This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft File: yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft (raw, json) Hash identifier: ZUHK0dGCwsmWLdfe2gEy70mdHnJHjWZSkzlZfq9+3R8= Subject key identifier: FA:26:24:7B:42:A1:1C:A8:E1:44:AE:CB:E5:3C:2F:BC:BF:69:6D:59 Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 Certificate issuer: /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Certificate serial: 07DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft Manifest number: 07C7 Signing time: Mon 22 Dec 2025 20:40:09 +0000 Manifest this update: Mon 22 Dec 2025 20:40:08 +0000 Manifest next update: Mon 29 Dec 2025 20:40:08 +0000 Files and hashes: 1: yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl (hash: z92oWGiWZtA5DTclWYvFjW+AW9Ov1WNz+zgCInX4Lzo=) 2: 5C95BDC0C12E11EEA47CBB59C4F9AE02.roa (hash: pfFLA6S00NJF9wnUh3eyO3xPwlEBQIG4Qg4AiW8MLVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2010 (0x7da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912438F, serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Validity Not Before: Dec 22 20:40:08 2025 GMT Not After : Dec 29 20:40:08 2025 GMT Subject: CN=6949aca9-ee56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:60:87:33:ec:f4:69:df:d5:4b:fa:c4:d9:60: 41:2b:29:bc:f1:4c:f8:f0:5e:70:a8:e0:cd:d4:85: 51:29:be:f3:6c:df:84:14:61:50:e3:e8:96:81:2f: 7f:79:3b:6a:58:0f:2c:ba:f3:70:8b:d6:70:06:09: 4f:7a:11:57:35:d5:69:78:d2:f4:e0:a6:f2:f8:1b: 43:5a:dc:79:d1:45:4c:d3:1f:de:97:cd:7a:fd:f9: 54:34:5a:ea:94:77:f8:97:67:d3:e8:fc:30:41:f4: e4:7b:e4:7e:c4:18:83:40:da:fb:5f:45:cd:60:c1: 0c:44:e8:ed:1e:9d:21:5c:bb:08:76:be:e6:b7:95: 23:0e:89:35:b3:bf:54:76:0c:2d:b4:59:80:47:46: f3:88:29:53:f5:08:9a:88:ea:e2:03:4a:12:58:7d: 60:e1:8a:06:a9:1c:a4:ea:c6:67:0d:83:b2:af:d1: a6:f9:00:73:74:95:4c:90:5f:34:85:4f:3d:5a:c9: 08:53:ea:6b:7f:28:30:db:33:e4:fd:79:5d:58:40: 8f:76:42:5e:3f:a0:54:a9:a1:0a:9d:07:71:97:b0: 6f:b1:09:0d:d0:ef:43:e9:c7:2e:69:d1:75:7f:e7: 8d:64:3c:e5:9e:c9:28:eb:9b:f3:88:d0:ac:50:a3: fb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:26:24:7B:42:A1:1C:A8:E1:44:AE:CB:E5:3C:2F:BC:BF:69:6D:59 X509v3 Authority Key Identifier: keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:3f:6a:85:6e:33:49:e6:e5:ce:fe:a4:fa:1d:42:5e:b9:71: 8c:1d:d8:5f:bc:85:2d:09:6b:e8:c5:3d:d9:3e:da:be:f7:f9: 32:2a:9b:f9:01:e1:43:84:0c:07:76:ff:bf:50:84:05:20:de: 41:60:3a:f3:e2:48:1c:ce:d5:db:d8:30:ff:30:11:ee:28:ff: e8:99:bc:a9:43:3d:fa:5d:41:05:74:f5:75:e9:ab:f5:1a:48: 5a:21:49:c5:02:c2:ed:a2:54:0b:f4:d9:09:8e:e2:70:ab:fd: ac:8e:39:fb:ba:06:81:48:04:25:e8:e8:70:25:c7:fe:0e:90: f6:17:fa:a3:7f:aa:47:68:8e:cb:14:26:66:da:8f:c4:02:f6: a3:e2:f2:29:e2:a2:82:0e:8f:83:e8:01:14:59:c2:af:c3:66: 35:93:7a:68:fb:15:79:b2:91:d4:36:9f:4b:f3:f7:76:d6:88: aa:4f:5d:ca:f1:e6:d7:c2:1e:7c:c0:9b:d3:3c:3c:16:45:9a: 09:b2:32:d0:69:f7:bd:d4:ba:09:c2:7c:34:ed:d0:43:66:52: dc:b4:ff:67:8e:9b:06:42:cd:64:37:c8:e7:a1:4f:39:8f:a6: b7:1b:de:a7:a0:b3:73:31:72:97:53:33:a8:d8:a5:3a:41:6a: 40:eb:67:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzOEYxMTAvBgNVBAUTKEM4ODhEMUVFRTA0QkVGM0U4MTVGMDlEREZBMTkxOTNE Njk5QjRGNDcwHhcNMjUxMjIyMjA0MDA4WhcNMjUxMjI5MjA0MDA4WjAYMRYwFAYD VQQDDA02OTQ5YWNhOS1lZTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmCHM+z0ad/VS/rE2WBBKym88Uz48F5wqODN1IVRKb7zbN+EFGFQ4+iWgS9/ eTtqWA8suvNwi9ZwBglPehFXNdVpeNL04Kby+BtDWtx50UVM0x/el816/flUNFrq lHf4l2fT6PwwQfTke+R+xBiDQNr7X0XNYMEMROjtHp0hXLsIdr7mt5UjDok1s79U dgwttFmAR0bziClT9QiaiOriA0oSWH1g4YoGqRyk6sZnDYOyr9Gm+QBzdJVMkF80 hU89WskIU+prfygw2zPk/XldWECPdkJeP6BUqaEKnQdxl7BvsQkN0O9D6ccuadF1 f+eNZDzlnsko65vziNCsUKP7HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPomJHtC oRyo4USuy+U8L7y/aW1ZMB8GA1UdIwQYMBaAFMiI0e7gS+8+gV8J3foZGT1pm09H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDM4Ri9DNzU5MEJENjI1 QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6NkJYd25kLWhrWlBXbWJU MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJalI3dUJMN3o2Qlh3bmQtaGtaUFdtYlQwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDM4Ri9DNzU5MEJENjI1QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6 NkJYd25kLWhrWlBXbWJUMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdP2qFbjNJ5uXO/qT6HUJeuXGMHdhfvIUtCWvoxT3ZPtq+9/kyKpv5 AeFDhAwHdv+/UIQFIN5BYDrz4kgcztXb2DD/MBHuKP/ombypQz36XUEFdPV16av1 GkhaIUnFAsLtolQL9NkJjuJwq/2sjjn7ugaBSAQl6OhwJcf+DpD2F/qjf6pHaI7L FCZm2o/EAvaj4vIp4qKCDo+D6AEUWcKvw2Y1k3po+xV5spHUNp9L8/d21oiqT13K 8ebXwh58wJvTPDwWRZoJsjLQafe91LoJwnw07dBDZlLctP9njpsGQs1kN8jnoU85 j6a3G96noLNzMXKXUzOo2KU6QWpA62fh -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:46 2025 by rpki-client