This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft File: YBqj_Udwv8aa8kBvLoDtCOfca0M.mft (raw, json) Hash identifier: oMXAf4pzk9Q2TOIH8yk08rMzVcuzb7Yq9xvEtd8ic24= Subject key identifier: 29:26:64:AE:58:6B:2B:EF:AC:37:D3:CB:9E:EF:3B:32:75:6D:7F:13 Authority key identifier: 60:1A:A3:FD:47:70:BF:C6:9A:F2:40:6F:2E:80:ED:08:E7:DC:6B:43 Certificate issuer: /CN=A91954E2/serialNumber=601AA3FD4770BFC69AF2406F2E80ED08E7DC6B43 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft Manifest number: 010D Signing time: Fri 05 Dec 2025 02:59:55 +0000 Manifest this update: Fri 05 Dec 2025 02:59:55 +0000 Manifest next update: Fri 12 Dec 2025 02:59:55 +0000 Files and hashes: 1: YBqj_Udwv8aa8kBvLoDtCOfca0M.crl (hash: pXC09ruRSg9cVBfSgPj5HvepDVhF5o2u1OfVFfQxzSg=) 2: CC8E710C347011EF9F04CE66C4F9AE02.roa (hash: zqqFgR8hZJd3tGWwh69g86T2JXS+0860K/pt4Nn27L8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.crl rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91954E2, serialNumber=601AA3FD4770BFC69AF2406F2E80ED08E7DC6B43 Validity Not Before: Dec 5 02:59:55 2025 GMT Not After : Dec 12 02:59:55 2025 GMT Subject: CN=69324aab-7f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2b:cb:33:f1:1e:73:ee:ae:e1:c2:ca:2e:52: 42:5b:c8:cc:93:0c:0e:da:d8:ce:ec:b6:02:e0:e7: 78:7b:db:1a:21:5d:e0:47:25:77:00:62:89:7f:26: bd:e2:76:6f:6c:56:17:15:33:cc:85:13:a6:a1:12: 55:64:cc:98:71:96:42:9a:a5:22:6a:b8:a6:ff:53: c9:05:2d:fc:5e:cf:62:a0:f3:aa:f6:7d:1f:30:b8: 4b:45:7d:33:16:46:11:1b:00:28:ee:8a:82:1b:0b: 6d:30:ff:d0:c9:b1:f2:14:9f:c9:1c:55:e8:dd:74: 9f:7d:96:9c:c4:ab:c2:c0:bf:7e:17:a3:6e:9d:12: 02:19:8e:b8:8f:c7:56:e8:7f:ce:17:cb:dc:8e:63: 8e:03:cf:4d:13:c2:28:25:43:eb:d4:59:24:b9:94: e9:1d:9a:fc:6d:11:88:fb:65:2c:89:d1:13:80:96: 2f:69:85:7a:4e:0c:2a:1c:d8:61:54:98:dd:44:bc: ba:2f:b8:c0:c1:f2:cf:b9:f7:cf:b6:2e:63:d8:47: 23:18:ac:c9:06:ee:a8:7a:6b:65:ce:6f:79:b6:9f: 66:60:00:5f:47:f3:47:f4:c3:6c:12:92:31:ec:a1: cc:1f:14:b6:c8:13:c6:eb:46:80:2f:f9:f2:b9:d0: b2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:26:64:AE:58:6B:2B:EF:AC:37:D3:CB:9E:EF:3B:32:75:6D:7F:13 X509v3 Authority Key Identifier: keyid:60:1A:A3:FD:47:70:BF:C6:9A:F2:40:6F:2E:80:ED:08:E7:DC:6B:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e4:26:c9:26:9c:19:4d:10:79:f1:01:3d:e6:07:46:55:5f: 