This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft File: YQPK5q-yXkC6nl2kxULP4JtndCo.mft (raw, json) Hash identifier: MNMDvyUdW4Thv6XvqqNAtPLeoy+ViUq9IQ/mktvxhSM= Subject key identifier: 93:18:F1:EB:9B:E3:7B:8D:62:FB:E7:E6:D0:E1:55:D3:A6:EC:D1:08 Authority key identifier: 61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A Certificate issuer: /CN=A9186193/serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A Certificate serial: 09F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft Manifest number: 09E8 Signing time: Mon 22 Dec 2025 19:19:18 +0000 Manifest this update: Mon 22 Dec 2025 19:19:18 +0000 Manifest next update: Mon 29 Dec 2025 19:19:18 +0000 Files and hashes: 1: YQPK5q-yXkC6nl2kxULP4JtndCo.crl (hash: Al8g4B9D0a+K/wwKa1j43RRj4QFkQlNjx42pfkPRNeU=) 2: B781FD5C8FB411EAA396FB5CC4F9AE02.roa (hash: Ox2JzCz1n/Zcged2uhXaHgWO3+p3E4q9pZj/D0/CtLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2545 (0x9f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186193, serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A Validity Not Before: Dec 22 19:19:18 2025 GMT Not After : Dec 29 19:19:18 2025 GMT Subject: CN=694999b6-79cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dc:47:41:c6:e9:8f:1b:22:a5:82:2a:19:e7: 2e:d6:c5:43:22:42:cc:55:90:dc:99:91:6e:4b:a5: 90:a6:4d:3e:20:9e:de:6d:9b:5a:d4:da:0e:96:2e: f0:60:d3:34:ab:5a:3b:08:e3:f1:03:18:0c:96:32: d4:72:a4:e9:85:73:ba:7b:65:b9:1e:5a:4f:a2:2e: 5d:e9:d2:7c:2a:3c:bb:00:07:93:1f:c7:1e:41:47: 27:02:77:f3:22:20:47:7d:96:9f:c3:3b:c0:ab:5b: fa:f9:36:d6:5e:b5:ab:c5:95:12:5c:b8:c4:01:8f: 09:84:65:c1:47:27:a7:05:fe:c5:68:e2:00:d6:88: 15:e2:30:28:8b:a2:4c:b7:9c:fa:42:8c:64:63:26: 3e:69:03:b0:2d:f4:1f:d7:96:aa:2b:c4:3d:b2:a0: 64:77:ef:47:2b:54:6b:9c:b8:5c:77:ad:02:9e:9e: ff:07:94:f6:79:ae:78:90:e2:c5:95:dd:0d:15:1b: 96:b0:08:b9:ba:ea:2b:54:56:48:b2:18:d2:ab:f9: b0:0f:43:99:b5:fd:c1:47:0d:e6:c8:ae:74:d3:0a: 43:f4:90:5c:68:07:27:98:ff:e4:38:ae:a8:06:d4: 5e:82:c0:16:5a:4a:5a:30:45:f2:40:3e:cb:d9:3a: 0c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:18:F1:EB:9B:E3:7B:8D:62:FB:E7:E6:D0:E1:55:D3:A6:EC:D1:08 X509v3 Authority Key Identifier: keyid:61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:db:cf:0c:c2:38:41:b1:71:7e:c7:46:d5:20:29:4d:7c:5a: 84:87:a0:7e:7c:6d:2b:bc:80:5b:6d:58:9c:9e:25:d1:00:95: 50:a6:99:c3:ea:69:b2:c3:0b:69:65:12:92:58:e6:2f:87:6f: a2:b4:09:92:4e:a2:0d:df:57:89:a0:16:70:81:36:66:d9:ec: 11:68:d0:a4:2a:10:5d:77:43:55:33:73:80:5e:09:f6:84:1e: be:e9:c0:a7:63:8a:9a:83:42:0b:0d:cc:3e:90:5d:1b:9e:bd: 25:10:7a:3d:81:b6:77:81:a6:72:87:99:90:37:fb:cb:3c:54: cf:d5:6b:2e:e3:96:a2:fd:af:73:c5:90:30:3e:c0:9d:6e:f1: 26:38:7b:d8:f9:82:cf:5f:2a:41:01:9b:b1:da:97:53:e2:cd: 4d:9e:7a:2c:2b:16:2a:4e:55:10:4c:1e:d3:f9:d2:b2:f9:7d: 40:18:d6:64:b4:58:f2:83:68:2c:7d:f7:5d:ab:9d:f6:3b:1f: e9:e2:2b:c1:59:32:b9:b9:13:ab:ba:94:8b:f4:19:7b:be:47: 22:44:4b:b9:e3:93:f6:8a:53:d6:93:30:49:26:33:85:eb:b5: 3d:32:3b:31:61:5d:0c:53:44:48:56:71:18:97:91:76:0e:18: 80:30:fc:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYxOTMxMTAvBgNVBAUTKDYxMDNDQUU2QUZCMjVFNDBCQTlFNURBNEM1NDJDRkUw OUI2Nzc0MkEwHhcNMjUxMjIyMTkxOTE4WhcNMjUxMjI5MTkxOTE4WjAYMRYwFAYD VQQDDA02OTQ5OTliNi03OWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9xHQcbpjxsipYIqGecu1sVDIkLMVZDcmZFuS6WQpk0+IJ7ebZta1NoOli7w YNM0q1o7COPxAxgMljLUcqTphXO6e2W5HlpPoi5d6dJ8Kjy7AAeTH8ceQUcnAnfz IiBHfZafwzvAq1v6+TbWXrWrxZUSXLjEAY8JhGXBRyenBf7FaOIA1ogV4jAoi6JM t5z6QoxkYyY+aQOwLfQf15aqK8Q9sqBkd+9HK1RrnLhcd60Cnp7/B5T2ea54kOLF ld0NFRuWsAi5uuorVFZIshjSq/mwD0OZtf3BRw3myK500wpD9JBcaAcnmP/kOK6o BtRegsAWWkpaMEXyQD7L2ToMawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMY8eub 43uNYvvn5tDhVdOm7NEIMB8GA1UdIwQYMBaAFGEDyuavsl5Aup5dpMVCz+CbZ3Qq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjE5My8xRDUxNDA1RThG QjMxMUVBQjcxMjZDNTdDNEY5QUUwMi9ZUVBLNXEteVhrQzZubDJreFVMUDRKdG5k Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lRUEs1cS15WGtDNm5sMmt4VUxQNEp0bmRDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjE5My8xRDUxNDA1RThGQjMxMUVBQjcxMjZDNTdDNEY5QUUwMi9ZUVBLNXEteVhr QzZubDJreFVMUDRKdG5kQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm288MwjhBsXF+x0bVIClNfFqEh6B+fG0rvIBbbVicniXRAJVQppnD 6mmywwtpZRKSWOYvh2+itAmSTqIN31eJoBZwgTZm2ewRaNCkKhBdd0NVM3OAXgn2 hB6+6cCnY4qag0ILDcw+kF0bnr0lEHo9gbZ3gaZyh5mQN/vLPFTP1Wsu45ai/a9z xZAwPsCdbvEmOHvY+YLPXypBAZux2pdT4s1NnnosKxYqTlUQTB7T+dKy+X1AGNZk tFjyg2gsffddq532Ox/p4ivBWTK5uROrupSL9Bl7vkciREu545P2ilPWkzBJJjOF 67U9MjsxYV0MU0RIVnEYl5F2DhiAMPwz -----END CERTIFICATE-----Generated at Wed Dec 24 04:03:57 2025 by rpki-client