This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft File: 5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft (raw, json) Hash identifier: Of90gKk53FAc1dVkjJ2rRWEys/sS0EWeIAPOagyf+bM= Subject key identifier: A2:FC:69:B3:71:06:12:07:F2:FA:3B:06:EB:EE:53:D7:A1:08:FD:83 Authority key identifier: E5:8F:98:E3:C6:14:21:46:54:53:AC:42:55:F0:AF:B0:AD:95:D2:46 Certificate issuer: /CN=A9170533/serialNumber=E58F98E3C61421465453AC4255F0AFB0AD95D246 Certificate serial: 03F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft Manifest number: 03F0 Signing time: Thu 04 Dec 2025 22:58:55 +0000 Manifest this update: Thu 04 Dec 2025 22:58:54 +0000 Manifest next update: Thu 11 Dec 2025 22:58:54 +0000 Files and hashes: 1: 5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl (hash: OQ60F/aSxz/gM0r4Gxck0tCNQIx7Fu84xiMzOpxjpjo=) 2: 6664BEB29F8611ECBE806D30C4F9AE02.roa (hash: JfmyzR7WR8BiLmwxCtB0fOXl6mP+OqTxhoVtIYHhkY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1013 (0x3f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170533, serialNumber=E58F98E3C61421465453AC4255F0AFB0AD95D246 Validity Not Before: Dec 4 22:58:54 2025 GMT Not After : Dec 11 22:58:54 2025 GMT Subject: CN=6932122f-6429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a4:60:3b:f5:1c:e0:c0:39:87:56:7c:b1:a2: d4:23:48:d8:b0:3a:32:f9:ca:0c:17:e8:b9:dc:e5: 1d:dd:61:d4:d3:d5:b9:e7:0b:d8:cd:d2:18:06:f8: d0:9e:7a:d8:66:34:2f:e5:b6:b6:c3:50:91:1d:ea: 4c:19:ce:12:5e:25:8b:fe:59:71:a7:88:7e:03:a3: 3a:77:96:63:f9:55:1c:c7:49:59:fa:ce:60:7e:04: 69:86:6f:7c:19:05:69:e0:da:dc:13:b8:69:fd:cc: ef:d0:a2:b0:b9:3c:69:cf:e3:0f:75:c9:59:e9:20: c8:00:06:b9:d9:39:5b:e2:68:09:7d:42:ec:e9:7c: 8d:1c:24:7a:9e:72:bb:82:0b:98:4a:7d:cb:83:f3: 03:45:76:99:ad:73:d3:61:5d:b8:76:43:c5:d8:7c: 90:65:22:5a:2e:37:22:52:21:50:af:47:1f:43:49: 7b:ee:cb:31:22:50:37:b7:8d:27:ec:ab:47:aa:44: 1f:13:22:3f:fe:2b:29:7d:74:5e:ad:b5:b8:d2:8a: b2:fd:09:cd:b8:9a:8d:07:13:f2:4b:7e:5c:80:b7: 76:1e:46:95:e0:92:fd:76:36:a6:eb:4d:f8:6e:e2: f6:98:f4:58:dc:81:59:ee:10:a1:cf:eb:e0:3d:99: 25:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FC:69:B3:71:06:12:07:F2:FA:3B:06:EB:EE:53:D7:A1:08:FD:83 X509v3 Authority Key Identifier: keyid:E5:8F:98:E3:C6:14:21:46:54:53:AC:42:55:F0:AF:B0:AD:95:D2:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:c5:9c:ef:a7:e2:24:65:06:43:d7:f9:bd:fd:50:f6:fe:5e: 