This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft File: yWKh77HWheqfDoW0F2aCj2oT7-U.mft (raw, json) Hash identifier: cleqwuXKG/VcAh6DJTsrocbrN8jj52S0dNQ4vZ+Fkms= Subject key identifier: D1:15:96:F4:88:0A:6B:42:02:CB:D3:D8:B2:C3:42:CE:21:D7:BD:EE Authority key identifier: C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 Certificate issuer: /CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Certificate serial: 04D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft Manifest number: 04CB Signing time: Thu 18 Dec 2025 23:09:53 +0000 Manifest this update: Thu 18 Dec 2025 23:09:53 +0000 Manifest next update: Thu 25 Dec 2025 23:09:53 +0000 Files and hashes: 1: yWKh77HWheqfDoW0F2aCj2oT7-U.crl (hash: 9xib+b6rS502VdFe+4e1mIjgFf0aSuWjC4caO/CrBcQ=) 2: 7CAFA5C44CA711EC9D22716BC4F9AE02.roa (hash: aRUayRfr0vMR7tS5Y4z3m5ZDFVHmg6WwIEoeJRznQ08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1232 (0x4d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188F4, serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Validity Not Before: Dec 18 23:09:53 2025 GMT Not After : Dec 25 23:09:53 2025 GMT Subject: CN=694489c1-9c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:62:5c:77:61:1e:ae:00:97:04:90:1f:a9:92: c5:a4:7c:6a:e7:46:9c:1e:fe:43:d3:d2:b9:b1:f3: ac:cc:7e:55:31:f2:c7:58:06:36:1e:3a:c1:73:5b: 68:aa:9d:b3:cd:ae:ef:8a:8a:1a:3c:31:ee:39:d7: 79:f1:5f:1e:38:9a:8a:8e:dd:6f:19:8a:6c:84:60: 67:70:eb:9e:fc:0e:4e:5d:20:dc:e3:d6:98:99:0c: 04:c0:24:98:64:d8:7f:45:79:20:6e:f8:70:8e:e2: bd:7d:93:06:d2:57:82:f9:65:94:1e:0a:45:8d:c5: 23:ca:02:6a:d9:b7:22:77:77:74:24:dc:7e:8f:e3: fc:68:8c:5d:cb:26:dd:27:99:b4:54:94:86:d3:b3: a8:2f:02:b6:59:ff:50:41:40:6d:06:64:20:02:3f: 8b:dd:20:a2:e3:c1:22:1e:cd:0d:44:4a:5d:74:5a: 6f:6b:88:bf:cc:fd:c3:67:82:62:5c:dd:fb:5c:93: 94:0c:18:7d:d2:07:0f:b6:18:84:b9:dc:4d:17:a4: 28:56:19:7c:54:4c:56:f7:95:b6:4b:10:87:45:9f: 57:c4:50:f1:c9:a4:7f:e2:32:96:17:36:07:3e:6a: 0a:ff:b9:00:ee:1b:4d:a3:a0:40:92:66:07:32:1e: 41:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:15:96:F4:88:0A:6B:42:02:CB:D3:D8:B2:C3:42:CE:21:D7:BD:EE X509v3 Authority Key Identifier: keyid:C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:60:06:d9:52:fb:71:2b:c8:bf:1c:74:49:48:c2:cb:30:a2: eb:2e:a8:96:9d:ee:77:74:46:6c:3f:43:e4:dd:be:59:9d:9b: d6:48:be:d7:07:ea:4c:1d:5e:51:4c:ee:3d:ba:54:e3:84:d3: 1b:06:40:4c:db:5c:eb:1f:c5:70:6e:88:4a:10:ae:70:d1:63: cf:d3:e9:65:65:82:23:53:1d:fe:6a:4b:24:41:7c:ef:a0:cc: 6c:2e:d6:84:61:53:3b:ed:aa:82:43:ed:88:03:10:c2:61:39: e4:aa:5e:7c:db:bf:ab:37:2b:0c:1f:27:19:0e:d2:c8:e5:5e: 1b:75:c4:d6:f3:9d:56:2a:c8:db:9a:87:ee:12:88:55:e0:17: 04:c8:d8:9f:ff:1a:85:51:dc:41:9f:96:56:4e:e5:21:14:57: 35:e9:34:74:91:30:09:ca:b8:8f:ed:c0:bf:c1:0e:7a:58:c6: 2e:c2:66:b9:12:95:24:df:27:70:dd:3d:b9:df:30:fb:2d:4b: 7b:08:6a:6a:a1:bc:b1:27:bb:02:d8:a0:36:63:f2:f5:0c:f4: db:d1:7e:66:27:e8:b0:21:a4:c6:ce:17:22:fb:aa:b3:0c:49: 20:0b:24:5f:d3:3c:3f:d5:22:7c:b9:44:d6:89:c8:93:c3:69: ac:88:d8:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RjQxMTAvBgNVBAUTKEM5NjJBMUVGQjFENjg1RUE5RjBFODVCNDE3NjY4MjhG NkExM0VGRTUwHhcNMjUxMjE4MjMwOTUzWhcNMjUxMjI1MjMwOTUzWjAYMRYwFAYD VQQDDA02OTQ0ODljMS05YzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoGJcd2EergCXBJAfqZLFpHxq50acHv5D09K5sfOszH5VMfLHWAY2HjrBc1to qp2zza7viooaPDHuOdd58V8eOJqKjt1vGYpshGBncOue/A5OXSDc49aYmQwEwCSY ZNh/RXkgbvhwjuK9fZMG0leC+WWUHgpFjcUjygJq2bcid3d0JNx+j+P8aIxdyybd J5m0VJSG07OoLwK2Wf9QQUBtBmQgAj+L3SCi48EiHs0NREpddFpva4i/zP3DZ4Ji XN37XJOUDBh90gcPthiEudxNF6QoVhl8VExW95W2SxCHRZ9XxFDxyaR/4jKWFzYH PmoK/7kA7htNo6BAkmYHMh5BFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNEVlvSI CmtCAsvT2LLDQs4h173uMB8GA1UdIwQYMBaAFMlioe+x1oXqnw6FtBdmgo9qE+/l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhGNC85MjhEQjBGNjRD QTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hlcWZEb1cwRjJhQ2oyb1Q3 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXS2g3N0hXaGVxZkRvVzBGMmFDajJvVDctVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhGNC85MjhEQjBGNjRDQTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hl cWZEb1cwRjJhQ2oyb1Q3LVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAYAbZUvtxK8i/HHRJSMLLMKLrLqiWne53dEZsP0Pk3b5ZnZvWSL7X B+pMHV5RTO49ulTjhNMbBkBM21zrH8VwbohKEK5w0WPP0+llZYIjUx3+akskQXzv oMxsLtaEYVM77aqCQ+2IAxDCYTnkql5827+rNysMHycZDtLI5V4bdcTW851WKsjb mofuEohV4BcEyNif/xqFUdxBn5ZWTuUhFFc16TR0kTAJyriP7cC/wQ56WMYuwma5 EpUk3ydw3T253zD7LUt7CGpqobyxJ7sC2KA2Y/L1DPTb0X5mJ+iwIaTGzhci+6qz DEkgCyRf0zw/1SJ8uUTWiciTw2msiNjx -----END CERTIFICATE-----Generated at Fri Dec 19 04:41:37 2025 by rpki-client