This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft File: uhYFabkV4kxq5sJIlNBPnUo5FpI.mft (raw, json) Hash identifier: x+e6iw4rXG79tymuicXAaWplYLsKgY1iGMhQMlfd5vQ= Subject key identifier: 41:82:AC:4B:4E:8B:4C:D9:F6:48:00:60:D2:8B:A8:A5:2D:04:B0:1C Authority key identifier: BA:16:05:69:B9:15:E2:4C:6A:E6:C2:48:94:D0:4F:9D:4A:39:16:92 Certificate issuer: /CN=A912CDCB/serialNumber=BA160569B915E24C6AE6C24894D04F9D4A391692 Certificate serial: 053D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft Manifest number: 0538 Signing time: Mon 22 Dec 2025 22:35:37 +0000 Manifest this update: Mon 22 Dec 2025 22:35:36 +0000 Manifest next update: Mon 29 Dec 2025 22:35:36 +0000 Files and hashes: 1: uhYFabkV4kxq5sJIlNBPnUo5FpI.crl (hash: Joa0vo3y0BJQmXGX/0DrUVL+SFKyipR/Ugs+qqG2GDA=) 2: DAF98AAA20F111EC89E7D668C4F9AE02.roa (hash: RIj5d7qyUoWph1Jio4J8GkYeyIP1U8prnBb8m/i4EDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.crl rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:35:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1341 (0x53d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDCB, serialNumber=BA160569B915E24C6AE6C24894D04F9D4A391692 Validity Not Before: Dec 22 22:35:36 2025 GMT Not After : Dec 29 22:35:36 2025 GMT Subject: CN=6949c7b9-6fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6f:ce:68:dd:01:20:15:69:53:a6:24:e8:cc: 0a:95:24:fa:04:28:44:15:85:52:d3:3c:ad:93:f9: eb:09:6e:26:e6:40:29:ae:8f:3a:13:02:f7:56:49: aa:35:00:dd:e0:19:86:f9:4b:a2:19:03:a8:93:c6: 66:23:f7:93:86:a6:02:e2:96:e4:09:a4:e4:36:fc: f2:00:c2:4b:d7:6e:86:85:58:71:71:37:f4:91:3e: 9e:65:a3:60:e0:13:04:16:f8:f3:53:a9:d3:62:aa: 06:47:43:ec:9c:d6:56:cd:d1:a9:00:f2:be:5f:cc: a4:fc:7c:14:6d:94:5b:81:b4:96:db:26:da:a5:ae: d7:05:07:6d:b2:b7:9a:a3:1e:21:4e:64:47:c2:7a: 71:3f:fc:85:b1:73:20:18:fe:de:38:6f:6d:f3:10: 04:c1:e5:d2:db:69:c7:f5:db:b0:a1:64:9d:b8:a0: d8:50:cc:28:e9:b5:27:54:5b:d9:e6:05:99:f8:06: 26:02:4e:41:6f:e8:77:a9:28:70:37:47:17:53:6d: 69:30:71:36:51:98:9a:27:94:b2:ae:2c:85:fa:72: 95:13:f1:53:46:46:8c:4e:d7:79:50:1e:e6:9a:71: b9:46:2d:c6:a3:98:57:be:86:0a:a3:7e:fc:1d:fc: 94:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:82:AC:4B:4E:8B:4C:D9:F6:48:00:60:D2:8B:A8:A5:2D:04:B0:1C X509v3 Authority Key Identifier: keyid:BA:16:05:69:B9:15:E2:4C:6A:E6:C2:48:94:D0:4F:9D:4A:39:16:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:cf:7a:82:54:32:08:05:f3:c1:b3:e0:cc:9e:48:95:49:93: