This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft File: YkYyDes0LSw9wa7bkPF2dyt_x38.mft (raw, json) Hash identifier: 6J4VvcPPShl1On7tYdHJQ8l5ahqKfdI43xZ8OzKdjI0= Subject key identifier: 51:9E:F8:49:83:17:B4:29:A4:86:94:B8:CD:04:39:7D:19:74:D8:BD Authority key identifier: 62:46:32:0D:EB:34:2D:2C:3D:C1:AE:DB:90:F1:76:77:2B:7F:C7:7F Certificate issuer: /CN=A911AD1F/serialNumber=6246320DEB342D2C3DC1AEDB90F176772B7FC77F Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft Manifest number: 2C Signing time: Tue 23 Dec 2025 06:28:55 +0000 Manifest this update: Tue 23 Dec 2025 06:28:55 +0000 Manifest next update: Tue 30 Dec 2025 06:28:55 +0000 Files and hashes: 1: YkYyDes0LSw9wa7bkPF2dyt_x38.crl (hash: IsuNYu9v14c3BnoMd/JiR3aFOk+4TjI6ZpGhlBoD4Zc=) 2: 5CA352A49DAB11F0B1E32C64C4F9AE02.roa (hash: +QKL7YQeAFpSt5nMMIAz5oWErQmX2UUEoZKFT1MpXb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.crl rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AD1F, serialNumber=6246320DEB342D2C3DC1AEDB90F176772B7FC77F Validity Not Before: Dec 23 06:28:55 2025 GMT Not After : Dec 30 06:28:55 2025 GMT Subject: CN=694a36a7-5512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dd:ea:c5:0b:af:a8:19:7e:78:5c:55:70:fb: 2e:3f:17:e9:58:11:1d:c1:0e:f9:fb:cb:b3:bc:a4: a1:68:87:73:24:54:00:4d:f8:d7:2b:fe:51:75:c5: 52:e9:47:98:cd:9b:3b:bf:95:ee:d2:f1:9a:b3:ee: ad:59:d0:37:81:dc:54:31:cc:9d:73:d7:d7:2a:b4: 48:88:e4:0c:07:54:4a:d5:84:15:0e:df:76:7a:34: 72:bf:aa:6c:a3:57:33:26:1a:cc:a4:08:20:db:7e: 31:6d:32:7c:93:7e:8b:2c:22:97:34:0a:12:9a:c1: e4:0f:7a:a2:0a:47:70:6a:6d:f1:30:8b:b0:d9:4c: 6a:d0:c3:57:6a:98:25:86:89:7f:e3:26:58:e5:e2: ea:cd:e7:2d:22:16:06:bd:dc:84:f9:a3:13:61:71: 23:6c:69:b0:05:33:05:23:a4:f6:60:da:4f:cc:cd: fa:be:04:b0:6b:24:ef:ad:02:68:fd:8f:b0:21:0b: 30:f0:fc:08:0f:ad:29:fb:91:bb:2b:5e:67:6b:4d: b0:6d:c9:e3:58:00:7e:e5:13:9f:c5:b0:8a:dd:f8: 0b:dd:f7:24:86:ac:72:cb:b3:cc:bd:a9:ae:65:db: 81:bb:0d:f4:44:31:c3:58:5d:32:72:c8:d3:83:d4: 36:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9E:F8:49:83:17:B4:29:A4:86:94:B8:CD:04:39:7D:19:74:D8:BD X509v3 Authority Key Identifier: keyid:62:46:32:0D:EB:34:2D:2C:3D:C1:AE:DB:90:F1:76:77:2B:7F:C7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:8d:5a:3b:f9:c4:21:72:77:8c:eb:bc:85:3f:43:74:46:dc: 