This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft File: YBqj_Udwv8aa8kBvLoDtCOfca0M.mft (raw, json) Hash identifier: VhYvM2O0meEhTIELJdR2G6B2zoBQKLvtFB8Me7+Ieng= Subject key identifier: B8:6F:7F:0C:E5:95:83:DC:14:E0:91:39:84:68:0B:9F:57:00:76:EC Authority key identifier: 60:1A:A3:FD:47:70:BF:C6:9A:F2:40:6F:2E:80:ED:08:E7:DC:6B:43 Certificate issuer: /CN=A91954E2/serialNumber=601AA3FD4770BFC69AF2406F2E80ED08E7DC6B43 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft Manifest number: 011B Signing time: Thu 01 Jan 2026 04:20:53 +0000 Manifest this update: Thu 01 Jan 2026 04:20:53 +0000 Manifest next update: Thu 08 Jan 2026 04:20:53 +0000 Files and hashes: 1: YBqj_Udwv8aa8kBvLoDtCOfca0M.crl (hash: ERyDoe5bLc/kuQeGdQtvil0bibQSxzH/GlRESA5xVXo=) 2: CC8E710C347011EF9F04CE66C4F9AE02.roa (hash: zqqFgR8hZJd3tGWwh69g86T2JXS+0860K/pt4Nn27L8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.crl rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 04:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91954E2, serialNumber=601AA3FD4770BFC69AF2406F2E80ED08E7DC6B43 Validity Not Before: Jan 1 04:20:53 2026 GMT Not After : Jan 8 04:20:53 2026 GMT Subject: CN=6955f625-3ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:24:6f:7c:78:69:1c:2f:a0:7a:5e:76:88:33: f9:56:28:91:b6:36:92:82:5f:a8:b5:13:4f:2f:9a: d9:27:d7:a7:86:55:c9:14:e6:1a:a8:4d:ea:8b:dc: ea:c9:9c:54:73:79:a5:59:87:7f:06:8f:8a:10:29: 39:e6:16:9c:a9:0e:f0:b0:79:ba:ca:ba:74:bf:9c: 36:5e:17:e1:22:c3:3e:70:0b:ab:85:78:95:a6:86: 49:30:3b:a7:1b:34:fa:8c:5d:1b:46:24:43:e6:07: 31:1a:bd:4d:f5:f6:7a:11:6f:84:c2:e3:89:48:87: 9b:53:0a:96:23:01:ba:a3:f6:30:2f:09:e1:be:cd: 78:b6:16:7a:01:90:4b:8c:b8:c8:c6:9e:3a:f3:e3: ec:79:60:fb:03:1c:aa:8a:8b:53:fb:a8:16:b2:53: d6:1c:9a:d6:d9:a5:d5:b1:f9:47:93:38:8b:dc:1f: 15:3f:8e:11:05:4d:b9:ad:09:ac:d2:fd:64:e7:30: 5b:79:ed:9c:9f:b7:79:98:14:d8:c7:6b:84:7b:4f: ce:15:8a:52:d6:64:58:05:24:b5:84:72:b0:91:86: 3b:ad:48:31:e8:d4:e7:10:98:70:24:77:03:c8:69: 8b:b5:f7:6f:69:94:d0:b8:f8:c8:26:7b:15:fb:01: af:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6F:7F:0C:E5:95:83:DC:14:E0:91:39:84:68:0B:9F:57:00:76:EC X509v3 Authority Key Identifier: keyid:60:1A:A3:FD:47:70:BF:C6:9A:F2:40:6F:2E:80:ED:08:E7:DC:6B:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:07:86:57:e8:0e:28:c6:72:8f:f1:5c:14:75:49:dc:4f:9a: 