This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft File: yUpKujMViTObRlHAW5L_4BvLNMk.mft (raw, json) Hash identifier: zIl6q/PfRmec+I4JDBTMOeu3PXC6E05jYT6wOWj/Yl4= Subject key identifier: 90:5A:8D:E9:EA:08:B9:AD:70:3F:F9:87:60:CD:46:D9:0A:42:19:F5 Authority key identifier: C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9 Certificate issuer: /CN=A9187E23/serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9 Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft Manifest number: 018E Signing time: Tue 23 Dec 2025 02:32:08 +0000 Manifest this update: Tue 23 Dec 2025 02:32:07 +0000 Manifest next update: Tue 30 Dec 2025 02:32:07 +0000 Files and hashes: 1: yUpKujMViTObRlHAW5L_4BvLNMk.crl (hash: AQhiA7VIPuhvAx1spBoXKCW+ouzNi5Rond4n8i6Fbl0=) 2: 3863960C7E0311EE8BCA7D33C4F9AE02.roa (hash: KTIq+toHRso6B9rhQjl5XAk1r2BSi4AiEZAdt6kkQZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E23, serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9 Validity Not Before: Dec 23 02:32:07 2025 GMT Not After : Dec 30 02:32:07 2025 GMT Subject: CN=6949ff27-75d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:31:6c:a4:87:ed:e6:fe:9a:64:1e:b4:ae:9c: c0:d6:be:5a:26:e7:3d:cb:41:36:c0:99:9f:62:8e: c2:d7:18:dd:e8:3c:4d:9d:c7:5e:23:a3:3a:2d:01: 06:b5:1a:8f:08:80:4e:ce:b6:01:6a:aa:9b:19:75: 32:ea:3a:23:9e:27:36:96:61:3e:2f:e4:08:f0:9a: e5:05:f6:83:1e:c5:24:95:04:fa:2c:56:cd:40:46: b7:7c:e6:f8:0a:9b:09:53:c0:d9:1b:57:25:af:a8: e7:b2:73:4a:8b:d7:4a:da:36:84:d4:0c:9f:cd:61: 22:29:04:0b:cb:fd:95:59:55:39:7d:66:23:4e:95: cf:be:1a:34:07:cb:c5:89:c2:06:a3:8d:8a:fc:b6: 5a:a2:09:23:4c:e1:62:ec:35:5f:68:eb:80:e2:c7: 57:ca:32:31:59:46:83:92:8e:08:e9:d3:db:6c:cc: d5:06:5b:cc:5d:a9:14:a5:a6:a0:c0:03:b7:04:9c: e6:61:2a:44:4b:14:f0:a2:41:b9:3b:16:ae:78:4a: 2a:70:fa:f2:e7:95:c2:8a:e1:12:8d:93:af:d5:d7: c5:c9:78:f2:88:df:41:57:62:b8:8d:17:1c:f9:92: 13:73:1a:2f:e7:f6:ba:62:4b:48:07:d4:1e:e8:ff: 3c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5A:8D:E9:EA:08:B9:AD:70:3F:F9:87:60:CD:46:D9:0A:42:19:F5 X509v3 Authority Key Identifier: keyid:C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:20:55:47:58:36:16:fc:96:f7:cb:88:d0:9d:91:2f:08:64: 32:6a:17:0a:ee:39:1b:bf:01:5c:e7:c6:58:8a:d4:5b:f2:54: 79:dc:54:f6:19:4a:53:4a:e3:87:db:13:ba:9e:59:83:14:3d: 2f:c7:71:bd:2f:67:4a:ce:6b:be:89:20:56:7c:3f:00:57:de: 60:a5:05:70:0c:4f:1f:7a:0b:46:a0:83:32:57:a0:fc:79:e0: c4:00:21:9d:b2:dc:38:43:ec:a9:3b:1a:75:e5:18:67:c7:cf: 41:13:62:c5:06:d7:5c:cc:c8:ae:5b:34:20:a8:7b:ee:4f:fb: 0e:3f:2e:3e:1d:3e:2b:b9:aa:a7:77:cb:08:77:7c:56:f3:c0: 5d:94:bc:2f:33:d3:c2:93:8b:75:48:09:21:4e:05:e1:02:d1: a4:cd:0f:20:d5:c7:6a:80:30:33:f5:9f:f6:c3:a7:ac:e1:67: a1:55:09:75:4c:ae:2e:32:9e:4e:ad:c3:d9:57:cf:ca:fe:07: 24:89:ff:7e:2f:3c:94:21:d1:d1:eb:d9:98:eb:d2:d7:34:cf: 09:04:b1:fe:25:05:77:55:ed:7a:86:26:2f:1a:5d:00:c0:cd: 99:de:b3:18:d5:52:24:c3:32:2a:0e:61:62:f1:77:67:e0:b7: dc:78:2e:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFMjMxMTAvBgNVBAUTKEM5NEE0QUJBMzMxNTg5MzM5QjQ2NTFDMDVCOTJGRkUw MUJDQjM0QzkwHhcNMjUxMjIzMDIzMjA3WhcNMjUxMjMwMDIzMjA3WjAYMRYwFAYD VQQDDA02OTQ5ZmYyNy03NWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4zFspIft5v6aZB60rpzA1r5aJuc9y0E2wJmfYo7C1xjd6DxNncdeI6M6LQEG tRqPCIBOzrYBaqqbGXUy6jojnic2lmE+L+QI8JrlBfaDHsUklQT6LFbNQEa3fOb4 CpsJU8DZG1clr6jnsnNKi9dK2jaE1AyfzWEiKQQLy/2VWVU5fWYjTpXPvho0B8vF icIGo42K/LZaogkjTOFi7DVfaOuA4sdXyjIxWUaDko4I6dPbbMzVBlvMXakUpaag wAO3BJzmYSpESxTwokG5OxaueEoqcPry55XCiuESjZOv1dfFyXjyiN9BV2K4jRcc +ZITcxov5/a6YktIB9Qe6P88PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBajenq CLmtcD/5h2DNRtkKQhn1MB8GA1UdIwQYMBaAFMlKSrozFYkzm0ZRwFuS/+AbyzTJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0UyMy9CRTk3QjBBNjdE NjcxMUVFQjA2QTQzMTJDNEY5QUUwMi95VXBLdWpNVmlUT2JSbEhBVzVMXzRCdkxO TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVcEt1ak1WaVRPYlJsSEFXNUxfNEJ2TE5Nay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0UyMy9CRTk3QjBBNjdENjcxMUVFQjA2QTQzMTJDNEY5QUUwMi95VXBLdWpNVmlU T2JSbEhBVzVMXzRCdkxOTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEIFVHWDYW/Jb3y4jQnZEvCGQyahcK7jkbvwFc58ZYitRb8lR53FT2 GUpTSuOH2xO6nlmDFD0vx3G9L2dKzmu+iSBWfD8AV95gpQVwDE8fegtGoIMyV6D8 eeDEACGdstw4Q+ypOxp15Rhnx89BE2LFBtdczMiuWzQgqHvuT/sOPy4+HT4ruaqn d8sId3xW88BdlLwvM9PCk4t1SAkhTgXhAtGkzQ8g1cdqgDAz9Z/2w6es4WehVQl1 TK4uMp5OrcPZV8/K/gckif9+LzyUIdHR69mY69LXNM8JBLH+JQV3Ve16hiYvGl0A wM2Z3rMY1VIkwzIqDmFi8Xdn4LfceC79 -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:56 2025 by rpki-client