This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft File: 2y3U_v83CRJX9gGdUKI5MOxG4fs.mft (raw, json) Hash identifier: w5dcAGO9G7BjozJQj++UQbBOl1bmJIfT+5SBpgm4WhQ= Subject key identifier: 4C:31:27:64:24:F7:02:02:BF:7A:E4:84:82:54:AD:39:5A:DA:1F:AE Authority key identifier: DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB Certificate issuer: /CN=A917F116/serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft Manifest number: 56 Signing time: Fri 05 Dec 2025 05:17:14 +0000 Manifest this update: Fri 05 Dec 2025 05:17:13 +0000 Manifest next update: Fri 12 Dec 2025 05:17:13 +0000 Files and hashes: 1: 2y3U_v83CRJX9gGdUKI5MOxG4fs.crl (hash: i0DyrVesxCtFDlp1HyISgszNzc07w/pd2wQDIFisGgo=) 2: 3E9B5E9C791511F09DD1364EC4F9AE02.roa (hash: Ut0wAe6zBRN5XqjP4QwqBdmfAff9ffXm1MBpJVMD0gQ=) 3: 029780A8791D11F08A28C96CC4F9AE02.roa (hash: cIhq6sJcStnFPRCzrluGkX+gdeeTmy7R7VUY7+k19nE=) 4: 1210E96E791511F08360054EC4F9AE02.roa (hash: LZ/19eRDovcqNkq1WRCoRPmhUrlnhJLR/l5REA7He68=) 5: 5747D682B8C611F085BFD10DC4F9AE02.roa (hash: Vyslx5mdWdDu9jOFCamKT0Oyx0LSy+sxmYhw6Lcpxhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F116, serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB Validity Not Before: Dec 5 05:17:13 2025 GMT Not After : Dec 12 05:17:13 2025 GMT Subject: CN=69326ad9-e3df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:54:73:b6:c1:b7:ac:a6:89:2d:5e:80:d8:3b: b2:5d:1d:a6:5e:81:be:59:a8:5b:44:84:1d:97:1f: 60:00:ac:ac:dc:4e:99:18:4e:10:1d:97:d3:38:f2: 0e:bd:c1:c7:8f:a6:37:49:27:4c:55:dd:23:78:db: 72:7f:ab:0a:7a:9a:f3:c4:2a:f4:bb:3d:9d:49:c5: a7:4b:08:65:0c:04:a0:a0:95:1d:50:18:fb:a9:88: 84:5b:28:d0:d1:70:a2:b6:ac:a2:3e:c8:69:ad:4b: 20:cf:36:59:37:32:a1:65:a3:15:f2:c1:4e:bd:db: ef:20:ed:a5:29:f6:92:02:4f:eb:53:e9:74:3f:16: 59:c4:25:d1:cd:23:f0:5b:f6:fd:fe:d1:6b:67:1c: 5e:5a:3e:eb:9c:2a:ab:e5:3c:67:85:79:0f:31:c4: 41:d7:3c:b2:f2:b7:0d:61:a9:fc:7c:b8:08:8e:0e: d7:2b:a7:97:31:12:ac:db:15:19:9c:27:2c:d6:48: e1:29:de:99:3c:b7:b2:3a:b6:2d:07:b8:d0:aa:24: d7:21:2d:32:5e:a5:20:49:52:b1:16:e1:c7:6b:35: e0:3e:87:4d:53:ec:cf:3f:76:79:5e:f1:a8:bf:ec: cb:0c:0f:c5:a3:d6:a6:cf:89:92:c1:fb:bb:51:15: 55:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:31:27:64:24:F7:02:02:BF:7A:E4:84:82:54:AD:39:5A:DA:1F:AE X509v3 Authority Key Identifier: keyid:DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:cf:f6:70:1d:f6:e6:8e:37:55:28:0d:6e:bf:1d:9a:5f:37: d4:1c:af:95:c0:dc:6a:f5:af:73:2d:18:85:59:6a:29:5e:32: 47:76:52:3f:ff:5e:48:c6:3e:0f:34:c5:1b:78:b1:89:98:d7: 5b:53:7e:d0:58:aa:4a:41:cf:35:90:67:13:34:f9:7a:5f:09: ea:74:a6:38:14:db:11:a5:d8:4f:82:90:5e:86:15:87:e0:f2: f3:7e:4b:fd:3f:72:33:df:fe:3e:c1:96:f2:b0:e1:62:01:25: 2e:52:70:70:1f:8a:5e:ae:ef:d1:cf:52:30:1a:7c:51:84:56: 94:a6:26:97:5b:94:98:53:d4:d9:29:28:12:15:cd:33:8b:8c: 44:c5:96:a9:e5:97:56:4d:fb:66:8e:3e:4c:40:ac:72:33:c0: bc:86:c7:d2:db:db:ff:83:f6:4d:80:41:d6:44:7d:71:f5:4e: 74:1e:99:47:cc:9f:b3:f1:b0:52:6e:a5:8f:34:df:c3:8d:91: 22:25:06:88:2b:a1:69:36:86:a9:7e:c6:cc:de:95:9f:53:15: 58:36:2c:05:1f:98:02:2a:09:cf:dd:c0:dc:ca:e5:87:6a:bd: bb:af:b3:7c:e3:4f:af:f2:f3:95:cc:a4:7a:79:a2:db:9a:7f: 18:2c:04:f3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RjExNjExMC8GA1UEBRMoREIyREQ0RkVGRjM3MDkxMjU3RjYwMTlENTBBMjM5MzBF QzQ2RTFGQjAeFw0yNTEyMDUwNTE3MTNaFw0yNTEyMTIwNTE3MTNaMBgxFjAUBgNV BAMTDTY5MzI2YWQ5LWUzZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsVHO2wbespoktXoDYO7JdHaZegb5ZqFtEhB2XH2AArKzcTpkYThAdl9M48g69 wcePpjdJJ0xV3SN423J/qwp6mvPEKvS7PZ1JxadLCGUMBKCglR1QGPupiIRbKNDR cKK2rKI+yGmtSyDPNlk3MqFloxXywU692+8g7aUp9pICT+tT6XQ/FlnEJdHNI/Bb 9v3+0WtnHF5aPuucKqvlPGeFeQ8xxEHXPLLytw1hqfx8uAiODtcrp5cxEqzbFRmc JyzWSOEp3pk8t7I6ti0HuNCqJNchLTJepSBJUrEW4cdrNeA+h01T7M8/dnle8ai/ 7MsMD8Wj1qbPiZLB+7tRFVVPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTDEnZCT3 AgK/euSEglStOVraH64wHwYDVR0jBBgwFoAU2y3U/v83CRJX9gGdUKI5MOxG4fsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGMTE2LzhCQ0ZGRjA2NkVE RTExRjA5MUUwMkEyMUM0RjlBRTAyLzJ5M1VfdjgzQ1JKWDlnR2RVS0k1TU94RzRm cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnkzVV92ODNDUkpYOWdHZFVLSTVNT3hHNGZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG MTE2LzhCQ0ZGRjA2NkVERTExRjA5MUUwMkEyMUM0RjlBRTAyLzJ5M1VfdjgzQ1JK WDlnR2RVS0k1TU94RzRmcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACDP9nAd9uaON1UoDW6/HZpfN9Qcr5XA3Gr1r3MtGIVZaileMkd2Uj// XkjGPg80xRt4sYmY11tTftBYqkpBzzWQZxM0+XpfCep0pjgU2xGl2E+CkF6GFYfg 8vN+S/0/cjPf/j7BlvKw4WIBJS5ScHAfil6u79HPUjAafFGEVpSmJpdblJhT1Nkp KBIVzTOLjETFlqnll1ZN+2aOPkxArHIzwLyGx9Lb2/+D9k2AQdZEfXH1TnQemUfM n7PxsFJupY8038ONkSIlBogroWk2hql+xszelZ9TFVg2LAUfmAIqCc/dwNzK5Ydq vbuvs3zjT6/y85XMpHp5otuafxgsBPM= -----END CERTIFICATE-----Generated at Sat Dec 6 21:49:24 2025 by rpki-client