This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft File: yyk1oUeLT4tEYxANsulbBlRAZ3M.mft (raw, json) Hash identifier: WawWAr/LL85gamR1E7MuSa7UMRW/WPprEFQmUdwEymY= Subject key identifier: B2:C3:C9:91:51:7B:8A:7B:33:A9:A4:99:99:5B:C7:94:D2:9D:76:02 Authority key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73 Certificate issuer: /CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft Manifest number: 0120 Signing time: Sun 07 Dec 2025 03:05:00 +0000 Manifest this update: Sun 07 Dec 2025 03:05:00 +0000 Manifest next update: Sun 14 Dec 2025 03:05:00 +0000 Files and hashes: 1: yyk1oUeLT4tEYxANsulbBlRAZ3M.crl (hash: 2lz+OgovFBMh8oNgql3w/MQACD/ij6pLQO02LqR6/GA=) 2: 76601C1C23E611EF92A9097CC4F9AE02.roa (hash: bUpgZDyaaNx2o4Iq2csQK5MMpOoGsf0d7wS0X/AlYLQ=) 3: 75E10ADA23E611EF92A9097CC4F9AE02.roa (hash: iGJZ5nKtqdpr8XQ5xRp8ABn+d8XHdqoNNsqJjwgQg3Y=) 4: 680D797023E611EF8165F17BC4F9AE02.roa (hash: oa8frv8vlg1vBn275l50HRx0PnZyi1FiU/lJjWPqNdo=) 5: D14D6710936711EFB8A6457CC4F9AE02.roa (hash: sopaYIQ7VXvlTBIzsDAOnSetWGJ3UTk1u9wD33/qnLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 03:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156F14, serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773 Validity Not Before: Dec 7 03:05:00 2025 GMT Not After : Dec 14 03:05:00 2025 GMT Subject: CN=6934eedc-d2a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2d:45:6f:9c:d5:a3:61:2b:89:b3:48:b6:4d: 94:5a:f2:5b:80:c5:cd:7e:d2:a3:fc:10:fb:74:b1: 12:d3:47:cb:27:fc:5c:36:3b:22:17:42:83:c0:bc: c7:b1:ba:45:79:c1:35:bf:90:ba:6e:b2:aa:a4:fb: 9f:6e:65:3e:82:8a:a2:e4:a2:c7:7b:5f:e1:95:7b: 37:df:a5:27:e7:77:fc:5a:dc:4c:a9:74:72:f6:11: ee:9b:c9:bf:dc:80:b5:b2:63:fa:ad:d8:f0:5f:15: c3:70:40:24:79:fd:a3:16:35:e6:0b:30:34:b6:ff: e1:49:a5:d7:79:86:3b:47:b5:b3:af:f6:cb:cd:7a: dc:05:5d:d7:5d:d9:2b:a0:66:bd:2d:ce:af:94:eb: b8:89:77:5d:12:c8:53:ec:09:87:c8:28:86:f2:af: 19:2d:f2:fd:4b:6a:27:6e:9e:eb:86:74:0d:37:24: 90:e9:03:04:e7:93:71:f4:e2:c2:0e:92:bf:06:9b: 21:da:3b:05:cb:d1:44:22:0d:60:9b:1f:57:06:d6: 9d:07:8a:c9:12:bd:5b:1c:70:7a:fd:5e:93:69:1e: 46:0b:d3:d2:3b:0a:6a:e0:14:58:3f:28:e0:26:e4: 03:1b:0f:c1:d9:1b:16:42:b3:7b:a7:c0:bd:37:37: 66:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C3:C9:91:51:7B:8A:7B:33:A9:A4:99:99:5B:C7:94:D2:9D:76:02 X509v3 Authority Key Identifier: keyid:CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:61:c3:b1:33:ae:bc:74:30:4b:6a:a2:f6:14:ff:8f:37:d3: 