This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft File: yW0SR_XLoniur1KTUbX4HKVxcKM.mft (raw, json) Hash identifier: 7JQdND0ehC1SlviOg3RUFXnscvVL4OU1u6ckSlhieDQ= Subject key identifier: E7:5D:87:23:60:2D:8F:2E:68:86:A0:D5:A9:EA:EE:D2:46:D4:9C:D9 Authority key identifier: C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 Certificate issuer: /CN=A9190E6C/serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Certificate serial: 0DB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft Manifest number: 0DAB Signing time: Mon 22 Dec 2025 17:33:00 +0000 Manifest this update: Mon 22 Dec 2025 17:33:00 +0000 Manifest next update: Mon 29 Dec 2025 17:33:00 +0000 Files and hashes: 1: yW0SR_XLoniur1KTUbX4HKVxcKM.crl (hash: Af4fWXP9dOSdbeuhXzy2jl4y2dM9yDTjgtJxfkgblKQ=) 2: 07C8CFD0E18F11EF82714B13C4F9AE02.roa (hash: pHVkzfX7SG48uWlsj9xFm7ATtwnDNjsznm3glTtz9F0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:32:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3511 (0xdb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190E6C, serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Validity Not Before: Dec 22 17:33:00 2025 GMT Not After : Dec 29 17:33:00 2025 GMT Subject: CN=694980cc-614d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1f:a1:12:5a:b8:da:4f:3c:1c:99:2b:04:8c: 83:8f:0a:96:3a:15:10:54:86:c9:5b:63:d8:db:de: 6c:00:a0:b6:5a:2a:15:d8:42:1f:60:d4:27:fc:cc: 64:ee:b3:21:43:e2:f9:45:71:ce:f1:11:34:3d:e7: ca:83:ee:13:a6:3a:89:86:8b:a2:bf:e0:d2:60:0d: 6e:a3:ec:70:21:50:7d:03:4e:ea:d4:e1:e0:ed:87: 07:90:eb:77:99:51:cc:43:59:aa:1b:4e:6d:7b:c6: 77:f1:5c:77:de:a9:89:6c:a3:f1:1b:50:48:e0:62: 6f:5a:1e:a2:d4:f7:d3:c5:c6:50:ea:7e:ba:ca:a9: be:e3:a2:2a:a6:73:f4:f1:ca:db:dd:96:36:91:cc: 52:5e:be:fa:78:d0:4a:f1:48:9d:a7:25:51:bc:03: cc:b8:4e:b7:d5:db:86:4e:c7:71:13:ac:3b:09:25: ab:1c:95:06:05:26:4b:88:4a:bb:2d:f0:54:5f:11: 3e:8f:3d:5e:be:35:39:2d:2e:b7:b4:f7:49:0e:7d: 23:ee:02:22:18:e1:b1:d6:dc:72:3e:36:f8:46:3a: fb:96:14:66:7a:7b:cf:73:87:e5:6e:de:75:7e:a8: 59:f9:9f:2a:2a:d6:f2:c8:b3:f6:35:63:a2:3a:cb: 2b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:5D:87:23:60:2D:8F:2E:68:86:A0:D5:A9:EA:EE:D2:46:D4:9C:D9 X509v3 Authority Key Identifier: keyid:C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:0a:29:9e:8e:c7:a9:70:aa:21:ec:0b:9f:cc:2d:f0:09:db: 26:f2:20:57:94:69:b4:fc:16:9c:a9:29:d6:64:8f:77:22:78: e1:64:f8:5c:b3:8e:ee:b0:d0:4a:19:26:ae:cb:7b:01:f8:df: da:a0:8c:ed:c3:dc:ab:6f:ce:ba:33:2d:12:f9:cf:0e:8d:b5: 1f:74:42:5e:fb:99:41:ec:17:6a:81:59:62:ad:6d:13:95:7a: 0b:af:a0:c3:cd:f8:27:d6:35:12:81:fa:f4:ab:78:54:8d:c3: 8c:24:bc:58:0f:06:f1:2b:0a:26:f5:4b:fb:6d:ee:60:4e:96: 6c:db:92:4e:c4:c5:4e:b6:a0:14:25:2b:3f:d5:7e:53:d5:2e: 36:2e:31:7d:c0:21:f6:17:13:1e:f1:c3:bb:ff:81:28:f3:ca: 60:4d:7b:a9:9f:b5:7b:d5:1e:bb:89:e8:3b:14:96:ec:c7:ab: a9:fb:2f:73:b6:8d:2b:c1:b7:0c:b9:60:d5:14:81:2a:1c:db: 8b:8c:c0:53:42:bb:a4:2a:74:a3:64:84:28:79:a0:0d:45:18: cc:0a:ec:c6:59:ca:2b:3e:9f:87:ba:47:78:23:b5:af:bc:a7: 18:64:b3:62:ed:80:28:86:13:25:2e:6b:e7:17:6f:6c:40:d2: e2:e1:dd:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBFNkMxMTAvBgNVBAUTKEM5NkQxMjQ3RjVDQkEyNzhBRUFGNTI5MzUxQjVGODFD QTU3MTcwQTMwHhcNMjUxMjIyMTczMzAwWhcNMjUxMjI5MTczMzAwWjAYMRYwFAYD VQQDDA02OTQ5ODBjYy02MTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtx+hElq42k88HJkrBIyDjwqWOhUQVIbJW2PY295sAKC2WioV2EIfYNQn/Mxk 7rMhQ+L5RXHO8RE0PefKg+4TpjqJhouiv+DSYA1uo+xwIVB9A07q1OHg7YcHkOt3 mVHMQ1mqG05te8Z38Vx33qmJbKPxG1BI4GJvWh6i1PfTxcZQ6n66yqm+46IqpnP0 8crb3ZY2kcxSXr76eNBK8UidpyVRvAPMuE631duGTsdxE6w7CSWrHJUGBSZLiEq7 LfBUXxE+jz1evjU5LS63tPdJDn0j7gIiGOGx1txyPjb4Rjr7lhRmenvPc4flbt51 fqhZ+Z8qKtbyyLP2NWOiOssrwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOddhyNg LY8uaIag1anq7tJG1JzZMB8GA1UdIwQYMBaAFMltEkf1y6J4rq9Sk1G1+BylcXCj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEU2Qy85QzY5QTczMkQ0 OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9uaXVyMUtUVWJYNEhLVnhj S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXMFNSX1hMb25pdXIxS1RVYlg0SEtWeGNLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEU2Qy85QzY5QTczMkQ0OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9u aXVyMUtUVWJYNEhLVnhjS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuCimejsepcKoh7AufzC3wCdsm8iBXlGm0/BacqSnWZI93InjhZPhc s47usNBKGSauy3sB+N/aoIztw9yrb866My0S+c8OjbUfdEJe+5lB7BdqgVlirW0T lXoLr6DDzfgn1jUSgfr0q3hUjcOMJLxYDwbxKwom9Uv7be5gTpZs25JOxMVOtqAU JSs/1X5T1S42LjF9wCH2FxMe8cO7/4Eo88pgTXupn7V71R67ieg7FJbsx6up+y9z to0rwbcMuWDVFIEqHNuLjMBTQrukKnSjZIQoeaANRRjMCuzGWcorPp+Hukd4I7Wv vKcYZLNi7YAohhMlLmvnF29sQNLi4d0w -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:45 2025 by rpki-client