13:bd:14:47:16:11:c4:d5:13:bd:37:d1:5a:9d:e1:2c:ac:58: 07:dc:38:b6:b7:e3:a6:9b:c4:3f:74:7d:29:a7:ac:f4:12:3b: 5e:75:05:1c:12:fa:e8:67:d4:95:16:62:e2:bc:48:67:23:88: d6:2c:ae:3b:24:6d:5a:b7:f2:7f:f9:52:ea:1a:42:52:42:7c: a8:61:a2:e7:71:60:3b:d2:20:e4:1a:3b:05:92:e1:c5:35:84: a0:8e:07:95:19:e9:66:e7:71:e8:5d:95:8e:87:82:7e:a9:70: f2:4b:70:33:86:47:35:7c:47:d8:16:38:ca:d1:b7:75:3d:06: 38:85:f8:86:32:da:ed:57:61:1f:d1:3e:53:ac:aa:9a:73:66: 41:40:78:e3:a0:a1:93:f6:34:48:ae:c9:b3:73:bd:ec:98:97: 1d:fd:c6:fd:9e:f7:4b:9f:3d:38:20:58:7a:8e:af:b4:23:18: 70:20:7a:79:33:fa:82:d2:f5:7c:a4:dd:44:cb:b5:1c:d4:eb: d7:4c:10:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQyRUExMTAvBgNVBAUTKDczMjI1NERCRDYxOEYxODg2RDRERjkyMDEzOTNCRkRG OEI5RTAyMEUwHhcNMjUxMjIyMTU1MTQ2WhcNMjUxMjI5MTU1MTQ2WjAYMRYwFAYD VQQDDA02OTQ5NjkxMi00ZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGUvCAWmh9pwaWihZXiBrQHxF5rlZ7kMoikyVKbYv214fwhapV0vyuYw6kj0 c7676lWzaBSzkE1PFDoYzIhwtfggintVjtUIQBYR8dexLy2qGsCPgcypA8IwObSw WWV5U6DmgTl56S47tMjChghwWnzR93VlqVpvb0ikvrKXvWF9Zv7MzZnuy00V9rPH fLc0Ntg5QDjQOCh+KiKpWpOSXkJ88mPBiqwO7whBFf/JAwWrxQk7Z4kRYUeQvME+ MFDRHZeqXF+MhwDIkSiUfoUvep4G6srLsbcJU44xuV/2PLYEDPDVw8oaZt4oqYa6 Y9Gcq2ycCz78DjrHZAUGdUgXQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXmOy01 0gJxZVYgVwpy5U+NRTkQMB8GA1UdIwQYMBaAFHMiVNvWGPGIbU35IBOTv9+LngIO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDJFQS9GNTMzMkQ3RTg0 QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9jeUpVMjlZWThZaHRUZmtnRTVPXzM0dWVB ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N5SlUyOVlZOFlodFRma2dFNU9fMzR1ZUFnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDJFQS9GNTMzMkQ3RTg0QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9jeUpVMjlZWThZ aHRUZmtnRTVPXzM0dWVBZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5FqaHeN1evdQnuPswgTXujKZPQ+BGkmJXE1jgUr6pa39Ws7/0F3CJ iVB1fZbXhS1i58qzN5wTvRRHFhHE1RO9N9FaneEsrFgH3Di2t+Omm8Q/dH0pp6z0 EjtedQUcEvroZ9SVFmLivEhnI4jWLK47JG1at/J/+VLqGkJSQnyoYaLncWA70iDk GjsFkuHFNYSgjgeVGelm53HoXZWOh4J+qXDyS3Azhkc1fEfYFjjK0bd1PQY4hfiG MtrtV2Ef0T5TrKqac2ZBQHjjoKGT9jRIrsmzc73smJcd/cb9nvdLnz04IFh6jq+0 IxhwIHp5M/qC0vV8pN1Ey7Uc1OvXTBDD -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:30 2025 by rpki-client