56:da:e1:5d:70:aa:59:42:59:3b:11:e6:85:1f:b5:d5:9b:f8: ae:69:7c:f5:a7:2a:cb:ee:f2:32:1b:8d:3e:ae:aa:57:ca:78: 5d:b6:3c:d0:34:90:0a:01:10:9c:5a:a0:de:0b:8e:01:ec:7f: e6:32:63:f3:ad:90:8c:d2:fa:4f:73:f8:90:51:09:29:e1:4e: c7:85:e2:79:f4:c9:52:e4:3d:7a:64:8b:38:9e:13:27:5b:3e: 2b:3c:06:53:96:49:8c:cd:5c:56:41:b7:a9:9f:d3:b5:63:d3: e4:73:c1:60:e4:32:88:25:fc:f5:7f:bd:01:7c:9a:f6:cc:c1: e0:e2:b1:5d:c8:0c:21:90:58:6b:30:f2:a7:0c:81:4c:bc:f7: 09:4e:b4:56:f0:b8:42:24:28:6c:12:96:d7:03:97:20:9a:a9: 44:de:a6:c3:24:3f:44:0a:58:81:ba:0a:33:6d:eb:a7:4a:7a: 72:15:d1:bf:75:76:d1:5b:30:b8:29:68:cd:fa:ae:6f:23:87: cb:41:ee:a0:32:ac:f3:4d:7e:d0:ad:7b:bb:da:fc:8b:e4:9c: f1:73:5d:c4:4e:a4:4e:a9:9b:61:e3:a7:12:b8:6b:7e:30:c7: 89:91:21:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZGMTQxMTAvBgNVBAUTKENCMjkzNUExNDc4QjRGOEI0NDYzMTAwREIyRTk1QjA2 NTQ0MDY3NzMwHhcNMjUxMjA3MDMwNTAwWhcNMjUxMjE0MDMwNTAwWjAYMRYwFAYD VQQDEw02OTM0ZWVkYy1kMmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3S1Fb5zVo2EribNItk2UWvJbgMXNftKj/BD7dLES00fLJ/xcNjsiF0KDwLzH sbpFecE1v5C6brKqpPufbmU+goqi5KLHe1/hlXs336Un53f8WtxMqXRy9hHum8m/ 3IC1smP6rdjwXxXDcEAkef2jFjXmCzA0tv/hSaXXeYY7R7Wzr/bLzXrcBV3XXdkr oGa9Lc6vlOu4iXddEshT7AmHyCiG8q8ZLfL9S2onbp7rhnQNNySQ6QME55Nx9OLC DpK/Bpsh2jsFy9FEIg1gmx9XBtadB4rJEr1bHHB6/V6TaR5GC9PSOwpq4BRYPyjg JuQDGw/B2RsWQrN7p8C9Nzdm3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLDyZFR e4p7M6mkmZlbx5TSnXYCMB8GA1UdIwQYMBaAFMspNaFHi0+LRGMQDbLpWwZUQGdz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkYxNC8zRjEyODg2MjFG REIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0dEVZeEFOc3VsYkJsUkFa M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5azFvVWVMVDR0RVl4QU5zdWxiQmxSQVozTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkYxNC8zRjEyODg2MjFGREIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0 dEVZeEFOc3VsYkJsUkFaM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7YcOxM668dDBLaqL2FP+PN9NW2uFdcKpZQlk7EeaFH7XVm/iuaXz1 pyrL7vIyG40+rqpXynhdtjzQNJAKARCcWqDeC44B7H/mMmPzrZCM0vpPc/iQUQkp 4U7HheJ59MlS5D16ZIs4nhMnWz4rPAZTlkmMzVxWQbepn9O1Y9Pkc8Fg5DKIJfz1 f70BfJr2zMHg4rFdyAwhkFhrMPKnDIFMvPcJTrRW8LhCJChsEpbXA5cgmqlE3qbD JD9ECliBugozbeunSnpyFdG/dXbRWzC4KWjN+q5vI4fLQe6gMqzzTX7QrXu72vyL 5Jzxc13ETqROqZth46cSuGt+MMeJkSG9 -----END CERTIFICATE-----Generated at Sun Dec 7 14:07:25 2025 by rpki-client