66:9e:ea:d3:e8:09:f1:a0:19:e3:f8:7c:e5:96:95:04:ce:94: 8c:25:73:86:cb:28:00:0c:04:70:5a:2a:d1:a4:6e:04:77:c1: d9:70:96:4e:73:2b:42:03:b4:2e:a7:2c:a7:5c:58:2c:af:7a: dd:17:19:82:a4:5d:60:ca:9c:ed:62:8b:e7:77:52:4e:df:60: 1b:f9:ee:68:65:1c:33:86:34:55:6f:b0:04:c4:b7:2b:58:43: be:b9:ef:41:04:88:02:ad:62:0c:d3:12:54:c9:17:45:9d:06: 8d:d8:94:b0:0f:c4:ff:fd:de:43:54:62:66:ae:22:bc:d5:5c: 37:f2:4f:22:2a:c2:fc:7e:aa:cd:cd:f7:9b:50:07:4a:a0:2e: 3e:ff:f7:12:64:e7:99:39:56:0d:8d:5b:2f:fe:e2:2a:06:8f: 3d:2f:c4:d1:53:77:a3:fa:9e:15:63:0d:f5:87:c2:27:a9:8a: 0c:7b:bc:16:a9:c4:c6:0a:51:f4:a8:50:15:4d:77:2b:57:a3: ac:ca:7e:f7:54:61:25:c2:9d:26:68:cc:6e:78:da:14:83:66: 62:b5:f8:eb:54:b2:dc:33:c2:51:35:9a:4a:f8:39:ca:3f:7d: 0e:6d:8d:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA1MzMxMTAvBgNVBAUTKEU1OEY5OEUzQzYxNDIxNDY1NDUzQUM0MjU1RjBBRkIw QUQ5NUQyNDYwHhcNMjUxMjA0MjI1ODU0WhcNMjUxMjExMjI1ODU0WjAYMRYwFAYD VQQDEw02OTMyMTIyZi02NDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsaRgO/Uc4MA5h1Z8saLUI0jYsDoy+coMF+i53OUd3WHU09W55wvYzdIYBvjQ nnrYZjQv5ba2w1CRHepMGc4SXiWL/llxp4h+A6M6d5Zj+VUcx0lZ+s5gfgRphm98 GQVp4NrcE7hp/czv0KKwuTxpz+MPdclZ6SDIAAa52Tlb4mgJfULs6XyNHCR6nnK7 gguYSn3Lg/MDRXaZrXPTYV24dkPF2HyQZSJaLjciUiFQr0cfQ0l77ssxIlA3t40n 7KtHqkQfEyI//ispfXRerbW40oqy/QnNuJqNBxPyS35cgLd2HkaV4JL9djam6034 buL2mPRY3IFZ7hChz+vgPZkl6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKL8abNx BhIH8vo7BuvuU9ehCP2DMB8GA1UdIwQYMBaAFOWPmOPGFCFGVFOsQlXwr7CtldJG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDUzMy8yMkVEMkM5QTlG ODIxMUVDQkZDM0NGMUNDNEY5QUUwMi81WS1ZNDhZVUlVWlVVNnhDVmZDdnNLMlYw a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVZLVk0OFlVSVVaVVU2eENWZkN2c0syVjBrWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDUzMy8yMkVEMkM5QTlGODIxMUVDQkZDM0NGMUNDNEY5QUUwMi81WS1ZNDhZVUlV WlVVNnhDVmZDdnNLMlYwa1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWxZzvp+IkZQZD1/m9/VD2/l5mnurT6AnxoBnj+HzllpUEzpSMJXOG yygADARwWirRpG4Ed8HZcJZOcytCA7QupyynXFgsr3rdFxmCpF1gypztYovnd1JO 32Ab+e5oZRwzhjRVb7AExLcrWEO+ue9BBIgCrWIM0xJUyRdFnQaN2JSwD8T//d5D VGJmriK81Vw38k8iKsL8fqrNzfebUAdKoC4+//cSZOeZOVYNjVsv/uIqBo89L8TR U3ej+p4VYw31h8InqYoMe7wWqcTGClH0qFAVTXcrV6Osyn73VGElwp0maMxueNoU g2ZitfjrVLLcM8JRNZpK+DnKP30ObY3o -----END CERTIFICATE-----Generated at Fri Dec 5 02:28:00 2025 by rpki-client