This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft File: Ys-2EOllD-PIACvGF7cFck0qAt0.mft (raw, json) Hash identifier: aoxzet2hN+TRbvZhSVNlJEOvrFCpz6pB7XXQUww6Ej4= Subject key identifier: 1B:2F:77:DF:4D:2D:C9:10:41:3B:0A:90:89:B1:87:F7:24:B8:98:10 Authority key identifier: 62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD Certificate issuer: /CN=A917B1B1/serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Certificate serial: 1889 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft Manifest number: 187B Signing time: Sat 06 Dec 2025 16:06:41 +0000 Manifest this update: Sat 06 Dec 2025 16:06:40 +0000 Manifest next update: Sat 13 Dec 2025 16:06:40 +0000 Files and hashes: 1: Ys-2EOllD-PIACvGF7cFck0qAt0.crl (hash: 5Zx+Aa7i4i/Cp2ndvgHvdCD5qcLRc58A5w1td3jrE+U=) 2: C1C12662CFC811EB9A5C5879C4F9AE02.roa (hash: XNKpRb8/02tHDrrS9S3tLwWbmiJabIsnKyEKhJUYUM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6281 (0x1889) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B1B1, serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Validity Not Before: Dec 6 16:06:40 2025 GMT Not After : Dec 13 16:06:40 2025 GMT Subject: CN=69345491-621b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5b:9f:cf:7d:38:09:43:37:c2:51:be:48:e5: a5:ef:c2:38:a1:0c:93:5a:12:d2:15:ec:b6:df:7f: 37:11:4d:1f:ed:90:14:82:6b:88:87:3b:07:91:e4: b7:5b:bb:2e:d0:56:06:a6:99:3e:da:65:08:3e:32: 77:d5:35:1e:96:8c:80:92:7e:e3:d3:19:4e:35:8d: 7c:4f:6c:5a:5b:d5:0f:f9:07:d7:a7:e7:c1:e9:53: 56:57:fe:93:5f:56:c2:ff:b5:f6:b5:4e:64:af:4e: ff:05:29:4a:9f:4d:4f:be:fc:5e:59:9a:56:10:a2: ee:62:f8:27:7c:52:e4:65:43:ae:c9:7c:e1:45:d5: 1b:8f:48:f6:97:d1:52:7f:1d:c5:42:9f:8d:dc:f1: 12:34:e6:f3:b4:30:b9:7f:85:c7:37:db:63:2a:3e: 04:3a:f6:39:a8:a7:bf:e7:5b:77:3e:45:12:38:32: c6:b2:3e:50:6e:6d:e8:b7:d6:80:a2:78:e0:03:02: 2e:16:87:74:a8:5e:2f:8f:ac:3a:4a:12:b0:0a:da: 1c:b7:d1:c8:02:ed:89:92:1e:6d:a9:7d:ca:35:40: c0:09:7a:88:a8:5d:dc:fb:4c:57:da:ac:10:d3:cb: 7c:98:c7:0e:4f:d7:91:c7:a9:fd:19:f6:d0:52:c7: 3f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2F:77:DF:4D:2D:C9:10:41:3B:0A:90:89:B1:87:F7:24:B8:98:10 X509v3 Authority Key Identifier: keyid:62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:f7:0c:75:a2:fc:3f:44:fc:25:0c:58:ef:a7:b8:e9:2d:94: 93:b1:05:4b:cc:9c:78:c6:36:f0:37:f7:89:51:da:de:18:a8: ea:fb:7b:d2:24:2c:02:85:45:12:8e:f0:e5:e3:36:66:ec:ea: 74:90:4a:31:5e:1d:c1:89:bf:06:dc:6e:a2:0a:63:dc:b4:e2: 56:ee:fa:d1:dd:3e:62:5b:c9:ce:b9:43:d3:55:53:bd:3f:b1: d9:78:44:a7:e3:a2:85:41:7e:12:0f:cc:ac:31:08:1a:f7:89: a8:ad:cc:c7:ba:54:a7:20:44:ca:52:bb:08:b5:36:d3:04:de: d4:db:42:83:82:8d:01:1d:d9:a3:06:cd:35:24:44:49:93:83: 08:22:ce:d4:40:fb:1c:1a:af:22:2f:b7:22:5c:dd:cd:40:73: 48:88:20:79:76:50:9e:b2:02:66:4e:64:7d:98:f7:49:18:38: b0:87:98:4a:64:fb:be:26:ff:6c:c1:a8:d4:2e:c3:da:42:38: 7f:26:ca:7b:cf:41:d8:35:43:01:5f:96:81:7f:af:39:02:a5: e6:5f:cf:93:64:26:8a:47:39:a0:eb:a4:e3:a0:aa:ba:61:52: 41:aa:76:19:fc:aa:32:5b:23:d6:86:32:84:58:6c:a7:a3:f2: 6f:52:32:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxQjExMTAvBgNVBAUTKDYyQ0ZCNjEwRTk2NTBGRTNDODAwMkJDNjE3QjcwNTcy NEQyQTAyREQwHhcNMjUxMjA2MTYwNjQwWhcNMjUxMjEzMTYwNjQwWjAYMRYwFAYD VQQDEw02OTM0NTQ5MS02MjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVufz304CUM3wlG+SOWl78I4oQyTWhLSFey23383EU0f7ZAUgmuIhzsHkeS3 W7su0FYGppk+2mUIPjJ31TUeloyAkn7j0xlONY18T2xaW9UP+QfXp+fB6VNWV/6T X1bC/7X2tU5kr07/BSlKn01PvvxeWZpWEKLuYvgnfFLkZUOuyXzhRdUbj0j2l9FS fx3FQp+N3PESNObztDC5f4XHN9tjKj4EOvY5qKe/51t3PkUSODLGsj5Qbm3ot9aA onjgAwIuFod0qF4vj6w6ShKwCtoct9HIAu2Jkh5tqX3KNUDACXqIqF3c+0xX2qwQ 08t8mMcOT9eRx6n9GfbQUsc/NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsvd99N LckQQTsKkImxh/ckuJgQMB8GA1UdIwQYMBaAFGLPthDpZQ/jyAArxhe3BXJNKgLd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjFCMS9BMEYwQURGMEIy NTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQtUElBQ3ZHRjdjRmNrMHFB dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzLTJFT2xsRC1QSUFDdkdGN2NGY2swcUF0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjFCMS9BMEYwQURGMEIyNTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQt UElBQ3ZHRjdjRmNrMHFBdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ9wx1ovw/RPwlDFjvp7jpLZSTsQVLzJx4xjbwN/eJUdreGKjq+3vS JCwChUUSjvDl4zZm7Op0kEoxXh3Bib8G3G6iCmPctOJW7vrR3T5iW8nOuUPTVVO9 P7HZeESn46KFQX4SD8ysMQga94morczHulSnIETKUrsItTbTBN7U20KDgo0BHdmj Bs01JERJk4MIIs7UQPscGq8iL7ciXN3NQHNIiCB5dlCesgJmTmR9mPdJGDiwh5hK ZPu+Jv9swajULsPaQjh/Jsp7z0HYNUMBX5aBf685AqXmX8+TZCaKRzmg66TjoKq6 YVJBqnYZ/KoyWyPWhjKEWGyno/JvUjKm -----END CERTIFICATE-----Generated at Sun Dec 7 00:54:00 2025 by rpki-client