5b:13:aa:aa:65:77:a8:d3:e9:e0:bc:8d:64:4b:48:4c:ce:98: d8:25:03:f7:cc:bc:cd:d3:e2:7b:c4:38:06:87:57:72:0d:15: 58:04:1d:8c:4a:08:4f:38:aa:73:19:a1:9d:15:80:34:88:2e: 87:e5:00:cb:8d:db:92:fe:09:d9:3d:39:36:c8:b3:c9:29:d2: fe:52:7f:3e:43:c9:8b:09:6f:45:64:64:d8:ab:f6:ca:8f:fb: 47:3d:3d:3d:12:5e:8d:ef:96:ae:c3:f5:b9:b9:50:2d:af:e4: 33:5b:d9:4e:b9:74:2a:9b:7c:e5:92:f0:3f:c4:af:ae:f9:6c: d6:c7:84:f5:fa:d7:c5:4a:a8:e5:30:f9:1b:52:8a:9a:24:a8: 85:3d:d5:9b:04:4f:6b:f2:76:c9:f4:e1:a7:76:e5:1e:d1:b2: e7:53:d2:2d:f8:7d:33:ef:ed:31:84:db:bc:fd:96:4d:df:56: cd:6c:ab:4a:f7:f9:2b:10:1d:af:77:9e:7d:f8:62:b5:6e:a4: cd:5c:c5:37:e4:b0:88:70:56:82:5e:8a:c7:e4:71:87:13:e8: 43:4c:60:85:97:67:00:05:c1:3f:6e:06:3f:40:64:59:4a:2a: d9:b7:d6:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0RTIxMTAvBgNVBAUTKDYwMUFBM0ZENDc3MEJGQzY5QUYyNDA2RjJFODBFRDA4 RTdEQzZCNDMwHhcNMjUxMjA1MDI1OTU1WhcNMjUxMjEyMDI1OTU1WjAYMRYwFAYD VQQDEw02OTMyNGFhYi03ZjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoCvLM/Eec+6u4cLKLlJCW8jMkwwO2tjO7LYC4Od4e9saIV3gRyV3AGKJfya9 4nZvbFYXFTPMhROmoRJVZMyYcZZCmqUiarim/1PJBS38Xs9ioPOq9n0fMLhLRX0z FkYRGwAo7oqCGwttMP/QybHyFJ/JHFXo3XSffZacxKvCwL9+F6NunRICGY64j8dW 6H/OF8vcjmOOA89NE8IoJUPr1FkkuZTpHZr8bRGI+2UsidETgJYvaYV6TgwqHNhh VJjdRLy6L7jAwfLPuffPti5j2EcjGKzJBu6oemtlzm95tp9mYABfR/NH9MNsEpIx 7KHMHxS2yBPG60aAL/nyudCy2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkmZK5Y ayvvrDfTy57vOzJ1bX8TMB8GA1UdIwQYMBaAFGAao/1HcL/GmvJAby6A7Qjn3GtD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRFMi83M0VCRTZBMjM0 NkYxMUVGOTdDQTc1NDZDNEY5QUUwMi9ZQnFqX1Vkd3Y4YWE4a0J2TG9EdENPZmNh ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCcWpfVWR3djhhYThrQnZMb0R0Q09mY2EwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTRFMi83M0VCRTZBMjM0NkYxMUVGOTdDQTc1NDZDNEY5QUUwMi9ZQnFqX1Vkd3Y4 YWE4a0J2TG9EdENPZmNhME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK5CbJJpwZTRB58QE95gdGVV9bE6qqZXeo0+ngvI1kS0hMzpjYJQP3 zLzN0+J7xDgGh1dyDRVYBB2MSghPOKpzGaGdFYA0iC6H5QDLjduS/gnZPTk2yLPJ KdL+Un8+Q8mLCW9FZGTYq/bKj/tHPT09El6N75auw/W5uVAtr+QzW9lOuXQqm3zl kvA/xK+u+WzWx4T1+tfFSqjlMPkbUoqaJKiFPdWbBE9r8nbJ9OGnduUe0bLnU9It +H0z7+0xhNu8/ZZN31bNbKtK9/krEB2vd559+GK1bqTNXMU35LCIcFaCXorH5HGH E+hDTGCFl2cABcE/bgY/QGRZSirZt9a1 -----END CERTIFICATE-----Generated at Sun Dec 7 03:25:33 2025 by rpki-client