This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft File: y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft (raw, json) Hash identifier: 2cB9S1IoNRq71XIs63K3tuN7tPpdhgx/rAmduUpn84g= Subject key identifier: DB:C7:53:DF:11:D0:6C:65:CE:81:F1:EB:F9:79:D5:EA:57:2E:C0:8A Authority key identifier: CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 Certificate issuer: /CN=A91C3A74/serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Certificate serial: 2679 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft Manifest number: 2662 Signing time: Sat 20 Dec 2025 15:33:59 +0000 Manifest this update: Sat 20 Dec 2025 15:33:59 +0000 Manifest next update: Sat 27 Dec 2025 15:33:59 +0000 Files and hashes: 1: y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl (hash: 3lo3tvDzfen3ToYeua/ovPs7/w1TcioquRalJVxzNak=) 2: 767655BE561A11E79F98831DC4F9AE02.roa (hash: bf73yAvc50YmZ9DwhowT9EQ5/Cgl8VLGPJbD30MABw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9849 (0x2679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3A74, serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Validity Not Before: Dec 20 15:33:59 2025 GMT Not After : Dec 27 15:33:59 2025 GMT Subject: CN=6946c1e7-1fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3a:ab:ca:34:36:0c:75:f2:a5:ab:f4:5d:0f: 86:2a:85:ac:de:5d:aa:b2:cf:b6:f3:2b:c3:65:da: 0e:11:31:09:b5:52:62:7a:1c:83:d5:ce:bf:ab:75: d4:e4:e2:d9:12:4d:82:ae:c2:59:46:84:27:bb:d8: e9:cd:4b:83:ff:40:b9:21:cf:a1:6f:ba:4c:7a:98: b5:b9:25:bd:7a:7e:9f:ba:95:a5:1c:cb:fd:7e:69: 8a:04:32:5c:14:ab:4a:eb:15:21:0b:57:b7:67:ec: c6:76:62:eb:b5:c5:a1:df:51:b8:f7:91:06:3e:8d: fe:cb:58:b1:39:57:29:cc:17:22:4b:58:52:75:a9: 43:75:b3:18:65:98:ed:6f:38:e3:53:5c:11:b5:13: 5e:74:d9:a7:77:3a:39:3e:c0:44:25:2d:44:03:41: 46:ea:aa:c1:ab:5d:18:c9:20:07:9e:30:21:d5:08: 9c:80:9e:ac:09:20:c5:d5:b7:5f:30:22:e6:2c:ec: 64:4b:1a:32:14:d1:51:e2:de:b0:63:d2:ac:e8:5f: 0c:d4:5e:1f:6f:cc:a2:90:a7:76:cc:19:5e:64:48: cc:9b:b8:72:62:28:5f:85:62:eb:0d:bf:5a:fe:4d: e3:d5:6c:25:37:65:e8:2b:98:e4:77:54:07:df:79: 4a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C7:53:DF:11:D0:6C:65:CE:81:F1:EB:F9:79:D5:EA:57:2E:C0:8A X509v3 Authority Key Identifier: keyid:CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:58:47:40:95:dd:8a:ad:2c:03:ed:3b:61:64:73:f1:1a:7d: 59:c4:26:1a:a0:e1:53:18:01:40:bf:3d:c0:cf:ff:03:5a:f7: b7:e6:b5:1c:31:51:62:bd:58:54:9f:e2:92:98:1c:a9:7c:78: d9:1e:99:b8:ce:2f:99:00:79:88:5f:eb:d2:fa:d9:b5:b1:02: ed:e0:0c:5d:a6:57:c5:dc:f5:e7:6c:0d:eb:97:dd:c8:e4:b2: 30:2b:01:03:94:d9:b6:8c:21:f3:5f:8d:0c:eb:f3:e7:8f:47: 78:60:b4:29:f8:f4:f9:36:2e:98:fc:a4:f7:c9:a8:02:6e:f0: 2a:cf:66:28:f0:2b:99:41:1b:ca:d1:02:04:e8:54:17:7e:a2: dc:e2:10:03:d3:ce:68:a2:f5:09:51:58:fa:2f:5e:48:ee:63: 3e:2f:fa:95:78:0b:56:52:8a:d0:90:8a:f1:3e:2c:84:44:aa: ea:e4:1b:80:a5:3b:33:68:4e:e1:38:a7:2c:33:c3:c1:a4:e6: e9:ca:e2:9c:57:65:24:d4:b3:b2:63:f4:65:e6:25:d5:8d:65: be:82:1f:60:90:44:2c:92:6f:c3:91:fb:e9:6c:13:b7:af:cf: db:4d:f5:26:5d:6f:db:cd:4f:cb:69:28:78:dd:b8:97:bd:11: e3:49:c7:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBNzQxMTAvBgNVBAUTKENCN0I4REI0MjQ4MjRDNzFBODcwM0JCRkI5NDJBMzE1 MjkxNTQzNjMwHhcNMjUxMjIwMTUzMzU5WhcNMjUxMjI3MTUzMzU5WjAYMRYwFAYD VQQDDA02OTQ2YzFlNy0xZmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDqryjQ2DHXypav0XQ+GKoWs3l2qss+28yvDZdoOETEJtVJiehyD1c6/q3XU 5OLZEk2CrsJZRoQnu9jpzUuD/0C5Ic+hb7pMepi1uSW9en6fupWlHMv9fmmKBDJc FKtK6xUhC1e3Z+zGdmLrtcWh31G495EGPo3+y1ixOVcpzBciS1hSdalDdbMYZZjt bzjjU1wRtRNedNmndzo5PsBEJS1EA0FG6qrBq10YySAHnjAh1QicgJ6sCSDF1bdf MCLmLOxkSxoyFNFR4t6wY9Ks6F8M1F4fb8yikKd2zBleZEjMm7hyYihfhWLrDb9a /k3j1WwlN2XoK5jkd1QH33lKxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvHU98R 0GxlzoHx6/l51epXLsCKMB8GA1UdIwQYMBaAFMt7jbQkgkxxqHA7v7lCoxUpFUNj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0E3NC83Q0I0QTA1NkZE M0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RIR29jRHVfdVVLakZTa1ZR Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzdU50Q1NDVEhHb2NEdV91VUtqRlNrVlEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0E3NC83Q0I0QTA1NkZEM0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RI R29jRHVfdVVLakZTa1ZRMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWWEdAld2KrSwD7TthZHPxGn1ZxCYaoOFTGAFAvz3Az/8DWve35rUc MVFivVhUn+KSmBypfHjZHpm4zi+ZAHmIX+vS+tm1sQLt4AxdplfF3PXnbA3rl93I 5LIwKwEDlNm2jCHzX40M6/Pnj0d4YLQp+PT5Ni6Y/KT3yagCbvAqz2Yo8CuZQRvK 0QIE6FQXfqLc4hAD085oovUJUVj6L15I7mM+L/qVeAtWUorQkIrxPiyERKrq5BuA pTszaE7hOKcsM8PBpObpyuKcV2Uk1LOyY/Rl5iXVjWW+gh9gkEQskm/DkfvpbBO3 r8/bTfUmXW/bzU/LaSh43biXvRHjScdx -----END CERTIFICATE-----Generated at Sun Dec 21 13:08:50 2025 by rpki-client