This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft File: y2bgNeLweFj09ztHjc2FpjakJQo.mft (raw, json) Hash identifier: MAZyODj3G6ru6ItHA7tgkWhRVHZdQz0Wy3rW4ROPp+o= Subject key identifier: 56:9D:1C:BB:EA:E6:E2:4A:2B:A1:A6:59:D4:DE:16:D2:8A:03:86:1F Authority key identifier: CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A Certificate issuer: /CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft Manifest number: 012D Signing time: Sun 07 Dec 2025 03:02:41 +0000 Manifest this update: Sun 07 Dec 2025 03:02:40 +0000 Manifest next update: Sun 14 Dec 2025 03:02:40 +0000 Files and hashes: 1: y2bgNeLweFj09ztHjc2FpjakJQo.crl (hash: Gmw0P2WBgbADm0g/TTdPz+mGtoBsqaoapns6CFbbZm8=) 2: 851515FC1C8711EF964ED80AC4F9AE02.roa (hash: ZVnEYOHXINGZEw1RnF1Uj9Pw7AnbBUgkIn8eDQrA8T4=) 3: 82D8082A292611EF875A5C36C4F9AE02.roa (hash: LUt9DJS6Jpbs8PDzvIpOLhLuEq85uifRo0wnGTYcGuc=) 4: AF27640226FA11F0B0383240C4F9AE02.roa (hash: 1i0d6pr2ELd59qaQmu9345pITiiNAhlVL8hxc+i1TcY=) 5: 24D519F226FA11F0B737393FC4F9AE02.roa (hash: 08jGNnEflD8e5x3Cs8u4vH+jCRzHFAlUOBfwuUSSNb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 03:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169C00, serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A Validity Not Before: Dec 7 03:02:40 2025 GMT Not After : Dec 14 03:02:40 2025 GMT Subject: CN=6934ee51-5792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:70:ff:3c:b9:b6:d7:9c:93:d8:09:20:44:3c: e4:9b:6b:ae:a8:ca:f8:1b:9f:45:07:8c:75:77:0d: 3d:7d:d6:b6:5c:d7:f8:31:60:38:57:51:3d:3b:60: a0:3a:2d:ef:ed:80:8b:ed:70:68:01:b9:eb:73:4b: 4f:f9:3f:76:d7:0f:6f:8d:97:f6:4f:1f:f4:6b:e1: 97:e6:2f:22:63:40:ac:d4:be:ab:01:93:90:32:85: 88:0e:73:67:1e:9c:5e:a5:0e:d1:80:ae:d8:f3:7e: 2c:e5:69:45:9f:f5:9a:6e:97:e7:33:ba:32:35:59: 6c:9c:ac:35:0b:a0:bf:de:4d:95:00:ca:20:67:c4: 36:1d:1c:90:fa:61:de:13:db:d3:39:e2:20:aa:fe: 34:71:b7:5d:3b:e3:e4:ee:a0:c1:46:45:fb:42:b1: 2e:a7:2d:e3:7f:eb:71:c1:6c:4c:3a:45:32:96:46: d5:a1:d3:f7:00:96:82:05:69:6b:83:8c:8f:c4:59: a3:60:28:53:2c:de:a3:85:93:f8:d1:e1:21:f1:ac: 93:cc:21:56:66:f9:72:f7:bd:7f:9b:e4:18:6e:df: 6e:7d:d4:b2:62:15:ae:6c:f0:9b:6d:c2:2f:ed:56: 9d:20:b6:18:54:c5:36:5a:83:9e:25:ef:74:40:2e: 9e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:9D:1C:BB:EA:E6:E2:4A:2B:A1:A6:59:D4:DE:16:D2:8A:03:86:1F X509v3 Authority Key Identifier: