This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft File: ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft (raw, json) Hash identifier: NNo1ct79gHWXpv855rmdFG5bPJ2Tkd6mZE/wuzaFRTQ= Subject key identifier: FC:91:F2:67:54:6A:3A:19:A5:20:33:D8:5C:4F:B3:78:AD:22:21:E6 Authority key identifier: CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3 Certificate issuer: /CN=A91F583B/serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3 Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft Manifest number: 01D1 Signing time: Fri 19 Dec 2025 02:04:51 +0000 Manifest this update: Fri 19 Dec 2025 02:04:50 +0000 Manifest next update: Fri 26 Dec 2025 02:04:50 +0000 Files and hashes: 1: ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl (hash: FPof/k62tpDz9Ocjx00hUEkGzuWYCNiDRyJFOB9S+R0=) 2: 5541D6A21F9A11EE9BB7905DC4F9AE02.roa (hash: xKdkCB2h23p2t0hwohlQLPhMtE2tKQRuZAO7jjr5JQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F583B, serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3 Validity Not Before: Dec 19 02:04:50 2025 GMT Not After : Dec 26 02:04:50 2025 GMT Subject: CN=6944b2c2-2e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:87:f8:0f:5f:7b:03:aa:50:9a:5f:45:3a:6e: 18:32:7e:ce:04:1a:70:5b:63:d5:2f:64:46:d8:45: 8d:9f:66:91:a7:b8:49:24:1e:16:03:fd:0a:ee:ca: ae:b8:58:da:ac:dd:5b:87:28:9b:84:10:86:88:a6: ca:d3:c0:5b:90:67:99:99:aa:44:36:74:bb:70:c3: 94:b0:83:c4:fa:bd:e5:8c:44:45:a1:13:1e:33:6a: 28:e0:1a:99:0d:10:6d:13:ef:30:bb:69:ee:46:50: 79:94:f1:2d:72:9b:b4:c8:77:7f:fc:61:d1:67:fb: c6:75:ba:55:c7:9d:41:ba:16:97:03:b2:ca:ef:8c: 61:66:06:76:e3:e2:a3:7b:8c:5b:62:f9:58:c8:f4: 02:8f:eb:6f:6e:4e:a1:e1:43:81:f2:d9:11:7c:bf: 32:69:ae:8b:16:bf:73:cf:d3:f6:1d:00:ea:f2:b0: 5e:c9:85:47:99:a6:5e:01:49:53:68:13:61:75:5a: 35:c9:c0:11:1e:ef:e9:71:d6:a0:31:31:51:80:e9: 4f:53:eb:cd:87:96:2c:18:78:c6:e0:75:73:5e:75: 47:2f:6a:5d:64:e5:d9:80:a7:75:d3:49:a5:37:3d: cc:22:27:f3:2e:1b:a3:d0:20:12:66:98:f2:a5:d6: 56:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:91:F2:67:54:6A:3A:19:A5:20:33:D8:5C:4F:B3:78:AD:22:21:E6 X509v3 Authority Key Identifier: keyid:CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:a7:94:84:86:71:84:99:69:57:d9:e1:70:3d:64:24:4c:5c: 26:fe:7e:b5:1c:86:0d:17:c8:e0:2e:a1:08:63:90:22:0b:d4: 53:b4:99:02:86:74:c2:51:60:8a:eb:15:6d:e4:b3:72:ef:75: c5:b2:29:ce:aa:1d:74:3c:d2:aa:75:29:c1:ca:7e:7c:a5:fe: 0c:cc:d2:3d:c3:f3:5e:41:b7:b1:4e:de:6c:f7:93:cb:8d:8e: a7:f7:11:1a:28:b4:01:11:9d:95:74:6a:12:25:8f:f7:71:4a: d6:c0:eb:0b:31:ed:b1:d9:0d:e1:dd:7f:bf:15:83:62:2b:51: d9:ee:7f:a8:1b:b9:e7:cb:11:59:35:2f:4d:98:b6:6a:12:44: 2b:ac:8e:93:0f:6e:71:9f:52:be:eb:8a:1e:e1:00:4e:a8:ed: ca:8f:8b:b4:cd:c7:de:87:65:d2:ee:8a:4d:e9:be:a4:5a:9c: 01:19:88:45:42:50:a6:14:95:65:81:7c:8f:1d:58:b5:27:aa: 45:66:57:d9:66:26:d7:6d:97:37:c8:dc:52:15:0c:68:7b:85: f4:e1:ff:94:80:e3:c2:de:aa:71:5b:a4:24:48:73:54:1f:f6: 95:18:1b:1f:05:ed:9b:06:72:85:06:ba:ee:7e:34:4f:c0:66: d7:2a:3e:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4M0IxMTAvBgNVBAUTKENBN0NFRUY5MTg4MDdFNjcxQjE2MjRFNjNBQjZGNjgx MDNERkQ1RTMwHhcNMjUxMjE5MDIwNDUwWhcNMjUxMjI2MDIwNDUwWjAYMRYwFAYD VQQDDA02OTQ0YjJjMi0yZTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4f4D197A6pQml9FOm4YMn7OBBpwW2PVL2RG2EWNn2aRp7hJJB4WA/0K7squ uFjarN1bhyibhBCGiKbK08BbkGeZmapENnS7cMOUsIPE+r3ljERFoRMeM2oo4BqZ DRBtE+8wu2nuRlB5lPEtcpu0yHd//GHRZ/vGdbpVx51BuhaXA7LK74xhZgZ24+Kj e4xbYvlYyPQCj+tvbk6h4UOB8tkRfL8yaa6LFr9zz9P2HQDq8rBeyYVHmaZeAUlT aBNhdVo1ycARHu/pcdagMTFRgOlPU+vNh5YsGHjG4HVzXnVHL2pdZOXZgKd100ml Nz3MIifzLhuj0CASZpjypdZWqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyR8mdU ajoZpSAz2FxPs3itIiHmMB8GA1UdIwQYMBaAFMp87vkYgH5nGxYk5jq29oED39Xj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTgzQi81QUYwNDE5QzFC RTQxMUVFOUI4RkFCNTNDNEY5QUUwMi95bnp1LVJpQWZtY2JGaVRtT3JiMmdRUGYx ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3luenUtUmlBZm1jYkZpVG1PcmIyZ1FQZjFlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTgzQi81QUYwNDE5QzFCRTQxMUVFOUI4RkFCNTNDNEY5QUUwMi95bnp1LVJpQWZt Y2JGaVRtT3JiMmdRUGYxZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQp5SEhnGEmWlX2eFwPWQkTFwm/n61HIYNF8jgLqEIY5AiC9RTtJkC hnTCUWCK6xVt5LNy73XFsinOqh10PNKqdSnByn58pf4MzNI9w/NeQbexTt5s95PL jY6n9xEaKLQBEZ2VdGoSJY/3cUrWwOsLMe2x2Q3h3X+/FYNiK1HZ7n+oG7nnyxFZ NS9NmLZqEkQrrI6TD25xn1K+64oe4QBOqO3Kj4u0zcfeh2XS7opN6b6kWpwBGYhF QlCmFJVlgXyPHVi1J6pFZlfZZibXbZc3yNxSFQxoe4X04f+UgOPC3qpxW6QkSHNU H/aVGBsfBe2bBnKFBrrufjRPwGbXKj7o -----END CERTIFICATE-----Generated at Fri Dec 19 10:38:31 2025 by rpki-client