This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft File: YGWA927TklN9X8ollpTPkmFBfEE.mft (raw, json) Hash identifier: pJkaeeRCHSwphD0ZxWvC4lgogSJ3t1RyFchOqq8+zQk= Subject key identifier: 56:19:6C:3E:D5:08:5B:8D:3E:B3:8B:35:93:B8:F9:F8:DF:AF:56:8E Authority key identifier: 60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41 Certificate issuer: /CN=A911F1E6/serialNumber=606580F76ED392537D5FCA259694CF9261417C41 Certificate serial: 062C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft Manifest number: 061D Signing time: Mon 22 Dec 2025 22:02:01 +0000 Manifest this update: Mon 22 Dec 2025 22:02:01 +0000 Manifest next update: Mon 29 Dec 2025 22:02:01 +0000 Files and hashes: 1: YGWA927TklN9X8ollpTPkmFBfEE.crl (hash: hjPcSsHyfpBlZdvnYsP+qDpLOtPc4n+XUVj2qDCW/w8=) 2: 4C6FB118CDEC11EB85313B22C4F9AE02.roa (hash: c8i5qCn+gNkfv/5fNHvXAX8xBeJK6Bb9xy8HlWH9b64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1580 (0x62c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F1E6, serialNumber=606580F76ED392537D5FCA259694CF9261417C41 Validity Not Before: Dec 22 22:02:01 2025 GMT Not After : Dec 29 22:02:01 2025 GMT Subject: CN=6949bfd9-573a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dc:7d:65:92:30:55:7a:73:33:06:3f:2d:ef: a6:fc:62:a4:b4:9e:a1:cd:51:17:ed:2a:bf:6c:86: 3c:41:58:3f:12:33:61:ec:19:77:c0:8c:7f:0c:4f: 02:bf:04:ca:59:61:ad:f6:f5:24:15:38:8d:78:0b: 07:aa:34:31:1c:9d:47:2d:27:6c:a4:dc:c5:07:e7: 91:3a:7d:02:53:e6:3f:49:2e:3d:92:a2:17:24:03: b0:6d:bf:f4:da:36:83:17:43:16:4f:6b:2d:b3:66: a2:e9:65:7b:89:04:36:e4:74:44:20:eb:74:e6:2c: a5:93:51:d1:94:2a:e7:2a:34:4c:d6:1f:9d:03:25: 7d:2a:5f:85:79:85:f8:d7:15:1f:22:7b:7c:e4:da: b1:7b:89:b3:b0:3c:6a:78:eb:d0:99:0c:4b:a0:ef: ef:72:65:91:ed:b5:f9:99:29:99:47:b3:1c:d1:fb: c9:08:c7:87:8a:e3:c7:c6:78:e8:9c:92:85:27:98: 4a:d5:d8:ac:1d:6b:e4:cd:a4:fb:d9:c5:29:00:ce: 07:fe:d3:cb:f0:93:7d:00:57:63:ef:38:08:dd:e1: 4b:bc:ff:ce:13:85:b2:cf:70:87:9b:1a:50:e7:f2: 13:cd:69:d0:64:79:4b:9e:71:d1:78:7d:a6:cf:b8: 30:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:19:6C:3E:D5:08:5B:8D:3E:B3:8B:35:93:B8:F9:F8:DF:AF:56:8E X509v3 Authority Key Identifier: keyid:60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:8e:e1:a8:32:c3:70:91:69:f9:86:24:ba:fa:34:b0:41:9b: a4:66:19:84:bb:42:83:99:59:7f:e8:b6:2e:74:9c:50:e2:b3: ed:b7:66:f8:d2:1e:49:0b:b1:82:95:d0:07:6f:80:c5:b0:1c: 40:f8:83:f0:a9:e7:06:e8:18:f9:cd:50:32:91:b2:47:ee:ab: 71:14:09:4b:b0:e3:b6:39:47:74:db:a8:76:79:2b:3e:33:3f: 24:6c:08:7c:f4:64:65:f2:10:1f:a1:a5:74:2d:86:90:43:bb: a0:2e:6a:95:f8:59:6a:3d:68:27:31:f3:88:38:ee:ab:c3:3e: 7b:47:8f:80:3e:f2:12:4d:91:ca:a7:75:ef:62:ad:ed:8e:78: 56:5e:36:55:ab:0e:7c:e1:ed:cd:a5:c4:1a:57:79:e5:c2:d5: 53:96:fd:d9:48:68:7f:64:5c:ff:de:24:56:79:99:2d:a0:a6: 10:49:81:ae:fb:35:b1:b8:c5:80:3e:d3:88:d3:6a:04:53:5a: 00:ea:ec:96:81:ca:1a:52:dc:b7:b3:fd:5a:39:27:44:b7:90: 98:63:e1:63:d8:29:5d:57:4d:20:86:b7:1f:fc:78:ed:19:d1: 34:2e:0c:a8:b9:cc:be:4b:49:ad:45:8a:96:5b:01:ef:57:86: d7:16:c5:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYxRTYxMTAvBgNVBAUTKDYwNjU4MEY3NkVEMzkyNTM3RDVGQ0EyNTk2OTRDRjky NjE0MTdDNDEwHhcNMjUxMjIyMjIwMjAxWhcNMjUxMjI5MjIwMjAxWjAYMRYwFAYD VQQDDA02OTQ5YmZkOS01NzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNx9ZZIwVXpzMwY/Le+m/GKktJ6hzVEX7Sq/bIY8QVg/EjNh7Bl3wIx/DE8C vwTKWWGt9vUkFTiNeAsHqjQxHJ1HLSdspNzFB+eROn0CU+Y/SS49kqIXJAOwbb/0 2jaDF0MWT2sts2ai6WV7iQQ25HREIOt05iylk1HRlCrnKjRM1h+dAyV9Kl+FeYX4 1xUfInt85Nqxe4mzsDxqeOvQmQxLoO/vcmWR7bX5mSmZR7Mc0fvJCMeHiuPHxnjo nJKFJ5hK1disHWvkzaT72cUpAM4H/tPL8JN9AFdj7zgI3eFLvP/OE4Wyz3CHmxpQ 5/ITzWnQZHlLnnHReH2mz7gwrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYZbD7V CFuNPrOLNZO4+fjfr1aOMB8GA1UdIwQYMBaAFGBlgPdu05JTfV/KJZaUz5JhQXxB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjFFNi82MjdFRjE0MkNE RTkxMUVCQjdFNkJFMUNDNEY5QUUwMi9ZR1dBOTI3VGtsTjlYOG9sbHBUUGttRkJm RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHV0E5MjdUa2xOOVg4b2xscFRQa21GQmZFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjFFNi82MjdFRjE0MkNERTkxMUVCQjdFNkJFMUNDNEY5QUUwMi9ZR1dBOTI3VGts TjlYOG9sbHBUUGttRkJmRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVjuGoMsNwkWn5hiS6+jSwQZukZhmEu0KDmVl/6LYudJxQ4rPtt2b4 0h5JC7GCldAHb4DFsBxA+IPwqecG6Bj5zVAykbJH7qtxFAlLsOO2OUd026h2eSs+ Mz8kbAh89GRl8hAfoaV0LYaQQ7ugLmqV+FlqPWgnMfOIOO6rwz57R4+APvISTZHK p3XvYq3tjnhWXjZVqw584e3NpcQaV3nlwtVTlv3ZSGh/ZFz/3iRWeZktoKYQSYGu +zWxuMWAPtOI02oEU1oA6uyWgcoaUty3s/1aOSdEt5CYY+Fj2CldV00ghrcf/Hjt GdE0Lgyoucy+S0mtRYqWWwHvV4bXFsWW -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:23 2025 by rpki-client