This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft File: YfcrXpPnk13XngQ1yBj4-acQ9ok.mft (raw, json) Hash identifier: umzTSPPItjvn3L4S1flpNQue77Vyl1BTG9IhsbJgT1w= Subject key identifier: 4D:F7:2F:A3:4B:13:7B:AF:FA:28:94:4F:75:72:75:4C:40:90:8E:06 Authority key identifier: 61:F7:2B:5E:93:E7:93:5D:D7:9E:04:35:C8:18:F8:F9:A7:10:F6:89 Certificate issuer: /CN=A913FE55/serialNumber=61F72B5E93E7935DD79E0435C818F8F9A710F689 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft Manifest number: 64 Signing time: Tue 23 Dec 2025 05:55:09 +0000 Manifest this update: Tue 23 Dec 2025 05:55:08 +0000 Manifest next update: Tue 30 Dec 2025 05:55:08 +0000 Files and hashes: 1: YfcrXpPnk13XngQ1yBj4-acQ9ok.crl (hash: tRCwlTX3Rdyg32e3HuNnwqeATJ8ORiP2VAwAp4ficLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.crl rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:55:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FE55, serialNumber=61F72B5E93E7935DD79E0435C818F8F9A710F689 Validity Not Before: Dec 23 05:55:08 2025 GMT Not After : Dec 30 05:55:08 2025 GMT Subject: CN=694a2ebd-f457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f5:f0:7f:c1:0c:9f:ad:ad:44:8e:f4:50:e3: 53:4b:22:aa:27:28:71:83:0c:ab:12:de:a0:ae:dd: 1e:57:33:4e:23:b2:fc:97:2b:22:40:44:24:f6:94: a7:d0:48:38:f0:12:3f:89:e1:1d:9d:bb:75:cb:dc: f4:ed:9a:eb:d9:56:04:87:06:69:00:a7:0b:65:3b: 81:f0:5b:de:f9:be:93:4c:3e:4d:29:c0:21:a6:f6: 03:4f:75:5b:f2:f9:c1:d5:14:9b:1d:fe:c3:ee:f2: 48:ec:cb:93:a1:d9:db:d3:fa:3f:a6:d0:3c:97:63: 51:a6:a4:19:07:ed:ed:fe:4b:ae:db:f5:e2:77:88: 17:87:b0:70:38:36:1e:d9:3c:46:b2:7d:ff:18:8d: 5e:15:b6:c5:f1:05:10:fc:6b:d9:bb:b4:3b:00:50: 73:c8:d6:37:46:82:ea:df:0f:c2:30:db:a0:94:5e: 76:99:ca:05:19:7f:d9:d7:38:ee:93:7f:20:4e:c4: 50:cc:03:c8:c0:b1:28:5b:f6:a6:5f:44:5e:65:8a: c7:98:14:3d:5f:6e:13:a2:a7:b4:d5:23:89:70:bb: 2f:64:5f:4d:c1:fe:da:2d:00:a0:18:f8:9f:74:d6: c5:ab:c3:e2:5c:48:3f:d6:3a:72:60:2e:4e:74:62: ff:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F7:2F:A3:4B:13:7B:AF:FA:28:94:4F:75:72:75:4C:40:90:8E:06 X509v3 Authority Key Identifier: keyid:61:F7:2B:5E:93:E7:93:5D:D7:9E:04:35:C8:18:F8:F9:A7:10:F6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:df:d0:f8:1a:86:54:cc:2e:19:2a:c8:02:5c:cc:01:b2:9f: f9:bb:e2:40:83:0a:21:19:03:9e:d7:15:da:f5:91:15:61:a8: ec:be:3f:34:b6:a4:fb:99:bb:d6:63:cf:d2:44:f1:42:63:08: a9:8a:0b:24:60:5a:ab:ca:bb:a4:72:cd:a1:e4:18:07:b0:a6: 46:4c:57:f6:50:32:77:b3:80:f5:0a:41:d7:57:82:6e:ee:e3: d2:46:2a:b8:aa:2f:69:a9:3c:b7:3e:9f:66:60:5b:ce:95:91: 89:e8:0f:29:fd:7d:a8:bc:c8:84:b5:1b:7a:1f:e4:0e:d3:8a: 3c:77:2f:d0:ea:ce:c5:08:5c:91:e5:9c:75:e0:b0:bc:64:a8: 90:9f:fc:67:37:82:99:76:a9:4e:7e:26:b9:f5:1f:15:82:cb: d6:40:ae:f1:72:8b:3b:7a:2f:c7:2f:58:9a:ce:39:1a:21:25: b7:f0:bc:5f:f4:47:2d:32:95:59:54:63:5d:d6:0e:99:36:a1: 6f:89:6a:df:bc:0a:fe:ce:6c:c7:dd:38:85:d8:3a:f9:51:35: 22:51:c2:6b:c0:b5:6d:a5:33:a8:b8:f4:0b:62:75:e3:c9:17: 67:97:38:19:cd:4f:79:26:ef:da:34:0a:c8:91:07:b8:a9:8b: 6d:75:e5:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RkU1NTExMC8GA1UEBRMoNjFGNzJCNUU5M0U3OTM1REQ3OUUwNDM1QzgxOEY4RjlB NzEwRjY4OTAeFw0yNTEyMjMwNTU1MDhaFw0yNTEyMzAwNTU1MDhaMBgxFjAUBgNV BAMMDTY5NGEyZWJkLWY0NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU9fB/wQyfra1EjvRQ41NLIqonKHGDDKsS3qCu3R5XM04jsvyXKyJARCT2lKfQ SDjwEj+J4R2du3XL3PTtmuvZVgSHBmkApwtlO4HwW975vpNMPk0pwCGm9gNPdVvy +cHVFJsd/sPu8kjsy5Oh2dvT+j+m0DyXY1GmpBkH7e3+S67b9eJ3iBeHsHA4Nh7Z PEayff8YjV4VtsXxBRD8a9m7tDsAUHPI1jdGgurfD8Iw26CUXnaZygUZf9nXOO6T fyBOxFDMA8jAsShb9qZfRF5liseYFD1fbhOip7TVI4lwuy9kX03B/totAKAY+J90 1sWrw+JcSD/WOnJgLk50Yv87AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTfcvo0sT e6/6KJRPdXJ1TECQjgYwHwYDVR0jBBgwFoAUYfcrXpPnk13XngQ1yBj4+acQ9okw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGRTU1LzJENDU3ODAwNDcz QjExRjA4MzM2Rjc1Q0M0RjlBRTAyL1lmY3JYcFBuazEzWG5nUTF5Qmo0LWFjUTlv ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWZjclhwUG5rMTNYbmdRMXlCajQtYWNROW9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG RTU1LzJENDU3ODAwNDczQjExRjA4MzM2Rjc1Q0M0RjlBRTAyL1lmY3JYcFBuazEz WG5nUTF5Qmo0LWFjUTlvay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABTf0PgahlTMLhkqyAJczAGyn/m74kCDCiEZA57XFdr1kRVhqOy+PzS2 pPuZu9Zjz9JE8UJjCKmKCyRgWqvKu6RyzaHkGAewpkZMV/ZQMnezgPUKQddXgm7u 49JGKriqL2mpPLc+n2ZgW86VkYnoDyn9fai8yIS1G3of5A7Tijx3L9DqzsUIXJHl nHXgsLxkqJCf/Gc3gpl2qU5+Jrn1HxWCy9ZArvFyizt6L8cvWJrOORohJbfwvF/0 Ry0ylVlUY13WDpk2oW+Jat+8Cv7ObMfdOIXYOvlRNSJRwmvAtW2lM6i49AtidePJ F2eXOBnNT3km79o0CsiRB7ipi2115Xk= -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:51 2025 by rpki-client