This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft File: Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft (raw, json) Hash identifier: Spw7zfc6kH8/jUREt4lvbgdK1rkzkOuRZztbPBXKqG4= Subject key identifier: 57:A1:6F:E1:8F:21:31:28:36:F1:A6:71:9A:52:AB:A8:24:8F:04:FF Authority key identifier: 63:FA:00:06:26:1D:9E:4C:D4:90:59:06:E5:43:96:94:BE:62:7B:B1 Certificate issuer: /CN=A9178F62/serialNumber=63FA0006261D9E4CD4905906E5439694BE627BB1 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft Manifest number: 5A Signing time: Tue 23 Dec 2025 06:04:27 +0000 Manifest this update: Tue 23 Dec 2025 06:04:27 +0000 Manifest next update: Tue 30 Dec 2025 06:04:27 +0000 Files and hashes: 1: Y_oABiYdnkzUkFkG5UOWlL5ie7E.crl (hash: XVNeEfcjhmUUkQyfL720N5f6l4AUMtZ179vjB9Ad62s=) 2: 8EA5A6E28C7D11F0B0706F1EC4F9AE02.roa (hash: EVLtvEiDogBu3QcVhxjleJTDGMs7gXBmi6TLdVrRV/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.crl rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:04:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178F62, serialNumber=63FA0006261D9E4CD4905906E5439694BE627BB1 Validity Not Before: Dec 23 06:04:27 2025 GMT Not After : Dec 30 06:04:27 2025 GMT Subject: CN=694a30eb-0e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:09:64:49:d6:1e:6d:3a:ab:90:d2:e9:4c:81: fc:83:3e:df:79:ed:3e:ee:f4:e5:51:51:f8:c4:f2: 8d:ce:c1:a7:e4:1a:ee:9d:3f:76:f8:2c:03:4e:c6: 21:8c:cb:27:47:ec:05:39:a3:39:41:b4:f6:b2:cb: c1:ca:8b:17:ae:4a:74:60:d9:4f:66:b0:f1:99:65: 37:b4:45:46:51:74:38:54:7b:8d:18:92:bc:00:24: 29:a3:39:3a:a7:27:97:ac:55:d1:eb:91:0a:b8:f5: b5:56:f1:19:dc:97:f1:08:c2:cb:05:bf:d3:0b:b9: 35:4c:b8:19:66:22:1c:c7:96:87:d8:bd:6d:c1:94: 2a:a2:c1:d8:f0:32:72:f6:4c:bb:64:d7:e3:9e:d5: 14:ca:06:b6:c2:e7:ab:32:10:30:02:7c:82:35:83: 9b:1b:9b:33:4a:0c:35:c2:9d:96:d0:ec:37:f1:9a: cc:61:7b:02:09:73:4d:8d:a4:9e:97:68:18:52:86: af:45:c9:96:13:5a:07:24:49:8c:d0:98:af:88:10: dc:fc:74:ef:48:be:68:47:20:2b:50:2f:76:87:ed: 03:cd:80:dc:c6:89:21:4b:45:12:21:77:b1:e5:7d: be:47:2f:f3:73:ed:53:93:c3:03:39:31:81:79:4e: 1d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A1:6F:E1:8F:21:31:28:36:F1:A6:71:9A:52:AB:A8:24:8F:04:FF X509v3 Authority Key Identifier: keyid:63:FA:00:06:26:1D:9E:4C:D4:90:59:06:E5:43:96:94:BE:62:7B:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:55:85:80:9f:9b:3a:e4:d6:47:86:c5:d0:c6:e2:cf:03:c6: