This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft File: Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft (raw, json) Hash identifier: m0bUcUH/qkhxHK4/ac5hgMUJpAVYZ1Z+YnAEYMEGkqs= Subject key identifier: 55:5E:72:8C:C7:94:10:CB:BC:EB:EC:DB:4E:95:68:9C:7A:FB:50:79 Authority key identifier: 63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00 Certificate issuer: /CN=A913EE46/serialNumber=63515B364113848FA554D2842F5841877CF6AF00 Certificate serial: 02D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft Manifest number: 02D3 Signing time: Tue 23 Dec 2025 00:21:43 +0000 Manifest this update: Tue 23 Dec 2025 00:21:42 +0000 Manifest next update: Tue 30 Dec 2025 00:21:42 +0000 Files and hashes: 1: Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl (hash: rvitlfp1L2PNxpi5kBePwiSBUGc31ud09JPYAeNZIRI=) 2: 9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa (hash: JWAO5OM1htkOqA8zsEncfXnArds8hOb3Z7zkeDNiSm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 728 (0x2d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EE46, serialNumber=63515B364113848FA554D2842F5841877CF6AF00 Validity Not Before: Dec 23 00:21:42 2025 GMT Not After : Dec 30 00:21:42 2025 GMT Subject: CN=6949e097-e0b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:93:4a:17:11:6b:1e:cd:df:d2:51:70:6c:d3: fa:b3:86:dd:75:cb:1b:68:dd:65:2e:de:8e:ba:f7: 75:d6:1d:8f:22:c5:00:1d:de:c6:54:f8:03:28:54: 76:cc:9f:95:f6:e6:97:f1:5e:de:12:77:b1:fc:de: 4a:7e:cb:ce:48:c7:0b:81:0d:1b:17:9d:77:73:1b: 2f:d0:23:17:d5:f3:ea:1c:45:28:c9:56:ae:ef:8f: 9d:d5:12:42:3a:15:45:e8:69:dd:f6:7b:62:2b:7c: cb:db:22:2a:52:77:38:e6:4b:54:ec:59:63:b2:43: a6:4f:df:dd:be:94:d5:da:35:16:3f:5f:39:61:a0: 3e:82:63:b1:38:06:d1:e6:8e:79:af:a0:89:7d:26: d4:16:6f:ef:2d:4b:66:a8:5f:6f:a4:f6:ee:5f:cf: 23:e7:51:79:88:fb:5c:17:2d:4c:0b:50:8c:eb:54: 08:ad:14:c4:5e:bc:06:2b:c7:74:1a:30:fd:84:3b: 5a:b3:1d:4f:d3:6c:83:f7:3b:e3:4b:03:c5:f6:39: 8a:6a:be:d8:4e:bd:eb:fe:d1:61:ed:65:2f:03:9f: b8:5a:ac:1e:3e:f5:30:71:85:27:3b:f0:9a:e2:4b: 69:62:9f:ac:61:8a:9a:f3:6c:c3:08:01:1b:d8:c9: e4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5E:72:8C:C7:94:10:CB:BC:EB:EC:DB:4E:95:68:9C:7A:FB:50:79 X509v3 Authority Key Identifier: keyid:63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:6b:97:ee:d9:57:29:29:10:1a:a9:6f:af:52:46:a9:66:ea: 41:11:57:b5:4d:ba:dd:9b:bf:a1:b6:a3:51:10:12:93:8d:5f: af:ce:eb:f6:14:41:ff:76:2c:30:01:43:b1:a9:2f:ed:1f:33: 14:50:67:51:21:0e:fc:cf:4f:02:1d:aa:9c:70:c1:30:5b:81: c1:e5:8b:20:8b:3c:b4:b5:e3:56:b7:78:d7:ee:c0:66:39:60: 0d:63:0c:e6:51:ef:77:69:3d:ef:09:58:7a:14:b4:12:67:3e: fb:b3:60:1d:41:b6:e8:58:82:d7:81:d5:7c:50:3a:61:15:bf: e4:4c:74:ae:65:87:a6:c5:ee:b6:ea:f3:d2:2c:8b:17:34:8c: 53:d4:ff:7a:41:b8:7a:77:e7:70:00:5d:85:78:d8:e2:f3:4e: 2f:cb:51:b5:64:95:b1:18:1a:8a:4c:65:72:f3:e0:70:c4:d3: 60:31:1c:e6:48:d5:79:7d:d9:e2:6d:ef:52:5e:c2:9f:01:50: 19:a8:c5:d0:e4:6b:44:17:9a:88:a6:88:2b:55:9d:95:f3:81: 07:51:b1:bf:a0:8a:32:81:ae:31:95:1c:75:40:42:d0:e8:24: 80:3a:fc:00:b5:92:b0:73:f9:d1:c7:a1:0f:a9:6d:dd:f4:ee: e6:d2:86:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VFNDYxMTAvBgNVBAUTKDYzNTE1QjM2NDExMzg0OEZBNTU0RDI4NDJGNTg0MTg3 N0NGNkFGMDAwHhcNMjUxMjIzMDAyMTQyWhcNMjUxMjMwMDAyMTQyWjAYMRYwFAYD VQQDDA02OTQ5ZTA5Ny1lMGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJNKFxFrHs3f0lFwbNP6s4bddcsbaN1lLt6Ouvd11h2PIsUAHd7GVPgDKFR2 zJ+V9uaX8V7eEnex/N5KfsvOSMcLgQ0bF513cxsv0CMX1fPqHEUoyVau74+d1RJC OhVF6Gnd9ntiK3zL2yIqUnc45ktU7FljskOmT9/dvpTV2jUWP185YaA+gmOxOAbR 5o55r6CJfSbUFm/vLUtmqF9vpPbuX88j51F5iPtcFy1MC1CM61QIrRTEXrwGK8d0 GjD9hDtasx1P02yD9zvjSwPF9jmKar7YTr3r/tFh7WUvA5+4WqwePvUwcYUnO/Ca 4ktpYp+sYYqa82zDCAEb2MnkUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVecozH lBDLvOvs206VaJx6+1B5MB8GA1UdIwQYMBaAFGNRWzZBE4SPpVTShC9YQYd89q8A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUU0Ni9BRTgyRTEyNjEy RUQxMUVEOUU0RDc2MEVDNEY5QUUwMi9ZMUZiTmtFVGhJLWxWTktFTDFoQmgzejJy d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxRmJOa0VUaEktbFZOS0VMMWhCaDN6MnJ3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUU0Ni9BRTgyRTEyNjEyRUQxMUVEOUU0RDc2MEVDNEY5QUUwMi9ZMUZiTmtFVGhJ LWxWTktFTDFoQmgzejJyd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsa5fu2VcpKRAaqW+vUkapZupBEVe1Tbrdm7+htqNREBKTjV+vzuv2 FEH/diwwAUOxqS/tHzMUUGdRIQ78z08CHaqccMEwW4HB5Ysgizy0teNWt3jX7sBm OWANYwzmUe93aT3vCVh6FLQSZz77s2AdQbboWILXgdV8UDphFb/kTHSuZYemxe62 6vPSLIsXNIxT1P96Qbh6d+dwAF2FeNji804vy1G1ZJWxGBqKTGVy8+BwxNNgMRzm SNV5fdnibe9SXsKfAVAZqMXQ5GtEF5qIpogrVZ2V84EHUbG/oIoyga4xlRx1QELQ 6CSAOvwAtZKwc/nRx6EPqW3d9O7m0oZc -----END CERTIFICATE-----Generated at Tue Dec 23 07:55:28 2025 by rpki-client