This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft File: NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft (raw, json) Hash identifier: ttXfN9udSeGBicXICP9cPlCmAZ8g4qASm0WNELOkWFo= Subject key identifier: EE:74:35:BD:3C:D5:72:9C:D4:74:A0:66:1F:9F:4F:C4:70:BF:53:D0 Authority key identifier: 35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5 Certificate issuer: /CN=A917FACB/serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft Manifest number: C7 Signing time: Sun 21 Dec 2025 05:02:04 +0000 Manifest this update: Sun 21 Dec 2025 05:02:03 +0000 Manifest next update: Sun 28 Dec 2025 05:02:03 +0000 Files and hashes: 1: NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl (hash: Aq3HULxNsn6BepXAzMjmdUpKTc/jUPXwFa0hDG8TZfk=) 2: 81FC16A6B46511EF86BEAC6BC4F9AE02.roa (hash: oF9pzHgXgFgT7pclB8+4buU+FpQCxpT9fP80ypai+xo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FACB, serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5 Validity Not Before: Dec 21 05:02:03 2025 GMT Not After : Dec 28 05:02:03 2025 GMT Subject: CN=69477f4c-41ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:11:84:77:b2:27:51:29:e1:df:dc:e3:69:ab: 4f:b4:3a:d7:2a:eb:df:ea:f6:d1:f9:e7:47:50:38: d8:d0:70:3d:e9:98:5d:4e:54:b1:ec:c6:fd:e0:3b: 5b:28:42:92:64:d4:d6:84:e9:0e:7c:e7:fd:66:cc: d9:c5:f3:2b:ea:e5:d5:d5:d9:2d:4d:00:1c:ca:80: e3:d3:b8:ec:e0:4d:6f:be:0c:09:4d:06:95:f9:3f: 94:ae:5d:9e:37:97:d2:4e:bf:c8:b4:29:47:b5:41: 8b:b4:b1:f0:ea:84:b9:23:67:f6:6c:64:55:3d:e5: 81:b9:aa:4e:54:c6:83:66:4a:b4:a9:b2:1f:01:f8: 37:fa:34:2d:0c:66:3d:f5:62:f1:bb:4b:3c:1f:88: 19:c0:d8:75:43:3f:ba:4c:f4:32:0f:a3:ac:ef:79: 76:16:f0:6a:eb:92:e3:55:9d:26:76:e2:08:b3:f1: 85:7d:35:a9:38:9d:22:bc:91:ac:b2:85:e2:24:53: 15:2a:93:c1:b1:14:5c:cf:aa:38:ba:2f:ad:21:ce: 2a:67:cc:68:8c:8e:7c:d3:de:61:c5:3f:f1:d7:14: 87:d5:73:86:36:30:fc:87:8c:4a:17:35:e3:e1:ac: ee:89:98:ba:15:d0:0f:2a:fc:b7:c6:4d:4a:77:71: 42:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:74:35:BD:3C:D5:72:9C:D4:74:A0:66:1F:9F:4F:C4:70:BF:53:D0 X509v3 Authority Key Identifier: keyid:35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:26:6a:6d:ac:c7:45:7c:d1:f2:d4:a9:5a:79:7b:ea:41:40: 73:bc:43:d8:27:fe:84:79:0c:f1:0d:2c:ca:0d:5f:b7:aa:72: e7:be:1f:df:59:20:e7:55:99:6f:46:f0:1d:aa:71:0c:aa:22: 5d:78:d8:08:d1:a0:13:8d:58:04:87:bd:e9:40:01:73:26:ab: 9c:64:e9:ee:e7:ea:6a:14:f5:54:0c:b5:b6:71:c9:84:4f:99: 70:4a:5f:50:3c:e6:d8:5a:bc:a7:94:4c:cf:a6:83:d7:2c:a0: f1:d1:1d:8f:d2:07:99:df:e0:27:eb:35:2c:a7:1a:61:3d:e4: 7c:82:cc:a1:99:e7:eb:94:25:d1:87:a8:1f:5a:b6:88:65:1e: f0:55:a2:56:93:d5:b6:1b:bd:37:6b:f5:1f:7e:7a:17:96:76: b9:f4:c8:c1:ff:fa:0b:81:1a:c0:61:c7:65:fe:0e:f3:f7:cd: 90:15:c3:97:da:fc:b3:be:3a:c5:8a:6f:73:30:93:f7:29:7b: 87:f0:b6:04:b6:78:01:4d:54:29:48:45:1b:6a:d3:36:63:c8: e9:e2:7b:3a:7d:f0:ba:df:73:1a:89:0c:42:47:cf:c8:d8:1b: 19:02:06:53:1e:54:a9:c8:ab:75:78:6b:7e:a5:7f:97:0e:87: 13:44:ca:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBQ0IxMTAvBgNVBAUTKDM1ODE0QjE1RkI4MzQ5MzlFRUE4NUNDNEE2N0M0RTFB NkE4NUE0RjUwHhcNMjUxMjIxMDUwMjAzWhcNMjUxMjI4MDUwMjAzWjAYMRYwFAYD VQQDDA02OTQ3N2Y0Yy00MWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhGEd7InUSnh39zjaatPtDrXKuvf6vbR+edHUDjY0HA96ZhdTlSx7Mb94Dtb KEKSZNTWhOkOfOf9ZszZxfMr6uXV1dktTQAcyoDj07js4E1vvgwJTQaV+T+Url2e N5fSTr/ItClHtUGLtLHw6oS5I2f2bGRVPeWBuapOVMaDZkq0qbIfAfg3+jQtDGY9 9WLxu0s8H4gZwNh1Qz+6TPQyD6Os73l2FvBq65LjVZ0mduIIs/GFfTWpOJ0ivJGs soXiJFMVKpPBsRRcz6o4ui+tIc4qZ8xojI58095hxT/x1xSH1XOGNjD8h4xKFzXj 4azuiZi6FdAPKvy3xk1Kd3FCiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO50Nb08 1XKc1HSgZh+fT8Rwv1PQMB8GA1UdIwQYMBaAFDWBSxX7g0k57qhcxKZ8ThpqhaT1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkFDQi8yNUQxMTg4NkI0 NjUxMUVGOUJGQkFBNjdDNEY5QUUwMi9OWUZMRmZ1RFNUbnVxRnpFcG54T0dtcUZw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05ZRkxGZnVEU1RudXFGekVwbnhPR21xRnBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkFDQi8yNUQxMTg4NkI0NjUxMUVGOUJGQkFBNjdDNEY5QUUwMi9OWUZMRmZ1RFNU bnVxRnpFcG54T0dtcUZwUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHJmptrMdFfNHy1KlaeXvqQUBzvEPYJ/6EeQzxDSzKDV+3qnLnvh/f WSDnVZlvRvAdqnEMqiJdeNgI0aATjVgEh73pQAFzJqucZOnu5+pqFPVUDLW2ccmE T5lwSl9QPObYWrynlEzPpoPXLKDx0R2P0geZ3+An6zUspxphPeR8gsyhmefrlCXR h6gfWraIZR7wVaJWk9W2G703a/UffnoXlna59MjB//oLgRrAYcdl/g7z982QFcOX 2vyzvjrFim9zMJP3KXuH8LYEtngBTVQpSEUbatM2Y8jp4ns6ffC633MaiQxCR8/I 2BsZAgZTHlSpyKt1eGt+pX+XDocTRMoY -----END CERTIFICATE-----Generated at Tue Dec 23 06:07:25 2025 by rpki-client