This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft File: _y7elNMHvCOJpLc5WSplf3FhzKI.mft (raw, json) Hash identifier: gsDXxjo/bE6togrmiI261yGpYVQRYT0u+zqo7nqJ7hs= Subject key identifier: 2D:72:7B:58:29:DC:3E:71:B7:85:6D:52:1E:EB:45:8C:BF:40:9A:00 Authority key identifier: FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2 Certificate issuer: /CN=A911A7C2/serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2 Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft Manifest number: 0189 Signing time: Sun 21 Dec 2025 02:53:00 +0000 Manifest this update: Sun 21 Dec 2025 02:52:59 +0000 Manifest next update: Sun 28 Dec 2025 02:52:59 +0000 Files and hashes: 1: _y7elNMHvCOJpLc5WSplf3FhzKI.crl (hash: qDYkDeY33PnVk3n7mVLi1RnLddO1RWGEE5wdziyMTE8=) 2: 020CCB128E9011EEB7C5651BC4F9AE02.roa (hash: 9u7hJWCaj6swUyl4Lo+NQ5jDQOVV3N0GJXiJup7pfkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A7C2, serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2 Validity Not Before: Dec 21 02:52:59 2025 GMT Not After : Dec 28 02:52:59 2025 GMT Subject: CN=6947610c-809e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c8:e2:34:d8:14:3e:3e:6d:0d:36:22:3d:bb: e8:f5:db:f0:81:bb:d7:de:0f:09:f6:b6:9f:9a:0e: 0b:2a:b6:eb:9c:c8:9d:6a:43:9c:4e:20:99:17:69: 80:92:20:de:ee:48:57:96:90:5b:4f:a6:62:2d:94: 02:8d:07:e3:73:81:3c:c5:df:a9:34:d2:f6:f1:43: e5:68:b1:8f:d0:82:cf:1e:c5:14:cb:ee:c5:b9:d8: 40:be:db:fe:57:00:99:2b:60:1e:da:68:37:f4:36: 76:d5:ff:30:4d:c9:a5:79:87:d0:87:96:bd:8f:7e: 3b:0c:2a:df:64:ad:11:44:1f:52:72:90:f5:20:1b: 0e:c0:ae:81:80:c3:d6:b9:e6:7a:26:82:36:32:ec: 4e:cf:47:2c:5a:12:cd:ec:c2:66:2f:4b:47:9b:77: 2d:18:bb:d7:68:7e:7d:1a:c7:4f:dc:e0:cf:26:5a: 2f:02:48:68:46:50:19:f4:a5:ca:b6:f4:10:96:5b: ad:4c:6b:4d:07:31:4c:be:da:01:85:eb:d7:34:8f: b8:c0:aa:45:ae:74:79:92:9d:1b:67:5d:df:bd:84: ae:8e:94:67:8d:45:3c:fb:b2:34:c1:4a:a9:8f:ca: 7e:5c:be:8c:70:32:f6:b4:b9:12:40:05:97:b2:45: 7e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:72:7B:58:29:DC:3E:71:B7:85:6D:52:1E:EB:45:8C:BF:40:9A:00 X509v3 Authority Key Identifier: keyid:FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:8c:1e:70:f5:df:04:07:18:18:8d:9e:f7:ea:92:8e:9b:5c: 51:37:1c:d8:c1:ed:2a:38:2e:7d:5b:ea:2c:64:b1:9c:2b:18: 38:6a:3a:95:30:d2:d1:54:52:dc:ec:15:97:95:b6:76:e4:f4: 6e:e6:c3:5f:5e:38:c3:f0:56:68:3d:8c:c5:35:3d:77:fd:ce: 7f:7e:cf:f5:67:43:fd:fc:a0:a7:de:8d:e3:70:26:67:a1:b4: 87:42:57:29:4e:4b:d0:9a:d3:63:45:6b:5d:c4:37:cc:ac:00: 22:b5:c9:00:0d:ce:c3:ba:07:8a:39:ce:c3:90:7f:a2:40:c0: d6:cc:4c:af:d3:06:ec:01:f8:31:a0:f9:33:5d:04:7b:33:64: fe:a4:e8:0f:ee:e2:15:9b:72:88:3a:0b:dc:20:15:3a:3c:14: bd:d6:1e:9a:77:ec:d2:30:40:1c:b4:49:26:3b:7c:e9:97:93: c5:a0:20:92:12:9f:91:0e:52:fe:44:b7:b4:f1:be:6f:fb:84: 6d:d8:ab:35:ce:ee:a8:c1:03:f6:67:21:ff:ef:ca:b1:9e:4f: 70:72:cf:ee:43:66:75:68:4f:94:b6:5f:35:f8:d1:82:45:47: 59:7a:40:75:15:ff:d0:a8:91:85:76:c1:3f:0e:b6:74:52:70: be:c0:c0:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MUE3QzIxMTAvBgNVBAUTKEZGMkVERTk0RDMwN0JDMjM4OUE0QjczOTU5MkE2NTdG NzE2MUNDQTIwHhcNMjUxMjIxMDI1MjU5WhcNMjUxMjI4MDI1MjU5WjAYMRYwFAYD VQQDDA02OTQ3NjEwYy04MDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcjiNNgUPj5tDTYiPbvo9dvwgbvX3g8J9rafmg4LKrbrnMidakOcTiCZF2mA kiDe7khXlpBbT6ZiLZQCjQfjc4E8xd+pNNL28UPlaLGP0ILPHsUUy+7FudhAvtv+ VwCZK2Ae2mg39DZ21f8wTcmleYfQh5a9j347DCrfZK0RRB9ScpD1IBsOwK6BgMPW ueZ6JoI2MuxOz0csWhLN7MJmL0tHm3ctGLvXaH59GsdP3ODPJlovAkhoRlAZ9KXK tvQQllutTGtNBzFMvtoBhevXNI+4wKpFrnR5kp0bZ13fvYSujpRnjUU8+7I0wUqp j8p+XL6McDL2tLkSQAWXskV+ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1ye1gp 3D5xt4VtUh7rRYy/QJoAMB8GA1UdIwQYMBaAFP8u3pTTB7wjiaS3OVkqZX9xYcyi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTdDMi83QUI4NTA4ODhF ODkxMUVFQTZBNUUzNTdDNEY5QUUwMi9feTdlbE5NSHZDT0pwTGM1V1NwbGYzRmh6 S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL195N2VsTk1IdkNPSnBMYzVXU3BsZjNGaHpLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTdDMi83QUI4NTA4ODhFODkxMUVFQTZBNUUzNTdDNEY5QUUwMi9feTdlbE5NSHZD T0pwTGM1V1NwbGYzRmh6S0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIjB5w9d8EBxgYjZ736pKOm1xRNxzYwe0qOC59W+osZLGcKxg4ajqV MNLRVFLc7BWXlbZ25PRu5sNfXjjD8FZoPYzFNT13/c5/fs/1Z0P9/KCn3o3jcCZn obSHQlcpTkvQmtNjRWtdxDfMrAAitckADc7DugeKOc7DkH+iQMDWzEyv0wbsAfgx oPkzXQR7M2T+pOgP7uIVm3KIOgvcIBU6PBS91h6ad+zSMEActEkmO3zpl5PFoCCS Ep+RDlL+RLe08b5v+4Rt2Ks1zu6owQP2ZyH/78qxnk9wcs/uQ2Z1aE+Utl81+NGC RUdZekB1Ff/QqJGFdsE/DrZ0UnC+wMAH -----END CERTIFICATE-----Generated at Sun Dec 21 06:07:56 2025 by rpki-client