This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft File: YykwQRnxpH9dBkCy33Xe8fZMe68.mft (raw, json) Hash identifier: 0HbXTZhGUym+agT9EBwfWP2kNjx4p95N+t0NUPRpuuI= Subject key identifier: 65:82:89:32:52:4E:8D:E5:CE:27:AF:8B:0F:A2:E1:F6:CA:1B:7C:05 Authority key identifier: 63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF Certificate issuer: /CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF Certificate serial: 07CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft Manifest number: 07BF Signing time: Mon 22 Dec 2025 20:39:17 +0000 Manifest this update: Mon 22 Dec 2025 20:39:17 +0000 Manifest next update: Mon 29 Dec 2025 20:39:17 +0000 Files and hashes: 1: YykwQRnxpH9dBkCy33Xe8fZMe68.crl (hash: ugnzgRGtup61FSqbBtejZPjwnS6BDHGu/dN1fknh3e8=) 2: 4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa (hash: ae/KpKHVYIp48jLRoLaAXZhQ2bpbYIXVEw1zOqGKhNs=) 3: 261A4C3432B611EBBB18F11EC4F9AE02.roa (hash: 6VCktPY0Y/VVY9wKy7mnkatZ5tFS2gKEFeVDjxPVHEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1999 (0x7cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF Validity Not Before: Dec 22 20:39:17 2025 GMT Not After : Dec 29 20:39:17 2025 GMT Subject: CN=6949ac75-c707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f5:53:a1:02:40:b2:e4:b8:03:c6:a7:a7:25: 90:ae:9b:f7:9a:e3:77:ff:a2:86:ae:4b:29:f3:16: 34:1b:74:3d:ff:36:b1:d0:04:dc:49:85:69:1f:22: 85:15:c2:52:67:b3:19:2b:1a:97:ad:fc:f8:6c:48: 69:1f:c0:03:1e:7a:d7:99:f5:86:84:a5:35:dd:44: 93:2f:ea:45:1d:e0:5f:d8:61:c4:8d:cb:d1:39:79: 8a:48:9f:db:b3:fc:02:fc:a5:ab:5a:54:08:13:ee: 0f:d9:e4:a9:0e:56:2e:04:5d:7b:b8:c5:90:68:b5: ca:91:95:e0:57:0a:09:2d:25:37:1a:1f:44:11:17: 9d:ad:e2:ba:d8:21:8b:df:d4:2c:05:56:4d:68:2f: ec:8f:ac:fe:a1:ce:88:36:1b:93:64:83:43:15:fe: e9:fe:a8:dd:de:03:05:3b:b1:77:b1:3d:0d:a7:2a: 64:9e:81:6a:52:c1:ed:8e:2c:ea:7c:b5:91:4d:de: 9d:8a:66:68:fe:94:7e:bc:60:d4:fc:96:4b:d5:b3: 69:c8:ac:83:c8:3a:12:53:2b:16:c2:e5:69:d2:c1: c9:f5:f6:f7:63:9a:78:c1:63:47:4d:c7:73:e5:5c: 36:dc:3b:5e:d2:a7:f1:bc:0e:67:00:c0:1f:7d:a0: 9f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:82:89:32:52:4E:8D:E5:CE:27:AF:8B:0F:A2:E1:F6:CA:1B:7C:05 X509v3 Authority Key Identifier: keyid:63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:d2:1e:5e:e7:a6:e8:d9:e1:76:69:a1:79:39:fe:49:e7:ff: af:f0:1b:cb:0f:8a:15:27:fe:a2:3a:34:8f:84:da:82:26:e6: 5f:22:be:48:83:61:4d:63:8a:f4:2f:e0:e9:35:ff:69:35:cf: 18:26:f2:9f:5a:bc:49:19:7d:3d:5d:6a:5d:62:8c:88:1a:6d: b3:01:d1:fb:42:90:f3:52:e4:7a:50:cc:ef:cb:6c:df:37:c9: ca:ea:a5:41:bd:06:4f:72:e9:be:9d:7a:be:41:8d:26:01:8a: 6f:a4:15:78:1c:cb:d3:ee:43:2a:fe:3c:a8:70:af:54:07:4e: 99:13:a4:c5:6f:a5:7c:40:70:a8:b7:c8:4f:59:a1:28:56:91: fd:c2:20:21:cf:55:eb:05:6a:5e:2c:8d:54:56:af:71:46:92: b6:25:58:08:d4:14:df:fd:95:9f:3f:14:82:d4:b7:56:c5:f1: be:27:e7:1e:c7:92:8e:03:24:b7:b0:60:5d:89:ce:7e:9c:3f: 1e:db:10:2b:3a:25:72:62:97:fc:86:9f:ec:fc:8c:23:83:8f: 32:dd:43:5e:45:0a:94:38:65:b6:2a:ad:79:e8:af:8b:db:7b: 92:40:a2:50:6b:eb:f1:46:f9:de:34:e0:ff:1c:d0:fe:e2:da: a9:f3:30:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDYzMjkzMDQxMTlGMUE0N0Y1RDA2NDBCMkRGNzVERUYx RjY0QzdCQUYwHhcNMjUxMjIyMjAzOTE3WhcNMjUxMjI5MjAzOTE3WjAYMRYwFAYD VQQDDA02OTQ5YWM3NS1jNzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvVToQJAsuS4A8anpyWQrpv3muN3/6KGrksp8xY0G3Q9/zax0ATcSYVpHyKF FcJSZ7MZKxqXrfz4bEhpH8ADHnrXmfWGhKU13USTL+pFHeBf2GHEjcvROXmKSJ/b s/wC/KWrWlQIE+4P2eSpDlYuBF17uMWQaLXKkZXgVwoJLSU3Gh9EERedreK62CGL 39QsBVZNaC/sj6z+oc6INhuTZINDFf7p/qjd3gMFO7F3sT0NpypknoFqUsHtjizq fLWRTd6dimZo/pR+vGDU/JZL1bNpyKyDyDoSUysWwuVp0sHJ9fb3Y5p4wWNHTcdz 5Vw23Dte0qfxvA5nAMAffaCfhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWCiTJS To3lzieviw+i4fbKG3wFMB8GA1UdIwQYMBaAFGMpMEEZ8aR/XQZAst913vH2THuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84RkU3QThCODI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBIOWRCa0N5MzNYZThmWk1l NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l5a3dRUm54cEg5ZEJrQ3kzM1hlOGZaTWU2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84RkU3QThCODI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBI OWRCa0N5MzNYZThmWk1lNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX0h5e56bo2eF2aaF5Of5J5/+v8BvLD4oVJ/6iOjSPhNqCJuZfIr5I g2FNY4r0L+DpNf9pNc8YJvKfWrxJGX09XWpdYoyIGm2zAdH7QpDzUuR6UMzvy2zf N8nK6qVBvQZPcum+nXq+QY0mAYpvpBV4HMvT7kMq/jyocK9UB06ZE6TFb6V8QHCo t8hPWaEoVpH9wiAhz1XrBWpeLI1UVq9xRpK2JVgI1BTf/ZWfPxSC1LdWxfG+J+ce x5KOAyS3sGBdic5+nD8e2xArOiVyYpf8hp/s/Iwjg48y3UNeRQqUOGW2Kq156K+L 23uSQKJQa+vxRvneNOD/HND+4tqp8zBf -----END CERTIFICATE-----Generated at Wed Dec 24 14:08:51 2025 by rpki-client