This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft File: yKkupf322jjqQIWq7lWnJIzTTzo.mft (raw, json) Hash identifier: 5lAr/Qkz16BZEF8iPeqhouV8hb3XEmYsQZuzMVTG8hY= Subject key identifier: 11:74:20:7B:49:A2:BE:C6:FA:0F:94:24:82:9E:C1:CA:9A:A8:E6:9D Authority key identifier: C8:A9:2E:A5:FD:F6:DA:38:EA:40:85:AA:EE:55:A7:24:8C:D3:4F:3A Certificate issuer: /CN=A91B3E17/serialNumber=C8A92EA5FDF6DA38EA4085AAEE55A7248CD34F3A Certificate serial: 034F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft Manifest number: 034A Signing time: Sat 06 Dec 2025 23:35:05 +0000 Manifest this update: Sat 06 Dec 2025 23:35:04 +0000 Manifest next update: Sat 13 Dec 2025 23:35:04 +0000 Files and hashes: 1: yKkupf322jjqQIWq7lWnJIzTTzo.crl (hash: U1zJLNG2vOebJOb7EBdmDNGvYQADB13TOkURdU7zpVo=) 2: 3166C07AE16C11ECB2629D1AC4F9AE02.roa (hash: 7Vqt5Z1iLa6sd2j1GJTbVkyMkAlTAIqUM4pmVdVOT70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.crl rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 23:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 847 (0x34f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3E17, serialNumber=C8A92EA5FDF6DA38EA4085AAEE55A7248CD34F3A Validity Not Before: Dec 6 23:35:04 2025 GMT Not After : Dec 13 23:35:04 2025 GMT Subject: CN=6934bda8-7a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ea:0e:18:f1:51:df:53:09:3b:e0:e8:1e:60: 60:8c:8b:91:fe:fd:95:40:ba:b3:43:e7:c9:1a:80: e4:9b:78:a2:42:dd:a8:f2:6a:98:8d:26:71:b2:d7: e7:01:8f:f9:1e:a7:6b:91:8b:9b:f6:e9:fd:02:24: 2f:19:85:26:6d:70:73:c3:06:d0:c9:79:e7:f1:bf: aa:f5:bd:86:7f:9d:39:67:9f:97:fc:2e:87:b5:60: 6a:11:b7:a7:33:0c:81:8e:1f:bd:01:1e:ce:67:f0: 7c:40:86:49:69:44:eb:6a:e6:a2:e5:f8:a3:c4:50: 7d:04:cb:d8:1a:7a:39:24:2e:dd:62:ba:c2:02:52: f4:ee:d2:2a:24:2d:ae:95:b4:5b:c9:13:a1:91:cd: b9:20:d3:99:04:9a:54:b1:1e:14:2b:58:84:b0:26: dd:93:45:00:58:4d:2f:46:88:b7:85:31:68:5b:cb: 54:ff:14:f3:8f:67:35:f8:12:ba:25:35:f3:a2:d3: ae:2f:e3:75:4c:00:e2:e1:9d:12:0c:fa:19:6e:3c: 0f:f1:c3:85:c6:72:67:16:d1:18:16:0b:dc:d7:21: 41:98:73:59:96:6b:7e:94:40:63:45:bd:53:a0:b5: df:10:a6:07:71:6d:f2:28:32:f4:fb:e5:b3:52:73: fe:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:74:20:7B:49:A2:BE:C6:FA:0F:94:24:82:9E:C1:CA:9A:A8:E6:9D X509v3 Authority Key Identifier: keyid:C8:A9:2E:A5:FD:F6:DA:38:EA:40:85:AA:EE:55:A7:24:8C:D3:4F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:10:cc:1b:49:0f:a9:d3:85:9d:3f:56:45:15:6a:f2:f7:fa: da:d6:cc:0e:87:97:4e:f4:63:30:da:b4:48:c3:93:62:08:39: 4f:79:f4:4f:46:e8:1c:60:50:2e:73:0e:d5:e1:87:19:14:13: 33:f5:e0:ef:b3:62:7f:a8:8e:09:7d:77:6e:9a:60:5f:9b:b9: f1:4f:71:68:28:93:fc:43:5a:cd:00:38:5b:73:e8:a8:ba:e9: a6:2d:20:13:58:ff:d2:53:12:60:79:25:c8:d9:d5:c3:d6:c2: dd:02:b6:7f:3c:60:e1:f9:6b:c8:c6:1f:11:07:03:15:17:cc: 6b:2f:0a:c6:d8:0a:ee:1d:ca:37:84:45:8a:e5:a8:7f:99:35: ac:28:56:cb:91:43:2f:be:79:62:fd:4c:49:c6:5f:c1:dd:76: e1:c8:ae:10:98:8e:8b:ed:cd:f6:22:71:44:71:22:70:8f:01: 9a:79:43:00:67:1f:cb:e8:d2:b0:e6:ba:7a:96:a3:b7:87:02: 75:17:c6:20:3c:fb:74:f4:69:bb:48:8c:e8:02:c2:cb:36:67: b8:dd:c3:e1:e4:96:24:1c:84:2e:04:97:6e:cd:8c:c7:a8:24: 28:bd:dd:49:6a:fd:08:d6:e5:df:9d:34:67:50:3c:d7:f8:70: bb:9e:bb:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNFMTcxMTAvBgNVBAUTKEM4QTkyRUE1RkRGNkRBMzhFQTQwODVBQUVFNTVBNzI0 OENEMzRGM0EwHhcNMjUxMjA2MjMzNTA0WhcNMjUxMjEzMjMzNTA0WjAYMRYwFAYD VQQDEw02OTM0YmRhOC03YTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+oOGPFR31MJO+DoHmBgjIuR/v2VQLqzQ+fJGoDkm3iiQt2o8mqYjSZxstfn AY/5HqdrkYub9un9AiQvGYUmbXBzwwbQyXnn8b+q9b2Gf505Z5+X/C6HtWBqEben MwyBjh+9AR7OZ/B8QIZJaUTrauai5fijxFB9BMvYGno5JC7dYrrCAlL07tIqJC2u lbRbyROhkc25INOZBJpUsR4UK1iEsCbdk0UAWE0vRoi3hTFoW8tU/xTzj2c1+BK6 JTXzotOuL+N1TADi4Z0SDPoZbjwP8cOFxnJnFtEYFgvc1yFBmHNZlmt+lEBjRb1T oLXfEKYHcW3yKDL0++WzUnP+RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBF0IHtJ or7G+g+UJIKewcqaqOadMB8GA1UdIwQYMBaAFMipLqX99to46kCFqu5VpySM0086 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0UxNy85MjBDNUVDQUUx NjgxMUVDQUFEOEY4MThDNEY5QUUwMi95S2t1cGYzMjJqanFRSVdxN2xXbkpJelRU em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lLa3VwZjMyMmpqcVFJV3E3bFduSkl6VFR6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0UxNy85MjBDNUVDQUUxNjgxMUVDQUFEOEY4MThDNEY5QUUwMi95S2t1cGYzMjJq anFRSVdxN2xXbkpJelRUem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABEMwbSQ+p04WdP1ZFFWry9/ra1swOh5dO9GMw2rRIw5NiCDlPefRP RugcYFAucw7V4YcZFBMz9eDvs2J/qI4JfXdummBfm7nxT3FoKJP8Q1rNADhbc+io uummLSATWP/SUxJgeSXI2dXD1sLdArZ/PGDh+WvIxh8RBwMVF8xrLwrG2AruHco3 hEWK5ah/mTWsKFbLkUMvvnli/UxJxl/B3XbhyK4QmI6L7c32InFEcSJwjwGaeUMA Zx/L6NKw5rp6lqO3hwJ1F8YgPPt09Gm7SIzoAsLLNme43cPh5JYkHIQuBJduzYzH qCQovd1Jav0I1uXfnTRnUDzX+HC7nrvz -----END CERTIFICATE-----Generated at Sun Dec 7 03:57:21 2025 by rpki-client