This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft File: k-ucLPZOblbp6NVWzMompR6L26A.mft (raw, json) Hash identifier: QWjfr9kILMgM4imMaMm6Ulm5sTQyXTQFrTm5FD/GKNA= Subject key identifier: 3D:73:76:A7:97:5B:D3:DD:B6:C8:31:CA:67:BE:37:7D:5A:31:56:68 Authority key identifier: 93:EB:9C:2C:F6:4E:6E:56:E9:E8:D5:56:CC:CA:26:A5:1E:8B:DB:A0 Certificate issuer: /CN=A911FBDF/serialNumber=93EB9C2CF64E6E56E9E8D556CCCA26A51E8BDBA0 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-ucLPZOblbp6NVWzMompR6L26A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft Manifest number: 69 Signing time: Wed 17 Dec 2025 06:33:02 +0000 Manifest this update: Wed 17 Dec 2025 06:33:01 +0000 Manifest next update: Wed 24 Dec 2025 06:33:01 +0000 Files and hashes: 1: k-ucLPZOblbp6NVWzMompR6L26A.crl (hash: yr4IW+Uceblgw8OVbD3eQ8aEA1zGsEUf+hRWbW5XQVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.crl rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-ucLPZOblbp6NVWzMompR6L26A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 06:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FBDF, serialNumber=93EB9C2CF64E6E56E9E8D556CCCA26A51E8BDBA0 Validity Not Before: Dec 17 06:33:01 2025 GMT Not After : Dec 24 06:33:01 2025 GMT Subject: CN=69424e9d-5dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3b:7b:d7:a7:fc:9e:34:40:f9:7c:68:f7:8e: e0:c0:df:65:1b:90:58:64:c8:f2:50:57:14:3c:d6: 33:36:eb:ac:1b:c3:43:11:f1:d9:e0:5a:bf:de:b9: b9:62:23:b5:e3:05:4d:f2:38:c1:d3:c0:ae:9a:2b: 32:e5:59:64:e6:a5:b0:92:be:96:c4:9a:1e:24:02: ef:dd:3f:9e:f2:df:7f:37:de:ae:60:9e:00:97:e4: 06:27:ed:2d:1a:a8:63:fd:e7:2d:a3:2e:13:18:47: af:67:7c:11:92:d8:51:67:72:f5:c6:55:8b:c6:f9: 97:13:28:02:8a:6e:0c:28:4f:f7:b8:00:bf:9d:91: 64:f8:fd:49:be:ef:ee:11:c1:42:e6:39:2f:f6:39: 17:df:e4:b9:c0:a4:74:99:4b:d5:42:33:83:b6:63: e5:98:24:26:67:80:c1:2c:66:5e:6a:76:81:79:a4: b9:6d:ad:4d:49:35:da:21:03:1c:02:80:5f:17:3b: 5c:bb:e3:cb:d3:33:76:17:e5:17:69:96:db:89:f9: bb:e8:05:b7:7e:f9:d8:b9:71:34:41:b0:ba:68:e2: 38:5d:8a:7c:94:8a:fd:8b:be:61:ca:85:c6:ea:40: 5a:a2:e8:dd:bc:6e:a9:41:5f:2a:0d:55:9d:a1:bc: c5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:73:76:A7:97:5B:D3:DD:B6:C8:31:CA:67:BE:37:7D:5A:31:56:68 X509v3 Authority Key Identifier: keyid:93:EB:9C:2C:F6:4E:6E:56:E9:E8:D5:56:CC:CA:26:A5:1E:8B:DB:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-ucLPZOblbp6NVWzMompR6L26A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:54:b6:29:8f:c1:fc:09:71:92:eb:49:5b:2f:bf:16:6e:ee: