This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft File: YWPctdU7SHLhWVY-kPxeQa0ALC0.mft (raw, json) Hash identifier: vpqhmtWUrHSBP47+XhxWbDk0Dd+exnbwGX4zo9OD+d4= Subject key identifier: 2B:2B:3D:CA:78:02:D7:9D:6F:96:E9:CD:47:26:12:6D:86:94:2A:40 Authority key identifier: 61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D Certificate issuer: /CN=A9174282/serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D Certificate serial: 04E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft Manifest number: 04DE Signing time: Mon 22 Dec 2025 22:52:51 +0000 Manifest this update: Mon 22 Dec 2025 22:52:51 +0000 Manifest next update: Mon 29 Dec 2025 22:52:51 +0000 Files and hashes: 1: YWPctdU7SHLhWVY-kPxeQa0ALC0.crl (hash: znxlTRfEOaeXoHo7AEF33hivrSA01XNHKtqx8ece1R4=) 2: BDE72518479C11EC8861323FC4F9AE02.roa (hash: BWw+T22BkT4RWRTHKZZjPZLkInjp8GW8fJQ94reWXKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1252 (0x4e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174282, serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D Validity Not Before: Dec 22 22:52:51 2025 GMT Not After : Dec 29 22:52:51 2025 GMT Subject: CN=6949cbc3-e18c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3d:a7:f7:29:da:bf:fe:4c:22:ba:34:6f:db: ec:8c:8a:0e:ff:e7:28:53:16:06:6c:06:9b:38:4a: 29:61:e2:ae:32:86:f2:cc:1a:f7:37:67:e6:03:14: a5:23:1a:63:08:70:d4:f7:f9:48:dc:07:06:65:3a: 64:9b:36:65:79:af:ec:d8:56:6a:b5:a8:60:45:a5: 41:6a:d1:92:93:74:84:a5:da:c5:cd:fd:54:ec:b0: 28:8f:a7:de:a8:c2:38:5c:18:9d:be:ed:ff:89:f8: 5c:5a:86:26:0b:79:4f:37:65:e8:34:91:82:8d:f8: ef:2e:ca:85:35:b2:b9:cc:f8:c9:55:65:0e:93:69: 19:fd:58:a7:81:29:c3:0a:f0:07:bf:4a:64:15:a7: 45:f0:23:d3:6d:1f:60:ed:38:0f:cd:2e:5b:c9:68: 09:1f:a9:0f:f1:a1:c8:0a:65:46:4f:d5:e8:ce:fc: e7:e1:71:da:c2:a7:28:a1:b5:26:a3:42:ad:94:dd: 14:99:2b:fa:61:73:cb:bc:18:91:84:5e:51:e8:1a: e8:34:eb:e3:a5:9f:60:65:30:cd:8a:4f:02:d8:86: 78:27:e5:b2:b1:d9:3b:94:4b:22:88:db:ce:ea:bc: 89:ee:1b:58:6d:58:6c:3a:9a:48:4d:ea:10:7a:25: 24:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2B:3D:CA:78:02:D7:9D:6F:96:E9:CD:47:26:12:6D:86:94:2A:40 X509v3 Authority Key Identifier: keyid:61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:3f:fc:58:4a:8c:d4:6f:0c:6b:9a:47:e1:2e:eb:6d:87:62: 0e:b0:ad:50:71:92:eb:05:54:d8:d0:f4:c1:88:d3:f1:ba:25: 0f:41:32:fa:a1:17:e7:aa:88:fc:6f:48:f1:e7:f2:7b:1a:6a: 7a:4f:f1:59:68:63:ec:76:ce:bf:51:2c:01:cb:0e:b4:58:dd: b8:f6:42:92:9a:9e:f8:35:f3:5f:4a:bd:43:19:58:54:96:25: 54:a4:9b:4c:71:7d:c3:d6:07:a1:82:61:53:3e:f9:2b:f4:c4: 45:e1:a1:df:10:a1:af:7a:c7:fd:b7:ca:74:5f:ae:96:c0:4c: a0:c0:cc:2d:a6:d2:07:7a:87:72:11:bc:73:45:f1:55:5a:33: f4:fc:e8:01:54:ab:66:d7:91:ec:c0:7f:8e:9d:14:3c:67:2e: be:3a:d8:b9:c2:91:dd:58:f6:78:11:bc:7d:b6:90:ab:8a:b0: 5f:a1:55:69:fc:cd:d8:0a:d3:39:ba:07:32:40:fa:d2:b1:50: 64:e7:23:71:f9:e8:c7:a6:a8:9b:f2:e4:f6:f3:ce:f7:81:09: a7:7a:14:3c:b5:ca:4d:30:a2:4b:68:46:1d:bc:d7:f4:13:6c: 48:25:3b:af:a2:b2:05:b7:4f:3f:c4:1a:2d:8e:2b:a0:9c:42: 47:83:01:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQyODIxMTAvBgNVBAUTKDYxNjNEQ0I1RDUzQjQ4NzJFMTU5NTYzRTkwRkM1RTQx QUQwMDJDMkQwHhcNMjUxMjIyMjI1MjUxWhcNMjUxMjI5MjI1MjUxWjAYMRYwFAYD VQQDDA02OTQ5Y2JjMy1lMThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3D2n9ynav/5MIro0b9vsjIoO/+coUxYGbAabOEopYeKuMobyzBr3N2fmAxSl IxpjCHDU9/lI3AcGZTpkmzZlea/s2FZqtahgRaVBatGSk3SEpdrFzf1U7LAoj6fe qMI4XBidvu3/ifhcWoYmC3lPN2XoNJGCjfjvLsqFNbK5zPjJVWUOk2kZ/VingSnD CvAHv0pkFadF8CPTbR9g7TgPzS5byWgJH6kP8aHICmVGT9Xozvzn4XHawqcoobUm o0KtlN0UmSv6YXPLvBiRhF5R6BroNOvjpZ9gZTDNik8C2IZ4J+Wysdk7lEsiiNvO 6ryJ7htYbVhsOppITeoQeiUk2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsrPcp4 Atedb5bpzUcmEm2GlCpAMB8GA1UdIwQYMBaAFGFj3LXVO0hy4VlWPpD8XkGtACwt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDI4Mi85NzE0MzM3NjQ3 OTgxMUVDQjAzRDU1MzhDNEY5QUUwMi9ZV1BjdGRVN1NITGhXVlkta1B4ZVFhMEFM QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lXUGN0ZFU3U0hMaFdWWS1rUHhlUWEwQUxDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDI4Mi85NzE0MzM3NjQ3OTgxMUVDQjAzRDU1MzhDNEY5QUUwMi9ZV1BjdGRVN1NI TGhXVlkta1B4ZVFhMEFMQzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArP/xYSozUbwxrmkfhLutth2IOsK1QcZLrBVTY0PTBiNPxuiUPQTL6 oRfnqoj8b0jx5/J7Gmp6T/FZaGPsds6/USwByw60WN249kKSmp74NfNfSr1DGVhU liVUpJtMcX3D1gehgmFTPvkr9MRF4aHfEKGvesf9t8p0X66WwEygwMwtptIHeody EbxzRfFVWjP0/OgBVKtm15HswH+OnRQ8Zy6+Oti5wpHdWPZ4Ebx9tpCrirBfoVVp /M3YCtM5ugcyQPrSsVBk5yNx+ejHpqib8uT28873gQmnehQ8tcpNMKJLaEYdvNf0 E2xIJTuvorIFt08/xBotjiugnEJHgwEC -----END CERTIFICATE-----Generated at Tue Dec 23 20:56:20 2025 by rpki-client