This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft File: 3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft (raw, json) Hash identifier: inFPDAHbXJ68J1FizoVMLIY3YRzfMgWTlhCzFZlcMVw= Subject key identifier: C5:4D:B4:AA:D4:C4:9E:AB:11:B7:AE:47:0B:0C:BA:D9:B2:F6:53:D7 Authority key identifier: DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB Certificate issuer: /CN=A91116D1/serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB Certificate serial: 0C96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft Manifest number: 0C8F Signing time: Sat 06 Dec 2025 17:46:42 +0000 Manifest this update: Sat 06 Dec 2025 17:46:41 +0000 Manifest next update: Sat 13 Dec 2025 17:46:41 +0000 Files and hashes: 1: 3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl (hash: TYw5G7lWcgeX+k1S5Zz8jC13UJdCJVsHaLeucwnYGAI=) 2: AD532D26090211EAAD8D5786C4F9AE02.roa (hash: xiqUMJWPyshWh78LUHnXsaBooxohe6ygJEfyrIMmpkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:46:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3222 (0xc96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91116D1, serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB Validity Not Before: Dec 6 17:46:41 2025 GMT Not After : Dec 13 17:46:41 2025 GMT Subject: CN=69346c01-8314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ac:59:6e:b2:fe:db:34:52:64:a0:3d:a4:98: 3e:79:ed:34:a5:24:81:b8:c3:41:1e:b9:ff:2c:ef: 9c:a6:43:28:7f:a8:54:bd:5a:76:2a:1a:be:f3:7d: 3c:7d:5f:4d:ae:5c:1a:10:7e:43:54:62:04:9e:00: 02:9d:07:66:cb:ea:c3:8e:ef:96:07:32:08:9a:1d: af:31:f8:e9:b7:8e:17:93:52:a3:58:c3:f9:a3:52: c4:d7:28:84:9e:cf:1e:be:09:e4:07:03:e5:d7:80: bc:90:30:7f:3e:cb:d0:bf:07:c7:10:18:3b:77:76: 2c:8d:85:89:05:ad:d8:50:de:63:bc:95:03:a0:0b: ea:09:8a:99:f2:b2:7f:a1:7f:fb:bb:40:df:d9:db: 73:54:e6:c0:03:92:1f:32:f7:5d:ca:0a:10:fc:4b: f5:fe:7a:90:c6:de:7d:b9:f6:30:a9:a6:72:66:4a: 8d:3b:3f:83:00:dd:0e:b2:a3:76:3f:56:df:f4:a7: 7b:ee:0f:43:52:13:ce:4e:cb:14:a6:67:b6:72:2b: ff:2c:d9:e4:4c:7c:d8:4e:13:5b:4a:7b:c0:4e:81: 0e:93:2d:b6:2e:e9:52:4c:b3:b0:4a:19:ca:01:95: ab:e6:03:09:e0:2d:61:a0:61:53:0f:b5:5c:3f:ca: 7f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4D:B4:AA:D4:C4:9E:AB:11:B7:AE:47:0B:0C:BA:D9:B2:F6:53:D7 X509v3 Authority Key Identifier: keyid:DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:35:2d:97:5c:ee:89:66:d9:59:40:40:02:76:9c:15:57:b3: 5b:83:7e:49:fa:70:92:42:c7:6f:0f:c1:b0:61:6b:56:f3:b7: 8c:f1:2c:6c:b8:f4:20:73:74:5c:3b:fb:a4:0b:a1:01:9e:ef: 2b:87:fa:3d:97:a2:fa:30:96:a2:a2:05:16:5a:b6:5a:66:cd: 6d:f8:8b:e9:f1:3d:da:eb:c1:28:62:d4:69:09:10:ef:56:69: 48:0a:8a:6d:86:62:2f:ed:e4:ad:05:e0:a4:94:8b:50:d7:ed: 92:9c:50:b4:4a:20:a4:6b:00:09:5e:3e:24:e1:a2:f6:1e:33: cf:be:2d:20:2b:d5:a4:cb:3b:40:51:cb:d5:57:95:54:42:f4: 9f:e8:42:35:e3:5e:70:9f:70:0b:bb:5b:22:cb:bc:e0:98:d4: 87:b8:4e:ea:0d:de:26:e6:4e:ea:d0:8b:71:83:6d:96:bb:9d: 90:7b:b5:40:1f:bf:43:8e:18:33:03:2c:39:62:fd:6c:1a:85: 49:c3:f0:ce:10:12:41:b3:28:31:9d:47:0b:9c:eb:17:8c:d1: a7:9d:48:ec:6a:d6:30:33:a9:73:62:37:e1:cf:c0:20:33:e9: c0:b2:6b:7a:cf:68:67:bb:46:50:71:ec:59:8e:f3:ba:0e:54: 8e:a5:f4:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE2RDExMTAvBgNVBAUTKERERUJBNDZDQzdBODkyRDJBN0ZGNkFCNjQzNzdDN0VD RkZEOEFEQkIwHhcNMjUxMjA2MTc0NjQxWhcNMjUxMjEzMTc0NjQxWjAYMRYwFAYD VQQDEw02OTM0NmMwMS04MzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6xZbrL+2zRSZKA9pJg+ee00pSSBuMNBHrn/LO+cpkMof6hUvVp2Khq+8308 fV9NrlwaEH5DVGIEngACnQdmy+rDju+WBzIImh2vMfjpt44Xk1KjWMP5o1LE1yiE ns8evgnkBwPl14C8kDB/PsvQvwfHEBg7d3YsjYWJBa3YUN5jvJUDoAvqCYqZ8rJ/ oX/7u0Df2dtzVObAA5IfMvddygoQ/Ev1/nqQxt59ufYwqaZyZkqNOz+DAN0OsqN2 P1bf9Kd77g9DUhPOTssUpme2civ/LNnkTHzYThNbSnvAToEOky22LulSTLOwShnK AZWr5gMJ4C1hoGFTD7VcP8p/SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVNtKrU xJ6rEbeuRwsMutmy9lPXMB8GA1UdIwQYMBaAFN3rpGzHqJLSp/9qtkN3x+z/2K27 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTZEMS8xNUFFNEIyODA5 MDExMUVBQkQxMDRDODNDNEY5QUUwMi8zZXVrYk1lb2t0S25fMnEyUTNmSDdQX1ly YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNldWtiTWVva3RLbl8ycTJRM2ZIN1BfWXJicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTZEMS8xNUFFNEIyODA5MDExMUVBQkQxMDRDODNDNEY5QUUwMi8zZXVrYk1lb2t0 S25fMnEyUTNmSDdQX1lyYnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLNS2XXO6JZtlZQEACdpwVV7Nbg35J+nCSQsdvD8GwYWtW87eM8Sxs uPQgc3RcO/ukC6EBnu8rh/o9l6L6MJaiogUWWrZaZs1t+Ivp8T3a68EoYtRpCRDv VmlICopthmIv7eStBeCklItQ1+2SnFC0SiCkawAJXj4k4aL2HjPPvi0gK9WkyztA UcvVV5VUQvSf6EI1415wn3ALu1siy7zgmNSHuE7qDd4m5k7q0Itxg22Wu52Qe7VA H79DjhgzAyw5Yv1sGoVJw/DOEBJBsygxnUcLnOsXjNGnnUjsatYwM6lzYjfhz8Ag M+nAsmt6z2hnu0ZQcexZjvO6DlSOpfSg -----END CERTIFICATE-----Generated at Sun Dec 7 01:50:40 2025 by rpki-client