This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft File: NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft (raw, json) Hash identifier: 4x3H+b75PvFR7TH0LsRmAK8iYPR6IJDspl2ircSXIoo= Subject key identifier: CD:9F:57:FE:A3:00:CA:23:F5:CE:E6:2F:7B:B8:B5:BC:12:04:B0:29 Authority key identifier: 35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5 Certificate issuer: /CN=A917FACB/serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft Manifest number: BE Signing time: Wed 03 Dec 2025 04:21:34 +0000 Manifest this update: Wed 03 Dec 2025 04:21:34 +0000 Manifest next update: Wed 10 Dec 2025 04:21:34 +0000 Files and hashes: 1: NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl (hash: CfqmokMFYsRD0YYj5a7CvElZEXxTL2SEOUmLxu72Jyw=) 2: 81FC16A6B46511EF86BEAC6BC4F9AE02.roa (hash: oF9pzHgXgFgT7pclB8+4buU+FpQCxpT9fP80ypai+xo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 04:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FACB, serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5 Validity Not Before: Dec 3 04:21:34 2025 GMT Not After : Dec 10 04:21:34 2025 GMT Subject: CN=692fbace-53c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1c:26:4a:89:28:d1:4e:e5:7e:64:f1:7d:e1: bd:07:1b:31:52:ea:9f:03:6f:84:e9:c4:b1:a8:7c: 31:79:d2:47:40:f4:74:e0:6e:06:b1:96:95:47:97: db:89:08:ce:a9:82:18:41:24:f7:ab:26:2a:7b:e4: 48:1e:17:77:02:7e:87:8a:93:fb:c1:ff:ff:b0:70: 0e:58:e3:4e:60:a5:69:7a:61:4e:fe:a4:4a:5b:6d: 6d:14:8f:39:b4:05:cc:a6:55:ec:3f:53:d6:ab:be: 28:7f:7e:32:00:11:21:bb:35:90:03:bf:65:23:77: 97:8e:0b:76:81:72:0e:9b:b0:5d:9d:84:c9:ad:c0: 54:38:8e:1d:15:c0:99:6a:f0:1a:4b:dd:d4:28:19: 25:ca:f3:23:a9:7e:04:e5:2a:d2:96:47:eb:7f:ab: c3:2a:b3:63:6b:8d:76:fd:55:f5:87:c5:fb:12:5a: 68:91:73:69:6f:ee:b4:b1:79:a4:df:9a:d4:77:e1: 2a:f1:b1:68:65:ba:11:ca:85:c9:45:26:5b:45:80: 99:7a:b1:54:fc:07:3a:7c:a1:94:8b:7b:2b:db:52: 21:14:2a:5f:36:05:26:bf:41:df:3c:84:b9:95:0a: 18:d4:1d:23:e0:91:4e:2f:e1:c3:fe:40:3a:aa:13: ff:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9F:57:FE:A3:00:CA:23:F5:CE:E6:2F:7B:B8:B5:BC:12:04:B0:29 X509v3 Authority Key Identifier: keyid:35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:4f:14:28:8a:f0:10:f7:62:80:83:65:af:b2:86:d9:55:d2: 44:ba:fc:0e:c8:48:52:ee:e0:fb:76:c2:00:7c:26:23:5e:39: 65:55:a7:a7:90:51:92:07:c6:df:7b:a9:07:5d:7e:d2:65:d0: 51:3d:eb:3b:09:fa:32:ae:7e:f8:70:c4:ee:8e:6a:a6:b8:b3: 8d:aa:f6:41:01:51:f6:25:9b:9a:f8:54:37:e6:ef:63:8b:f5: e0:05:73:9f:bd:4c:ee:66:7a:2f:82:cd:17:10:81:74:8d:b7: 67:9e:4d:8d:f9:fc:03:da:71:44:ff:a5:6c:cf:a6:b2:a6:6c: e7:a1:eb:60:bf:db:ee:26:e1:a4:14:d3:cb:1d:fe:76:c0:17: a1:2d:2f:0e:36:14:f0:43:e9:2e:0b:91:16:ad:ba:24:4f:3e: ab:4b:27:1f:36:d4:18:c4:2c:6c:4f:5c:d7:b8:86:28:8b:43: e0:1e:81:7e:46:5b:3e:02:b4:99:91:a7:90:cc:a5:7b:0d:2e: b7:32:0d:52:36:d3:01:c9:fd:b3:0f:61:7c:49:f5:22:b7:bd: cf:f3:09:c5:c9:b9:99:66:fa:2d:72:79:2a:0c:a3:ed:2e:18: f4:be:00:b3:a1:ee:11:2f:e6:e8:6f:37:96:97:9d:d3:01:49: a4:d7:ba:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBQ0IxMTAvBgNVBAUTKDM1ODE0QjE1RkI4MzQ5MzlFRUE4NUNDNEE2N0M0RTFB NkE4NUE0RjUwHhcNMjUxMjAzMDQyMTM0WhcNMjUxMjEwMDQyMTM0WjAYMRYwFAYD VQQDEw02OTJmYmFjZS01M2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hwmSoko0U7lfmTxfeG9BxsxUuqfA2+E6cSxqHwxedJHQPR04G4GsZaVR5fb iQjOqYIYQST3qyYqe+RIHhd3An6HipP7wf//sHAOWONOYKVpemFO/qRKW21tFI85 tAXMplXsP1PWq74of34yABEhuzWQA79lI3eXjgt2gXIOm7BdnYTJrcBUOI4dFcCZ avAaS93UKBklyvMjqX4E5SrSlkfrf6vDKrNja412/VX1h8X7ElpokXNpb+60sXmk 35rUd+Eq8bFoZboRyoXJRSZbRYCZerFU/Ac6fKGUi3sr21IhFCpfNgUmv0HfPIS5 lQoY1B0j4JFOL+HD/kA6qhP/DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2fV/6j AMoj9c7mL3u4tbwSBLApMB8GA1UdIwQYMBaAFDWBSxX7g0k57qhcxKZ8ThpqhaT1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkFDQi8yNUQxMTg4NkI0 NjUxMUVGOUJGQkFBNjdDNEY5QUUwMi9OWUZMRmZ1RFNUbnVxRnpFcG54T0dtcUZw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05ZRkxGZnVEU1RudXFGekVwbnhPR21xRnBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkFDQi8yNUQxMTg4NkI0NjUxMUVGOUJGQkFBNjdDNEY5QUUwMi9OWUZMRmZ1RFNU bnVxRnpFcG54T0dtcUZwUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBTxQoivAQ92KAg2WvsobZVdJEuvwOyEhS7uD7dsIAfCYjXjllVaen kFGSB8bfe6kHXX7SZdBRPes7Cfoyrn74cMTujmqmuLONqvZBAVH2JZua+FQ35u9j i/XgBXOfvUzuZnovgs0XEIF0jbdnnk2N+fwD2nFE/6Vsz6aypmznoetgv9vuJuGk FNPLHf52wBehLS8ONhTwQ+kuC5EWrbokTz6rSycfNtQYxCxsT1zXuIYoi0PgHoF+ Rls+ArSZkaeQzKV7DS63Mg1SNtMByf2zD2F8SfUit73P8wnFybmZZvotcnkqDKPt Lhj0vgCzoe4RL+bobzeWl53TAUmk17rc -----END CERTIFICATE-----Generated at Wed Dec 3 17:16:44 2025 by rpki-client