This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft File: UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft (raw, json) Hash identifier: 8qHQS1eYgO173/hUUtKAvLzSbQTrrPgQzrP1JJv6jg4= Subject key identifier: A4:99:EA:54:22:7F:BD:5D:DD:85:3D:73:D4:37:60:0F:88:8D:7E:8B Authority key identifier: 53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56 Certificate issuer: /CN=A911BAD6/serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656 Certificate serial: 027F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft Manifest number: 0274 Signing time: Fri 19 Dec 2025 00:50:30 +0000 Manifest this update: Fri 19 Dec 2025 00:50:30 +0000 Manifest next update: Fri 26 Dec 2025 00:50:30 +0000 Files and hashes: 1: UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl (hash: 8TCRL3h8IrydgLEpp3WombG0fDpdRfDrovvcK1+MVlc=) 2: B288EC9C870811F0A371DD81C4F9AE02.roa (hash: B822H39ccq9AkgBM7KMLjKKRoyj+1eXb0PxHzSH94G0=) 3: 35CBA9EC70D311F08BF5B035C4F9AE02.roa (hash: vwYJIXjTo9ECl3lyEIwlgLb2E4b1+3qq0PZxG+xCgow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 639 (0x27f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BAD6, serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656 Validity Not Before: Dec 19 00:50:30 2025 GMT Not After : Dec 26 00:50:30 2025 GMT Subject: CN=6944a156-dbb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ae:76:99:3c:e2:c4:f5:e6:ad:f8:ce:29:03: ef:a4:8d:6d:03:0f:ff:0d:b9:7f:6a:39:e1:a7:0a: 15:bc:45:e7:99:8e:87:ac:83:e2:6e:22:14:01:a4: a8:12:9d:d5:3f:37:ba:2f:30:0f:3d:31:e3:d6:b3: 30:42:cf:b2:67:b1:cb:32:63:b4:76:40:8f:dd:91: 45:a8:0e:77:d3:96:ef:87:d1:d9:4f:86:e4:17:f4: 69:0d:3e:97:13:73:8f:d9:d4:ca:2c:36:d6:4a:57: 95:23:11:75:ed:8f:21:a0:d0:f1:ad:e6:c6:dd:73: 81:b7:16:97:1b:50:64:2f:f4:30:3c:74:31:34:68: dc:a1:ac:e6:98:b8:34:9a:05:57:d3:c2:ef:36:35: 2f:6e:40:94:bc:4e:60:9b:0d:6e:79:2b:9b:46:a6: c8:8f:5a:86:d8:9c:d1:9c:7c:55:92:5e:bf:e0:92: fd:85:0d:b9:41:81:1f:65:e2:4b:8a:5e:68:38:4c: f6:67:da:59:2e:1e:99:8f:33:69:64:43:61:17:4c: 09:17:6b:a1:11:79:f5:52:d1:c1:e7:58:d3:90:4a: f0:7a:5c:62:60:cc:31:c4:76:38:e4:cc:0f:d1:be: 09:ac:9e:16:24:f3:62:7e:89:81:4a:09:7d:0f:4b: 9a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:99:EA:54:22:7F:BD:5D:DD:85:3D:73:D4:37:60:0F:88:8D:7E:8B X509v3 Authority Key Identifier: keyid:53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:1d:f3:96:d8:e4:37:41:e2:11:b9:75:8d:ac:a2:37:1a:18: d6:26:be:28:92:fe:56:53:aa:6e:9e:30:cb:7f:8e:4a:65:12: 94:f3:34:2f:69:cb:57:3c:c4:f7:f5:04:a9:bb:e7:44:5f:bb: 7d:37:59:d2:77:93:7e:4b:8d:ab:88:14:8d:ed:39:55:2a:9b: 71:4d:85:63:a6:de:02:37:c7:3d:59:fe:1c:dd:e0:57:1e:14: 20:c3:ae:8d:1f:c7:d8:84:85:f4:14:f6:fe:4d:e9:92:24:ff: 8a:a8:54:9d:35:fd:9a:52:54:8b:78:92:34:f0:63:74:1b:0c: d3:13:24:d6:f9:97:29:a4:09:f3:e0:98:45:32:73:8b:74:72: 0f:00:dc:9d:bc:72:ab:29:e6:af:de:bc:f8:47:6e:db:01:92: 48:95:5f:0a:95:6f:05:02:a2:3c:b5:5f:8d:a9:e6:a7:a6:bf: a2:ab:71:04:a9:3b:a8:18:a3:ac:9f:64:d6:24:38:33:5b:5f: bc:12:3a:e6:4a:42:4b:be:ab:04:4b:04:7f:99:13:c2:65:01: 33:e2:18:92:f8:21:79:db:54:34:8c:07:a1:94:78:52:8c:0c: c9:2d:a3:5a:25:c0:82:ea:3d:6e:35:31:22:9e:c3:fb:07:32: e2:10:f3:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJBRDYxMTAvBgNVBAUTKDUzMzJGOUFGMzA1MkNGM0Y4NUVBQkREMEFBRDY4MTUy Mzk1MkU2NTYwHhcNMjUxMjE5MDA1MDMwWhcNMjUxMjI2MDA1MDMwWjAYMRYwFAYD VQQDDA02OTQ0YTE1Ni1kYmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo652mTzixPXmrfjOKQPvpI1tAw//Dbl/ajnhpwoVvEXnmY6HrIPibiIUAaSo Ep3VPze6LzAPPTHj1rMwQs+yZ7HLMmO0dkCP3ZFFqA5305bvh9HZT4bkF/RpDT6X E3OP2dTKLDbWSleVIxF17Y8hoNDxrebG3XOBtxaXG1BkL/QwPHQxNGjcoazmmLg0 mgVX08LvNjUvbkCUvE5gmw1ueSubRqbIj1qG2JzRnHxVkl6/4JL9hQ25QYEfZeJL il5oOEz2Z9pZLh6ZjzNpZENhF0wJF2uhEXn1UtHB51jTkErwelxiYMwxxHY45MwP 0b4JrJ4WJPNifomBSgl9D0uayQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSZ6lQi f71d3YU9c9Q3YA+IjX6LMB8GA1UdIwQYMBaAFFMy+a8wUs8/heq90KrWgVI5UuZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkFENi9ENjRGNEU5QzNB RjIxMUVEQTg0MkM1NzZDNEY5QUUwMi9Vekw1cnpCU3p6LUY2cjNRcXRhQlVqbFM1 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6TDVyekJTenotRjZyM1FxdGFCVWpsUzVsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkFENi9ENjRGNEU5QzNBRjIxMUVEQTg0MkM1NzZDNEY5QUUwMi9Vekw1cnpCU3p6 LUY2cjNRcXRhQlVqbFM1bFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKHfOW2OQ3QeIRuXWNrKI3GhjWJr4okv5WU6punjDLf45KZRKU8zQv actXPMT39QSpu+dEX7t9N1nSd5N+S42riBSN7TlVKptxTYVjpt4CN8c9Wf4c3eBX HhQgw66NH8fYhIX0FPb+TemSJP+KqFSdNf2aUlSLeJI08GN0GwzTEyTW+ZcppAnz 4JhFMnOLdHIPANydvHKrKeav3rz4R27bAZJIlV8KlW8FAqI8tV+Nqeanpr+iq3EE qTuoGKOsn2TWJDgzW1+8EjrmSkJLvqsESwR/mRPCZQEz4hiS+CF521Q0jAehlHhS jAzJLaNaJcCC6j1uNTEinsP7BzLiEPMX -----END CERTIFICATE-----Generated at Fri Dec 19 15:23:15 2025 by rpki-client