This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft File: ylWUEuKiOAIalO8nGO2wAe-W6oU.mft (raw, json) Hash identifier: bWZU12lh3vWH1kwqUrg3Ir+5XmyppCbxxb8Zid4RMkg= Subject key identifier: 0F:FE:67:1B:85:37:C5:77:41:93:21:1C:0E:AD:78:A3:41:2D:92:5A Authority key identifier: CA:55:94:12:E2:A2:38:02:1A:94:EF:27:18:ED:B0:01:EF:96:EA:85 Certificate issuer: /CN=A9142BA8/serialNumber=CA559412E2A238021A94EF2718EDB001EF96EA85 Certificate serial: 0474 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft Manifest number: 046F Signing time: Mon 22 Dec 2025 23:11:08 +0000 Manifest this update: Mon 22 Dec 2025 23:11:08 +0000 Manifest next update: Mon 29 Dec 2025 23:11:08 +0000 Files and hashes: 1: ylWUEuKiOAIalO8nGO2wAe-W6oU.crl (hash: wpx6Lz+cwGa8TsdvVX4+9PLjiUb7pSReLAjG9lxbolk=) 2: 4A9AA792720D11EC90C07770C4F9AE02.roa (hash: /hJF4+9z5MGZrJ3Wdj1OHWA0NOcwtwcmrngTW3hyYNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.crl rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1140 (0x474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142BA8, serialNumber=CA559412E2A238021A94EF2718EDB001EF96EA85 Validity Not Before: Dec 22 23:11:08 2025 GMT Not After : Dec 29 23:11:08 2025 GMT Subject: CN=6949d00c-bc17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:24:13:9c:1b:3d:dc:fc:83:17:ed:cd:c8:c0: fa:a6:11:1b:93:a9:5b:c9:d2:79:3f:72:f3:f4:70: 7a:7e:b2:29:9a:88:8b:a8:e1:9f:fe:8b:45:b4:32: 4f:4d:2b:a4:c2:f2:79:44:65:7d:8e:ca:ca:6e:7f: 3d:11:00:69:e3:35:0b:44:87:9f:7f:4f:7e:01:14: f4:fd:68:1a:79:00:c1:42:09:38:b4:dc:9c:16:d9: 6a:eb:7f:9d:0c:11:eb:90:fa:bc:e4:db:cd:e6:8e: 4c:d3:27:c3:25:44:14:80:cf:6d:23:d9:1d:4b:04: 62:8e:2a:b7:fe:4c:cb:7c:45:7c:bb:28:0d:4d:99: c6:8d:70:f4:d6:e2:a5:6b:32:e0:a5:7d:96:b2:7b: 05:fc:29:c9:8d:c3:63:23:84:fb:a2:19:c4:c3:12: bd:02:0d:e0:b1:3e:a8:3a:8e:fd:a9:56:e3:7e:9a: b6:70:bc:ca:bb:e5:3e:7d:c4:07:e9:5c:f9:02:71: 20:0e:7d:5f:c8:67:ab:17:a6:2a:e2:78:0b:b1:01: 5b:98:08:cf:54:bd:c4:6a:ef:d2:07:cf:1e:5f:03: 9c:82:95:5f:f2:13:0f:a4:86:0e:30:c9:a4:06:88: 15:d9:04:29:30:13:ea:49:7b:a6:20:ff:b4:89:dd: 4f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FE:67:1B:85:37:C5:77:41:93:21:1C:0E:AD:78:A3:41:2D:92:5A X509v3 Authority Key Identifier: keyid:CA:55:94:12:E2:A2:38:02:1A:94:EF:27:18:ED:B0:01:EF:96:EA:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:1b:a3:d2:0b:19:30:d3:5b:2e:ac:47:c4:35:77:de:ae:bd: