This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft File: yuPbit7noWq2ylN_I0ewIFvfT3Y.mft (raw, json) Hash identifier: tHEnlBnlNn3JlITaP0qp8kv+ODOPbJp8p5vNb6Q4V+Y= Subject key identifier: C7:84:14:C5:18:B3:5A:CD:BD:A0:6C:72:95:30:64:60:F3:48:CF:13 Authority key identifier: CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76 Certificate issuer: /CN=A91FA6FF/serialNumber=CAE3DB8ADEE7A16AB6CA537F2347B0205BDF4F76 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft Manifest number: 011E Signing time: Fri 19 Dec 2025 03:55:43 +0000 Manifest this update: Fri 19 Dec 2025 03:55:42 +0000 Manifest next update: Fri 26 Dec 2025 03:55:42 +0000 Files and hashes: 1: yuPbit7noWq2ylN_I0ewIFvfT3Y.crl (hash: t9uT9OM8fJOYRYX1pi5RsIXpJL+6iAWLHnOyQYsRpI8=) 2: 66476E182EAC11EFAAAF8E67C4F9AE02.roa (hash: c+tQd6LFV/BZVoGpun0y1RLdLqyLfqdX/XcIv+ynZW4=) 3: 12032AE02EAC11EFB73C0767C4F9AE02.roa (hash: NplfmjfBvEPVo22TXfl7ysU80/2MVRwwQvZxXy7GRR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA6FF, serialNumber=CAE3DB8ADEE7A16AB6CA537F2347B0205BDF4F76 Validity Not Before: Dec 19 03:55:42 2025 GMT Not After : Dec 26 03:55:42 2025 GMT Subject: CN=6944ccbe-0726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3a:33:d0:42:a3:19:a7:f9:16:35:0a:49:ee: 8d:75:02:ef:b8:61:fb:91:d6:5b:77:6f:85:09:57: f5:2a:a7:25:0c:bd:44:41:7e:ac:7e:ee:f3:9a:97: 75:a0:da:07:6a:d8:94:37:ea:ee:d5:3e:54:15:fc: d0:59:70:ee:0a:d7:92:04:9a:bb:d5:bb:09:e0:cd: 83:f9:53:44:64:81:5e:6c:b0:7e:cd:e0:2d:fb:93: d8:dc:b0:18:b0:d1:f8:7d:07:a9:cc:1e:1e:87:f7: c0:3b:3d:06:cd:c0:64:fd:95:a9:e6:24:e7:89:9f: 06:20:30:37:29:18:90:03:e6:17:82:fa:3e:c9:bd: 28:2e:83:b3:95:c3:d9:4c:d4:6f:14:d2:a4:ad:2b: 83:09:83:24:50:b3:69:8b:f1:54:ad:31:93:a1:0a: a2:ec:a3:8d:13:62:2d:09:93:74:59:33:35:d2:08: f3:82:d8:39:c5:ad:69:e6:22:d9:e4:2f:1e:5e:ed: 3d:02:5a:0f:49:ac:2f:bd:bb:68:5e:7c:67:22:36: 0c:1f:72:2e:c0:64:b3:9a:44:83:a8:d5:57:ad:1d: fa:c7:db:28:98:01:7c:03:f1:d1:69:6e:2d:fb:07: f2:1c:f7:50:04:60:5c:7f:02:ce:e5:7a:d3:ab:7e: 2d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:84:14:C5:18:B3:5A:CD:BD:A0:6C:72:95:30:64:60:F3:48:CF:13 X509v3 Authority Key Identifier: keyid:CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:f0:7a:45:0b:cc:bd:10:49:ba:95:05:11:de:1e:25:d8:2e: 