This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft File: ymnk-Ceb-DMZDLciXOn922bT-VE.mft (raw, json) Hash identifier: BJ7ZkRhX9DA23T7S9IuuNJp0fMWZ5koCVhLmGUOiXBI= Subject key identifier: F2:D0:F1:BA:C9:2A:CE:BA:52:01:9D:4C:C8:99:4E:A3:24:18:F4:B3 Authority key identifier: CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 Certificate issuer: /CN=A911C14C/serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Certificate serial: 09D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft Manifest number: 09D2 Signing time: Thu 18 Dec 2025 19:30:38 +0000 Manifest this update: Thu 18 Dec 2025 19:30:38 +0000 Manifest next update: Thu 25 Dec 2025 19:30:38 +0000 Files and hashes: 1: ymnk-Ceb-DMZDLciXOn922bT-VE.crl (hash: qVA3FjSdkFgyT/pddUEdeh0/PvcCx2Kgm8pJIKz9FB0=) 2: 16E91232932D11EABE8CE524C4F9AE02.roa (hash: EqH7WmDV1P3xtcmJeaOld+bFagaXu060kUoogC5tHYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2521 (0x9d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C14C, serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Validity Not Before: Dec 18 19:30:38 2025 GMT Not After : Dec 25 19:30:38 2025 GMT Subject: CN=6944565e-f783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:65:d0:c3:42:ce:6f:45:ef:d0:81:74:f6:41: 21:19:fa:ae:c3:c4:a0:86:e8:f4:88:e7:49:34:08: d7:eb:6f:f0:1e:ac:0f:7c:25:13:05:44:55:e0:f9: 19:0f:b2:e1:5c:69:7e:d6:c6:2c:61:06:69:6b:91: 05:85:c2:6a:bf:8c:5e:37:21:aa:13:ef:7d:58:f5: 52:97:24:4f:3b:82:42:8a:98:60:76:6a:9e:c4:11: 30:78:57:2d:3a:aa:3d:fc:00:f5:be:03:75:53:d6: 3b:7e:bd:9f:ed:cc:3c:82:bc:33:be:81:fd:61:54: cf:c2:90:1b:71:fd:f8:52:c9:16:50:08:75:a1:79: 2b:e8:e7:dc:e3:b7:a2:57:89:0f:cd:86:21:22:90: f4:0a:68:c8:46:64:fe:20:5b:10:14:48:5a:bf:0d: 42:c7:9a:aa:8c:53:47:40:ee:16:75:90:ff:19:b1: 70:39:58:fc:45:68:e8:ac:36:c9:ef:d8:b6:27:21: 35:ff:66:1d:d1:06:d1:37:4d:9c:0e:5d:88:1d:23: 4b:b8:85:e7:53:89:4a:3b:e8:5e:ec:c0:20:21:70: f5:2f:26:67:5a:27:4a:b9:0c:dc:36:44:da:ed:e4: 4f:a6:74:37:0a:e3:57:ef:75:75:63:67:64:e9:2e: 61:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D0:F1:BA:C9:2A:CE:BA:52:01:9D:4C:C8:99:4E:A3:24:18:F4:B3 X509v3 Authority Key Identifier: keyid:CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:17:4a:ed:71:42:a1:08:0a:c5:7c:7d:1c:5c:df:d5:36:d4: c4:ab:4f:1d:b1:96:38:31:a2:e4:bd:8c:80:be:de:4d:58:48: ae:15:8a:a0:16:30:96:56:34:53:f2:96:18:96:e5:80:ce:ca: ec:f7:b9:4b:eb:c5:5b:e9:54:cc:17:14:27:3b:ed:94:79:90: d7:05:2c:94:60:f1:fa:40:7f:06:e2:5c:b8:a1:56:3d:f9:e8: f1:a5:7b:c5:94:a5:80:1e:f4:93:74:ea:4e:d4:59:12:72:07: 44:91:e9:7d:5a:c0:4f:66:37:e7:d7:a6:86:d3:d1:db:34:0f: 7a:fb:97:ae:29:62:4d:94:3b:19:4a:c5:60:2a:ff:be:ec:93: 71:19:c7:5d:22:ce:65:20:8b:c7:1a:b5:e4:7b:bf:6a:2f:4e: a0:2a:b3:d5:9e:e0:11:70:e4:e0:6e:70:d6:16:57:e5:ce:1c: 90:29:82:d5:b6:1f:50:31:bc:60:8d:e9:e0:33:42:f5:0e:fd: f1:a0:6b:e3:cf:17:fe:cc:41:7e:ab:ec:30:79:0e:9a:4b:4c: 23:62:61:5b:83:88:b8:d0:2d:1c:15:eb:b8:3f:d4:d8:e8:81: 48:f3:ab:33:ec:73:43:94:86:1f:d2:ad:f4:3d:49:c5:dc:a4: 62:2a:c2:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxNEMxMTAvBgNVBAUTKENBNjlFNEY4Mjc5QkY4MzMxOTBDQjcyMjVDRTlGRERC NjZEM0Y5NTEwHhcNMjUxMjE4MTkzMDM4WhcNMjUxMjI1MTkzMDM4WjAYMRYwFAYD VQQDDA02OTQ0NTY1ZS1mNzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGXQw0LOb0Xv0IF09kEhGfquw8Sghuj0iOdJNAjX62/wHqwPfCUTBURV4PkZ D7LhXGl+1sYsYQZpa5EFhcJqv4xeNyGqE+99WPVSlyRPO4JCiphgdmqexBEweFct Oqo9/AD1vgN1U9Y7fr2f7cw8grwzvoH9YVTPwpAbcf34UskWUAh1oXkr6Ofc47ei V4kPzYYhIpD0CmjIRmT+IFsQFEhavw1Cx5qqjFNHQO4WdZD/GbFwOVj8RWjorDbJ 79i2JyE1/2Yd0QbRN02cDl2IHSNLuIXnU4lKO+he7MAgIXD1LyZnWidKuQzcNkTa 7eRPpnQ3CuNX73V1Y2dk6S5hHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLQ8brJ Ks66UgGdTMiZTqMkGPSzMB8GA1UdIwQYMBaAFMpp5Pgnm/gzGQy3Ilzp/dtm0/lR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE0Qy8yQTM2MTEwQzkz MkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1ETVpETGNpWE9uOTIyYlQt VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltbmstQ2ViLURNWkRMY2lYT245MjJiVC1WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE0Qy8yQTM2MTEwQzkzMkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1E TVpETGNpWE9uOTIyYlQtVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACF0rtcUKhCArFfH0cXN/VNtTEq08dsZY4MaLkvYyAvt5NWEiuFYqg FjCWVjRT8pYYluWAzsrs97lL68Vb6VTMFxQnO+2UeZDXBSyUYPH6QH8G4ly4oVY9 +ejxpXvFlKWAHvSTdOpO1FkScgdEkel9WsBPZjfn16aG09HbNA96+5euKWJNlDsZ SsVgKv++7JNxGcddIs5lIIvHGrXke79qL06gKrPVnuARcOTgbnDWFlflzhyQKYLV th9QMbxgjengM0L1Dv3xoGvjzxf+zEF+q+wweQ6aS0wjYmFbg4i40C0cFeu4P9TY 6IFI86sz7HNDlIYf0q30PUnF3KRiKsIS -----END CERTIFICATE-----Generated at Fri Dec 19 20:15:40 2025 by rpki-client