This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft File: Yr76HCON-N6XLqX-GAl7ES7wR3s.mft (raw, json) Hash identifier: lls1ZOyitZCAgOmG4DqUVs4oKsfhZLhNAN5A98iLGRI= Subject key identifier: EA:E8:B4:CC:45:15:39:80:68:CE:21:5D:70:7A:80:40:F9:46:5A:09 Authority key identifier: 62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B Certificate issuer: /CN=A91307F0/serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft Manifest number: 020D Signing time: Tue 23 Dec 2025 01:18:16 +0000 Manifest this update: Tue 23 Dec 2025 01:18:15 +0000 Manifest next update: Tue 30 Dec 2025 01:18:15 +0000 Files and hashes: 1: Yr76HCON-N6XLqX-GAl7ES7wR3s.crl (hash: MT9VZDi3k3TVKZV9FyQGEFt3aCDmMkr7H0bc83cVrHw=) 2: E4E7AE6EB8BE11ED83994B4AC4F9AE02.roa (hash: aPCaqml7t2F2+k6pOKIapyXqL1F8xbtnk+/zEbIo0oM=) 3: E5817A58B8BE11ED83994B4AC4F9AE02.roa (hash: gMPv9NciLB3BAjtT8uTP/7SkhRaSaS/Bj12QLWTIGsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91307F0, serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B Validity Not Before: Dec 23 01:18:15 2025 GMT Not After : Dec 30 01:18:15 2025 GMT Subject: CN=6949edd8-3394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d5:c1:c1:59:af:c2:82:0e:da:2f:46:23:03: 4e:28:d6:44:32:d4:88:f7:f2:e2:22:18:a6:7b:6d: d5:90:f4:56:45:77:bb:51:f2:81:79:75:2c:21:2c: 80:e2:08:05:33:fd:2f:dd:47:69:b2:c3:95:1c:54: 50:5a:d1:91:81:22:67:5a:a8:d0:52:7a:ac:0f:57: 97:19:59:19:99:6d:7f:1f:7a:f8:3c:0d:d2:54:f2: 10:fb:9a:9f:72:ea:0d:19:ac:08:12:0b:0c:95:4d: d5:97:85:b0:94:4f:0c:32:ad:70:d9:5a:35:58:fc: 14:62:fe:5e:1a:b4:05:6c:7e:ba:fc:a0:ae:4e:d3: b1:3c:83:e6:13:f9:78:79:e7:44:24:b0:7d:11:ee: 05:65:b8:3f:8a:df:a6:5e:c9:7a:0f:40:c7:02:ed: 12:44:a0:0f:aa:5a:6c:8d:fe:57:19:dd:4f:25:db: ec:87:f1:73:66:de:59:b1:4d:29:36:14:da:19:bc: 68:bd:bf:3f:db:b0:9f:da:dc:e1:a2:b2:e8:43:16: a8:6d:62:3b:f1:a4:f7:51:0a:74:06:71:12:e4:b8: 86:c3:af:49:c0:4d:c2:f2:d6:d3:4a:ea:8a:35:68: 3f:e9:30:04:a6:df:4c:b7:29:d7:26:dd:e0:cb:8d: 9d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E8:B4:CC:45:15:39:80:68:CE:21:5D:70:7A:80:40:F9:46:5A:09 X509v3 Authority Key Identifier: keyid:62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:de:0e:8d:a4:23:5a:34:5c:e0:18:55:25:47:8f:3e:2d:b9: cd:1c:92:bc:56:3e:6f:1f:cc:46:7d:ad:c9:78:42:85:1b:85: 