This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft File: YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft (raw, json) Hash identifier: cTOlWNBbutKz0xFnh9UYpXG0PZ+aQSdSPgX7YApdXyE= Subject key identifier: D8:CE:FF:16:57:D3:C4:75:6C:C6:BF:F7:8E:98:24:4B:F7:A9:16:B5 Authority key identifier: 62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 Certificate issuer: /CN=A9120FD4/serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Certificate serial: 0D19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft Manifest number: 0D0A Signing time: Mon 22 Dec 2025 17:43:22 +0000 Manifest this update: Mon 22 Dec 2025 17:43:22 +0000 Manifest next update: Mon 29 Dec 2025 17:43:22 +0000 Files and hashes: 1: YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl (hash: 8bzkMLEkk2+Xiu1oM0Fx+QHc0+hLhpGFkf8xLJmDnQY=) 2: 4154E51AC91311EBA6226F45C4F9AE02.roa (hash: wB1sovbilxKTEjHlhwxxiGzC+zOOhC0FN6B3+See3J0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3353 (0xd19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120FD4, serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Validity Not Before: Dec 22 17:43:22 2025 GMT Not After : Dec 29 17:43:22 2025 GMT Subject: CN=6949833a-5a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d1:04:5f:11:8b:ef:0c:f1:76:af:c8:3f:fc: 00:cf:13:cc:c2:d4:db:97:44:ed:e0:7d:79:d2:69: 76:9f:61:42:79:42:4d:47:65:1b:23:bd:8a:2c:15: 84:f2:9a:21:eb:83:a3:0a:52:c3:24:53:d3:28:38: e6:43:e3:dd:c1:35:5c:42:52:0c:a9:54:0b:44:0d: be:03:aa:73:92:00:81:b4:96:51:01:11:7d:4a:a4: ac:45:9c:0c:90:50:31:f7:49:00:5f:99:d4:1d:41: e7:a9:38:dd:c6:99:60:a3:7b:f3:b8:cb:cb:31:b4: 4c:28:8d:a8:19:0f:ea:63:66:31:bb:6b:a9:42:04: fb:1c:24:c0:43:63:59:85:c9:fd:3f:da:e3:32:66: 14:76:93:b7:82:4a:50:88:f2:0d:bb:7e:c5:39:61: d5:65:88:49:ce:51:c1:7a:e0:90:2f:23:cb:04:fe: b7:96:41:57:8a:33:95:80:1e:ba:ba:53:ce:f0:d0: 7e:04:de:80:69:04:70:bb:d3:01:d3:f9:27:4a:ca: a1:d0:58:3b:a4:c1:37:ba:68:70:fd:a8:c3:c0:94: 1d:72:3a:20:98:20:dc:d8:a7:37:5b:83:dc:ab:2a: 61:2b:98:1c:f1:af:4b:f9:b4:13:8e:2e:3c:c4:42: d7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CE:FF:16:57:D3:C4:75:6C:C6:BF:F7:8E:98:24:4B:F7:A9:16:B5 X509v3 Authority Key Identifier: keyid:62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:91:a7:26:53:31:1d:7d:4c:1a:df:34:b3:e2:1d:10:e2:9a: 96:74:ce:7e:f1:b0:da:8e:fe:a7:6c:84:d8:c0:ce:02:15:e2: 20:8b:9d:7c:95:f8:2d:10:60:b3:eb:99:c1:9d:bd:53:ed:d4: 94:c6:55:2b:f7:ae:53:f5:f6:a5:4f:89:98:db:20:5c:86:b7: 16:6e:bf:8d:de:5d:7d:7b:51:7d:24:f8:a5:2e:85:91:02:a9: 0f:c9:ca:c7:e9:73:72:ed:71:d7:c6:7d:33:a2:37:4c:db:f9: f6:da:9e:04:e9:55:c3:09:6f:38:56:48:af:f2:e1:af:aa:b7: e0:78:d4:af:5c:24:a8:0e:da:c5:f1:b0:dc:79:48:a7:82:40: 0a:d8:c4:14:a7:d9:c1:20:d0:b3:0c:77:37:d1:c8:65:2d:cd: fc:52:0e:f4:2f:67:2f:d9:cf:1f:8e:d3:6e:71:a0:d7:db:76: c8:9c:4b:91:7c:32:dd:1d:6f:e3:36:68:02:05:07:55:96:be: 9e:0d:74:cf:85:38:36:d4:a2:e0:5a:85:b9:cb:63:e6:bf:74: b0:42:29:14:d5:18:99:35:f6:5f:96:69:ec:f4:1e:6e:f9:31: 1a:7f:ab:74:10:d0:a8:c0:bd:e9:63:1b:0b:14:24:21:37:90: e0:6f:7e:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGRDQxMTAvBgNVBAUTKDYyQzZCMUEwQjJDM0E2MTRGM0NCNDNGQUJCMzFCRjgx NjE2QjU0QjQwHhcNMjUxMjIyMTc0MzIyWhcNMjUxMjI5MTc0MzIyWjAYMRYwFAYD VQQDDA02OTQ5ODMzYS01YTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstEEXxGL7wzxdq/IP/wAzxPMwtTbl0Tt4H150ml2n2FCeUJNR2UbI72KLBWE 8poh64OjClLDJFPTKDjmQ+PdwTVcQlIMqVQLRA2+A6pzkgCBtJZRARF9SqSsRZwM kFAx90kAX5nUHUHnqTjdxplgo3vzuMvLMbRMKI2oGQ/qY2Yxu2upQgT7HCTAQ2NZ hcn9P9rjMmYUdpO3gkpQiPINu37FOWHVZYhJzlHBeuCQLyPLBP63lkFXijOVgB66 ulPO8NB+BN6AaQRwu9MB0/knSsqh0Fg7pME3umhw/ajDwJQdcjogmCDc2Kc3W4Pc qyphK5gc8a9L+bQTji48xELX/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjO/xZX 08R1bMa/946YJEv3qRa1MB8GA1UdIwQYMBaAFGLGsaCyw6YU88tD+rsxv4Fha1S0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEZENC84MDlDMjREMkY1 NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBoVHp5MFA2dXpHX2dXRnJW TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzYXhvTExEcGhUenkwUDZ1ekdfZ1dGclZMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEZENC84MDlDMjREMkY1NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBo VHp5MFA2dXpHX2dXRnJWTFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4kacmUzEdfUwa3zSz4h0Q4pqWdM5+8bDajv6nbITYwM4CFeIgi518 lfgtEGCz65nBnb1T7dSUxlUr965T9falT4mY2yBchrcWbr+N3l19e1F9JPilLoWR AqkPycrH6XNy7XHXxn0zojdM2/n22p4E6VXDCW84Vkiv8uGvqrfgeNSvXCSoDtrF 8bDceUingkAK2MQUp9nBINCzDHc30chlLc38Ug70L2cv2c8fjtNucaDX23bInEuR fDLdHW/jNmgCBQdVlr6eDXTPhTg21KLgWoW5y2Pmv3SwQikU1RiZNfZflmns9B5u +TEaf6t0ENCowL3pYxsLFCQhN5Dgb372 -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:54 2025 by rpki-client