This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft File: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft (raw, json) Hash identifier: jQxUYr5nJURbWRq9vQtfeBsi9gJXLW/b4fUQD0GAHtM= Subject key identifier: B6:5C:09:FC:8B:04:6B:0B:02:62:65:3A:E7:49:00:0F:E0:C8:C1:F7 Authority key identifier: C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82 Certificate issuer: /CN=A912B2EE/serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82 Certificate serial: 0FE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft Manifest number: 0FCE Signing time: Wed 24 Dec 2025 17:13:44 +0000 Manifest this update: Wed 24 Dec 2025 17:13:44 +0000 Manifest next update: Wed 31 Dec 2025 17:13:44 +0000 Files and hashes: 1: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl (hash: bLMLDj5s2QxGsTSjfNcQGbj0kdnOI+tWQ3hSAohgPfU=) 2: 05449490E17B11EC93AB7473C4F9AE02.roa (hash: TQO7DA2C+52oraPsdnjGz3A009856ZzetwGGv8/CUtg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 17:13:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4067 (0xfe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B2EE, serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82 Validity Not Before: Dec 24 17:13:44 2025 GMT Not After : Dec 31 17:13:44 2025 GMT Subject: CN=694c1f48-fd47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9f:ff:71:82:0e:5b:d8:ac:52:9e:05:71:18: dc:fa:c8:8b:ce:e7:41:78:b7:f1:d3:b6:9f:b1:b3: c6:7a:85:a6:30:37:f5:5a:88:29:ad:fa:f6:d5:60: fe:90:b7:bf:e3:59:d0:e4:5c:f5:1c:52:1e:b5:b5: e5:74:61:be:75:9d:6f:ef:71:75:fe:6a:df:8e:95: 9a:bc:dd:3e:d8:c9:35:90:7a:fd:68:88:41:c3:3b: 39:2c:3d:22:d1:28:e1:9e:6c:49:87:dc:e8:2a:5a: 47:76:f1:43:d8:f8:59:7d:36:6c:3e:96:01:d6:8a: 2f:62:a6:3d:05:45:d3:6e:ad:a3:da:6a:28:50:28: d4:95:d4:6c:67:73:3d:6f:7a:bf:e1:88:32:bd:ab: 25:42:e5:75:78:5a:e8:0a:4a:c5:8a:b4:1b:13:4e: 24:0f:29:46:53:0f:17:01:d5:cf:01:c2:15:75:85: 02:93:8c:b1:71:db:5c:5f:c0:09:4a:4d:40:06:9b: e0:25:be:6f:a0:5b:2a:9f:8b:f1:5d:bb:76:62:98: b9:85:6b:ec:2e:ac:23:0a:c2:85:52:56:e7:ce:0e: a3:a0:0e:f5:0f:7e:d0:cf:1d:bb:82:45:d5:4b:9e: 9e:df:78:ae:c3:58:4f:05:50:17:fa:ff:7d:37:2f: cd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5C:09:FC:8B:04:6B:0B:02:62:65:3A:E7:49:00:0F:E0:C8:C1:F7 X509v3 Authority Key Identifier: keyid:C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:0a:0b:bd:3d:fb:99:13:04:90:8d:50:f7:de:92:f2:b5:dd: 12:59:de:bc:f1:57:65:47:2f:5a:1b:91:e4:21:d4:41:b5:ee: 36:39:9a:03:52:53:c3:a2:03:9e:f7:c1:e5:87:d5:c8:8c:9e: c9:91:c0:95:e5:3b:d4:fa:ff:f7:aa:ee:b5:5f:4f:c1:b9:b7: 4f:d8:d8:a6:59:89:96:2e:92:82:aa:b6:f0:17:fb:4c:eb:ed: 6b:7a:94:dc:da:e4:c9:d6:64:5a:29:b2:4e:11:12:f7:3d:d4: 78:02:e8:29:b0:bb:58:bb:8c:0a:c7:d1:a5:fc:93:77:2e:34: bc:e0:95:2e:ba:06:a2:4f:ff:4b:75:e0:04:ab:bf:ff:10:26: a9:89:40:c6:62:eb:24:22:a3:61:a5:a1:a5:05:e4:2e:d5:c6: 9d:00:e1:56:bc:fb:16:ba:95:ba:60:bd:47:2f:cb:a1:57:9f: 5d:fa:56:ee:10:7d:b9:9f:85:f7:03:91:d9:e7:1f:46:6d:02: f8:23:61:89:6e:c2:82:7f:b8:50:04:f0:73:95:dd:75:b0:36: fc:f5:c3:df:8a:86:ca:00:35:43:98:8e:ec:ab:69:27:9c:91: b6:3e:d1:09:9e:79:6f:a9:0a:27:60:66:cc:20:e6:c0:16:6d: 02:67:34:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIyRUUxMTAvBgNVBAUTKEM4MjQzNDc0MjVCQUM4QUY1OUI0RTE5NjZCQzEwREJG QThCREFCODIwHhcNMjUxMjI0MTcxMzQ0WhcNMjUxMjMxMTcxMzQ0WjAYMRYwFAYD VQQDDA02OTRjMWY0OC1mZDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8p//cYIOW9isUp4FcRjc+siLzudBeLfx07afsbPGeoWmMDf1Wogprfr21WD+ kLe/41nQ5Fz1HFIetbXldGG+dZ1v73F1/mrfjpWavN0+2Mk1kHr9aIhBwzs5LD0i 0SjhnmxJh9zoKlpHdvFD2PhZfTZsPpYB1oovYqY9BUXTbq2j2mooUCjUldRsZ3M9 b3q/4YgyvaslQuV1eFroCkrFirQbE04kDylGUw8XAdXPAcIVdYUCk4yxcdtcX8AJ Sk1ABpvgJb5voFsqn4vxXbt2Ypi5hWvsLqwjCsKFUlbnzg6joA71D37Qzx27gkXV S56e33iuw1hPBVAX+v99Ny/NaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZcCfyL BGsLAmJlOudJAA/gyMH3MB8GA1UdIwQYMBaAFMgkNHQlusivWbThlmvBDb+ovauC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjJFRS8xRjQxMUY1ODZD MjExMUU5Qjc2RkE5MDlDNEY5QUUwMi95Q1EwZENXNnlLOVp0T0dXYThFTnY2aTlx NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lDUTBkQ1c2eUs5WnRPR1dhOEVOdjZpOXE0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjJFRS8xRjQxMUY1ODZDMjExMUU5Qjc2RkE5MDlDNEY5QUUwMi95Q1EwZENXNnlL OVp0T0dXYThFTnY2aTlxNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfCgu9PfuZEwSQjVD33pLytd0SWd688VdlRy9aG5HkIdRBte42OZoD UlPDogOe98Hlh9XIjJ7JkcCV5TvU+v/3qu61X0/BubdP2NimWYmWLpKCqrbwF/tM 6+1repTc2uTJ1mRaKbJOERL3PdR4AugpsLtYu4wKx9Gl/JN3LjS84JUuugaiT/9L deAEq7//ECapiUDGYuskIqNhpaGlBeQu1cadAOFWvPsWupW6YL1HL8uhV59d+lbu EH25n4X3A5HZ5x9GbQL4I2GJbsKCf7hQBPBzld11sDb89cPfiobKADVDmI7sq2kn nJG2PtEJnnlvqQonYGbMIObAFm0CZzRk -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:02 2025 by rpki-client