This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft File: YDL2P9JhaBpA9zC5eHJR5jMozW4.mft (raw, json) Hash identifier: p38zYI+r8kNUTGuFP90jWksY7f8+7MvuyL5I+yR7CRc= Subject key identifier: C7:1C:57:B1:E7:CE:EC:2D:BF:5C:8D:4D:FD:68:15:E2:97:56:A6:89 Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E Certificate issuer: /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft Manifest number: 013A Signing time: Sun 07 Dec 2025 02:52:34 +0000 Manifest this update: Sun 07 Dec 2025 02:52:34 +0000 Manifest next update: Sun 14 Dec 2025 02:52:34 +0000 Files and hashes: 1: YDL2P9JhaBpA9zC5eHJR5jMozW4.crl (hash: h2sxjS3lpDymv56OGAUDmd5+OBruQ+uPjjShGFeErEQ=) 2: 2FA6E74C0E0511F0971F7328C4F9AE02.roa (hash: ZuV1m3RVCFuLNu5PVZ3hMbWj1JgqSl1bBNnQdfczgAE=) 3: 8A27B986FFB811EFB6E16425C4F9AE02.roa (hash: g20Eco9SaLOp8CUCQLbxBAHWlc3BxmlgHVHA64eMjfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 02:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155098, serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Validity Not Before: Dec 7 02:52:34 2025 GMT Not After : Dec 14 02:52:34 2025 GMT Subject: CN=6934ebf2-1647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c5:4b:16:1e:91:a1:f9:a0:4f:6e:df:8b:65: 67:9f:64:94:c7:0a:3d:3c:84:1e:73:bb:fb:00:b6: 32:97:a1:4d:e8:12:ae:2e:24:c1:86:76:15:ce:d1: 46:ff:a5:97:ff:30:a6:2d:95:ca:ca:88:fd:58:04: ae:4f:64:01:7b:4b:94:a4:7f:db:9f:be:a3:90:82: 73:5a:2e:9f:9f:9a:99:b6:93:ef:f0:91:74:e9:92: 7d:54:f2:1e:f0:b4:ad:cb:b9:6b:00:77:61:03:06: c4:3e:31:04:f2:b9:c5:ba:d1:54:28:52:c4:ec:09: e4:bd:0a:02:84:6a:4f:0c:55:85:77:f1:a2:42:7a: 4e:a1:e5:8c:8e:e3:72:cc:e8:2e:b3:d2:b8:54:5f: 85:2b:94:62:1b:05:ac:61:d1:5f:d0:06:3e:0b:c4: db:a5:d8:f2:4b:2c:06:c1:1e:81:bd:c3:4d:bb:d0: 0f:dc:e7:81:4c:ca:15:42:3d:d4:aa:0b:54:f2:27: 0e:7e:ef:2f:68:36:5f:76:40:bb:c7:02:37:0c:39: 52:82:69:2a:0f:4f:cf:b2:56:0b:69:06:76:12:81: 99:49:ff:7f:90:b4:39:9c:39:00:de:27:bb:c2:82: 35:0f:15:f9:6d:80:05:13:bb:3a:9e:0a:e1:95:0a: 0b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1C:57:B1:E7:CE:EC:2D:BF:5C:8D:4D:FD:68:15:E2:97:56:A6:89 X509v3 Authority Key Identifier: keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:22:2c:11:8a:1e:20:1d:ad:82:47:e9:52:21:52:7a:9d:a5: c5:18:0b:59:be:fd:b1:c4:3d:aa:b9:b6:64:62:bd:51:3a:c8: 39:c5:ab:da:0a:0a:66:7a:66:69:bf:c8:b4:42:fd:5a:bc:f7: 56:f6:bf:57:2e:54:a1:45:ab:d0:f3:4a:de:ef:0a:25:bb:93: 1c:61:01:e2:3a:c1:45:ac:99:0e:69:4d:97:b4:2e:cc:60:9f: bb:30:e7:3e:31:a7:d8:fa:8f:49:95:3a:59:4b:fa:a7:43:34: 87:3e:b7:b2:ea:bc:a0:e0:dd:dd:85:37:e0:2a:26:8f:29:95: 35:6d:4f:e4:ef:b2:30:e5:ec:1e:2b:03:67:69:48:04:a6:13: dd:27:39:1b:e8:cf:2e:20:4f:94:5f:84:37:cc:52:60:66:37: dc:4c:5a:63:e7:56:39:65:99:5d:16:19:de:9e:9d:fe:90:c7: f0:d8:eb:52:51:b2:45:96:5a:d0:0b:0b:1e:a7:e9:6c:e8:2c: b7:71:55:27:18:f2:e6:59:20:ba:e2:3c:05:9f:21:af:14:07: d5:6b:a4:c9:44:24:04:a5:a8:3e:4b:e9:d5:54:cd:3b:85:c9: 92:9a:8f:67:70:12:f3:e4:54:69:ea:c9:7d:8c:81:82:fd:d6: 0a:2f:94:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUwOTgxMTAvBgNVBAUTKDYwMzJGNjNGRDI2MTY4MUE0MEY3MzBCOTc4NzI1MUU2 MzMyOENENkUwHhcNMjUxMjA3MDI1MjM0WhcNMjUxMjE0MDI1MjM0WjAYMRYwFAYD VQQDEw02OTM0ZWJmMi0xNjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssVLFh6RofmgT27fi2Vnn2SUxwo9PIQec7v7ALYyl6FN6BKuLiTBhnYVztFG /6WX/zCmLZXKyoj9WASuT2QBe0uUpH/bn76jkIJzWi6fn5qZtpPv8JF06ZJ9VPIe 8LSty7lrAHdhAwbEPjEE8rnFutFUKFLE7AnkvQoChGpPDFWFd/GiQnpOoeWMjuNy zOgus9K4VF+FK5RiGwWsYdFf0AY+C8TbpdjySywGwR6BvcNNu9AP3OeBTMoVQj3U qgtU8icOfu8vaDZfdkC7xwI3DDlSgmkqD0/PslYLaQZ2EoGZSf9/kLQ5nDkA3ie7 woI1DxX5bYAFE7s6ngrhlQoLRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMccV7Hn zuwtv1yNTf1oFeKXVqaJMB8GA1UdIwQYMBaAFGAy9j/SYWgaQPcwuXhyUeYzKM1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTA5OC9CMkIxQTJCOEZD NzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFCcEE5ekM1ZUhKUjVqTW96 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lETDJQOUpoYUJwQTl6QzVlSEpSNWpNb3pXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTA5OC9CMkIxQTJCOEZDNzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFC cEE5ekM1ZUhKUjVqTW96VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARIiwRih4gHa2CR+lSIVJ6naXFGAtZvv2xxD2qubZkYr1ROsg5xava CgpmemZpv8i0Qv1avPdW9r9XLlShRavQ80re7wolu5McYQHiOsFFrJkOaU2XtC7M YJ+7MOc+MafY+o9JlTpZS/qnQzSHPrey6ryg4N3dhTfgKiaPKZU1bU/k77Iw5ewe KwNnaUgEphPdJzkb6M8uIE+UX4Q3zFJgZjfcTFpj51Y5ZZldFhnenp3+kMfw2OtS UbJFllrQCwsep+ls6Cy3cVUnGPLmWSC64jwFnyGvFAfVa6TJRCQEpag+S+nVVM07 hcmSmo9ncBLz5FRp6sl9jIGC/dYKL5TM -----END CERTIFICATE-----Generated at Mon Dec 8 06:13:43 2025 by rpki-client