This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft File: 3YoriGVMM2b_5_z2VWqXhgAqpls.mft (raw, json) Hash identifier: VSbX6WIJx048Ym776QCh9I43snHqQIuX8r0qyu1oP5U= Subject key identifier: 40:D0:6D:D8:0D:75:56:5D:4C:92:02:39:E2:C8:6C:71:1C:33:18:F9 Authority key identifier: DD:8A:2B:88:65:4C:33:66:FF:E7:FC:F6:55:6A:97:86:00:2A:A6:5B Certificate issuer: /CN=A91CFAB9/serialNumber=DD8A2B88654C3366FFE7FCF6556A9786002AA65B Certificate serial: 040E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft Manifest number: 0405 Signing time: Mon 22 Dec 2025 23:31:55 +0000 Manifest this update: Mon 22 Dec 2025 23:31:54 +0000 Manifest next update: Mon 29 Dec 2025 23:31:54 +0000 Files and hashes: 1: 3YoriGVMM2b_5_z2VWqXhgAqpls.crl (hash: 6PZQO19QhMGykbgZQl9ZiJ/emEvrRORvUN/mPeRIwvw=) 2: 596CCC4E9F1911EC8FDFEA7DC4F9AE02.roa (hash: YvFcrpBbAoiYQIP04bSjgNkLWr3WOARquHbbaVU+Mxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.crl rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1038 (0x40e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFAB9, serialNumber=DD8A2B88654C3366FFE7FCF6556A9786002AA65B Validity Not Before: Dec 22 23:31:54 2025 GMT Not After : Dec 29 23:31:54 2025 GMT Subject: CN=6949d4eb-8e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:14:c7:e8:b1:a2:79:e4:02:ad:6d:d0:cc:c8: b8:4b:3f:61:26:03:b5:21:1d:7b:6a:c1:2e:e7:6a: 29:bb:ad:39:57:f0:96:fa:23:44:6b:bf:f5:20:8a: 7c:a7:e3:ab:80:c4:1a:1f:89:08:d6:a6:1e:4e:f8: 0f:15:d4:15:7d:38:73:4c:44:46:e8:55:d7:82:e5: d3:b6:ca:8a:97:70:84:f1:b2:9c:be:99:e5:db:96: 33:c0:4f:95:dc:11:78:53:df:a5:90:1b:f2:23:46: 6b:d6:74:3c:d8:ec:90:e9:87:8d:6a:31:01:a7:cc: 5f:8d:80:4a:97:95:5b:2e:e2:79:b5:d2:97:54:03: a8:a3:17:e1:8a:6d:83:93:3a:ae:78:91:57:15:73: cd:6e:45:8b:a7:a7:ed:01:e8:f3:eb:79:66:94:d5: 53:d8:7f:36:93:e1:fa:6d:a5:3b:2d:ae:7d:1a:f9: b5:db:46:b5:d2:c0:f5:ca:9c:90:cd:26:b4:87:05: 3e:a5:9a:9e:79:6b:de:ee:95:7d:c0:ee:ae:d9:fd: a9:11:13:48:5b:03:3b:93:ec:5e:a6:e7:03:ea:42: 3f:e9:81:38:5d:59:a0:2b:ca:c8:af:eb:ab:7d:89: 13:e1:d1:79:eb:d8:af:7a:cd:d0:a1:37:df:e9:cb: 10:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D0:6D:D8:0D:75:56:5D:4C:92:02:39:E2:C8:6C:71:1C:33:18:F9 X509v3 Authority Key Identifier: keyid:DD:8A:2B:88:65:4C:33:66:FF:E7:FC:F6:55:6A:97:86:00:2A:A6:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:2f:97:b9:66:b3:72:42:39:06:ca:59:3c:0c:bd:62:84:a2: 