a0:db:70:8d:cf:6e:70:7d:f5:f9:5c:73:af:f5:f9:e7:17:80: 4a:b7:91:69:c7:52:11:d4:b2:42:8f:35:b8:f0:3e:07:fd:2d: 5b:5f:8a:a5:b3:84:3d:19:66:15:ea:26:4c:48:97:d4:c0:2a: 90:67:0e:fa:de:f8:3f:3c:8c:77:c1:73:00:e4:6f:fe:92:88: a5:b3:a1:35:07:33:b4:e2:0a:96:c8:95:20:91:25:8c:d1:95: 22:04:cc:1b:db:79:b0:86:7a:a3:d9:f2:1e:08:b9:e2:da:1e: c3:c8:ff:b9:85:f5:6d:a7:c2:04:73:01:06:bf:24:ce:84:b7: 4c:e1:12:10:b1:e6:b0:f1:ce:b2:37:61:e2:33:63:91:06:71: f4:00:ce:9e:76:5b:ab:37:9c:15:44:fd:f2:c2:15:cd:78:ca: 8a:da:b4:b5:53:98:00:39:01:b2:52:5f:eb:e8:fb:25:69:32: 93:bc:27:b3:6c:5f:94:39:5f:eb:9f:0b:45:ff:24:aa:b0:6b: f8:8d:1d:68:1f:87:9c:8f:46:f4:08:2d:54:ca:69:ec:86:c9: 00:bc:94:6c:f0:f1:2f:76:67:be:7f:4c:05:ef:66:d3:d0:23: e1:71:ae:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OEY2MjExMC8GA1UEBRMoNjNGQTAwMDYyNjFEOUU0Q0Q0OTA1OTA2RTU0Mzk2OTRC RTYyN0JCMTAeFw0yNTEyMjMwNjA0MjdaFw0yNTEyMzAwNjA0MjdaMBgxFjAUBgNV BAMMDTY5NGEzMGViLTBlNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpCWRJ1h5tOquQ0ulMgfyDPt957T7u9OVRUfjE8o3OwafkGu6dP3b4LANOxiGM yydH7AU5ozlBtPayy8HKixeuSnRg2U9msPGZZTe0RUZRdDhUe40YkrwAJCmjOTqn J5esVdHrkQq49bVW8Rncl/EIwssFv9MLuTVMuBlmIhzHlofYvW3BlCqiwdjwMnL2 TLtk1+Oe1RTKBrbC56syEDACfII1g5sbmzNKDDXCnZbQ7DfxmsxhewIJc02NpJ6X aBhShq9FyZYTWgckSYzQmK+IENz8dO9IvmhHICtQL3aH7QPNgNzGiSFLRRIhd7Hl fb5HL/Nz7VOTwwM5MYF5Th3LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUV6Fv4Y8h MSg28aZxmlKrqCSPBP8wHwYDVR0jBBgwFoAUY/oABiYdnkzUkFkG5UOWlL5ie7Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4RjYyL0I4NzhDMkM4NURG RDExRjBCNUMwN0I0QkM0RjlBRTAyL1lfb0FCaVlkbmt6VWtGa0c1VU9XbEw1aWU3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWV9vQUJpWWRua3pVa0ZrRzVVT1dsTDVpZTdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 RjYyL0I4NzhDMkM4NURGRDExRjBCNUMwN0I0QkM0RjlBRTAyL1lfb0FCaVlkbmt6 VWtGa0c1VU9XbEw1aWU3RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMhVhYCfmzrk1keGxdDG4s8DxqDbcI3PbnB99flcc6/1+ecXgEq3kWnH UhHUskKPNbjwPgf9LVtfiqWzhD0ZZhXqJkxIl9TAKpBnDvre+D88jHfBcwDkb/6S iKWzoTUHM7TiCpbIlSCRJYzRlSIEzBvbebCGeqPZ8h4IueLaHsPI/7mF9W2nwgRz AQa/JM6Et0zhEhCx5rDxzrI3YeIzY5EGcfQAzp52W6s3nBVE/fLCFc14yoratLVT mAA5AbJSX+vo+yVpMpO8J7NsX5Q5X+ufC0X/JKqwa/iNHWgfh5yPRvQILVTKaeyG yQC8lGzw8S92Z75/TAXvZtPQI+FxrnQ= -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:25 2025 by rpki-client