This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft File: yGngpTh1_BJZeGtSfmeEy_H4m0A.mft (raw, json) Hash identifier: dvvOR6ur78E3FOVRjySH9HjkhhRd/ib0cL/smp5DQnI= Subject key identifier: 32:1C:A4:92:05:1B:E4:07:C3:1D:31:2B:4A:01:76:9F:55:E4:04:FF Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 Certificate issuer: /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Certificate serial: 0BE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft Manifest number: 0BCC Signing time: Mon 22 Dec 2025 18:27:59 +0000 Manifest this update: Mon 22 Dec 2025 18:27:58 +0000 Manifest next update: Mon 29 Dec 2025 18:27:58 +0000 Files and hashes: 1: yGngpTh1_BJZeGtSfmeEy_H4m0A.crl (hash: KFllqP0Gr/a1QzGtXoQyYVyCT6O5y3AsYBHSNyjurcY=) 2: 72CF780C819311EB8964C17EC4F9AE02.roa (hash: qEnxbXTZjYArRGRzDWZrlZe2tR2ZHb8POdNuo8ieu30=) 3: B81176247CC811EBAAFADC27C4F9AE02.roa (hash: UVKRHigELp+/xtOJ9hxFUzKgCIBL/cBJ5XfcHMgTaRI=) 4: 736F8DBA819311EB8964C17EC4F9AE02.roa (hash: 9VkEhYHF3f19k3ccapKOmWUnQN3qe0LKW0bGLzgAj2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3041 (0xbe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC3E, serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Validity Not Before: Dec 22 18:27:58 2025 GMT Not After : Dec 29 18:27:58 2025 GMT Subject: CN=69498daf-ee10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:57:20:63:91:63:05:bd:d5:4e:9a:43:b3:5c: c9:74:a6:bb:a0:97:13:fe:81:40:81:75:58:73:8a: 52:26:db:43:e5:8a:34:00:0c:1d:1a:13:87:b4:55: 3f:2b:a1:4d:8f:19:4a:86:8a:52:6d:e2:a6:21:70: 67:86:64:89:8c:fd:67:04:39:3a:48:9a:97:71:8e: 42:98:e7:8a:07:48:5e:29:fd:0f:ac:fa:58:5f:50: f3:a0:86:02:3b:80:e8:a1:30:1d:00:1a:50:d4:32: b2:3c:d9:b6:e4:f2:9d:a2:35:12:89:c7:76:62:7a: d9:ef:a4:f8:7b:f7:82:84:d0:9d:00:d8:e0:b4:60: a0:ba:49:35:58:95:12:af:c8:bd:78:98:ee:7b:1e: 44:b4:8e:f6:23:d4:02:41:55:21:89:4b:66:d3:52: 45:3c:57:49:49:bd:ed:c3:a3:cf:8e:34:ca:40:6f: bd:5c:07:6b:11:cd:15:e1:bf:d1:c2:de:07:94:bf: bb:96:c3:f8:3b:3f:b5:47:55:29:27:8e:4d:4e:fa: 1e:5b:ec:cc:72:df:4d:2d:b0:04:97:89:2b:6c:fb: d5:f6:f5:4b:6f:c0:ef:a5:5d:ed:58:49:18:81:2f: ef:4e:65:85:82:5a:b2:19:b7:88:ff:15:1f:0c:4b: 20:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1C:A4:92:05:1B:E4:07:C3:1D:31:2B:4A:01:76:9F:55:E4:04:FF X509v3 Authority Key Identifier: keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:bf:08:00:6b:84:40:6a:89:18:c7:72:08:62:79:43:1d:77: 40:6a:b3:36:54:29:03:77:49:4c:08:db:56:66:06:94:59:ed: 30:00:8c:6b:0b:25:fc:87:86:d0:ac:a7:da:24:19:7d:9d:81: b9:9b:e2:c3:97:15:9c:f4:56:f6:d2:a9:e7:12:11:ed:00:43: c4:68:e3:9e:fb:38:7d:1d:83:12:82:9f:e3:6a:ba:9e:84:76: 1a:fb:fa:e9:6d:91:9d:e9:19:ae:c9:7d:3f:6d:09:e5:79:a8: 5e:00:55:4b:24:9c:d4:e8:55:cb:1e:b7:04:15:51:61:b3:51: ae:3f:04:f1:7b:4d:e8:15:94:33:96:3d:5e:69:e7:90:02:65: b4:e2:3c:42:73:b1:9a:ec:57:cb:be:54:72:4e:c3:ce:c9:54: 1c:49:0b:0c:6f:4e:b2:b8:ab:52:fc:be:6f:5a:35:37:d5:07: ae:94:63:7c:f3:b5:de:da:d4:99:55:80:6e:a9:1a:97:22:5e: 41:8f:8b:f4:0e:13:36:a1:3a:bf:a5:5f:e1:7d:51:16:c0:f5: 26:fd:06:e4:62:c5:94:49:b5:f4:df:00:20:70:d1:17:e0:f7: 5a:3b:f4:bc:d6:a0:b7:d3:5b:da:73:53:4a:9d:2b:6a:d0:fc: 95:97:a0:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDM0UxMTAvBgNVBAUTKEM4NjlFMEE1Mzg3NUZDMTI1OTc4NkI1MjdFNjc4NENC RjFGODlCNDAwHhcNMjUxMjIyMTgyNzU4WhcNMjUxMjI5MTgyNzU4WjAYMRYwFAYD VQQDDA02OTQ5OGRhZi1lZTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlcgY5FjBb3VTppDs1zJdKa7oJcT/oFAgXVYc4pSJttD5Yo0AAwdGhOHtFU/ K6FNjxlKhopSbeKmIXBnhmSJjP1nBDk6SJqXcY5CmOeKB0heKf0PrPpYX1DzoIYC O4DooTAdABpQ1DKyPNm25PKdojUSicd2YnrZ76T4e/eChNCdANjgtGCgukk1WJUS r8i9eJjuex5EtI72I9QCQVUhiUtm01JFPFdJSb3tw6PPjjTKQG+9XAdrEc0V4b/R wt4HlL+7lsP4Oz+1R1UpJ45NTvoeW+zMct9NLbAEl4krbPvV9vVLb8DvpV3tWEkY gS/vTmWFglqyGbeI/xUfDEsg1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIcpJIF G+QHwx0xK0oBdp9V5AT/MB8GA1UdIwQYMBaAFMhp4KU4dfwSWXhrUn5nhMvx+JtA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzRS8wRjUwRTAzNjMz QkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9CSlplR3RTZm1lRXlfSDRt MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lHbmdwVGgxX0JKWmVHdFNmbWVFeV9ING0wQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUMzRS8wRjUwRTAzNjMzQkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9C SlplR3RTZm1lRXlfSDRtMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLvwgAa4RAaokYx3IIYnlDHXdAarM2VCkDd0lMCNtWZgaUWe0wAIxr CyX8h4bQrKfaJBl9nYG5m+LDlxWc9Fb20qnnEhHtAEPEaOOe+zh9HYMSgp/jarqe hHYa+/rpbZGd6RmuyX0/bQnleaheAFVLJJzU6FXLHrcEFVFhs1GuPwTxe03oFZQz lj1eaeeQAmW04jxCc7Ga7FfLvlRyTsPOyVQcSQsMb06yuKtS/L5vWjU31QeulGN8 87Xe2tSZVYBuqRqXIl5Bj4v0DhM2oTq/pV/hfVEWwPUm/QbkYsWUSbX03wAgcNEX 4PdaO/S81qC301vac1NKnStq0PyVl6Co -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:54 2025 by rpki-client