keyid:CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:7e:31:e8:b6:94:46:27:63:a4:9c:ca:81:ed:c6:ba:cf:20: eb:a7:51:fc:cf:7e:7b:44:e1:c3:9b:b4:92:20:4f:73:16:c5: 3f:3d:5b:79:ba:e6:c7:e7:fb:58:8f:82:14:79:f0:dc:cd:ac: bd:89:6c:a2:42:31:a2:ce:d4:cd:d0:c9:21:aa:09:4d:a2:e1: 1a:0f:67:c6:5d:b9:4a:c5:d4:c2:3d:8f:3e:92:34:9b:6d:d9: a9:bc:1a:41:86:8f:92:40:1d:35:4b:23:bc:3a:63:5d:6b:76: 18:36:d2:2e:70:3e:3c:f1:e4:36:82:cf:3f:0b:8a:a2:77:53: 2c:35:95:02:ed:4c:5d:6d:01:35:3b:f8:87:23:b3:36:38:82: 4a:2f:cf:56:e7:99:e6:0d:99:a4:4d:ab:ef:8c:32:db:68:8d: d2:58:aa:6b:1c:2d:64:de:79:20:d6:18:de:d6:2c:71:9b:51: 05:a0:2a:df:57:61:b0:80:24:96:55:a2:83:5e:bc:52:34:8d: 57:11:2a:5e:54:93:ac:e2:17:e6:6c:65:27:1d:7f:d6:43:03: 82:25:0a:49:66:01:f3:9a:3c:b1:bf:b8:cd:40:d8:a5:77:39: b2:f0:e4:60:aa:62:91:be:62:a0:36:cc:5f:51:0b:d0:57:ca: 34:ef:cc:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlDMDAxMTAvBgNVBAUTKENCNjZFMDM1RTJGMDc4NThGNEY3M0I0NzhEQ0Q4NUE2 MzZBNDI1MEEwHhcNMjUxMjA3MDMwMjQwWhcNMjUxMjE0MDMwMjQwWjAYMRYwFAYD VQQDEw02OTM0ZWU1MS01NzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6HD/PLm215yT2AkgRDzkm2uuqMr4G59FB4x1dw09fda2XNf4MWA4V1E9O2Cg Oi3v7YCL7XBoAbnrc0tP+T921w9vjZf2Tx/0a+GX5i8iY0Cs1L6rAZOQMoWIDnNn HpxepQ7RgK7Y834s5WlFn/WabpfnM7oyNVlsnKw1C6C/3k2VAMogZ8Q2HRyQ+mHe E9vTOeIgqv40cbddO+Pk7qDBRkX7QrEupy3jf+txwWxMOkUylkbVodP3AJaCBWlr g4yPxFmjYChTLN6jhZP40eEh8ayTzCFWZvly971/m+QYbt9ufdSyYhWubPCbbcIv 7VadILYYVMU2WoOeJe90QC6eRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFadHLvq 5uJKK6GmWdTeFtKKA4YfMB8GA1UdIwQYMBaAFMtm4DXi8HhY9Pc7R43NhaY2pCUK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUMwMC8xQzMxRUFGMDFC QzAxMUVGQkI2ODhENUVDNEY5QUUwMi95MmJnTmVMd2VGajA5enRIamMyRnBqYWtK UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kyYmdOZUx3ZUZqMDl6dEhqYzJGcGpha0pRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUMwMC8xQzMxRUFGMDFCQzAxMUVGQkI2ODhENUVDNEY5QUUwMi95MmJnTmVMd2VG ajA5enRIamMyRnBqYWtKUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCefjHotpRGJ2OknMqB7ca6zyDrp1H8z357ROHDm7SSIE9zFsU/PVt5 uubH5/tYj4IUefDczay9iWyiQjGiztTN0MkhqglNouEaD2fGXblKxdTCPY8+kjSb bdmpvBpBho+SQB01SyO8OmNda3YYNtIucD488eQ2gs8/C4qid1MsNZUC7UxdbQE1 O/iHI7M2OIJKL89W55nmDZmkTavvjDLbaI3SWKprHC1k3nkg1hje1ixxm1EFoCrf V2GwgCSWVaKDXrxSNI1XESpeVJOs4hfmbGUnHX/WQwOCJQpJZgHzmjyxv7jNQNil dzmy8ORgqmKRvmKgNsxfUQvQV8o078x8 -----END CERTIFICATE-----Generated at Mon Dec 8 06:24:50 2025 by rpki-client