c1:5a:7a:db:cf:69:74:ed:c6:ae:dd:e0:77:93:79:1f:d4:2c: 91:cb:7b:de:80:f6:9e:5f:07:3e:56:48:a5:de:60:33:39:e3: d4:5b:b9:02:a5:c5:1a:94:e2:4a:76:46:fb:21:12:6c:5d:05: 2b:ec:0b:7e:6a:00:7d:5a:2e:61:e1:ae:e4:46:03:c4:15:43: 66:41:96:98:a8:fd:17:51:ef:3d:67:ec:02:45:3a:90:70:42: 67:10:61:14:67:f2:9b:78:32:98:ba:06:5c:85:e8:95:38:39: aa:3e:93:f5:d3:da:f4:f1:c6:88:6c:7f:30:a5:11:d4:9b:79: 2a:75:a0:a4:cd:2c:30:db:4c:00:08:99:7e:ec:83:57:de:fb: 9a:37:02:8a:db:99:cd:d7:9d:fe:0a:ed:b7:21:7c:0a:73:46: fd:ae:0a:53:4b:e1:71:0d:1d:df:e2:ca:cb:79:ae:b1:eb:1a: 49:b4:b8:bf:25:0f:81:9b:ba:9d:71:b9:6f:2a:97:77:56:f2: 9c:f8:31:18:11:eb:d4:41:a9:30:41:84:64:fa:c8:28:6e:47: 92:d6:3c:57:b0:8b:c8:12:f9:92:2c:4c:c3:d6:59:33:23:1e: ac:eb:1d:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQ0IxMTAvBgNVBAUTKEJBMTYwNTY5QjkxNUUyNEM2QUU2QzI0ODk0RDA0RjlE NEEzOTE2OTIwHhcNMjUxMjIyMjIzNTM2WhcNMjUxMjI5MjIzNTM2WjAYMRYwFAYD VQQDDA02OTQ5YzdiOS02ZmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnW/OaN0BIBVpU6Yk6MwKlST6BChEFYVS0zytk/nrCW4m5kApro86EwL3Vkmq NQDd4BmG+UuiGQOok8ZmI/eThqYC4pbkCaTkNvzyAMJL126GhVhxcTf0kT6eZaNg 4BMEFvjzU6nTYqoGR0PsnNZWzdGpAPK+X8yk/HwUbZRbgbSW2ybapa7XBQdtsrea ox4hTmRHwnpxP/yFsXMgGP7eOG9t8xAEweXS22nH9duwoWSduKDYUMwo6bUnVFvZ 5gWZ+AYmAk5Bb+h3qShwN0cXU21pMHE2UZiaJ5SyriyF+nKVE/FTRkaMTtd5UB7m mnG5Ri3Go5hXvoYKo378HfyUAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGCrEtO i0zZ9kgAYNKLqKUtBLAcMB8GA1UdIwQYMBaAFLoWBWm5FeJMaubCSJTQT51KORaS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDQi84QTgyMDk0NDIw RUMxMUVDOUQ1RDMxM0JDNEY5QUUwMi91aFlGYWJrVjRreHE1c0pJbE5CUG5VbzVG cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VoWUZhYmtWNGt4cTVzSklsTkJQblVvNUZwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDQi84QTgyMDk0NDIwRUMxMUVDOUQ1RDMxM0JDNEY5QUUwMi91aFlGYWJrVjRr eHE1c0pJbE5CUG5VbzVGcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkz3qCVDIIBfPBs+DMnkiVSZPBWnrbz2l07cau3eB3k3kf1CyRy3ve gPaeXwc+Vkil3mAzOePUW7kCpcUalOJKdkb7IRJsXQUr7At+agB9Wi5h4a7kRgPE FUNmQZaYqP0XUe89Z+wCRTqQcEJnEGEUZ/KbeDKYugZcheiVODmqPpP109r08caI bH8wpRHUm3kqdaCkzSww20wACJl+7INX3vuaNwKK25nN153+Cu23IXwKc0b9rgpT S+FxDR3f4srLea6x6xpJtLi/JQ+Bm7qdcblvKpd3VvKc+DEYEevUQakwQYRk+sgo bkeS1jxXsIvIEvmSLEzD1lkzIx6s6x1x -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:05 2025 by rpki-client