This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft File: ufrcQefh-XVse8mz3jlyy_bPYLU.mft (raw, json) Hash identifier: puT0USTrv6IRFaRUDtofLr+HnpbFErjwCkas4qRSyA4= Subject key identifier: B7:31:50:C3:B7:AC:0A:61:FD:98:05:B3:41:F4:C2:36:52:8D:8C:68 Authority key identifier: B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5 Certificate issuer: /CN=A9140562/serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft Manifest number: 9D Signing time: Tue 23 Dec 2025 05:17:01 +0000 Manifest this update: Tue 23 Dec 2025 05:17:00 +0000 Manifest next update: Tue 30 Dec 2025 05:17:00 +0000 Files and hashes: 1: ufrcQefh-XVse8mz3jlyy_bPYLU.crl (hash: 7RE+O3YF57DxMY22ZjyLhTwKZnXYG8i2sv8nMCQZ1a8=) 2: 5FCE01D8EDFA11EF8193933AC4F9AE02.roa (hash: 97oa3zBzp7Gq4BpVUI5kKb706Ag3AZCc/4WlkzLjgfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140562, serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5 Validity Not Before: Dec 23 05:17:00 2025 GMT Not After : Dec 30 05:17:00 2025 GMT Subject: CN=694a25cd-409f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:84:f9:2f:4c:6b:12:08:10:6d:d3:85:5a:a4: ad:bd:a8:4b:1d:9c:c2:fa:03:0b:07:8a:06:a8:da: 60:96:34:14:9b:1b:6c:fa:22:b7:5a:83:a5:d8:6d: 16:38:b8:03:73:ad:20:40:1e:75:79:f1:24:ce:bb: 2c:bf:6c:3b:a1:fa:63:8f:f5:72:4a:7f:70:36:50: 24:64:ae:87:e8:58:20:c3:2b:73:12:2c:49:33:77: 5d:33:a7:dc:8f:44:28:b0:e6:10:aa:c1:9e:93:7c: 4b:f7:41:66:8a:fb:56:a0:41:32:26:83:f0:6e:b3: e9:25:df:8d:41:b6:25:41:4c:5c:30:aa:de:73:3c: cb:d0:ae:f8:6d:b5:ef:51:cc:d1:96:54:52:6c:c5: 43:83:88:8c:50:b6:26:44:da:be:29:01:57:2b:c2: c6:42:9b:c4:16:57:b7:61:6a:75:a4:41:6f:d0:21: 54:be:8a:7f:5c:96:52:33:2c:3d:83:6b:86:ce:5e: a8:ee:9b:8f:23:55:3e:66:9a:37:21:ef:4c:eb:4e: 28:9e:34:b5:ca:66:18:8a:96:14:39:29:e2:ee:f5: 5b:4d:2a:b9:9f:82:8b:af:87:57:42:e0:96:da:0d: c4:d6:e0:af:78:38:cb:19:3e:3a:50:6d:e0:17:cc: 41:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:31:50:C3:B7:AC:0A:61:FD:98:05:B3:41:F4:C2:36:52:8D:8C:68 X509v3 Authority Key Identifier: keyid:B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:8d:74:67:99:5d:c0:21:79:37:9e:58:43:05:85:e4:35:27: 72:9f:e1:eb:8b:13:5a:82:8e:64:30:e9:cf:33:ed:29:42:6b: 07:bb:60:b5:89:ce:51:0b:67:20:2a:6c:51:60:22:3b:1d:08: 15:9a:13:d2:fb:d4:e1:83:9d:fe:19:e0:ec:6d:ae:aa:08:40: a8:b8:a7:c3:58:88:28:56:97:62:4d:4b:da:88:4c:b6:13:d7: 86:d7:4a:67:08:fc:69:20:56:d1:81:95:65:ec:12:95:fc:a8: cf:e3:9e:65:35:07:7a:31:82:6b:02:9b:86:6e:e8:b5:f6:1a: 19:4b:aa:a6:08:aa:20:3f:b4:71:bf:c2:bb:c8:2c:4d:f6:e8: 85:e7:19:b0:dd:cd:f7:14:1f:3e:e5:c4:d0:67:34:fe:4c:58: a8:e5:73:18:16:93:57:f8:65:6b:04:5d:2a:dc:a4:cc:07:2c: 25:ef:06:ec:3b:c2:92:7e:85:c4:2a:76:f0:87:53:c8:1c:e8: 67:17:87:d6:5a:56:40:49:20:56:b5:e6:02:a7:21:da:af:d1: 5c:e4:d1:9e:bd:e4:b6:91:ea:78:ff:bb:6e:1b:be:00:9d:66: 4b:2a:a2:c2:62:90:a9:b4:92:9a:43:5c:94:16:4f:cf:e6:3f: aa:4a:b3:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA1NjIxMTAvBgNVBAUTKEI5RkFEQzQxRTdFMUY5NzU2QzdCQzlCM0RFMzk3MkNC RjZDRjYwQjUwHhcNMjUxMjIzMDUxNzAwWhcNMjUxMjMwMDUxNzAwWjAYMRYwFAYD VQQDDA02OTRhMjVjZC00MDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IT5L0xrEggQbdOFWqStvahLHZzC+gMLB4oGqNpgljQUmxts+iK3WoOl2G0W OLgDc60gQB51efEkzrssv2w7ofpjj/VySn9wNlAkZK6H6FggwytzEixJM3ddM6fc j0QosOYQqsGek3xL90FmivtWoEEyJoPwbrPpJd+NQbYlQUxcMKreczzL0K74bbXv UczRllRSbMVDg4iMULYmRNq+KQFXK8LGQpvEFle3YWp1pEFv0CFUvop/XJZSMyw9 g2uGzl6o7puPI1U+Zpo3Ie9M604onjS1ymYYipYUOSni7vVbTSq5n4KLr4dXQuCW 2g3E1uCveDjLGT46UG3gF8xB0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcxUMO3 rAph/ZgFs0H0wjZSjYxoMB8GA1UdIwQYMBaAFLn63EHn4fl1bHvJs945csv2z2C1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDU2Mi82NkMzQzk3RUVE RjkxMUVGQTlDREE4MzhDNEY5QUUwMi91ZnJjUWVmaC1YVnNlOG16M2pseXlfYlBZ TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VmcmNRZWZoLVhWc2U4bXozamx5eV9iUFlMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDU2Mi82NkMzQzk3RUVERjkxMUVGQTlDREE4MzhDNEY5QUUwMi91ZnJjUWVmaC1Y VnNlOG16M2pseXlfYlBZTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADjXRnmV3AIXk3nlhDBYXkNSdyn+HrixNago5kMOnPM+0pQmsHu2C1 ic5RC2cgKmxRYCI7HQgVmhPS+9Thg53+GeDsba6qCECouKfDWIgoVpdiTUvaiEy2 E9eG10pnCPxpIFbRgZVl7BKV/KjP455lNQd6MYJrApuGbui19hoZS6qmCKogP7Rx v8K7yCxN9uiF5xmw3c33FB8+5cTQZzT+TFio5XMYFpNX+GVrBF0q3KTMBywl7wbs O8KSfoXEKnbwh1PIHOhnF4fWWlZASSBWteYCpyHar9Fc5NGeveS2kep4/7tuG74A nWZLKqLCYpCptJKaQ1yUFk/P5j+qSrPR -----END CERTIFICATE-----Generated at Tue Dec 23 11:25:10 2025 by rpki-client