0e:84:d4:ac:4b:2b:7f:80:96:fb:62:55:d0:dc:a1:33:08:71: d0:45:fa:ad:d1:2b:27:5e:72:be:9e:5a:e0:f3:18:e0:10:41: 19:25:ae:d3:86:d9:54:2f:7d:0d:5f:eb:09:99:07:31:5d:33: 64:66:54:42:75:77:4b:ff:0a:b0:f5:01:70:86:39:7c:fe:e0: a2:40:f9:a2:de:3b:ff:3d:99:55:c0:d1:5b:a0:2f:f6:bf:75: 32:a8:dc:75:d7:63:88:72:12:85:38:40:b3:29:18:ce:a3:83: 7b:4e:5e:82:b5:c9:38:90:c8:0e:49:c7:da:6c:0f:c2:03:2e: 4e:11:0a:6a:60:d7:99:a0:6b:61:c6:18:f3:44:1a:8c:62:dc: 30:84:b3:45:41:39:2b:45:02:eb:58:b9:3e:ad:b5:bc:b3:21: ff:51:78:46:83:c9:21:89:2a:82:5e:75:0c:7d:06:73:93:37: 39:ab:c3:90:dc:46:47:48:85:09:79:9c:0e:d8:c5:76:b3:81: a5:6c:65:14:7a:fc:30:a5:39:b5:d1:bd:cd:39:bc:38:a8:26: bb:7e:8d:35:ee:c8:d7:e7:bb:db:73:83:8c:67:99:82:f9:ee: fa:51:5c:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2RkYxMTAvBgNVBAUTKENBRTNEQjhBREVFN0ExNkFCNkNBNTM3RjIzNDdCMDIw NUJERjRGNzYwHhcNMjUxMjE5MDM1NTQyWhcNMjUxMjI2MDM1NTQyWjAYMRYwFAYD VQQDDA02OTQ0Y2NiZS0wNzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzoz0EKjGaf5FjUKSe6NdQLvuGH7kdZbd2+FCVf1KqclDL1EQX6sfu7zmpd1 oNoHatiUN+ru1T5UFfzQWXDuCteSBJq71bsJ4M2D+VNEZIFebLB+zeAt+5PY3LAY sNH4fQepzB4eh/fAOz0GzcBk/ZWp5iTniZ8GIDA3KRiQA+YXgvo+yb0oLoOzlcPZ TNRvFNKkrSuDCYMkULNpi/FUrTGToQqi7KONE2ItCZN0WTM10gjzgtg5xa1p5iLZ 5C8eXu09AloPSawvvbtoXnxnIjYMH3IuwGSzmkSDqNVXrR36x9somAF8A/HRaW4t +wfyHPdQBGBcfwLO5XrTq34tQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMeEFMUY s1rNvaBscpUwZGDzSM8TMB8GA1UdIwQYMBaAFMrj24re56FqtspTfyNHsCBb3092 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTZGRi9EMjgxRTczMDJF MjkxMUVGQkFFRDZBMUFDNEY5QUUwMi95dVBiaXQ3bm9XcTJ5bE5fSTBld0lGdmZU M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l1UGJpdDdub1dxMnlsTl9JMGV3SUZ2ZlQzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTZGRi9EMjgxRTczMDJFMjkxMUVGQkFFRDZBMUFDNEY5QUUwMi95dVBiaXQ3bm9X cTJ5bE5fSTBld0lGdmZUM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU8HpFC8y9EEm6lQUR3h4l2C4OhNSsSyt/gJb7YlXQ3KEzCHHQRfqt 0SsnXnK+nlrg8xjgEEEZJa7ThtlUL30NX+sJmQcxXTNkZlRCdXdL/wqw9QFwhjl8 /uCiQPmi3jv/PZlVwNFboC/2v3UyqNx112OIchKFOECzKRjOo4N7Tl6Ctck4kMgO ScfabA/CAy5OEQpqYNeZoGthxhjzRBqMYtwwhLNFQTkrRQLrWLk+rbW8syH/UXhG g8khiSqCXnUMfQZzkzc5q8OQ3EZHSIUJeZwO2MV2s4GlbGUUevwwpTm10b3NObw4 qCa7fo017sjX57vbc4OMZ5mC+e76UVyw -----END CERTIFICATE-----Generated at Sat Dec 20 07:41:27 2025 by rpki-client