93:ed:8d:87:c9:db:fc:1c:6b:28:53:29:d0:71:7a:06:2d:65: 37:c4:3f:d9:b5:ab:4c:f1:d2:25:df:9d:db:de:9e:b6:66:9c: 78:57:6a:78:46:46:b0:44:99:05:ce:79:24:fd:7f:c0:92:cf: 6e:90:e5:e9:98:72:f3:fc:09:8e:d8:eb:fa:6f:91:2f:07:ef: 56:24:65:1f:e7:af:8d:c8:57:50:c7:44:31:c2:f2:6d:9b:1a: 75:fc:1a:51:98:1f:33:07:ec:3d:dd:c5:8c:3a:11:ec:aa:d3: e6:89:04:e8:f8:96:93:d7:d2:61:06:15:07:fd:6a:71:89:6b: 7d:4f:3c:1e:9e:74:c0:e5:e7:a5:8d:7a:ec:ed:49:db:48:9d: da:1c:66:b7:a0:11:2a:9e:04:fd:d4:36:87:3b:8a:a4:d2:1c: f3:0d:a6:bd:6e:4b:c8:94:db:8c:fe:07:82:a4:aa:d4:3f:e7: 62:79:51:1a:5e:01:ab:53:9e:19:4e:89:4e:c7:45:ce:dd:06: 1c:46:67:55:57:94:9e:75:7f:0e:af:cd:e7:81:fa:3d:43:00: 54:1d:61:ac:fb:e0:ee:2f:e3:cd:b4:e9:d0:2a:22:3e:2a:64: 8e:da:47:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0RTIxMTAvBgNVBAUTKDYwMUFBM0ZENDc3MEJGQzY5QUYyNDA2RjJFODBFRDA4 RTdEQzZCNDMwHhcNMjYwMTAxMDQyMDUzWhcNMjYwMTA4MDQyMDUzWjAYMRYwFAYD VQQDDA02OTU1ZjYyNS0zZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSRvfHhpHC+gel52iDP5ViiRtjaSgl+otRNPL5rZJ9enhlXJFOYaqE3qi9zq yZxUc3mlWYd/Bo+KECk55hacqQ7wsHm6yrp0v5w2XhfhIsM+cAurhXiVpoZJMDun GzT6jF0bRiRD5gcxGr1N9fZ6EW+EwuOJSIebUwqWIwG6o/YwLwnhvs14thZ6AZBL jLjIxp468+PseWD7AxyqiotT+6gWslPWHJrW2aXVsflHkziL3B8VP44RBU25rQms 0v1k5zBbee2cn7d5mBTYx2uEe0/OFYpS1mRYBSS1hHKwkYY7rUgx6NTnEJhwJHcD yGmLtfdvaZTQuPjIJnsV+wGvOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhvfwzl lYPcFOCROYRoC59XAHbsMB8GA1UdIwQYMBaAFGAao/1HcL/GmvJAby6A7Qjn3GtD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRFMi83M0VCRTZBMjM0 NkYxMUVGOTdDQTc1NDZDNEY5QUUwMi9ZQnFqX1Vkd3Y4YWE4a0J2TG9EdENPZmNh ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCcWpfVWR3djhhYThrQnZMb0R0Q09mY2EwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTRFMi83M0VCRTZBMjM0NkYxMUVGOTdDQTc1NDZDNEY5QUUwMi9ZQnFqX1Vkd3Y4 YWE4a0J2TG9EdENPZmNhME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDB4ZX6A4oxnKP8VwUdUncT5qT7Y2Hydv8HGsoUynQcXoGLWU3xD/Z tatM8dIl353b3p62Zpx4V2p4RkawRJkFznkk/X/Aks9ukOXpmHLz/AmO2Ov6b5Ev B+9WJGUf56+NyFdQx0QxwvJtmxp1/BpRmB8zB+w93cWMOhHsqtPmiQTo+JaT19Jh BhUH/WpxiWt9TzwennTA5eeljXrs7UnbSJ3aHGa3oBEqngT91DaHO4qk0hzzDaa9 bkvIlNuM/geCpKrUP+dieVEaXgGrU54ZTolOx0XO3QYcRmdVV5SedX8Or83ngfo9 QwBUHWGs++DuL+PNtOnQKiI+KmSO2kdc -----END CERTIFICATE-----Generated at Thu Jan 1 12:31:27 2026 by rpki-client