This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft File: y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft (raw, json) Hash identifier: HVjQGbe/dT5Vu0eJ7AnuP11GCuReTEm8lA18+Ss0QjI= Subject key identifier: BD:D4:E5:D9:9E:3E:57:E7:F4:1E:D3:E9:F2:FC:06:A2:44:C7:45:3C Authority key identifier: CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 Certificate issuer: /CN=A91C3A74/serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Certificate serial: 2672 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft Manifest number: 265B Signing time: Sat 06 Dec 2025 15:28:01 +0000 Manifest this update: Sat 06 Dec 2025 15:28:00 +0000 Manifest next update: Sat 13 Dec 2025 15:28:00 +0000 Files and hashes: 1: y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl (hash: LZZbIF5dRC3FeZzQyfrbJPbmMvIf7Dqrl1VixsASzhM=) 2: 767655BE561A11E79F98831DC4F9AE02.roa (hash: bf73yAvc50YmZ9DwhowT9EQ5/Cgl8VLGPJbD30MABw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9842 (0x2672) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3A74, serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Validity Not Before: Dec 6 15:28:00 2025 GMT Not After : Dec 13 15:28:00 2025 GMT Subject: CN=69344b81-6303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4a:69:a3:86:c9:96:45:38:31:13:11:38:d7: 6a:18:02:ea:7a:5c:64:83:02:97:54:12:25:a1:6c: dd:4a:61:12:45:35:12:7f:d2:1b:18:b4:b9:e0:9e: 92:f2:4c:14:11:da:e2:b6:4f:02:1c:af:f0:31:31: 1b:cc:a5:60:14:65:4c:36:96:c9:7f:1a:7b:b1:03: 56:f7:74:f8:20:ec:22:de:73:a7:2f:0f:0e:6b:08: ca:d2:f7:43:c5:b2:dc:f1:5c:2c:9d:25:d3:b9:0b: 37:34:01:d1:cf:b3:da:9f:01:e4:5d:35:26:01:83: 2c:c7:5f:35:fa:2f:2f:8c:87:be:fd:ee:f9:ba:9d: 01:b7:50:ec:61:16:d0:eb:39:e9:d8:17:6b:c2:7d: 7c:1e:28:e4:04:bc:e8:22:5b:fd:37:4b:44:6c:e5: 0f:a7:b9:37:0b:da:06:ed:60:73:29:20:26:cb:b9: 46:8c:11:5a:71:11:dd:19:80:62:5f:00:9b:c0:d0: 88:b4:7d:81:23:75:59:c9:a1:bf:a1:b7:60:22:9a: 93:26:b4:02:a2:27:5f:c2:6c:eb:25:c0:4e:97:40: ed:e0:07:04:a0:cc:5c:ca:9d:77:69:b5:ed:f7:f4: c1:ec:e5:a0:22:66:0d:27:2b:13:ef:c3:33:c2:00: 90:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D4:E5:D9:9E:3E:57:E7:F4:1E:D3:E9:F2:FC:06:A2:44:C7:45:3C X509v3 Authority Key Identifier: keyid:CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:ac:2f:9e:29:e5:41:70:d7:f3:9d:2a:55:ee:28:a1:72:60: 13:b6:5b:3e:6d:e4:ac:b0:2e:e1:04:9f:19:d0:d3:9a:09:c5: 23:86:f5:00:be:71:6d:43:05:1d:e1:98:50:19:5f:ad:77:d8: 4f:e5:9f:8a:49:cd:a0:0b:b6:c4:a6:85:65:60:2f:dd:08:8a: b9:88:0b:5f:2f:91:ae:3a:98:18:e1:80:40:68:60:95:10:bd: 0a:a0:aa:b5:66:2e:b4:d0:30:51:ca:d6:4e:ad:c3:53:94:c7: 53:e7:fe:16:ee:80:af:02:ac:71:ec:e3:7e:d5:b5:07:e0:70: 91:2a:1d:d7:19:70:c4:54:0c:31:e1:f6:3c:3c:57:09:5d:cf: 43:34:fd:f8:f4:da:b0:ed:e5:b4:b6:be:40:e8:e5:86:72:09: fe:38:e3:6d:9d:f5:4d:f3:52:b8:07:84:b9:02:1e:1e:36:9e: f6:67:14:4b:f9:31:40:e5:4f:fc:8d:5b:5c:85:3b:e5:d0:63: 24:a1:91:9b:07:a3:e6:a7:74:a5:83:6b:8b:7d:a3:63:9b:ae: 0b:08:cc:7b:3b:09:1e:f2:34:e3:8a:22:d6:10:ae:f9:46:ca: a1:54:4a:5d:5e:40:84:3f:4e:9a:67:31:3d:09:a2:b8:6d:97: a7:7f:bb:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBNzQxMTAvBgNVBAUTKENCN0I4REI0MjQ4MjRDNzFBODcwM0JCRkI5NDJBMzE1 MjkxNTQzNjMwHhcNMjUxMjA2MTUyODAwWhcNMjUxMjEzMTUyODAwWjAYMRYwFAYD VQQDEw02OTM0NGI4MS02MzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0ppo4bJlkU4MRMRONdqGALqelxkgwKXVBIloWzdSmESRTUSf9IbGLS54J6S 8kwUEdritk8CHK/wMTEbzKVgFGVMNpbJfxp7sQNW93T4IOwi3nOnLw8OawjK0vdD xbLc8VwsnSXTuQs3NAHRz7PanwHkXTUmAYMsx181+i8vjIe+/e75up0Bt1DsYRbQ 6znp2Bdrwn18HijkBLzoIlv9N0tEbOUPp7k3C9oG7WBzKSAmy7lGjBFacRHdGYBi XwCbwNCItH2BI3VZyaG/obdgIpqTJrQCoidfwmzrJcBOl0Dt4AcEoMxcyp13abXt 9/TB7OWgImYNJysT78MzwgCQnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3U5dme Plfn9B7T6fL8BqJEx0U8MB8GA1UdIwQYMBaAFMt7jbQkgkxxqHA7v7lCoxUpFUNj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0E3NC83Q0I0QTA1NkZE M0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RIR29jRHVfdVVLakZTa1ZR Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzdU50Q1NDVEhHb2NEdV91VUtqRlNrVlEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0E3NC83Q0I0QTA1NkZEM0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RI R29jRHVfdVVLakZTa1ZRMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzrC+eKeVBcNfznSpV7iihcmATtls+beSssC7hBJ8Z0NOaCcUjhvUA vnFtQwUd4ZhQGV+td9hP5Z+KSc2gC7bEpoVlYC/dCIq5iAtfL5GuOpgY4YBAaGCV EL0KoKq1Zi600DBRytZOrcNTlMdT5/4W7oCvAqxx7ON+1bUH4HCRKh3XGXDEVAwx 4fY8PFcJXc9DNP349Nqw7eW0tr5A6OWGcgn+OONtnfVN81K4B4S5Ah4eNp72ZxRL +TFA5U/8jVtchTvl0GMkoZGbB6Pmp3Slg2uLfaNjm64LCMx7Owke8jTjiiLWEK75 RsqhVEpdXkCEP06aZzE9CaK4bZenf7vD -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:54 2025 by rpki-client