This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft File: UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft (raw, json) Hash identifier: ADsa/iXEtaLtaSyPMxEG8isJ6/pfOKXcuF0k64JBnGM= Subject key identifier: A0:E3:93:2C:CB:39:F7:14:84:E4:02:58:44:93:7A:21:64:68:9C:19 Authority key identifier: 51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23 Certificate issuer: /CN=A91383BF/serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft Manifest number: 012D Signing time: Tue 23 Dec 2025 03:38:12 +0000 Manifest this update: Tue 23 Dec 2025 03:38:11 +0000 Manifest next update: Tue 30 Dec 2025 03:38:11 +0000 Files and hashes: 1: UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl (hash: iMZiTA+Ul6ojcm83uJbEb+PMtW0xPq5D9f2rTd8+e2M=) 2: C23053B019A911EF97366417C4F9AE02.roa (hash: 7AHfRlf5obcLabSztF3WSrRoKuN5MOc2fWcxIFrj8UQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383BF, serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623 Validity Not Before: Dec 23 03:38:11 2025 GMT Not After : Dec 30 03:38:11 2025 GMT Subject: CN=694a0ea4-d9fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0b:6c:25:d8:da:72:e0:de:0d:54:38:a9:7e: af:32:1e:cc:b0:3e:2a:e6:d7:67:a2:53:d2:49:43: 69:f1:da:1c:74:8d:55:2b:ab:5d:7b:d9:f4:d5:c2: de:44:85:1e:3b:1f:0b:3f:62:b9:d9:14:d8:e8:02: ec:c4:32:9b:eb:d1:e3:08:e2:b6:de:3c:3e:a3:25: ec:2c:b0:4e:aa:6a:1c:00:04:ae:d1:5c:05:ad:8e: 8d:a8:e9:d2:97:2e:bc:15:ed:24:12:74:ec:9c:3b: 55:fb:66:20:cb:82:88:a6:f2:ff:61:17:86:c3:05: 47:ee:8e:d6:e1:36:a3:ac:d1:8e:2c:94:d3:37:05: 42:ba:ef:8f:39:8b:5b:00:0a:7b:8f:d3:b3:82:02: 5e:fb:eb:81:ae:57:8b:c6:9e:e0:b0:d8:78:9c:2e: 65:a8:e4:7c:4e:16:c9:c2:ef:bf:40:28:42:8c:02: fd:34:fa:22:56:1d:03:42:3a:1c:9a:a7:17:c9:a3: 32:42:f6:bb:50:8f:49:5b:84:f6:88:6c:b2:67:5d: 8e:3d:a1:9a:a5:cd:2c:09:e6:43:5d:5d:d2:b1:02: f4:9c:ba:99:c9:e4:77:9b:b0:6a:47:37:ec:df:2d: 9f:89:48:1a:ac:a5:30:1d:b9:23:a9:03:a0:f1:e1: fd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E3:93:2C:CB:39:F7:14:84:E4:02:58:44:93:7A:21:64:68:9C:19 X509v3 Authority Key Identifier: keyid:51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:36:ff:42:75:5a:38:88:ac:a0:53:da:ea:af:fb:b6:0b:45: a3:26:9e:c9:9c:3e:39:57:69:bb:15:4e:62:a8:c0:a9:0c:11: 50:6f:2b:09:e1:fa:0e:6d:47:aa:e2:4d:1f:99:36:72:11:1d: a4:11:10:3a:f1:19:89:68:48:4f:1e:39:5c:bc:04:4a:47:18: 61:88:33:ff:3c:80:f1:3e:7c:ff:1d:8e:b0:26:16:fa:f3:61: 68:92:49:3f:13:a6:ff:21:b2:ee:40:78:dc:87:79:e4:92:fa: c9:ac:64:d5:fd:71:8e:e6:ec:0f:fe:83:64:b3:16:cf:98:08: 27:3a:15:33:2d:bc:13:b0:61:bf:3c:67:81:7d:94:00:61:e7: e0:81:be:75:24:26:2c:a6:e5:6b:05:89:dc:9e:b5:2f:36:e7: ce:2e:b9:23:a5:8c:3d:19:5e:83:51:3f:d8:b5:18:a6:a0:8f: b9:a3:b8:70:b0:cd:d2:e5:de:f4:01:17:31:5f:83:ff:23:89: 5f:6b:55:8c:fc:2d:12:49:56:dd:9c:a9:c7:2f:4c:90:31:2e: 1e:53:3e:d2:5c:a0:5a:24:d2:b8:bf:ef:cb:ec:18:a2:a2:02: 1e:83:ea:1e:31:02:86:fd:dc:8f:82:f9:a5:f0:a5:ac:e1:da: 28:bc:3d:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQkYxMTAvBgNVBAUTKDUxQTQ4MjU4RDRDRDZFMDFEMjQ1OEM1QjkyMTZFRkE0 NTIxMEI2MjMwHhcNMjUxMjIzMDMzODExWhcNMjUxMjMwMDMzODExWjAYMRYwFAYD VQQDDA02OTRhMGVhNC1kOWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgtsJdjacuDeDVQ4qX6vMh7MsD4q5tdnolPSSUNp8docdI1VK6tde9n01cLe RIUeOx8LP2K52RTY6ALsxDKb69HjCOK23jw+oyXsLLBOqmocAASu0VwFrY6NqOnS ly68Fe0kEnTsnDtV+2Ygy4KIpvL/YReGwwVH7o7W4TajrNGOLJTTNwVCuu+POYtb AAp7j9OzggJe++uBrleLxp7gsNh4nC5lqOR8ThbJwu+/QChCjAL9NPoiVh0DQjoc mqcXyaMyQva7UI9JW4T2iGyyZ12OPaGapc0sCeZDXV3SsQL0nLqZyeR3m7BqRzfs 3y2fiUgarKUwHbkjqQOg8eH9FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDjkyzL OfcUhOQCWESTeiFkaJwZMB8GA1UdIwQYMBaAFFGkgljUzW4B0kWMW5IW76RSELYj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCRi9GNjdDNjFFQTE5 ODExMUVGQTVBQzQ3NTNDNEY5QUUwMi9VYVNDV05UTmJnSFNSWXhia2hidnBGSVF0 aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VhU0NXTlROYmdIU1JZeGJraGJ2cEZJUXRpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCRi9GNjdDNjFFQTE5ODExMUVGQTVBQzQ3NTNDNEY5QUUwMi9VYVNDV05UTmJn SFNSWXhia2hidnBGSVF0aU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwNv9CdVo4iKygU9rqr/u2C0WjJp7JnD45V2m7FU5iqMCpDBFQbysJ 4foObUeq4k0fmTZyER2kERA68RmJaEhPHjlcvARKRxhhiDP/PIDxPnz/HY6wJhb6 82Fokkk/E6b/IbLuQHjch3nkkvrJrGTV/XGO5uwP/oNksxbPmAgnOhUzLbwTsGG/ PGeBfZQAYefggb51JCYspuVrBYncnrUvNufOLrkjpYw9GV6DUT/YtRimoI+5o7hw sM3S5d70ARcxX4P/I4lfa1WM/C0SSVbdnKnHL0yQMS4eUz7SXKBaJNK4v+/L7Bii ogIeg+oeMQKG/dyPgvml8KWs4doovD3E -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:35 2025 by rpki-client