3f:dc:63:8b:6f:7e:41:f8:61:18:0d:16:ab:93:59:92:57:ee: a3:8f:d4:b9:44:60:88:94:15:3e:46:55:29:a4:36:bc:28:4c: cb:d8:f2:38:f6:01:51:b0:fb:55:50:38:f0:b5:43:7a:82:1c: 04:b4:db:54:aa:3b:39:0c:ee:86:35:09:d7:e5:29:7f:5a:e2: 6b:ff:e1:bd:f7:28:e6:38:f9:63:19:34:90:33:c0:81:b9:c0: 1e:31:2b:08:f3:2a:fc:5d:41:d4:29:38:bb:cc:da:30:58:f9: e4:aa:7e:b5:6f:2a:0d:ce:06:12:ec:3d:2a:8a:d7:3b:0f:4d: 5c:12:c1:49:5f:53:6b:c1:cc:03:d5:bf:18:86:5e:ea:a1:8a: 47:c5:10:d9:e0:f9:68:c3:62:79:e9:77:35:db:81:fa:44:01: 88:fa:d6:b8:b2:89:e7:52:35:ee:b9:8c:cb:8a:92:17:c4:ca: 53:e5:6a:fd:33:ce:af:9c:cf:07:22:d3:02:78:08:b0:13:e0: a5:f9:5a:96:d8:68:28:20:39:ef:3b:fb:56:d5:24:56:fe:5d: 6c:e2:7b:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA3RjAxMTAvBgNVBAUTKDYyQkVGQTFDMjM4REY4REU5NzJFQTVGRTE4MDk3QjEx MkVGMDQ3N0IwHhcNMjUxMjIzMDExODE1WhcNMjUxMjMwMDExODE1WjAYMRYwFAYD VQQDDA02OTQ5ZWRkOC0zMzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9XBwVmvwoIO2i9GIwNOKNZEMtSI9/LiIhime23VkPRWRXe7UfKBeXUsISyA 4ggFM/0v3UdpssOVHFRQWtGRgSJnWqjQUnqsD1eXGVkZmW1/H3r4PA3SVPIQ+5qf cuoNGawIEgsMlU3Vl4WwlE8MMq1w2Vo1WPwUYv5eGrQFbH66/KCuTtOxPIPmE/l4 eedEJLB9Ee4FZbg/it+mXsl6D0DHAu0SRKAPqlpsjf5XGd1PJdvsh/FzZt5ZsU0p NhTaGbxovb8/27Cf2tzhorLoQxaobWI78aT3UQp0BnES5LiGw69JwE3C8tbTSuqK NWg/6TAEpt9MtynXJt3gy42dNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrotMxF FTmAaM4hXXB6gED5RloJMB8GA1UdIwQYMBaAFGK++hwjjfjely6l/hgJexEu8Ed7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDdGMC82MEQwQzlGQUI4 QTgxMUVEOUZBNDc4NDNDNEY5QUUwMi9Zcjc2SENPTi1ONlhMcVgtR0FsN0VTN3dS M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lyNzZIQ09OLU42WExxWC1HQWw3RVM3d1Izcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDdGMC82MEQwQzlGQUI4QTgxMUVEOUZBNDc4NDNDNEY5QUUwMi9Zcjc2SENPTi1O NlhMcVgtR0FsN0VTN3dSM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh3g6NpCNaNFzgGFUlR48+LbnNHJK8Vj5vH8xGfa3JeEKFG4U/3GOL b35B+GEYDRark1mSV+6jj9S5RGCIlBU+RlUppDa8KEzL2PI49gFRsPtVUDjwtUN6 ghwEtNtUqjs5DO6GNQnX5Sl/WuJr/+G99yjmOPljGTSQM8CBucAeMSsI8yr8XUHU KTi7zNowWPnkqn61byoNzgYS7D0qitc7D01cEsFJX1NrwcwD1b8Yhl7qoYpHxRDZ 4Plow2J56Xc124H6RAGI+ta4sonnUjXuuYzLipIXxMpT5Wr9M86vnM8HItMCeAiw E+Cl+VqW2GgoIDnvO/tW1SRW/l1s4nt2 -----END CERTIFICATE-----Generated at Tue Dec 23 17:40:53 2025 by rpki-client