This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft File: yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft (raw, json) Hash identifier: 733dtzSwdVJmM17KPOv5HbQubLlIyoS0bQ2fGvIh0mE= Subject key identifier: 5F:49:BF:68:39:B5:76:D0:5C:CA:8D:24:C4:15:E6:D6:23:78:92:C0 Authority key identifier: C9:45:B7:77:2C:CC:27:41:38:65:A9:2C:B8:92:DF:D2:7C:AA:9F:77 Certificate issuer: /CN=A91CB06F/serialNumber=C945B7772CCC27413865A92CB892DFD27CAA9F77 Certificate serial: 0347 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft Manifest number: 0342 Signing time: Fri 19 Dec 2025 00:14:49 +0000 Manifest this update: Fri 19 Dec 2025 00:14:48 +0000 Manifest next update: Fri 26 Dec 2025 00:14:48 +0000 Files and hashes: 1: yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl (hash: EimwWz8xZmZQ/1Grd/GdJH4XkXRuVUfrSBQ+6qio0Bk=) 2: 5FC8538AE7D811ECB3E05318C4F9AE02.roa (hash: QUXJ6EoEVGUyvaKXpTag7fMul5UWaiUgtkt9cLzt5qM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 839 (0x347) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB06F, serialNumber=C945B7772CCC27413865A92CB892DFD27CAA9F77 Validity Not Before: Dec 19 00:14:48 2025 GMT Not After : Dec 26 00:14:48 2025 GMT Subject: CN=694498f9-d23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4d:98:ea:95:a6:86:70:29:b9:47:fe:8f:46: 56:53:08:b1:e7:c2:af:7e:02:60:65:36:c0:cd:06: e2:a3:12:43:9f:b4:56:9e:f6:df:8c:ad:da:b5:41: a5:5e:34:d6:24:e2:7c:f3:47:5c:ac:77:57:39:27: 8d:d3:46:68:0e:2b:c5:01:0e:3d:e5:37:7f:1d:42: a2:1e:2e:ee:f4:54:58:6f:ab:73:e5:15:52:ed:dd: 84:83:85:72:f8:51:20:87:10:29:17:97:3e:d1:55: 55:32:c0:d8:65:1b:a7:00:47:5c:33:13:d7:72:b2: f8:ce:85:5c:d7:2d:64:41:ec:7b:50:39:94:2d:5e: 64:24:ee:67:82:dc:17:89:23:71:df:e8:42:31:bc: 35:de:6d:0c:45:16:78:30:39:26:8d:2a:68:73:05: 7e:d3:e9:c5:0d:66:e9:a8:63:46:26:68:08:83:18: 5e:f4:73:82:ec:c5:07:9f:01:78:87:00:e1:14:81: ed:66:b4:3a:a3:b2:bb:e7:bc:3e:57:37:c0:55:c4: 7f:26:3c:40:13:ac:22:da:fe:ec:c3:6f:a9:66:a2: bd:7b:95:b0:9e:1d:88:d6:e9:7d:5b:07:0d:23:08: 22:1f:0f:f5:ea:92:ec:98:04:73:21:2c:28:ad:29: 21:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:49:BF:68:39:B5:76:D0:5C:CA:8D:24:C4:15:E6:D6:23:78:92:C0 X509v3 Authority Key Identifier: keyid:C9:45:B7:77:2C:CC:27:41:38:65:A9:2C:B8:92:DF:D2:7C:AA:9F:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:83:eb:60:41:3f:85:9d:e6:0b:a3:44:2d:21:75:66:8c:c3: