This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft File: UxdJCV5En9gqodtQ2oNAFyML3RM.mft (raw, json) Hash identifier: QiaUObADZuvo8BNg7M36pbXqA5gzVS7rhZF4vsqfqHY= Subject key identifier: C0:A1:B6:56:11:6B:57:59:15:87:94:1E:8D:97:62:6E:29:97:D8:99 Authority key identifier: 53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 Certificate issuer: /CN=A9117754/serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Certificate serial: 0BE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft Manifest number: 0BE1 Signing time: Mon 22 Dec 2025 18:24:55 +0000 Manifest this update: Mon 22 Dec 2025 18:24:54 +0000 Manifest next update: Mon 29 Dec 2025 18:24:54 +0000 Files and hashes: 1: UxdJCV5En9gqodtQ2oNAFyML3RM.crl (hash: MbsdOgXmA70OsEw7DcF7jrGoovOkthmWaaAa6wwY9sY=) 2: B5761C3E2C8E11EA83DAB436C4F9AE02.roa (hash: VE/5lNULYXEEuWID4sAqexSIpx9InEaDo4uE/0apCfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3049 (0xbe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117754, serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Validity Not Before: Dec 22 18:24:54 2025 GMT Not After : Dec 29 18:24:54 2025 GMT Subject: CN=69498cf7-3dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9a:85:53:13:29:7c:e1:2c:6f:91:cb:3a:d0: c9:63:d3:f7:d6:3e:9d:36:5e:ae:1d:b3:37:d8:93: a4:9c:d6:67:4e:fa:6b:35:3a:73:7d:7b:47:9c:84: b4:a9:e4:de:0a:2a:7d:9a:06:ba:be:9c:e6:4e:eb: ea:62:13:ec:52:1e:56:67:33:81:bd:f4:d8:02:fb: a2:0b:95:98:2d:b4:d8:38:fe:54:76:45:bf:32:5c: 88:ac:c6:60:31:a1:92:00:5b:a2:b1:5d:73:03:21: 3c:51:4d:dc:f5:ec:2e:6e:55:79:7e:28:fb:40:9c: 63:72:aa:ef:af:c4:ce:9f:7d:89:4a:ee:a0:59:0d: 46:07:79:7a:6b:c6:95:df:eb:7d:6f:bd:7a:73:85: 33:55:00:16:52:33:01:b2:60:56:37:b5:e9:ef:cc: 71:09:cf:08:3f:06:d9:a1:74:d4:b6:5f:f5:eb:11: 73:93:ba:87:c5:5c:8f:98:60:05:72:06:2a:e6:31: b9:1d:82:b5:67:ac:25:12:97:21:f1:df:bb:79:45: f5:12:7c:82:3a:6f:56:01:29:9a:8e:16:e5:d9:1a: 64:02:03:5e:7b:ea:8e:6b:56:32:14:91:53:76:e3: 77:12:dc:f2:d6:88:b5:d8:cb:e9:a7:f4:f6:d5:48: ac:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A1:B6:56:11:6B:57:59:15:87:94:1E:8D:97:62:6E:29:97:D8:99 X509v3 Authority Key Identifier: keyid:53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:51:9a:0b:0a:ac:68:7a:e2:bf:05:fa:7b:aa:de:09:3e:64: d0:f5:54:b5:30:3f:0a:88:08:99:bf:55:f9:ae:24:0c:98:da: be:f6:ff:a4:5c:7c:9f:2b:d6:68:25:b7:8b:8e:32:de:d7:a6: c3:08:45:02:47:ad:6a:fc:f3:a5:ff:de:54:0a:2c:7c:1f:d0: aa:53:83:55:97:26:a4:73:b8:cb:16:c9:8d:88:44:4d:ab:6f: d3:90:42:26:ea:36:48:1e:94:e7:c3:c7:6e:67:04:59:2a:5e: 99:f5:15:d5:af:51:12:16:33:dc:2b:a7:a2:a2:ff:e0:63:a0: 4e:52:6f:7d:a0:97:52:31:44:9c:23:1f:2b:01:d8:71:02:bd: b9:81:40:31:ee:a7:2f:56:06:56:40:c7:5b:dd:ea:d3:bf:2e: 8f:55:de:33:92:10:0d:a2:00:21:84:99:d8:2d:ef:b3:13:90: 51:7d:c5:ad:d3:73:64:ee:14:2f:c8:46:9d:df:24:98:0f:e6: 56:7b:4e:82:03:85:b5:cb:5c:1b:51:e1:8e:86:6c:dc:11:4b: 10:1c:e0:44:b6:f5:b5:a9:de:4d:1e:8c:5f:0d:f3:11:20:de: 5e:2f:5f:99:ee:c8:78:c7:90:14:ee:b7:ce:7d:d9:89:35:1b: 83:2d:3d:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3NTQxMTAvBgNVBAUTKDUzMTc0OTA5NUU0NDlGRDgyQUExREI1MERBODM0MDE3 MjMwQkREMTMwHhcNMjUxMjIyMTgyNDU0WhcNMjUxMjI5MTgyNDU0WjAYMRYwFAYD VQQDDA02OTQ5OGNmNy0zZGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJqFUxMpfOEsb5HLOtDJY9P31j6dNl6uHbM32JOknNZnTvprNTpzfXtHnIS0 qeTeCip9mga6vpzmTuvqYhPsUh5WZzOBvfTYAvuiC5WYLbTYOP5UdkW/MlyIrMZg MaGSAFuisV1zAyE8UU3c9ewublV5fij7QJxjcqrvr8TOn32JSu6gWQ1GB3l6a8aV 3+t9b716c4UzVQAWUjMBsmBWN7Xp78xxCc8IPwbZoXTUtl/16xFzk7qHxVyPmGAF cgYq5jG5HYK1Z6wlEpch8d+7eUX1EnyCOm9WASmajhbl2RpkAgNee+qOa1YyFJFT duN3Etzy1oi12Mvpp/T21Uis4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMChtlYR a1dZFYeUHo2XYm4pl9iZMB8GA1UdIwQYMBaAFFMXSQleRJ/YKqHbUNqDQBcjC90T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzc1NC84QjMxNDVBRTJD OEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45Z3FvZHRRMm9OQUZ5TUwz Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4ZEpDVjVFbjlncW9kdFEyb05BRnlNTDNSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Nzc1NC84QjMxNDVBRTJDOEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45 Z3FvZHRRMm9OQUZ5TUwzUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5UZoLCqxoeuK/Bfp7qt4JPmTQ9VS1MD8KiAiZv1X5riQMmNq+9v+k XHyfK9ZoJbeLjjLe16bDCEUCR61q/POl/95UCix8H9CqU4NVlyakc7jLFsmNiERN q2/TkEIm6jZIHpTnw8duZwRZKl6Z9RXVr1ESFjPcK6eiov/gY6BOUm99oJdSMUSc Ix8rAdhxAr25gUAx7qcvVgZWQMdb3erTvy6PVd4zkhANogAhhJnYLe+zE5BRfcWt 03Nk7hQvyEad3ySYD+ZWe06CA4W1y1wbUeGOhmzcEUsQHOBEtvW1qd5NHoxfDfMR IN5eL1+Z7sh4x5AU7rfOfdmJNRuDLT2e -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:07 2025 by rpki-client