This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft File: uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft (raw, json) Hash identifier: 2Y/Ngr5YmaHV7/DEFl346Tlhuv+L0UCfXNowzj8mQO8= Subject key identifier: C7:D5:D6:31:ED:A7:A7:D4:0C:7D:20:84:7C:BC:86:E7:73:88:1D:0E Authority key identifier: B8:AD:8D:91:6C:D9:48:2B:6D:A5:5D:30:7C:E9:5C:07:A9:5B:2F:74 Certificate issuer: /CN=A91103CF/serialNumber=B8AD8D916CD9482B6DA55D307CE95C07A95B2F74 Certificate serial: 03FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft Manifest number: 03F2 Signing time: Mon 22 Dec 2025 23:36:05 +0000 Manifest this update: Mon 22 Dec 2025 23:36:04 +0000 Manifest next update: Mon 29 Dec 2025 23:36:04 +0000 Files and hashes: 1: uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl (hash: znF3blf1EBlFxELTZhQgv3v19iy2P3km6cvXwLKCwsg=) 2: 931A51C07F5811EE82ECE456C4F9AE02.roa (hash: WWLeH3632fyjkdTa5V1Kbc7nqGm176NLqMwGAoiNN0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1019 (0x3fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91103CF, serialNumber=B8AD8D916CD9482B6DA55D307CE95C07A95B2F74 Validity Not Before: Dec 22 23:36:04 2025 GMT Not After : Dec 29 23:36:04 2025 GMT Subject: CN=6949d5e5-a72f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:34:cc:b1:49:b7:03:1f:31:02:a5:9d:f6:34: 60:f2:e9:74:7e:b0:4e:0a:9b:e7:19:fd:d1:99:cb: f0:86:10:0e:0f:4f:46:12:e3:cd:80:67:c0:41:3e: 5b:8a:bf:96:25:e9:49:33:c0:6f:b7:64:44:b1:ce: 26:e2:26:eb:93:32:18:af:fb:1d:ea:70:d2:de:1a: e0:60:b1:08:5a:4c:ba:6e:dd:a6:26:85:a1:d8:d9: a4:17:b8:b9:b7:92:a5:c7:88:8e:23:50:86:11:82: c5:c0:91:40:cf:9e:68:c1:ec:8a:01:7e:74:15:a0: a2:2c:78:22:3b:93:88:76:13:1b:16:bd:0e:1e:1a: 5c:42:5a:2e:4c:a7:db:1f:ec:cb:52:62:78:0b:5b: bb:cc:8c:94:fa:fb:0a:f8:da:69:68:ff:49:41:01: b9:6e:4f:38:9f:92:01:4f:86:48:03:cd:e3:cc:8c: cc:a4:b3:e4:97:ba:5d:e7:4c:60:88:39:62:2f:b3: 19:ff:84:6f:59:99:96:68:5c:73:45:fa:2b:ee:aa: 76:38:1e:32:60:d0:43:01:e1:3e:c7:7e:f5:2b:e0: ea:4c:12:a0:c9:a8:73:a2:0c:c0:b8:7b:f1:f1:6f: f9:04:df:df:55:93:8c:35:3a:07:93:20:94:23:83: fa:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D5:D6:31:ED:A7:A7:D4:0C:7D:20:84:7C:BC:86:E7:73:88:1D:0E X509v3 Authority Key Identifier: keyid:B8:AD:8D:91:6C:D9:48:2B:6D:A5:5D:30:7C:E9:5C:07:A9:5B:2F:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:73:d8:06:97:31:9e:f3:40:0f:b7:8e:52:a0:63:99:be:a1: