This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft File: YRGAfoKKxPmEJpPThhGVLfA9ckc.mft (raw, json) Hash identifier: Nj1Cl8xOLIVc0oPxjeoFoFo6VPfq3+Lua2PiarpVh2c= Subject key identifier: A0:CC:15:48:91:EF:9B:D3:52:ED:30:CB:0B:C3:9E:60:DF:1B:48:A4 Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47 Certificate issuer: /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247 Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft Manifest number: 01BE Signing time: Fri 19 Dec 2025 02:17:59 +0000 Manifest this update: Fri 19 Dec 2025 02:17:59 +0000 Manifest next update: Fri 26 Dec 2025 02:17:59 +0000 Files and hashes: 1: YRGAfoKKxPmEJpPThhGVLfA9ckc.crl (hash: wCOt8AitLDNtPsj+FyMpcEPU//uliiOuuXUpol5tf5o=) 2: FBE34DB8538011EFB6264579C4F9AE02.roa (hash: TcFb5btGGuGcCTENXu84bKs3B+lnqciAGdu0W4Z7mP0=) 3: C778D8FA402A11EEAC7DEF72C4F9AE02.roa (hash: V8EYXGGM5ehfMXNVHQoJfhAKwYo57AeE/3ynyZdkMrY=) 4: 3AFA35E04B2E11EEA07FEE34C4F9AE02.roa (hash: N6Bn0tjkAYOIirhCnX+L9qAa4FcrjkrvnPohqveujZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D92, serialNumber=6111807E828AC4F9842693D38611952DF03D7247 Validity Not Before: Dec 19 02:17:59 2025 GMT Not After : Dec 26 02:17:59 2025 GMT Subject: CN=6944b5d7-a2bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:48:fd:7c:a3:aa:d4:be:f4:39:49:cd:f8:7e: 54:f1:6c:eb:96:33:7f:dc:8e:c8:05:25:79:b8:e0: 8a:08:65:da:ed:2f:ec:4a:c9:5b:7e:49:07:1b:e8: e3:42:d1:79:28:73:90:de:57:a2:07:0a:aa:7d:ea: 48:a0:08:64:27:86:dc:ce:83:28:0a:53:63:d9:6b: 97:85:93:3f:8e:b7:44:b0:6f:fe:70:06:5f:8c:b5: af:2b:83:b2:b7:96:48:18:ec:3f:37:f7:8b:60:dc: 01:a3:74:7f:ae:ca:73:2d:d7:1f:de:4f:e5:88:ac: 2c:6c:41:14:56:df:89:0c:1a:b3:9a:82:55:a2:0d: 8b:2e:92:df:b6:d6:ad:ef:08:fb:80:5c:ee:0d:d0: 2d:e3:c4:25:25:3a:db:05:72:bc:df:8a:cb:30:37: c0:3d:05:f8:2a:7a:96:4b:15:5a:c3:6c:13:3d:84: 30:c8:fe:bc:36:3e:3e:0a:f2:2f:3c:8d:1b:63:11: a6:5b:39:ad:46:98:92:18:f4:79:d8:f1:4f:20:9d: 90:1f:b2:2b:33:ec:00:28:a3:ea:62:64:55:7d:3a: bf:dc:af:f3:a4:79:1e:91:c9:bc:ff:d8:cd:a8:e4: 04:5b:7d:a7:07:fd:8f:d1:bf:0e:f8:19:fb:99:6a: 5f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CC:15:48:91:EF:9B:D3:52:ED:30:CB:0B:C3:9E:60:DF:1B:48:A4 X509v3 Authority Key Identifier: keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b0:8d:53:db:b8:82:6c:94:ab:d6:b9:9e:e9:87:73:0d:8d: b5:79:10:bf:d7:83:1e:bd:3b:f3:f8:ad:1b:06:f3:f7:1c:0a: 2b:23:94:f1:87:89:66:c1:69:5d:b9:27:61:42:2b:bd:90:d7: 26:6c:e0:08:22:11:f1:f7:59:34:20:ac:e2:30:5d:ad:0f:35: 32:77:3b:74:a6:b3:c7:c0:af:4c:85:d5:18:e9:bd:41:78:aa: a2:71:15:14:6b:72:2c:3e:41:ab:2f:45:47:ef:ad:9f:bf:f7: 1f:c7:2a:d3:fc:93:9b:38:53:25:8e:68:7e:c9:a1:0e:02:a5: 3e:f4:f8:b1:ec:98:d8:dc:6b:c0:75:d9:6f:ce:73:5a:03:96: 2f:85:f3:d7:4c:d9:2a:1d:aa:ea:c0:89:bc:4c:62:bc:b6:d4: f3:ea:c3:9e:7f:59:6b:d8:05:b3:09:67:eb:0e:c2:09:88:d4: fc:7c:61:18:13:44:20:c5:bc:42:1d:45:6b:4c:dc:5c:6d:37: e1:b1:2c:06:8a:b3:de:c3:c2:ae:ce:97:a7:0e:82:c3:34:e4: 38:e7:31:12:83:65:b4:8f:5a:92:5d:48:cd:46:bd:11:68:5b: 44:88:8d:aa:1c:62:8d:fb:8e:3f:66:b6:20:90:2e:5a:37:e4: 91:7f:d2:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEOTIxMTAvBgNVBAUTKDYxMTE4MDdFODI4QUM0Rjk4NDI2OTNEMzg2MTE5NTJE RjAzRDcyNDcwHhcNMjUxMjE5MDIxNzU5WhcNMjUxMjI2MDIxNzU5WjAYMRYwFAYD VQQDDA02OTQ0YjVkNy1hMmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUj9fKOq1L70OUnN+H5U8WzrljN/3I7IBSV5uOCKCGXa7S/sSslbfkkHG+jj QtF5KHOQ3leiBwqqfepIoAhkJ4bczoMoClNj2WuXhZM/jrdEsG/+cAZfjLWvK4Oy t5ZIGOw/N/eLYNwBo3R/rspzLdcf3k/liKwsbEEUVt+JDBqzmoJVog2LLpLfttat 7wj7gFzuDdAt48QlJTrbBXK834rLMDfAPQX4KnqWSxVaw2wTPYQwyP68Nj4+CvIv PI0bYxGmWzmtRpiSGPR52PFPIJ2QH7IrM+wAKKPqYmRVfTq/3K/zpHkekcm8/9jN qOQEW32nB/2P0b8O+Bn7mWpfPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDMFUiR 75vTUu0wywvDnmDfG0ikMB8GA1UdIwQYMBaAFGERgH6CisT5hCaT04YRlS3wPXJH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ5Mi8zNTc3OThCMDQw MkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQbUVKcFBUaGhHVkxmQTlj a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSR0Fmb0tLeFBtRUpwUFRoaEdWTGZBOWNrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUQ5Mi8zNTc3OThCMDQwMkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQ bUVKcFBUaGhHVkxmQTlja2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAasI1T27iCbJSr1rme6YdzDY21eRC/14MevTvz+K0bBvP3HAorI5Tx h4lmwWlduSdhQiu9kNcmbOAIIhHx91k0IKziMF2tDzUydzt0prPHwK9MhdUY6b1B eKqicRUUa3IsPkGrL0VH762fv/cfxyrT/JObOFMljmh+yaEOAqU+9Pix7JjY3GvA ddlvznNaA5YvhfPXTNkqHarqwIm8TGK8ttTz6sOef1lr2AWzCWfrDsIJiNT8fGEY E0QgxbxCHUVrTNxcbTfhsSwGirPew8KuzpenDoLDNOQ45zESg2W0j1qSXUjNRr0R aFtEiI2qHGKN+44/ZrYgkC5aN+SRf9IF -----END CERTIFICATE-----Generated at Fri Dec 19 21:59:43 2025 by rpki-client