This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft File: UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft (raw, json) Hash identifier: 4buLGn/lCoHUNIai06wK7TSwZQ7JNFyY1TeYoYPd+uA= Subject key identifier: 11:64:EB:EA:F8:77:05:AE:95:EE:EA:1A:A3:50:F6:B4:A5:77:62:7C Authority key identifier: 51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2 Certificate issuer: /CN=A9139A90/serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft Manifest number: 0119 Signing time: Tue 23 Dec 2025 03:48:52 +0000 Manifest this update: Tue 23 Dec 2025 03:48:52 +0000 Manifest next update: Tue 30 Dec 2025 03:48:52 +0000 Files and hashes: 1: UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl (hash: C8qmsO+CvCB7bYPd7TP+XcKYIOmIVEJT+NxrJR/AeTw=) 2: 8B584EC2337D11EF9D71B72DC4F9AE02.roa (hash: yZ1LidZrlFrNTxapIhIsCTEZZK7lTYC0s/4RKHkPEsg=) 3: AE977DF8337E11EFB3CCD72FC4F9AE02.roa (hash: OJdZE6RjgM3Hz2T07Mg2BJv0nC0BL01Q/08oABlyEMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:48:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139A90, serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2 Validity Not Before: Dec 23 03:48:52 2025 GMT Not After : Dec 30 03:48:52 2025 GMT Subject: CN=694a1124-9d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f0:c9:5a:0a:bd:b6:c4:a9:26:23:ef:15:81: ee:83:2e:5d:92:1f:73:dc:ea:c2:52:a2:6f:52:34: 12:c8:35:7c:89:d7:b3:3b:d2:65:3a:1a:18:0b:30: b9:25:02:eb:15:ab:51:ad:ca:73:fa:86:a9:a0:a8: 65:5c:0f:0c:38:f6:8d:cb:ff:c6:dc:cb:3b:4d:c7: 17:bc:c6:82:33:0b:a2:ee:ff:e9:09:87:12:15:b3: bd:a2:bf:00:42:64:ce:f1:7f:30:69:3f:ff:ef:08: 5d:07:38:3f:08:8c:24:07:45:f2:bf:91:17:58:56: 91:a1:ba:b5:00:7c:f7:8c:6a:a5:15:fe:d9:76:3e: 0b:c9:84:17:41:e6:ac:da:2a:da:c0:4e:aa:b5:45: 3f:dc:5c:e7:fc:ab:5e:5c:38:3a:3d:cd:00:d4:b7: 1f:2a:4b:42:dd:3a:86:81:85:be:3c:aa:c2:78:4b: 43:c6:b0:ae:38:4c:79:bd:83:6a:73:93:d1:8a:8e: 1f:7b:0f:d9:52:5e:2a:5c:b9:ab:85:48:35:97:33: 52:f4:d1:9e:90:44:06:2c:6e:95:5b:f1:d9:e4:50: fe:fa:3e:e6:77:62:30:3d:34:bf:41:74:3d:05:e0: b0:55:e8:96:0a:87:11:50:6e:db:b4:e9:b2:80:72: 00:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:64:EB:EA:F8:77:05:AE:95:EE:EA:1A:A3:50:F6:B4:A5:77:62:7C X509v3 Authority Key Identifier: keyid:51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:dc:f0:ce:00:cb:7d:fc:d8:34:b0:0a:d3:31:e1:b6:3b:48: b5:bd:2c:ca:1d:27:8a:17:f5:42:dc:60:65:c7:c2:fc:c3:0a: 37:a6:27:99:c4:ae:de:11:96:ca:71:9e:b9:02:32:51:06:d7: 50:99:a7:5d:3b:f5:7d:54:23:0d:8b:e8:e7:1d:cb:5f:0e:76: ad:5e:88:60:c6:ca:17:e1:bc:86:42:a1:12:6e:bb:04:b4:c7: 4f:d4:90:2e:47:2f:b8:1a:fb:8f:b6:7e:91:bd:15:3b:f1:f6: c7:5c:62:26:27:71:a2:b7:f1:d3:44:aa:84:3a:dd:b5:c9:4c: 16:25:fd:90:f8:80:bd:2d:7b:73:94:74:c5:a4:2b:4e:b4:e4: a1:be:6d:e2:b1:47:9c:b9:18:db:b2:58:bb:21:5b:05:0e:e1: 54:ef:39:75:38:02:7a:c1:d4:23:f9:f6:e7:8c:b8:cb:9f:fd: bc:1b:21:3d:e4:85:a2:73:30:05:d9:26:f1:32:c4:c7:7f:c1: 63:3f:91:49:c5:8f:fe:5f:76:8c:d5:95:df:aa:89:9d:eb:b8: 66:e8:ff:80:40:eb:73:d7:8a:f9:4b:61:86:cf:3a:05:77:40: 68:e5:7d:bd:34:eb:35:97:e1:b8:81:0b:dd:3d:7e:1a:c1:62: 4b:8c:bf:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzlBOTAxMTAvBgNVBAUTKDUxODkyQkU1QjBCNEFCQzYwMjU0NDVGNDAzOUZDNzk1 RDhCQTU4RTIwHhcNMjUxMjIzMDM0ODUyWhcNMjUxMjMwMDM0ODUyWjAYMRYwFAYD VQQDDA02OTRhMTEyNC05ZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvDJWgq9tsSpJiPvFYHugy5dkh9z3OrCUqJvUjQSyDV8idezO9JlOhoYCzC5 JQLrFatRrcpz+oapoKhlXA8MOPaNy//G3Ms7TccXvMaCMwui7v/pCYcSFbO9or8A QmTO8X8waT//7whdBzg/CIwkB0Xyv5EXWFaRobq1AHz3jGqlFf7Zdj4LyYQXQeas 2irawE6qtUU/3Fzn/KteXDg6Pc0A1LcfKktC3TqGgYW+PKrCeEtDxrCuOEx5vYNq c5PRio4few/ZUl4qXLmrhUg1lzNS9NGekEQGLG6VW/HZ5FD++j7md2IwPTS/QXQ9 BeCwVeiWCocRUG7btOmygHIA7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFk6+r4 dwWule7qGqNQ9rSld2J8MB8GA1UdIwQYMBaAFFGJK+WwtKvGAlRF9AOfx5XYulji MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUE5MC8xRkU4NEVEMjMz NzYxMUVGOTkzRTQ2NzNDNEY5QUUwMi9VWWtyNWJDMHE4WUNWRVgwQTVfSGxkaTZX T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VZa3I1YkMwcThZQ1ZFWDBBNV9IbGRpNldPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OUE5MC8xRkU4NEVEMjMzNzYxMUVGOTkzRTQ2NzNDNEY5QUUwMi9VWWtyNWJDMHE4 WUNWRVgwQTVfSGxkaTZXT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz3PDOAMt9/Ng0sArTMeG2O0i1vSzKHSeKF/VC3GBlx8L8wwo3pieZ xK7eEZbKcZ65AjJRBtdQmaddO/V9VCMNi+jnHctfDnatXohgxsoX4byGQqESbrsE tMdP1JAuRy+4GvuPtn6RvRU78fbHXGImJ3Git/HTRKqEOt21yUwWJf2Q+IC9LXtz lHTFpCtOtOShvm3isUecuRjbsli7IVsFDuFU7zl1OAJ6wdQj+fbnjLjLn/28GyE9 5IWiczAF2SbxMsTHf8FjP5FJxY/+X3aM1ZXfqomd67hm6P+AQOtz14r5S2GGzzoF d0Bo5X29NOs1l+G4gQvdPX4awWJLjL8J -----END CERTIFICATE-----Generated at Tue Dec 23 12:40:57 2025 by rpki-client