24:5d:2f:b6:c9:72:e5:17:01:1b:fc:61:ba:13:49:dc:d4:00: 6c:b4:c8:a9:2e:9b:bb:56:d5:d5:10:da:23:b0:e5:5d:19:7c: d2:19:98:58:f7:92:19:49:21:05:31:52:50:47:d4:f8:59:0d: 2e:9a:97:12:64:f9:0a:ff:ab:75:78:f4:b1:7b:f3:54:34:e1: 86:14:64:0f:9a:26:9b:9d:5d:cc:47:69:25:61:17:9d:a8:37: a7:ab:93:d8:a0:78:8f:63:a4:13:a4:c7:11:80:39:11:a6:16: ca:c8:37:0c:09:6d:f3:ae:b2:ac:39:12:d2:5a:73:10:70:84: e5:2d:12:5d:a9:43:9a:e5:91:c3:33:06:7d:80:58:11:45:16: b2:ee:02:d4:71:35:2c:73:ab:d8:ef:01:cc:b4:43:9b:bd:f1: dc:57:06:29:66:bd:48:70:fe:73:52:81:bd:cc:fb:b6:eb:60: c0:61:92:e3:97:45:52:66:47:c0:ac:07:dd:cc:0e:c1:61:00: 2e:fe:48:6e:38:2f:6f:6b:68:4c:e0:6b:10:f6:85:9a:50:23: ca:41:97:70:77:9b:5b:b8:25:e8:34:c5:0d:5b:92:43:04:a5: 78:4a:49:ef -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QUQxRjExMC8GA1UEBRMoNjI0NjMyMERFQjM0MkQyQzNEQzFBRURCOTBGMTc2Nzcy QjdGQzc3RjAeFw0yNTEyMjMwNjI4NTVaFw0yNTEyMzAwNjI4NTVaMBgxFjAUBgNV BAMMDTY5NGEzNmE3LTU1MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC53erFC6+oGX54XFVw+y4/F+lYER3BDvn7y7O8pKFoh3MkVABN+Ncr/lF1xVLp R5jNmzu/le7S8Zqz7q1Z0DeB3FQxzJ1z19cqtEiI5AwHVErVhBUO33Z6NHK/qmyj VzMmGsykCCDbfjFtMnyTfossIpc0ChKaweQPeqIKR3BqbfEwi7DZTGrQw1dqmCWG iX/jJljl4urN5y0iFga93IT5oxNhcSNsabAFMwUjpPZg2k/Mzfq+BLBrJO+tAmj9 j7AhCzDw/AgPrSn7kbsrXmdrTbBtyeNYAH7lE5/FsIrd+Avd9ySGrHLLs8y9qa5l 24G7DfREMcNYXTJyyNOD1DYbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUZ74SYMX tCmkhpS4zQQ5fRl02L0wHwYDVR0jBBgwFoAUYkYyDes0LSw9wa7bkPF2dyt/x38w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBRDFGLzE0RDA5QzAyOURB QjExRjBBMUM1QjM2M0M0RjlBRTAyL1lrWXlEZXMwTFN3OXdhN2JrUEYyZHl0X3gz OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWtZeURlczBMU3c5d2E3YmtQRjJkeXRfeDM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB RDFGLzE0RDA5QzAyOURBQjExRjBBMUM1QjM2M0M0RjlBRTAyL1lrWXlEZXMwTFN3 OXdhN2JrUEYyZHl0X3gzOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANuNWjv5xCFyd4zrvIU/Q3RG3CRdL7bJcuUXARv8YboTSdzUAGy0yKku m7tW1dUQ2iOw5V0ZfNIZmFj3khlJIQUxUlBH1PhZDS6alxJk+Qr/q3V49LF781Q0 4YYUZA+aJpudXcxHaSVhF52oN6erk9igeI9jpBOkxxGAORGmFsrINwwJbfOusqw5 EtJacxBwhOUtEl2pQ5rlkcMzBn2AWBFFFrLuAtRxNSxzq9jvAcy0Q5u98dxXBilm vUhw/nNSgb3M+7brYMBhkuOXRVJmR8CsB93MDsFhAC7+SG44L29raEzgaxD2hZpQ I8pBl3B3m1u4Jeg0xQ1bkkMEpXhKSe8= -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:45 2025 by rpki-client