This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft File: p0YFy51QccoXKdkIeDRAfxTqhXA.mft (raw, json) Hash identifier: qvnlbs1HA5XN5fP24FyaMax6SzD8ZE7vKYtDOSYhDt0= Subject key identifier: 19:9B:FB:48:B2:9A:61:41:33:13:04:37:09:6F:13:1D:EE:29:3A:74 Authority key identifier: A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70 Certificate issuer: /CN=A911FABE/serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570 Certificate serial: 0C94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft Manifest number: 0C8A Signing time: Mon 22 Dec 2025 18:04:50 +0000 Manifest this update: Mon 22 Dec 2025 18:04:49 +0000 Manifest next update: Mon 29 Dec 2025 18:04:49 +0000 Files and hashes: 1: p0YFy51QccoXKdkIeDRAfxTqhXA.crl (hash: Ce4URmkifjSxEkMqaMrggSVg1VpvNoPbsdgTaVprzGM=) 2: 3E51F73E0C5111EAAF46A23FC4F9AE02.roa (hash: pTtLtXiP6+lMZs1IbS5QyauPkH+CLmMvProexjSKJSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3220 (0xc94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FABE, serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570 Validity Not Before: Dec 22 18:04:49 2025 GMT Not After : Dec 29 18:04:49 2025 GMT Subject: CN=69498841-8ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c2:83:ef:60:17:30:83:bc:24:62:17:7a:4c: f3:1e:2b:0a:06:65:e4:97:24:ba:03:e6:7d:35:54: ec:24:1c:42:16:4c:cd:3f:d7:af:06:56:30:31:07: d2:d0:55:de:7a:a1:a2:99:df:ef:f1:38:55:c6:ad: 03:f7:62:cd:88:0a:8b:ef:c7:e7:c1:c5:66:f4:74: 88:ed:5d:08:53:15:f4:fc:2d:0b:c8:48:3d:ce:50: e2:51:67:5c:da:46:29:f0:60:c9:16:50:11:14:c4: 4c:ad:91:e2:ab:84:42:12:35:a4:e1:75:0e:e2:4d: f6:60:85:1f:23:ad:44:c1:f8:6c:db:9e:89:d6:c4: b3:07:5c:b4:44:22:23:91:ac:27:35:dc:2a:53:f0: 15:7e:8d:53:d0:3e:cc:57:d5:c3:cf:0b:8d:b5:d5: eb:ea:4a:16:44:6d:a4:62:29:81:f2:b8:1b:0a:cc: 5c:ab:72:b0:d5:59:50:96:f9:7d:3f:a3:16:d8:9a: f6:e5:a5:50:55:39:7a:c8:3f:21:38:e9:1f:de:77: a5:5a:9b:e7:36:21:6b:59:40:ee:5c:8b:4f:52:f4: 8b:94:6e:52:46:16:fb:3f:fe:a7:7a:f2:41:09:36: aa:4c:ea:81:5a:04:0b:0a:68:50:fc:a0:7d:95:bd: 75:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9B:FB:48:B2:9A:61:41:33:13:04:37:09:6F:13:1D:EE:29:3A:74 X509v3 Authority Key Identifier: keyid:A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f2:3d:13:9f:91:fe:d5:9c:bc:13:f2:ee:b2:2c:65:de:23: 48:d0:ff:64:da:15:f9:91:04:db:6a:48:2d:35:54:62:31:86: 85:69:cb:f6:2c:09:55:e1:a4:be:25:8f:4b:0b:3e:48:f0:2d: 69:92:fa:32:75:4f:fc:20:fc:dc:19:60:aa:19:21:0b:b7:0c: 61:68:aa:89:4c:45:ed:75:8b:fd:13:cb:c3:77:b4:30:4b:fb: 9e:be:94:cf:b7:96:10:8d:e7:ec:a3:fa:5e:bf:9c:50:82:d2: 25:49:09:7b:55:8f:bd:11:56:02:6c:ed:d5:90:6f:80:48:7c: 12:f6:be:09:70:ff:48:e5:60:a3:f7:48:63:1f:45:56:ae:8d: 17:7c:3a:98:7e:91:5f:21:ea:a8:81:2e:c7:50:ab:26:05:d9: 9d:e3:b0:fe:01:6c:6a:7f:1b:f5:a7:08:2f:21:bf:9f:f5:c0: f0:42:7e:b9:cb:fb:98:a4:ea:26:90:d8:53:d9:7b:4e:4c:e3: b6:2f:8b:eb:30:fa:2d:c7:23:ce:5d:0b:d5:f9:9b:24:a7:8d: 8e:8b:a4:86:a9:c4:a4:15:76:de:a6:26:b6:3f:39:e3:76:a0: b5:6b:df:e5:d3:6e:17:c8:a6:aa:84:d3:cb:a8:97:31:49:10: 53:a4:a5:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQkUxMTAvBgNVBAUTKEE3NDYwNUNCOUQ1MDcxQ0ExNzI5RDkwODc4MzQ0MDdG MTRFQTg1NzAwHhcNMjUxMjIyMTgwNDQ5WhcNMjUxMjI5MTgwNDQ5WjAYMRYwFAYD VQQDDA02OTQ5ODg0MS04YmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl8KD72AXMIO8JGIXekzzHisKBmXklyS6A+Z9NVTsJBxCFkzNP9evBlYwMQfS 0FXeeqGimd/v8ThVxq0D92LNiAqL78fnwcVm9HSI7V0IUxX0/C0LyEg9zlDiUWdc 2kYp8GDJFlARFMRMrZHiq4RCEjWk4XUO4k32YIUfI61Ewfhs256J1sSzB1y0RCIj kawnNdwqU/AVfo1T0D7MV9XDzwuNtdXr6koWRG2kYimB8rgbCsxcq3Kw1VlQlvl9 P6MW2Jr25aVQVTl6yD8hOOkf3nelWpvnNiFrWUDuXItPUvSLlG5SRhb7P/6nevJB CTaqTOqBWgQLCmhQ/KB9lb11sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmb+0iy mmFBMxMENwlvEx3uKTp0MB8GA1UdIwQYMBaAFKdGBcudUHHKFynZCHg0QH8U6oVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFCRS9BM0Y1MDlGMjBD NEYxMUVBQThDNkIxM0NDNEY5QUUwMi9wMFlGeTUxUWNjb1hLZGtJZURSQWZ4VHFo WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwWUZ5NTFRY2NvWEtka0llRFJBZnhUcWhYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkFCRS9BM0Y1MDlGMjBDNEYxMUVBQThDNkIxM0NDNEY5QUUwMi9wMFlGeTUxUWNj b1hLZGtJZURSQWZ4VHFoWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb8j0Tn5H+1Zy8E/Lusixl3iNI0P9k2hX5kQTbakgtNVRiMYaFacv2 LAlV4aS+JY9LCz5I8C1pkvoydU/8IPzcGWCqGSELtwxhaKqJTEXtdYv9E8vDd7Qw S/uevpTPt5YQjefso/pev5xQgtIlSQl7VY+9EVYCbO3VkG+ASHwS9r4JcP9I5WCj 90hjH0VWro0XfDqYfpFfIeqogS7HUKsmBdmd47D+AWxqfxv1pwgvIb+f9cDwQn65 y/uYpOomkNhT2XtOTOO2L4vrMPotxyPOXQvV+Zskp42Oi6SGqcSkFXbepia2Pznj dqC1a9/l024XyKaqhNPLqJcxSRBTpKUx -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:54 2025 by rpki-client