ff:bf:13:d3:a7:3a:60:2d:0f:2a:e8:89:01:67:76:a6:43:82: a0:e9:07:ff:29:34:7d:44:df:a0:99:1b:6f:11:03:b3:7b:10: 6a:cf:05:94:f9:dc:9f:24:25:0f:a6:94:b0:e4:4a:88:85:ba: 04:7b:ba:a8:81:26:77:8b:b9:78:e2:2a:45:77:e5:e6:b1:da: b0:93:d9:cb:a6:71:f7:55:17:e1:c1:fa:aa:fa:3a:36:d2:0e: 01:e7:69:48:b0:a4:d3:de:aa:b1:1e:e3:cb:87:26:c4:19:79: 96:54:be:8a:24:63:17:7a:5f:28:fe:6d:0a:a7:d4:94:a3:04: ea:be:17:5a:01:fc:7a:8b:e0:05:f6:4f:9a:42:4e:81:1c:56: 98:9f:55:e8:a2:0b:9d:8c:61:e2:33:29:1c:76:a2:33:79:32: 5a:81:ae:ee:46:6b:79:db:df:35:94:75:fc:33:59:7e:33:a6: 71:26:51:99:84:8d:6c:46:18:bc:c5:37:2c:c8:fe:ce:d4:87: e6:e2:73:50:84:61:33:c7:73:e9:d2:a6:a1:8d:68:cc:04:87: 78:e4:2e:4d:d4:f7:1a:5f:7f:31:c9:76:ba:58:19:20:da:1b: ca:bf:14:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCQTgxMTAvBgNVBAUTKENBNTU5NDEyRTJBMjM4MDIxQTk0RUYyNzE4RURCMDAx RUY5NkVBODUwHhcNMjUxMjIyMjMxMTA4WhcNMjUxMjI5MjMxMTA4WjAYMRYwFAYD VQQDDA02OTQ5ZDAwYy1iYzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSQTnBs93PyDF+3NyMD6phEbk6lbydJ5P3Lz9HB6frIpmoiLqOGf/otFtDJP TSukwvJ5RGV9jsrKbn89EQBp4zULRIeff09+ART0/WgaeQDBQgk4tNycFtlq63+d DBHrkPq85NvN5o5M0yfDJUQUgM9tI9kdSwRijiq3/kzLfEV8uygNTZnGjXD01uKl azLgpX2WsnsF/CnJjcNjI4T7ohnEwxK9Ag3gsT6oOo79qVbjfpq2cLzKu+U+fcQH 6Vz5AnEgDn1fyGerF6Yq4ngLsQFbmAjPVL3Eau/SB88eXwOcgpVf8hMPpIYOMMmk BogV2QQpMBPqSXumIP+0id1PxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/+ZxuF N8V3QZMhHA6teKNBLZJaMB8GA1UdIwQYMBaAFMpVlBLiojgCGpTvJxjtsAHvluqF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkJBOC9ERTc4RDU4Qzcy MDkxMUVDOUQ5M0JCNkNDNEY5QUUwMi95bFdVRXVLaU9BSWFsTzhuR08yd0FlLVc2 b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lsV1VFdUtpT0FJYWxPOG5HTzJ3QWUtVzZvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkJBOC9ERTc4RDU4QzcyMDkxMUVDOUQ5M0JCNkNDNEY5QUUwMi95bFdVRXVLaU9B SWFsTzhuR08yd0FlLVc2b1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGG6PSCxkw01surEfENXferr3/vxPTpzpgLQ8q6IkBZ3amQ4Kg6Qf/ KTR9RN+gmRtvEQOzexBqzwWU+dyfJCUPppSw5EqIhboEe7qogSZ3i7l44ipFd+Xm sdqwk9nLpnH3VRfhwfqq+jo20g4B52lIsKTT3qqxHuPLhybEGXmWVL6KJGMXel8o /m0Kp9SUowTqvhdaAfx6i+AF9k+aQk6BHFaYn1XoogudjGHiMykcdqIzeTJaga7u Rmt52981lHX8M1l+M6ZxJlGZhI1sRhi8xTcsyP7O1Ifm4nNQhGEzx3Pp0qahjWjM BId45C5N1PcaX38xyXa6WBkg2hvKvxRl -----END CERTIFICATE-----Generated at Tue Dec 23 18:06:15 2025 by rpki-client