This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft
File: yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft (raw, json)
Hash identifier: B6jjVMph/HAHaxEk5XS9J3ZFVL6h3r+E4aH5NUS+6IQ=
Subject key identifier: 7A:DC:50:BF:EA:B6:D5:DC:5B:FF:01:25:A5:82:3A:EB:CE:91:64:2F
Authority key identifier: CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B
Certificate issuer: /CN=A916B4B7/serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B
Certificate serial: 0963
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft
Manifest number: 095D
Signing time: Mon 22 Dec 2025 19:30:16 +0000
Manifest this update: Mon 22 Dec 2025 19:30:15 +0000
Manifest next update: Mon 29 Dec 2025 19:30:15 +0000
Files and hashes: 1: yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl (hash: o+hrybRe8laA1A0C+gE83SFYbwHMM05ZCdmVeh2Cq6I=)
2: 90798692AA0A11EA89D5161EC4F9AE02.roa (hash: SjfL0z+V8r1mG2yvSd88vw9Fy41PjMV8KGz6ODEkn2g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl
rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 19:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2403 (0x963)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B4B7, serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B
Validity
Not Before: Dec 22 19:30:15 2025 GMT
Not After : Dec 29 19:30:15 2025 GMT
Subject: CN=69499c47-7a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:a1:6c:5a:77:f6:bb:c8:56:1b:67:18:a5:
46:62:e5:4c:19:2e:8f:ca:94:86:06:9b:c8:fb:96:
3e:18:08:41:2c:0a:3e:88:9c:d6:90:9d:67:36:38:
79:48:06:84:67:af:bc:40:79:62:a7:78:98:48:f8:
3d:9c:5f:a4:9e:bd:04:7c:20:d4:a0:da:36:5a:64:
e7:d8:c0:41:2c:92:ee:0e:81:29:bd:5b:a0:03:a5:
13:81:0f:e5:f7:bc:1c:47:66:1f:f4:03:fd:90:a7:
fa:e6:ec:c5:cc:44:aa:fd:b0:37:a4:a6:51:fa:ce:
f8:eb:01:40:a2:91:37:88:14:c8:9e:50:96:ec:9d:
f6:53:40:42:40:35:e2:92:f6:c8:d5:a9:03:70:7e:
06:aa:82:a0:95:41:c3:48:f2:cd:1e:c8:b0:76:e9:
f6:bc:81:2b:2b:7b:76:f7:11:b8:b6:dc:7a:1d:8f:
d9:ea:dc:31:63:47:51:c7:00:1a:ca:26:fc:6b:be:
ac:e8:5c:df:65:7f:7f:e1:1f:d3:b6:7e:26:32:81:
33:58:19:bf:17:37:f6:be:c4:3b:67:b5:e1:ab:82:
22:26:f6:21:fa:f8:4c:2d:5c:78:d6:3c:43:d8:f9:
51:10:dd:6a:75:ef:ad:d6:b1:fb:4c:99:ab:bd:20:
6d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DC:50:BF:EA:B6:D5:DC:5B:FF:01:25:A5:82:3A:EB:CE:91:64:2F
X509v3 Authority Key Identifier:
keyid:CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:95:18:e2:3e:ca:9a:e0:80:9a:21:c3:44:fa:05:d9:2f:68:
bd:4b:dc:c8:c7:c1:d7:20:ca:5a:96:c1:5b:b8:c7:c6:ff:a8:
8a:2b:03:15:6f:16:e7:7d:ef:b2:82:bd:a3:81:ab:f1:c9:47:
17:bc:d6:b4:e2:49:18:81:ef:6b:57:6c:ae:a6:d9:16:ae:bc:
c6:12:37:c6:9e:b9:74:08:49:d4:a3:60:ea:21:b7:c1:76:2a:
b4:76:34:a2:24:07:9b:6b:71:87:4d:77:9c:ec:47:a3:af:df:
a3:94:35:0e:21:85:19:d6:68:22:51:ca:68:98:2b:95:42:f6:
b8:0a:b2:fa:df:57:ab:a9:6d:24:0e:0d:3d:35:32:fc:3e:6f:
c1:7b:55:b5:c5:b1:52:41:77:97:ee:29:51:2d:44:ff:45:25:
35:e9:f1:71:1c:e4:4f:c3:91:d8:f7:95:00:10:ce:72:fe:b7:
01:d1:30:82:0f:9e:85:4e:02:ca:74:9a:03:ce:70:c8:9a:bc:
fa:1d:05:79:93:c4:de:6c:e5:c4:12:3f:38:df:5e:0b:e1:7d:
a2:83:b8:64:d8:52:87:4a:de:f7:73:75:33:00:e2:3c:fb:93:
24:28:80:af:a1:c6:ab:4e:2c:48:d5:a8:0a:c3:9d:2d:3a:9b:
c8:f3:0f:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkI0QjcxMTAvBgNVBAUTKENBQTk2OUZGMzc3NEJDRDlFRDYwMjc3M0QyOUQ4NzhC
QzRFMjY1NkIwHhcNMjUxMjIyMTkzMDE1WhcNMjUxMjI5MTkzMDE1WjAYMRYwFAYD
VQQDDA02OTQ5OWM0Ny03YTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxrihbFp39rvIVhtnGKVGYuVMGS6PypSGBpvI+5Y+GAhBLAo+iJzWkJ1nNjh5
SAaEZ6+8QHlip3iYSPg9nF+knr0EfCDUoNo2WmTn2MBBLJLuDoEpvVugA6UTgQ/l
97wcR2Yf9AP9kKf65uzFzESq/bA3pKZR+s746wFAopE3iBTInlCW7J32U0BCQDXi
kvbI1akDcH4GqoKglUHDSPLNHsiwdun2vIErK3t29xG4ttx6HY/Z6twxY0dRxwAa
yib8a76s6FzfZX9/4R/Ttn4mMoEzWBm/Fzf2vsQ7Z7Xhq4IiJvYh+vhMLVx41jxD
2PlREN1qde+t1rH7TJmrvSBtaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrcUL/q
ttXcW/8BJaWCOuvOkWQvMB8GA1UdIwQYMBaAFMqpaf83dLzZ7WAnc9Kdh4vE4mVr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRCNy8wOTcyQzc0MEFB
MDkxMUVBOEZFM0I2MUJDNEY5QUUwMi95cWxwX3pkMHZObnRZQ2R6MHAySGk4VGla
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lxbHBfemQwdk5udFlDZHowcDJIaThUaVpXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjRCNy8wOTcyQzc0MEFBMDkxMUVBOEZFM0I2MUJDNEY5QUUwMi95cWxwX3pkMHZO
bnRZQ2R6MHAySGk4VGlaV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAYlRjiPsqa4ICaIcNE+gXZL2i9S9zIx8HXIMpalsFbuMfG/6iKKwMV
bxbnfe+ygr2jgavxyUcXvNa04kkYge9rV2yuptkWrrzGEjfGnrl0CEnUo2DqIbfB
diq0djSiJAeba3GHTXec7Eejr9+jlDUOIYUZ1mgiUcpomCuVQva4CrL631erqW0k
Dg09NTL8Pm/Be1W1xbFSQXeX7ilRLUT/RSU16fFxHORPw5HY95UAEM5y/rcB0TCC
D56FTgLKdJoDznDImrz6HQV5k8TebOXEEj84314L4X2ig7hk2FKHSt73c3UzAOI8
+5MkKICvocarTixI1agKw50tOpvI8w96
-----END CERTIFICATE-----
Generated at Wed Dec 24 17:40:27 2025 by rpki-client