This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft File: yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft (raw, json) Hash identifier: nk+wDO0NYR9rPF1U7nLW8wscO9liq95NWGrBmGnVQbw= Subject key identifier: 15:95:3C:C4:DA:DE:34:54:94:6A:58:0C:DA:27:E5:69:88:CD:91:0B Authority key identifier: CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B Certificate issuer: /CN=A916B4B7/serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B Certificate serial: 095A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft Manifest number: 0954 Signing time: Thu 04 Dec 2025 19:20:57 +0000 Manifest this update: Thu 04 Dec 2025 19:20:57 +0000 Manifest next update: Thu 11 Dec 2025 19:20:57 +0000 Files and hashes: 1: yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl (hash: Zb89phRlRK9jN11lBbGQlocCWY4GUhRSy3vXDuqYD8E=) 2: 90798692AA0A11EA89D5161EC4F9AE02.roa (hash: SjfL0z+V8r1mG2yvSd88vw9Fy41PjMV8KGz6ODEkn2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2394 (0x95a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B4B7, serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B Validity Not Before: Dec 4 19:20:57 2025 GMT Not After : Dec 11 19:20:57 2025 GMT Subject: CN=6931df19-9098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e7:6c:d8:9c:11:61:ec:33:97:c1:a1:d1:db: 4e:c7:f0:d6:56:ed:45:81:4d:08:24:88:71:a1:9b: 8f:51:16:66:e4:6f:47:4b:10:59:f4:63:e3:33:45: 41:ec:21:58:a1:65:57:85:f7:ed:1c:ba:12:6e:5a: 82:d8:43:72:5f:10:19:44:6f:d3:d4:a0:c7:c6:dc: d5:3e:cb:08:9c:dc:de:bc:c0:d0:95:f9:66:c6:3a: d5:4b:83:9d:0e:c7:f6:d4:a5:5b:f6:b3:d2:2d:d6: 0f:92:2d:60:f9:05:12:11:0b:d0:cb:ef:22:3d:e6: 9b:10:4e:27:62:72:69:73:f5:7e:e0:92:ce:34:98: 98:61:f3:6a:5d:3d:11:53:f8:f1:3a:84:72:11:65: 7f:86:03:a5:f1:4a:a3:c7:73:8d:04:a1:ab:43:e3: 9f:b6:14:3f:9e:af:cc:a9:76:f0:d8:eb:95:a5:b8: 44:1f:58:74:a2:d5:3a:20:5c:a2:83:dc:d2:2a:34: a8:18:6f:ac:5d:13:eb:e5:6c:e7:7b:a5:6e:c9:30: 22:c8:58:9c:4d:ee:0f:8d:32:49:ab:cd:9d:55:45: 6c:5b:90:b2:d1:bf:8a:a8:79:89:fc:af:d0:5a:ef: 9e:e8:73:89:e7:9e:5d:f4:3a:0f:61:46:6e:c6:f3: 8c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:95:3C:C4:DA:DE:34:54:94:6A:58:0C:DA:27:E5:69:88:CD:91:0B X509v3 Authority Key Identifier: keyid:CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:a8:e3:a6:aa:73:12:2a:93:a0:e6:ec:c3:16:d6:30:bd:c4: 74:d7:c5:7c:01:e0:08:9a:ca:59:c6:43:03:d6:9c:f3:46:b3: 16:67:4d:8b:db:fb:d0:70:8d:21:7c:ec:bd:64:25:d4:e3:32: 53:72:44:22:d1:4a:14:35:0f:73:b9:d2:c4:21:ce:8a:6e:16: 4b:06:db:bc:2c:05:05:df:dc:0b:7c:a0:d5:2c:e5:e8:34:aa: d0:2e:07:34:d7:72:b6:51:dc:f7:f9:3c:fe:dd:86:b5:a0:a4: 21:3e:8e:dc:95:8f:96:a7:82:49:3e:74:46:a5:81:96:69:d5: bf:4e:ac:21:97:c6:14:50:27:b2:a9:af:5e:c0:47:59:75:b9: ef:cb:7f:4c:7b:8d:b9:b7:fa:c7:e5:1e:88:b4:76:57:ea:54: b0:b2:b2:a0:4a:ad:95:76:34:75:97:94:55:0e:de:53:6c:f8: c0:79:3b:3f:96:00:6c:5a:18:92:8a:64:d0:f2:8c:74:d4:f5: 1d:b0:4d:b9:a7:27:fc:0b:e6:a1:a3:2a:d6:e8:e9:aa:e9:ed: ef:f9:bc:c4:e2:d1:c6:66:c5:1f:75:1e:a2:e4:4c:23:1f:6c: 0c:2f:65:00:42:95:11:4e:1a:d6:da:41:44:fb:d2:56:d4:46: 92:ac:a7:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI0QjcxMTAvBgNVBAUTKENBQTk2OUZGMzc3NEJDRDlFRDYwMjc3M0QyOUQ4NzhC QzRFMjY1NkIwHhcNMjUxMjA0MTkyMDU3WhcNMjUxMjExMTkyMDU3WjAYMRYwFAYD VQQDEw02OTMxZGYxOS05MDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuds2JwRYewzl8Gh0dtOx/DWVu1FgU0IJIhxoZuPURZm5G9HSxBZ9GPjM0VB 7CFYoWVXhfftHLoSblqC2ENyXxAZRG/T1KDHxtzVPssInNzevMDQlflmxjrVS4Od Dsf21KVb9rPSLdYPki1g+QUSEQvQy+8iPeabEE4nYnJpc/V+4JLONJiYYfNqXT0R U/jxOoRyEWV/hgOl8Uqjx3ONBKGrQ+OfthQ/nq/MqXbw2OuVpbhEH1h0otU6IFyi g9zSKjSoGG+sXRPr5Wzne6VuyTAiyFicTe4PjTJJq82dVUVsW5Cy0b+KqHmJ/K/Q Wu+e6HOJ555d9DoPYUZuxvOMkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWVPMTa 3jRUlGpYDNon5WmIzZELMB8GA1UdIwQYMBaAFMqpaf83dLzZ7WAnc9Kdh4vE4mVr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRCNy8wOTcyQzc0MEFB MDkxMUVBOEZFM0I2MUJDNEY5QUUwMi95cWxwX3pkMHZObnRZQ2R6MHAySGk4VGla V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxbHBfemQwdk5udFlDZHowcDJIaThUaVpXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjRCNy8wOTcyQzc0MEFBMDkxMUVBOEZFM0I2MUJDNEY5QUUwMi95cWxwX3pkMHZO bnRZQ2R6MHAySGk4VGlaV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkqOOmqnMSKpOg5uzDFtYwvcR018V8AeAImspZxkMD1pzzRrMWZ02L 2/vQcI0hfOy9ZCXU4zJTckQi0UoUNQ9zudLEIc6KbhZLBtu8LAUF39wLfKDVLOXo NKrQLgc013K2Udz3+Tz+3Ya1oKQhPo7clY+Wp4JJPnRGpYGWadW/Tqwhl8YUUCey qa9ewEdZdbnvy39Me425t/rH5R6ItHZX6lSwsrKgSq2VdjR1l5RVDt5TbPjAeTs/ lgBsWhiSimTQ8ox01PUdsE25pyf8C+ahoyrW6Omq6e3v+bzE4tHGZsUfdR6i5Ewj H2wML2UAQpURThrW2kFE+9JW1EaSrKco -----END CERTIFICATE-----Generated at Sat Dec 6 15:40:42 2025 by rpki-client