b6:70:82:3e:d5:6a:f0:18:48:a3:1c:9f:cd:45:94:a7:86:ec: bb:57:3e:09:63:6a:35:93:df:aa:b1:d2:d2:d8:cd:1b:91:c5: fa:ac:d0:18:4d:81:24:d8:c9:a0:b0:09:75:70:59:99:bb:a2: 5c:0c:59:b3:51:52:94:9f:a6:a8:fd:0c:72:c2:14:1b:92:cd: dc:a3:66:8c:87:bc:4d:76:5c:cf:50:51:53:ec:1b:09:48:88: 07:84:4c:56:ec:df:ad:32:9d:d9:92:b4:ac:e9:70:46:89:64: c5:a5:79:85:78:32:2b:b5:a3:af:59:53:62:14:9a:6f:e5:ab: 08:72:c6:73:52:95:b6:eb:0c:6e:28:02:fb:1a:da:52:06:e7: d6:68:10:5c:04:2f:e7:10:62:25:1d:08:8f:ad:f6:76:8e:9f: 97:af:a8:cb:29:c9:bd:3b:30:9c:90:12:d3:3a:db:08:b7:6e: d5:c6:90:f5:be:71:2d:dd:2f:00:d6:14:25:91:55:de:c5:50: e8:1c:3d:24:b0:bc:99:de:e0:7f:b9:07:e3:24:7b:e0:24:45: a3:05:71:21:d3:66:01:65:14:7a:36:9e:27:db:91:65:15:40: 43:e4:df:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAzQ0YxMTAvBgNVBAUTKEI4QUQ4RDkxNkNEOTQ4MkI2REE1NUQzMDdDRTk1QzA3 QTk1QjJGNzQwHhcNMjUxMjIyMjMzNjA0WhcNMjUxMjI5MjMzNjA0WjAYMRYwFAYD VQQDDA02OTQ5ZDVlNS1hNzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjTMsUm3Ax8xAqWd9jRg8ul0frBOCpvnGf3RmcvwhhAOD09GEuPNgGfAQT5b ir+WJelJM8Bvt2REsc4m4ibrkzIYr/sd6nDS3hrgYLEIWky6bt2mJoWh2NmkF7i5 t5Klx4iOI1CGEYLFwJFAz55oweyKAX50FaCiLHgiO5OIdhMbFr0OHhpcQlouTKfb H+zLUmJ4C1u7zIyU+vsK+NppaP9JQQG5bk84n5IBT4ZIA83jzIzMpLPkl7pd50xg iDliL7MZ/4RvWZmWaFxzRfor7qp2OB4yYNBDAeE+x371K+DqTBKgyahzogzAuHvx 8W/5BN/fVZOMNToHkyCUI4P6AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfV1jHt p6fUDH0ghHy8hudziB0OMB8GA1UdIwQYMBaAFLitjZFs2UgrbaVdMHzpXAepWy90 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDNDRi8xN0Q2RTRDMkE2 OEExMUVDQTlBNjM1NTFDNEY5QUUwMi91SzJOa1d6WlNDdHRwVjB3Zk9sY0I2bGJM M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VLMk5rV3paU0N0dHBWMHdmT2xjQjZsYkwzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDNDRi8xN0Q2RTRDMkE2OEExMUVDQTlBNjM1NTFDNEY5QUUwMi91SzJOa1d6WlND dHRwVjB3Zk9sY0I2bGJMM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhc9gGlzGe80APt45SoGOZvqG2cII+1WrwGEijHJ/NRZSnhuy7Vz4J Y2o1k9+qsdLS2M0bkcX6rNAYTYEk2MmgsAl1cFmZu6JcDFmzUVKUn6ao/QxywhQb ks3co2aMh7xNdlzPUFFT7BsJSIgHhExW7N+tMp3ZkrSs6XBGiWTFpXmFeDIrtaOv WVNiFJpv5asIcsZzUpW26wxuKAL7GtpSBufWaBBcBC/nEGIlHQiPrfZ2jp+Xr6jL Kcm9OzCckBLTOtsIt27VxpD1vnEt3S8A1hQlkVXexVDoHD0ksLyZ3uB/uQfjJHvg JEWjBXEh02YBZRR6Np4n25FlFUBD5N/m -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:47 2025 by rpki-client