This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft File: 73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft (raw, json) Hash identifier: of2T7230aeUXNpSsfiOkOOH+IcMcCyxGoLLywseWmI8= Subject key identifier: 52:0B:14:E8:D8:67:D9:94:DC:01:A1:6D:A0:0E:E3:5C:D0:1A:71:7A Authority key identifier: EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64 Certificate issuer: /CN=A917E458/serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft Manifest number: 72 Signing time: Tue 23 Dec 2025 05:45:12 +0000 Manifest this update: Tue 23 Dec 2025 05:45:12 +0000 Manifest next update: Tue 30 Dec 2025 05:45:12 +0000 Files and hashes: 1: 73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl (hash: gsZSRfAwB1rNyFe8ajVV2YDQl13FLML69NoYOkOhzmI=) 2: 0E6E2FF4590A11F0B7FD292DC4F9AE02.roa (hash: 7soTZ6EDnpP6A/A05OpE2en3043bE7DF3odg+8Ew9cU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E458, serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864 Validity Not Before: Dec 23 05:45:12 2025 GMT Not After : Dec 30 05:45:12 2025 GMT Subject: CN=694a2c68-17fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:74:b6:40:c7:f1:f3:33:fb:db:7d:0b:c9: c4:c1:50:42:16:09:5d:75:c9:ab:69:26:5f:2c:97: b3:cd:1b:8b:f1:74:fe:f3:df:e4:9d:27:f2:71:e4: 8f:91:42:80:53:f3:92:b8:6a:be:53:32:16:c5:52: ba:0c:44:fe:02:9d:ac:96:00:d7:fe:f4:43:0c:2e: 3c:f4:37:c5:25:5c:fb:a8:76:19:42:54:4e:1b:b6: 8b:63:3d:2f:3b:85:c3:60:1b:76:82:dc:81:0c:6b: b6:3b:0b:f4:39:a2:3e:1c:72:98:46:0b:1c:4a:94: 13:81:c2:a2:12:c5:2c:cd:a8:98:f2:15:3a:e8:45: 87:e3:5b:60:6f:f1:a8:9a:81:96:07:49:63:b5:59: ac:1f:41:3a:ac:e3:63:e1:d5:2d:c8:2f:bf:01:e0: 54:3c:fe:9e:14:33:23:ff:0e:8d:b7:bb:a3:d8:05: cc:79:16:29:4f:fc:a8:b3:ea:18:47:63:e1:5a:0b: 8f:4b:0e:7b:75:0d:2d:9a:62:f1:84:df:54:3e:16: 51:88:97:38:1f:32:c9:28:dd:00:d9:91:a9:57:df: c7:48:ef:3b:fb:21:4f:7e:65:81:87:8b:8f:20:05: 3a:5b:41:20:b7:2c:eb:91:e1:50:97:16:1d:8d:89: 35:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0B:14:E8:D8:67:D9:94:DC:01:A1:6D:A0:0E:E3:5C:D0:1A:71:7A X509v3 Authority Key Identifier: keyid:EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:3c:4c:5e:87:bd:67:29:88:a2:5a:5f:d5:3b:03:83:ae:13: 11:dd:ad:dd:aa:57:c8:46:6a:77:ed:fe:e3:c2:fc:0d:1d:e5: cd:ac:70:e5:cb:0a:ac:34:36:39:ca:ec:e6:d7:d2:2e:ae:67: 47:fc:dc:e1:b0:5c:a6:86:e7:c8:19:f1:33:f5:60:4b:d4:49: a3:a1:60:b5:2f:2c:f1:36:04:86:88:fb:22:12:dc:0c:d1:41: b0:86:19:b9:0c:d9:39:c9:a4:9e:b2:e5:b6:04:97:ec:ab:b9: cf:c2:71:3e:17:1e:95:f0:38:5c:e8:1b:eb:2a:c7:74:42:8e: f6:a8:27:d9:b9:5f:f7:2c:e5:ae:a4:ef:c3:a4:0b:37:fa:97: 1a:4f:1c:60:c6:33:ca:98:fb:75:59:8a:10:58:5f:20:f4:64: be:b2:2f:35:a7:1e:74:a3:04:65:d0:6c:65:bc:07:89:b6:08: d2:e8:a1:a3:95:c2:12:bb:17:c1:07:09:c3:fb:f7:28:e8:28: b7:b6:b2:76:d2:2b:d8:6e:7a:89:a0:bb:4e:db:34:78:11:0f: c2:ee:1c:bb:8d:89:57:39:89:04:89:c1:1b:41:b0:ff:0d:85: 44:7b:0c:9a:0d:41:b6:97:be:a9:b6:ab:26:45:9f:ad:c6:2b: 1e:e6:dd:e4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTQ1ODExMC8GA1UEBRMoRUY3NjJDQzk0MjE5RTA5OTIzQTExQjBEM0M0MzBFN0Yz NUM4RDg2NDAeFw0yNTEyMjMwNTQ1MTJaFw0yNTEyMzAwNTQ1MTJaMBgxFjAUBgNV BAMMDTY5NGEyYzY4LTE3ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHGHS2QMfx8zP7230LycTBUEIWCV11yatpJl8sl7PNG4vxdP7z3+SdJ/Jx5I+R QoBT85K4ar5TMhbFUroMRP4CnayWANf+9EMMLjz0N8UlXPuodhlCVE4btotjPS87 hcNgG3aC3IEMa7Y7C/Q5oj4ccphGCxxKlBOBwqISxSzNqJjyFTroRYfjW2Bv8aia gZYHSWO1WawfQTqs42Ph1S3IL78B4FQ8/p4UMyP/Do23u6PYBcx5FilP/Kiz6hhH Y+FaC49LDnt1DS2aYvGE31Q+FlGIlzgfMsko3QDZkalX38dI7zv7IU9+ZYGHi48g BTpbQSC3LOuR4VCXFh2NiTUzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUgsU6Nhn 2ZTcAaFtoA7jXNAacXowHwYDVR0jBBgwFoAU73YsyUIZ4JkjoRsNPEMOfzXI2GQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNDU4LzI3QkU4NDBFMzBE ODExRjBBN0JFMkU0RkM0RjlBRTAyLzczWXN5VUlaNEpram9Sc05QRU1PZnpYSTJH US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNzNZc3lVSVo0Smtqb1JzTlBFTU9melhJMkdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF NDU4LzI3QkU4NDBFMzBEODExRjBBN0JFMkU0RkM0RjlBRTAyLzczWXN5VUlaNEpr am9Sc05QRU1PZnpYSTJHUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHs8TF6HvWcpiKJaX9U7A4OuExHdrd2qV8hGanft/uPC/A0d5c2scOXL Cqw0NjnK7ObX0i6uZ0f83OGwXKaG58gZ8TP1YEvUSaOhYLUvLPE2BIaI+yIS3AzR QbCGGbkM2TnJpJ6y5bYEl+yruc/CcT4XHpXwOFzoG+sqx3RCjvaoJ9m5X/cs5a6k 78OkCzf6lxpPHGDGM8qY+3VZihBYXyD0ZL6yLzWnHnSjBGXQbGW8B4m2CNLooaOV whK7F8EHCcP79yjoKLe2snbSK9hueomgu07bNHgRD8LuHLuNiVc5iQSJwRtBsP8N hUR7DJoNQbaXvqm2qyZFn63GKx7m3eQ= -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:35 2025 by rpki-client