b0:89:26:e6:f4:e1:ae:c6:f6:ff:ca:e5:d5:d9:f4:6c:50:94: bb:86:3f:81:0f:ea:b6:a3:05:bf:bf:04:7d:9d:c6:8f:b5:36: ee:a5:13:92:68:ba:2e:be:ea:9b:82:2d:96:fe:4c:51:83:29: f3:b8:4c:37:64:3e:b7:da:7f:7c:d4:57:2f:f6:aa:63:59:f8: 5c:b4:6d:35:0d:0e:86:5e:6c:32:d3:f1:ff:51:cd:89:b3:dd: f7:0a:4f:bd:f1:7a:77:3c:56:99:31:3c:c6:e0:ff:03:0c:61: d3:94:0c:ca:6d:42:f9:97:a3:4b:40:33:f1:a1:3e:e2:2c:08: 56:62:92:4a:d3:93:3d:32:e1:03:7e:29:36:a2:14:00:59:2d: 3f:a6:3f:9a:b9:04:96:b4:cc:b0:12:94:3e:58:4f:24:05:b9: 34:6e:d3:8a:2b:4b:1d:b7:f1:99:58:9b:43:6d:d5:b5:ab:03: 2b:dd:2b:39:dd:dd:71:e0:2b:c6:f0:51:88:fc:7a:d9:cc:48: 88:43:49:aa:25:1c:ba:3d:bd:20:08:a9:9f:86:81:89:f6:e5: 7e:b4:94:d8:26:a2:ca:b2:0f:af:b5:09:d7:0d:cf:2e:a1:4b: e2:bd:24:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwNkYxMTAvBgNVBAUTKEM5NDVCNzc3MkNDQzI3NDEzODY1QTkyQ0I4OTJERkQy N0NBQTlGNzcwHhcNMjUxMjE5MDAxNDQ4WhcNMjUxMjI2MDAxNDQ4WjAYMRYwFAYD VQQDDA02OTQ0OThmOS1kMjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp02Y6pWmhnApuUf+j0ZWUwix58KvfgJgZTbAzQbioxJDn7RWnvbfjK3atUGl XjTWJOJ880dcrHdXOSeN00ZoDivFAQ495Td/HUKiHi7u9FRYb6tz5RVS7d2Eg4Vy +FEghxApF5c+0VVVMsDYZRunAEdcMxPXcrL4zoVc1y1kQex7UDmULV5kJO5ngtwX iSNx3+hCMbw13m0MRRZ4MDkmjSpocwV+0+nFDWbpqGNGJmgIgxhe9HOC7MUHnwF4 hwDhFIHtZrQ6o7K757w+VzfAVcR/JjxAE6wi2v7sw2+pZqK9e5Wwnh2I1ul9WwcN IwgiHw/16pLsmARzISworSkhKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9Jv2g5 tXbQXMqNJMQV5tYjeJLAMB8GA1UdIwQYMBaAFMlFt3cszCdBOGWpLLiS39J8qp93 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA2Ri8xMkYzMDIxMkU3 MzgxMUVDODhGMTE2NDFDNEY5QUUwMi95VVczZHl6TUowRTRaYWtzdUpMZjBueXFu M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVVzNkeXpNSjBFNFpha3N1SkxmMG55cW4zYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA2Ri8xMkYzMDIxMkU3MzgxMUVDODhGMTE2NDFDNEY5QUUwMi95VVczZHl6TUow RTRaYWtzdUpMZjBueXFuM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLg+tgQT+FneYLo0QtIXVmjMOwiSbm9OGuxvb/yuXV2fRsUJS7hj+B D+q2owW/vwR9ncaPtTbupROSaLouvuqbgi2W/kxRgynzuEw3ZD632n981Fcv9qpj WfhctG01DQ6GXmwy0/H/Uc2Js933Ck+98Xp3PFaZMTzG4P8DDGHTlAzKbUL5l6NL QDPxoT7iLAhWYpJK05M9MuEDfik2ohQAWS0/pj+auQSWtMywEpQ+WE8kBbk0btOK K0sdt/GZWJtDbdW1qwMr3Ss53d1x4CvG8FGI/HrZzEiIQ0mqJRy6Pb0gCKmfhoGJ 9uV+tJTYJqLKsg+vtQnXDc8uoUvivSTV -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:31 2025 by rpki-client