This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft File: ymnk-Ceb-DMZDLciXOn922bT-VE.mft (raw, json) Hash identifier: Yi4opivTBKsLFDh0RyDy5nz0DfuS14zLz91jsQoTw24= Subject key identifier: 90:0A:6B:45:E8:3C:20:02:15:DA:50:32:08:CA:02:54:EA:7F:4D:D8 Authority key identifier: CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 Certificate issuer: /CN=A911C14C/serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Certificate serial: 09D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft Manifest number: 09CB Signing time: Thu 04 Dec 2025 19:12:33 +0000 Manifest this update: Thu 04 Dec 2025 19:12:33 +0000 Manifest next update: Thu 11 Dec 2025 19:12:33 +0000 Files and hashes: 1: ymnk-Ceb-DMZDLciXOn922bT-VE.crl (hash: 8vexv3T+XS3d9V9ZFm1NMa7WCIwe7WHKrbz/IfriLq4=) 2: 16E91232932D11EABE8CE524C4F9AE02.roa (hash: EqH7WmDV1P3xtcmJeaOld+bFagaXu060kUoogC5tHYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2514 (0x9d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C14C, serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Validity Not Before: Dec 4 19:12:33 2025 GMT Not After : Dec 11 19:12:33 2025 GMT Subject: CN=6931dd21-b4d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:90:43:ea:ae:d2:0c:32:98:34:21:f2:00:0a: da:4e:3d:b6:e7:13:7b:ef:27:9e:36:1c:25:d2:cd: 47:9e:c4:76:69:c3:e3:78:6f:dd:7b:61:32:c4:1e: 7a:51:73:99:63:2b:26:d1:e5:b1:0f:58:c5:d4:2f: 56:7a:be:55:00:b5:07:c9:ec:4f:1d:03:3f:83:8d: e5:80:b0:66:d8:5a:22:21:b9:4c:eb:e8:54:34:55: 73:91:c1:78:d6:60:7b:ef:59:c8:13:b0:c5:ea:cf: 87:6a:7e:31:38:9a:e0:83:e2:08:e2:38:96:ff:29: 1b:57:7d:65:61:e3:02:b7:5d:81:4c:13:18:d1:1d: 86:ef:9d:ac:33:bc:1e:0c:e1:79:df:20:33:22:92: 5e:3d:bf:13:aa:dd:69:25:d0:e6:e8:a2:ee:23:88: 77:3c:90:1f:1d:86:3f:d9:ab:9c:d3:02:e3:cd:81: 13:5f:cf:59:4a:af:f0:28:a7:97:05:a8:5c:69:58: 00:d5:6a:46:a6:63:f6:e1:5e:c5:fa:fe:8b:1b:a9: 02:60:6b:69:22:fa:63:8f:ac:95:84:06:5c:7f:21: ff:68:66:1f:64:b1:51:6e:1b:3a:a8:ba:9b:67:5b: f1:90:62:ec:89:12:d1:bf:9f:25:b9:24:8a:95:ff: 24:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:0A:6B:45:E8:3C:20:02:15:DA:50:32:08:CA:02:54:EA:7F:4D:D8 X509v3 Authority Key Identifier: keyid:CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:36:a0:57:3b:c9:ff:0a:46:34:8b:96:25:f4:1c:5a:04:d2: 63:75:c3:01:cf:ad:7a:8f:5e:14:5f:8e:ee:b6:d6:1c:00:18: 6c:26:b5:92:d3:f3:b1:0a:15:65:65:6c:b9:2b:69:15:94:ce: fe:08:16:78:c6:94:d5:e3:e1:b4:bc:c8:79:34:31:8c:2a:61: 66:a4:b2:53:4b:ae:3e:97:3f:0e:1b:6e:00:b6:e8:63:56:f5: 72:b7:57:15:ce:34:cd:1e:b7:82:84:d4:d2:b2:88:11:2a:79: 43:19:3a:1b:9d:7e:9c:22:95:48:65:ba:24:27:2f:43:ae:1c: 7a:fe:f8:51:94:5b:af:51:d3:d7:15:18:56:e3:b8:31:dc:87: 03:76:00:2a:c3:09:b4:1e:dd:42:70:14:41:1a:f2:cb:7e:1c: 3d:52:b6:d9:dc:09:d6:4b:9c:41:92:d8:d2:03:8e:b4:75:cf: 98:9f:21:96:e1:bb:89:bc:43:8b:04:9b:6d:eb:31:3f:b4:f1: a2:46:fd:84:cd:f2:41:09:a3:39:e2:b2:6f:bc:fc:18:b1:4a: 00:b1:ea:52:32:a5:01:78:2b:6f:39:7e:61:ac:84:22:e7:f5: eb:f0:17:7f:5c:91:38:52:b4:a0:8e:8f:35:d9:e6:d4:72:14: 08:d5:5c:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxNEMxMTAvBgNVBAUTKENBNjlFNEY4Mjc5QkY4MzMxOTBDQjcyMjVDRTlGRERC NjZEM0Y5NTEwHhcNMjUxMjA0MTkxMjMzWhcNMjUxMjExMTkxMjMzWjAYMRYwFAYD VQQDEw02OTMxZGQyMS1iNGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmJBD6q7SDDKYNCHyAAraTj225xN77yeeNhwl0s1HnsR2acPjeG/de2EyxB56 UXOZYysm0eWxD1jF1C9Wer5VALUHyexPHQM/g43lgLBm2FoiIblM6+hUNFVzkcF4 1mB771nIE7DF6s+Han4xOJrgg+II4jiW/ykbV31lYeMCt12BTBMY0R2G752sM7we DOF53yAzIpJePb8Tqt1pJdDm6KLuI4h3PJAfHYY/2auc0wLjzYETX89ZSq/wKKeX BahcaVgA1WpGpmP24V7F+v6LG6kCYGtpIvpjj6yVhAZcfyH/aGYfZLFRbhs6qLqb Z1vxkGLsiRLRv58luSSKlf8koQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJAKa0Xo PCACFdpQMgjKAlTqf03YMB8GA1UdIwQYMBaAFMpp5Pgnm/gzGQy3Ilzp/dtm0/lR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE0Qy8yQTM2MTEwQzkz MkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1ETVpETGNpWE9uOTIyYlQt VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltbmstQ2ViLURNWkRMY2lYT245MjJiVC1WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE0Qy8yQTM2MTEwQzkzMkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1E TVpETGNpWE9uOTIyYlQtVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrNqBXO8n/CkY0i5Yl9BxaBNJjdcMBz616j14UX47uttYcABhsJrWS 0/OxChVlZWy5K2kVlM7+CBZ4xpTV4+G0vMh5NDGMKmFmpLJTS64+lz8OG24Atuhj VvVyt1cVzjTNHreChNTSsogRKnlDGTobnX6cIpVIZbokJy9Drhx6/vhRlFuvUdPX FRhW47gx3IcDdgAqwwm0Ht1CcBRBGvLLfhw9UrbZ3AnWS5xBktjSA460dc+YnyGW 4buJvEOLBJtt6zE/tPGiRv2EzfJBCaM54rJvvPwYsUoAsepSMqUBeCtvOX5hrIQi 5/Xr8Bd/XJE4UrSgjo812ebUchQI1VyK -----END CERTIFICATE-----Generated at Sat Dec 6 19:35:26 2025 by rpki-client