This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft File: yKkupf322jjqQIWq7lWnJIzTTzo.mft (raw, json) Hash identifier: bwcbC5GBHfxQ997tfjMTH9pa5cHg0MLXDEMQ5xCxwZU= Subject key identifier: 2F:C1:EB:98:08:1D:91:BE:DE:A8:8D:7F:72:EF:CE:4F:14:9E:7F:28 Authority key identifier: C8:A9:2E:A5:FD:F6:DA:38:EA:40:85:AA:EE:55:A7:24:8C:D3:4F:3A Certificate issuer: /CN=A91B3E17/serialNumber=C8A92EA5FDF6DA38EA4085AAEE55A7248CD34F3A Certificate serial: 0357 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft Manifest number: 0352 Signing time: Mon 22 Dec 2025 23:58:58 +0000 Manifest this update: Mon 22 Dec 2025 23:58:58 +0000 Manifest next update: Mon 29 Dec 2025 23:58:58 +0000 Files and hashes: 1: yKkupf322jjqQIWq7lWnJIzTTzo.crl (hash: emFZi0PqGeYBEI7WfQpdQLRoXfmrf8Gk/dvFcUkBJT8=) 2: 3166C07AE16C11ECB2629D1AC4F9AE02.roa (hash: 7Vqt5Z1iLa6sd2j1GJTbVkyMkAlTAIqUM4pmVdVOT70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.crl rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 855 (0x357) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3E17, serialNumber=C8A92EA5FDF6DA38EA4085AAEE55A7248CD34F3A Validity Not Before: Dec 22 23:58:58 2025 GMT Not After : Dec 29 23:58:58 2025 GMT Subject: CN=6949db42-f2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:d1:b3:93:96:45:00:21:f8:dd:6d:7a:fb: 1d:d8:99:cf:bd:ec:3b:fb:8e:73:1a:7d:2f:62:15: 17:26:0e:9b:5f:eb:4d:cc:ab:cd:db:d8:0b:d0:5c: a3:9e:ec:a5:68:e2:c7:64:df:39:cc:14:f7:52:44: 99:ca:35:65:6d:38:87:7e:70:b3:d7:a4:7c:53:25: e5:66:ad:50:58:70:83:62:25:c1:60:11:39:9b:2b: a6:d7:9c:49:c5:bc:c9:2f:5b:ff:43:11:e6:dc:7e: 69:5b:e4:4f:43:a3:67:ad:c7:78:f2:24:19:f8:90: da:60:af:a9:c5:51:bf:52:d0:d3:5d:4c:e9:9e:9d: b1:75:87:f7:a9:9d:90:08:48:3d:f7:d7:36:43:7b: 81:c4:41:52:f1:ae:a9:87:14:fb:d8:1c:ae:dc:47: be:02:37:46:10:95:a4:a1:73:f0:ab:b0:40:27:98: 88:81:7a:6c:32:3f:fb:eb:cc:75:68:51:1e:50:36: 04:fd:49:fe:c9:43:fe:47:73:67:a8:3f:4a:51:46: 5c:55:87:26:ec:e5:4b:b2:67:17:6f:04:36:47:21: f6:5d:4f:22:56:46:5e:75:72:6a:b6:ac:51:6e:46: 7b:dc:0e:33:da:e0:9f:f0:0d:93:fc:9f:e5:7a:b2: 3c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C1:EB:98:08:1D:91:BE:DE:A8:8D:7F:72:EF:CE:4F:14:9E:7F:28 X509v3 Authority Key Identifier: keyid:C8:A9:2E:A5:FD:F6:DA:38:EA:40:85:AA:EE:55:A7:24:8C:D3:4F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b4:1d:63:a3:8f:ce:8f:61:5c:c5:14:38:5e:63:4e:3d:18: bf:c0:4c:05:88:b8:d4:cf:09:99:bf:52:77:23:cc:fa:98:cf: 54:20:71:86:2b:c2:f3:c2:8a:8c:f5:ec:b1:04:48:2d:27:96: d8:9a:4e:2c:1c:6c:eb:0e:c2:99:f0:14:23:fb:ce:13:2a:7e: fc:e2:00:e1:29:57:6e:b1:35:cd:14:09:06:ee:5a:ae:02:6e: 14:24:1d:7f:4c:97:ed:d0:e3:72:3f:db:25:9e:26:b4:22:36: 85:36:98:3f:99:03:bb:cf:9f:71:d0:52:b2:9f:f8:74:d5:02: c4:43:cb:06:ab:27:ee:fd:57:b6:4a:88:b9:6f:7c:22:fd:b1: 2e:df:95:69:99:f6:09:2d:68:a1:79:d2:82:0f:bb:04:02:0f: d5:5c:b1:6c:e0:6c:49:99:c5:97:ea:9e:f8:46:9c:20:2d:73: 7f:d2:c5:ee:71:7d:53:dc:10:a3:ba:5b:b4:17:2b:ef:ae:a7: 9a:59:a8:bd:17:ae:41:c8:7d:87:9b:e0:27:76:d5:c1:f3:7f: 09:9e:57:84:b7:1d:74:7f:dc:0b:ca:9c:f6:e5:65:14:a1:bc: 7d:74:cb:99:14:b8:b0:0d:8d:5c:be:7b:20:ca:d9:01:5e:73: 59:cf:3c:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNFMTcxMTAvBgNVBAUTKEM4QTkyRUE1RkRGNkRBMzhFQTQwODVBQUVFNTVBNzI0 OENEMzRGM0EwHhcNMjUxMjIyMjM1ODU4WhcNMjUxMjI5MjM1ODU4WjAYMRYwFAYD VQQDDA02OTQ5ZGI0Mi1mMmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzjRs5OWRQAh+N1tevsd2JnPvew7+45zGn0vYhUXJg6bX+tNzKvN29gL0Fyj nuylaOLHZN85zBT3UkSZyjVlbTiHfnCz16R8UyXlZq1QWHCDYiXBYBE5myum15xJ xbzJL1v/QxHm3H5pW+RPQ6Nnrcd48iQZ+JDaYK+pxVG/UtDTXUzpnp2xdYf3qZ2Q CEg999c2Q3uBxEFS8a6phxT72Byu3Ee+AjdGEJWkoXPwq7BAJ5iIgXpsMj/768x1 aFEeUDYE/Un+yUP+R3NnqD9KUUZcVYcm7OVLsmcXbwQ2RyH2XU8iVkZedXJqtqxR bkZ73A4z2uCf8A2T/J/lerI8tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/B65gI HZG+3qiNf3Lvzk8Unn8oMB8GA1UdIwQYMBaAFMipLqX99to46kCFqu5VpySM0086 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0UxNy85MjBDNUVDQUUx NjgxMUVDQUFEOEY4MThDNEY5QUUwMi95S2t1cGYzMjJqanFRSVdxN2xXbkpJelRU em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lLa3VwZjMyMmpqcVFJV3E3bFduSkl6VFR6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0UxNy85MjBDNUVDQUUxNjgxMUVDQUFEOEY4MThDNEY5QUUwMi95S2t1cGYzMjJq anFRSVdxN2xXbkpJelRUem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBetB1jo4/Oj2FcxRQ4XmNOPRi/wEwFiLjUzwmZv1J3I8z6mM9UIHGG K8LzwoqM9eyxBEgtJ5bYmk4sHGzrDsKZ8BQj+84TKn784gDhKVdusTXNFAkG7lqu Am4UJB1/TJft0ONyP9slnia0IjaFNpg/mQO7z59x0FKyn/h01QLEQ8sGqyfu/Ve2 Soi5b3wi/bEu35VpmfYJLWihedKCD7sEAg/VXLFs4GxJmcWX6p74RpwgLXN/0sXu cX1T3BCjulu0FyvvrqeaWai9F65ByH2Hm+AndtXB838JnleEtx10f9wLypz25WUU obx9dMuZFLiwDY1cvnsgytkBXnNZzzwh -----END CERTIFICATE-----Generated at Tue Dec 23 11:04:04 2025 by rpki-client