This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft File: UmRCqpPf8MUTmmF7DeZFtznmvs0.mft (raw, json) Hash identifier: OVqtViW9wpy5hBplmr4oms2cilWuq0cZgSg6Oz3icsU= Subject key identifier: 55:94:74:EA:5E:5A:7E:A7:C1:82:4F:57:A9:24:06:D7:AE:32:5A:30 Authority key identifier: 52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD Certificate issuer: /CN=A9140D7D/serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Certificate serial: 0A4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft Manifest number: 0A44 Signing time: Wed 10 Dec 2025 18:48:35 +0000 Manifest this update: Wed 10 Dec 2025 18:48:34 +0000 Manifest next update: Wed 17 Dec 2025 18:48:34 +0000 Files and hashes: 1: UmRCqpPf8MUTmmF7DeZFtznmvs0.crl (hash: +E3tWK6TaOv9T4O9B7WVC/Cl1dMQkoZz5oj6r0hqKHo=) 2: 1C9AB3F67D6711EA90858415C4F9AE02.roa (hash: oi91Qfh6vx3udOQFWmZQlAlwWv2n7sWukG/Y5qWMZrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 18:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2638 (0xa4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D7D, serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Validity Not Before: Dec 10 18:48:34 2025 GMT Not After : Dec 17 18:48:34 2025 GMT Subject: CN=6939c083-0f57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:37:4e:74:d7:50:82:6a:0d:4a:92:e2:17:9b: 43:f0:2f:02:b6:19:0d:4a:47:68:03:d3:6d:7f:11: 0c:50:d5:b0:ec:9e:a3:49:48:57:eb:7b:55:ae:36: 91:09:17:f1:45:50:91:3c:b8:da:b2:25:e1:48:93: d4:12:cd:6f:a8:35:35:48:d2:77:62:a1:42:f4:48: 54:33:0d:03:e4:41:4c:94:3c:27:96:10:e2:a5:39: a9:17:b1:71:e3:7e:ca:18:dc:4f:11:fe:79:7c:59: 95:87:4b:c2:46:07:9e:91:ad:c1:b7:00:08:a9:fc: df:25:0d:6f:20:ee:cb:e5:79:e1:81:d4:40:12:71: e7:81:a6:5a:d6:16:6c:96:f8:05:d8:aa:62:26:eb: 56:60:10:dd:5c:2e:d5:8d:ff:bb:df:ab:38:0d:b7: ae:48:5b:67:90:8b:9b:29:82:ed:65:06:28:d3:68: 98:0f:bd:2d:96:24:a8:09:78:28:72:1f:63:96:a0: dc:03:26:7f:62:0a:4f:fd:61:84:c8:ef:3a:03:0a: f1:27:96:7f:67:d5:33:29:5d:0a:e6:1d:70:f5:2d: 83:c6:0f:74:14:9b:fd:03:67:e7:93:18:8f:93:66: 50:e7:3d:8e:4b:a2:38:ee:ed:94:24:66:8c:ee:34: cc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:94:74:EA:5E:5A:7E:A7:C1:82:4F:57:A9:24:06:D7:AE:32:5A:30 X509v3 Authority Key Identifier: keyid:52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:73:08:89:e1:ba:72:38:86:62:c9:2e:89:08:d2:9f:2c:2a: 4c:a8:2c:b9:f8:5b:c4:11:9c:de:58:e5:6e:f3:43:0f:ea:c5: ab:21:7d:64:c2:8e:b7:f4:2f:1c:ef:37:ec:4a:1a:8d:04:9a: dc:18:59:82:58:ea:94:2a:b5:5f:6e:20:08:76:99:8e:fa:0d: d7:96:d4:f1:26:5e:0c:23:26:bf:b8:91:2f:1a:9b:9f:af:c5: 26:fb:db:39:73:9b:bb:9e:24:92:c3:10:9e:44:06:d8:11:7b: e2:be:58:7d:04:1a:27:f5:3f:a4:c4:ca:e5:56:a7:0d:79:c3: b7:0b:a5:a5:46:37:ab:0e:ac:37:62:96:4b:68:d8:4e:e2:41: 56:3e:2d:68:34:66:23:67:c8:91:81:2d:42:e5:fe:1c:e4:a4: 73:e3:c1:ca:6a:14:a7:d0:86:05:da:91:a1:0b:b9:be:6c:c4: c9:7a:78:36:c2:dd:84:a2:98:09:00:ce:92:01:6b:76:27:ba: 78:ec:92:a4:a4:0f:f2:85:13:52:cd:e1:7b:50:c9:63:0e:76: 07:c9:d7:b6:25:33:54:84:42:0e:13:a0:a8:cf:81:2e:8f:70: 6a:1f:f3:07:38:ad:48:f9:61:1e:dd:1f:4f:b5:bd:36:25:de: 6d:33:c2:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEN0QxMTAvBgNVBAUTKDUyNjQ0MkFBOTNERkYwQzUxMzlBNjE3QjBERTY0NUI3 MzlFNkJFQ0QwHhcNMjUxMjEwMTg0ODM0WhcNMjUxMjE3MTg0ODM0WjAYMRYwFAYD VQQDEw02OTM5YzA4My0wZjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6zdOdNdQgmoNSpLiF5tD8C8CthkNSkdoA9NtfxEMUNWw7J6jSUhX63tVrjaR CRfxRVCRPLjasiXhSJPUEs1vqDU1SNJ3YqFC9EhUMw0D5EFMlDwnlhDipTmpF7Fx 437KGNxPEf55fFmVh0vCRgeeka3BtwAIqfzfJQ1vIO7L5XnhgdRAEnHngaZa1hZs lvgF2KpiJutWYBDdXC7Vjf+736s4DbeuSFtnkIubKYLtZQYo02iYD70tliSoCXgo ch9jlqDcAyZ/YgpP/WGEyO86AwrxJ5Z/Z9UzKV0K5h1w9S2Dxg90FJv9A2fnkxiP k2ZQ5z2OS6I47u2UJGaM7jTM/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWUdOpe Wn6nwYJPV6kkBteuMlowMB8GA1UdIwQYMBaAFFJkQqqT3/DFE5phew3mRbc55r7N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ3RC83MTZEMkYzNjdE NjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhNVVRtbUY3RGVaRnR6bm12 czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VtUkNxcFBmOE1VVG1tRjdEZVpGdHpubXZzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQ3RC83MTZEMkYzNjdENjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhN VVRtbUY3RGVaRnR6bm12czAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUcwiJ4bpyOIZiyS6JCNKfLCpMqCy5+FvEEZzeWOVu80MP6sWrIX1k wo639C8c7zfsShqNBJrcGFmCWOqUKrVfbiAIdpmO+g3XltTxJl4MIya/uJEvGpuf r8Um+9s5c5u7niSSwxCeRAbYEXvivlh9BBon9T+kxMrlVqcNecO3C6WlRjerDqw3 YpZLaNhO4kFWPi1oNGYjZ8iRgS1C5f4c5KRz48HKahSn0IYF2pGhC7m+bMTJeng2 wt2EopgJAM6SAWt2J7p47JKkpA/yhRNSzeF7UMljDnYHyde2JTNUhEIOE6Coz4Eu j3BqH/MHOK1I+WEe3R9Ptb02Jd5tM8J8 -----END CERTIFICATE-----Generated at Fri Dec 12 04:04:16 2025 by rpki-client