This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft File: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft (raw, json) Hash identifier: ccvwF6JY7/sz1A1q+hcGTbz4dULrXoC7GQK+XDW1Zbs= Subject key identifier: 9A:24:A1:AB:67:2B:A0:2A:4F:74:45:84:B7:0C:38:AE:8E:F9:A6:2D Authority key identifier: 15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34 Certificate issuer: /CN=A91A8259/serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34 Certificate serial: 0C3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft Manifest number: 0C35 Signing time: Mon 22 Dec 2025 18:16:21 +0000 Manifest this update: Mon 22 Dec 2025 18:16:21 +0000 Manifest next update: Mon 29 Dec 2025 18:16:21 +0000 Files and hashes: 1: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl (hash: EE41vLQNc8khxdnI/hm4SyIaiguSTOCl3tLmI/vv63Q=) 2: 776893761C9F11EAB9B84F25C4F9AE02.roa (hash: ndXUBxQ/xEOvoRO3r6r5850s+ooSM85HQb25AiLL8T0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3133 (0xc3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8259, serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34 Validity Not Before: Dec 22 18:16:21 2025 GMT Not After : Dec 29 18:16:21 2025 GMT Subject: CN=69498af5-556d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d8:c9:58:0f:51:15:58:6b:0b:1f:10:dc:8f: 25:43:38:35:9c:29:a2:6c:c3:62:35:bd:0e:02:f5: 40:67:9a:ae:b1:ad:3a:3e:90:43:d7:d8:4d:66:44: f6:7d:4d:70:b9:cd:2c:96:0c:59:1f:83:f5:c2:8e: 45:4f:16:45:a8:ac:5e:02:ad:30:28:eb:71:10:e5: 1a:14:40:94:45:ae:5a:c2:e2:32:b2:9f:fc:05:47: 01:3a:4d:5d:50:a0:3f:e9:aa:56:84:bc:fc:2c:4f: 51:6e:51:6b:d4:34:41:3a:bc:6b:46:29:4c:48:9e: 87:4a:a8:b1:49:40:c5:18:e2:2d:f1:6a:26:30:55: 47:3d:99:6a:b0:56:aa:d0:4d:82:31:21:48:f1:e6: 81:71:f5:11:c1:ca:ae:bd:a3:d5:96:cf:6d:e8:5c: 16:dc:97:38:a7:d0:fe:86:21:73:bd:72:10:da:77: 78:eb:85:07:c6:51:e3:50:46:59:00:12:cd:ac:2a: 9d:bd:10:41:97:c3:3f:2b:92:1f:bc:46:48:59:f8: cf:3f:23:ff:89:b7:a2:31:ec:43:5f:b3:be:18:d2: f6:7e:d7:72:4e:03:cc:9e:74:f5:5f:9f:51:b8:ce: e2:57:9f:65:3e:3d:98:29:63:14:01:5d:e7:6c:29: 1c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:24:A1:AB:67:2B:A0:2A:4F:74:45:84:B7:0C:38:AE:8E:F9:A6:2D X509v3 Authority Key Identifier: keyid:15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:fb:67:e3:a9:77:5a:3d:4b:f2:20:7b:28:9f:0d:a1:f3:2a: 65:29:a9:f3:d7:63:f5:e8:de:c2:5e:ba:03:04:16:bf:19:95: 06:28:c9:f2:21:93:5b:cb:6b:e8:80:f2:87:1d:7e:ff:59:1a: da:63:5a:b4:a7:87:ee:86:da:78:a4:e5:7b:f0:22:8b:b7:89: 07:d1:8d:61:92:01:8a:b0:15:4f:c9:55:49:3b:15:ea:24:1f: 11:e7:c6:3b:62:09:03:e6:6d:5d:12:31:46:fc:a7:17:d2:5c: 6f:e4:1b:7a:b9:cb:17:df:f5:bc:6e:f9:d3:a4:4e:60:e4:3c: 08:2e:88:e8:42:44:bc:9c:6a:c9:f5:f9:18:2b:8c:60:ca:f3: 49:b5:56:0d:f4:58:fd:9a:0d:2e:c2:31:a6:5c:66:94:5f:34: 23:22:fb:8b:84:a4:eb:3d:20:b6:19:39:74:72:48:93:ad:67: 66:a5:9a:48:45:79:1c:e4:83:17:69:fe:4d:0b:19:94:7d:5c: e8:fc:5a:02:51:4d:e2:9f:72:8e:1c:f4:07:01:3c:de:a4:1c: ed:11:31:61:c2:fb:64:ad:b4:09:f3:81:07:a1:d4:48:52:80: e7:c8:0a:f8:a3:28:c2:8e:be:24:19:88:bc:85:74:35:99:bc: c3:37:56:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyNTkxMTAvBgNVBAUTKDE1OEZCM0VGRUU4RUY2RkI5QTVBN0M0RTQ5QTM4QzlE NjlCQzJGMzQwHhcNMjUxMjIyMTgxNjIxWhcNMjUxMjI5MTgxNjIxWjAYMRYwFAYD VQQDDA02OTQ5OGFmNS01NTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjNjJWA9RFVhrCx8Q3I8lQzg1nCmibMNiNb0OAvVAZ5qusa06PpBD19hNZkT2 fU1wuc0slgxZH4P1wo5FTxZFqKxeAq0wKOtxEOUaFECURa5awuIysp/8BUcBOk1d UKA/6apWhLz8LE9RblFr1DRBOrxrRilMSJ6HSqixSUDFGOIt8WomMFVHPZlqsFaq 0E2CMSFI8eaBcfURwcquvaPVls9t6FwW3Jc4p9D+hiFzvXIQ2nd464UHxlHjUEZZ ABLNrCqdvRBBl8M/K5IfvEZIWfjPPyP/ibeiMexDX7O+GNL2ftdyTgPMnnT1X59R uM7iV59lPj2YKWMUAV3nbCkcFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJokoatn K6AqT3RFhLcMOK6O+aYtMB8GA1UdIwQYMBaAFBWPs+/ujvb7mlp8TkmjjJ1pvC80 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODI1OS81MUJCNjI1QzFD OUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2dWFXbnhPU2FPTW5XbThM elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZZLXo3LTZPOXZ1YVdueE9TYU9NbldtOEx6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODI1OS81MUJCNjI1QzFDOUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2 dWFXbnhPU2FPTW5XbThMelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo+2fjqXdaPUvyIHsonw2h8yplKanz12P16N7CXroDBBa/GZUGKMny IZNby2vogPKHHX7/WRraY1q0p4fuhtp4pOV78CKLt4kH0Y1hkgGKsBVPyVVJOxXq JB8R58Y7YgkD5m1dEjFG/KcX0lxv5Bt6ucsX3/W8bvnTpE5g5DwILojoQkS8nGrJ 9fkYK4xgyvNJtVYN9Fj9mg0uwjGmXGaUXzQjIvuLhKTrPSC2GTl0ckiTrWdmpZpI RXkc5IMXaf5NCxmUfVzo/FoCUU3in3KOHPQHATzepBztETFhwvtkrbQJ84EHodRI UoDnyAr4oyjCjr4kGYi8hXQ1mbzDN1Zo -----END CERTIFICATE-----Generated at Tue Dec 23 20:20:29 2025 by rpki-client