ea:dd:7a:61:5c:9a:94:52:ee:e2:9a:fa:f6:1a:dc:12:69:ce: 56:12:c5:bb:3b:d2:86:3f:c2:df:e2:0e:2f:56:c4:ec:fc:d2: 78:24:8c:0f:7f:7c:5d:d0:65:d5:d7:81:50:bf:fe:36:8c:11: 2c:17:c2:f2:fa:24:61:85:ce:50:71:93:e9:73:d0:42:b8:3a: a3:89:0a:92:93:9e:1d:95:b5:e3:1d:08:a3:e7:e5:32:11:5f: 80:2a:c4:9e:fb:b5:23:03:bb:cf:53:a1:ae:d5:e4:8a:90:f9: ab:81:7d:04:fa:c0:61:17:71:b6:20:04:09:d4:b8:d7:a6:9c: 8d:e1:84:78:7d:41:41:9e:70:07:27:cd:b2:6b:6b:f7:bc:11: 19:68:2b:bd:29:a3:b5:c7:20:c8:b1:85:74:dd:1d:79:e0:d7: cb:bc:6a:1a:4e:f9:45:a7:57:1f:71:cc:6d:0f:96:e7:91:48: 1f:38:17:e2:a0:35:85:07:bc:95:f6:37:b1:a7:28:69:bf:41: ce:99:30:c9:9b:3f:51:22:95:05:ef:2e:e7:71:b7:ff:01:41: 0d:ce:8e:bf:eb:c4:f1:f7:3f:52:e5:2b:ff:87:f3:8e:43:7d: d0:65:85:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RkJERjExMC8GA1UEBRMoOTNFQjlDMkNGNjRFNkU1NkU5RThENTU2Q0NDQTI2QTUx RThCREJBMDAeFw0yNTEyMTcwNjMzMDFaFw0yNTEyMjQwNjMzMDFaMBgxFjAUBgNV BAMMDTY5NDI0ZTlkLTVkZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoO3vXp/yeNED5fGj3juDA32UbkFhkyPJQVxQ81jM266wbw0MR8dngWr/eubli I7XjBU3yOMHTwK6aKzLlWWTmpbCSvpbEmh4kAu/dP57y33833q5gngCX5AYn7S0a qGP95y2jLhMYR69nfBGS2FFncvXGVYvG+ZcTKAKKbgwoT/e4AL+dkWT4/Um+7+4R wULmOS/2ORff5LnApHSZS9VCM4O2Y+WYJCZngMEsZl5qdoF5pLltrU1JNdohAxwC gF8XO1y748vTM3YX5RdpltuJ+bvoBbd++di5cTRBsLpo4jhdinyUiv2LvmHKhcbq QFqi6N28bqlBXyoNVZ2hvMUhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPXN2p5db 0922yDHKZ743fVoxVmgwHwYDVR0jBBgwFoAUk+ucLPZOblbp6NVWzMompR6L26Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGQkRGL0JDMTc1RjM4M0Qz MzExRjA5MjFGREIxQ0M0RjlBRTAyL2stdWNMUFpPYmxicDZOVld6TW9tcFI2TDI2 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvay11Y0xQWk9ibGJwNk5WV3pNb21wUjZMMjZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG QkRGL0JDMTc1RjM4M0QzMzExRjA5MjFGREIxQ0M0RjlBRTAyL2stdWNMUFpPYmxi cDZOVld6TW9tcFI2TDI2QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK9UtimPwfwJcZLrSVsvvxZu7urdemFcmpRS7uKa+vYa3BJpzlYSxbs7 0oY/wt/iDi9WxOz80ngkjA9/fF3QZdXXgVC//jaMESwXwvL6JGGFzlBxk+lz0EK4 OqOJCpKTnh2VteMdCKPn5TIRX4AqxJ77tSMDu89Toa7V5IqQ+auBfQT6wGEXcbYg BAnUuNemnI3hhHh9QUGecAcnzbJra/e8ERloK70po7XHIMixhXTdHXng18u8ahpO +UWnVx9xzG0PlueRSB84F+KgNYUHvJX2N7GnKGm/Qc6ZMMmbP1EilQXvLudxt/8B QQ3Ojr/rxPH3P1LlK/+H845DfdBlhSc= -----END CERTIFICATE-----Generated at Fri Dec 19 03:48:16 2025 by rpki-client