04:86:e1:5f:83:06:02:57:ad:6a:c7:1e:53:12:4d:6f:d7:1a: c7:42:5f:06:ce:ee:9f:ff:61:d4:d9:90:fc:25:77:43:76:b7: 59:4f:dd:0e:9a:c7:90:eb:7d:e2:bc:24:a6:5a:f1:c7:51:51: f6:2f:d4:d9:76:99:3b:66:85:2b:43:cc:52:0e:86:75:16:91: 2a:e1:56:85:ab:9b:d1:8f:b4:04:35:68:49:69:c1:a9:02:4f: 59:2a:a8:90:90:ec:f0:8b:c0:0f:ac:e6:13:3d:90:3b:18:f1: 0f:58:19:91:9b:fa:2b:e2:be:21:45:58:39:23:3c:5f:f1:be: 5f:05:09:d0:ae:38:bc:08:a8:e6:dc:1a:cf:8c:bc:e6:ec:db: e2:ef:46:7b:d6:79:e3:0e:b0:47:7f:3b:8a:2e:b2:64:72:0e: 9f:12:37:01:54:74:93:3d:cf:86:61:92:71:4e:9a:82:6a:a9: 3d:85:3f:dc:79:8a:21:60:0b:fe:be:b4:d9:b3:be:e5:e6:b2: 4f:65:ee:a5:17:80:36:83:80:b1:7d:2a:dd:a7:24:6e:bd:21: 1f:69:9f:6e:9f:83:8d:98:90:b9:f8:f8:c3:8c:4d:37:35:2c: fb:fd:28:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBQjkxMTAvBgNVBAUTKEREOEEyQjg4NjU0QzMzNjZGRkU3RkNGNjU1NkE5Nzg2 MDAyQUE2NUIwHhcNMjUxMjIyMjMzMTU0WhcNMjUxMjI5MjMzMTU0WjAYMRYwFAYD VQQDDA02OTQ5ZDRlYi04ZTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBTH6LGieeQCrW3QzMi4Sz9hJgO1IR17asEu52opu605V/CW+iNEa7/1IIp8 p+OrgMQaH4kI1qYeTvgPFdQVfThzTERG6FXXguXTtsqKl3CE8bKcvpnl25YzwE+V 3BF4U9+lkBvyI0Zr1nQ82OyQ6YeNajEBp8xfjYBKl5VbLuJ5tdKXVAOooxfhim2D kzqueJFXFXPNbkWLp6ftAejz63lmlNVT2H82k+H6baU7La59Gvm120a10sD1ypyQ zSa0hwU+pZqeeWve7pV9wO6u2f2pERNIWwM7k+xepucD6kI/6YE4XVmgK8rIr+ur fYkT4dF569ives3QoTff6csQcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDQbdgN dVZdTJICOeLIbHEcMxj5MB8GA1UdIwQYMBaAFN2KK4hlTDNm/+f89lVql4YAKqZb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkFCOS9FODUzMzgyQzlG MTMxMUVDOUU0NUQ1NzJDNEY5QUUwMi8zWW9yaUdWTU0yYl81X3oyVldxWGhnQXFw bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZb3JpR1ZNTTJiXzVfejJWV3FYaGdBcXBscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkFCOS9FODUzMzgyQzlGMTMxMUVDOUU0NUQ1NzJDNEY5QUUwMi8zWW9yaUdWTU0y Yl81X3oyVldxWGhnQXFwbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2L5e5ZrNyQjkGylk8DL1ihKIEhuFfgwYCV61qxx5TEk1v1xrHQl8G zu6f/2HU2ZD8JXdDdrdZT90OmseQ633ivCSmWvHHUVH2L9TZdpk7ZoUrQ8xSDoZ1 FpEq4VaFq5vRj7QENWhJacGpAk9ZKqiQkOzwi8APrOYTPZA7GPEPWBmRm/or4r4h RVg5Izxf8b5fBQnQrji8CKjm3BrPjLzm7Nvi70Z71nnjDrBHfzuKLrJkcg6fEjcB VHSTPc+GYZJxTpqCaqk9hT/ceYohYAv+vrTZs77l5rJPZe6lF4A2g4CxfSrdpyRu vSEfaZ9un4ONmJC5+PjDjE03NSz7/SgZ -----END CERTIFICATE-----Generated at Wed Dec 24 03:30:34 2025 by rpki-client