This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft File: UylwC03drZ4_zcMnP00Y0-MEXcA.mft (raw, json) Hash identifier: ucWVS+k+5MPP1Ysuxv+RzWvbjZkyJD9nVsp+ubkGBI0= Subject key identifier: 17:01:2A:D7:98:AE:23:C3:F1:D2:98:AB:DE:95:74:6D:EB:AD:41:05 Authority key identifier: 53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 Certificate issuer: /CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Certificate serial: 0937 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft Manifest number: 19EE Signing time: Sat 20 Dec 2025 17:01:40 +0000 Manifest this update: Sat 20 Dec 2025 17:01:40 +0000 Manifest next update: Sat 27 Dec 2025 17:01:40 +0000 Files and hashes: 1: UylwC03drZ4_zcMnP00Y0-MEXcA.crl (hash: NEJbJ+W0mNG7BrwikhqHG8y6pQyYbTZCl9KL8esgQHo=) 2: 31414558B0D511EFB17B942FC4F9AE02.roa (hash: mtUL6kpWcJ0s0WYAq9l26D9HLDGvLgZ5GCmZqFRcyjs=) 3: D9B56C8A7AB211EB99DAFE83C4F9AE02.roa (hash: F8NUI5IF7FjRVcKD/tqhJ5Q4QNzh0QGai7XMrRHjkus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2359 (0x937) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B09, serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Validity Not Before: Dec 20 17:01:40 2025 GMT Not After : Dec 27 17:01:40 2025 GMT Subject: CN=6946d674-8fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6a:b7:b2:37:54:d2:59:d4:81:68:52:d9:76: 21:2e:6a:4c:60:b2:a1:66:73:ad:b3:57:cc:56:78: db:c3:3d:4d:99:9f:3f:6b:b6:2a:e0:3b:af:7d:e7: 0f:3a:5a:54:9c:6f:83:34:3c:d8:fd:ed:8a:2f:2a: 81:4b:f6:11:e0:aa:ed:e4:70:32:82:d0:b8:fb:0e: 38:17:3a:d7:64:ab:28:78:72:0d:38:86:8c:d3:cd: cc:72:e1:c2:13:e3:f3:33:aa:74:55:a5:33:f1:e7: e2:7e:10:0b:60:f7:f5:27:7d:01:3f:52:f6:94:65: 8c:f1:af:56:a3:a8:d7:eb:c9:2b:41:24:04:eb:4a: ac:53:79:7a:ca:3a:06:dc:1a:5c:49:57:ec:dd:5c: 9a:40:bf:e9:4c:47:87:a6:13:f9:7c:e8:66:4a:45: 03:12:00:1e:15:44:4c:f8:27:3f:08:18:29:bb:e6: dd:29:e0:7d:39:f9:58:6a:b9:d1:d3:65:08:1a:ac: 2a:eb:89:47:06:14:e0:50:bf:9d:80:35:ff:a0:15: b9:f5:b4:91:00:f9:ba:ad:1a:8c:15:c3:d4:dc:01: 65:7a:08:0c:cc:19:93:4d:e4:44:b2:28:93:76:50: 95:5b:d6:10:4f:05:a6:fb:ac:e1:e7:0a:91:6c:fb: 4d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:01:2A:D7:98:AE:23:C3:F1:D2:98:AB:DE:95:74:6D:EB:AD:41:05 X509v3 Authority Key Identifier: keyid:53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:00:18:ff:82:86:e5:58:fb:29:8d:a3:9a:74:e1:be:15:20: db:f3:f3:1d:dc:24:f0:bd:5c:f8:99:ff:6f:87:fc:56:bc:e0: 48:11:07:97:32:44:c4:e8:05:11:42:11:3e:b2:3c:ec:93:2f: 40:78:90:25:69:22:d0:f1:8b:50:af:60:f5:53:61:7a:b8:61: 9b:30:8c:0d:d7:e0:e6:95:7b:41:ca:0c:82:bc:98:6a:bf:18: 5e:a7:39:43:14:5c:3a:e6:4f:17:91:d3:14:20:12:48:8c:37: e1:1a:95:7d:31:bb:9f:c6:13:d2:dd:59:98:d4:45:67:cf:9a: c5:88:54:fe:b1:42:02:2d:30:47:93:d0:03:23:3b:1c:09:c0: b0:95:26:7e:3d:74:c7:b0:ae:1e:b9:cc:f9:5c:b9:ab:30:3c: a9:6d:4d:81:9a:45:4c:f1:44:a7:5a:0d:4b:cc:77:07:8b:89: a6:85:56:25:d1:e9:1c:d4:d8:e1:15:e5:42:2a:1b:85:76:ff: a0:80:01:29:66:b9:e7:46:b7:af:54:f6:cf:d3:4a:91:22:5e: 37:35:4a:de:70:01:a1:b7:0f:b1:c6:31:4c:e1:a7:aa:4d:36: dd:cc:cb:57:09:fe:d2:32:7b:83:e9:d9:13:76:79:3a:25:c3: 97:2a:71:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMDkxMTAvBgNVBAUTKDUzMjk3MDBCNEREREFEOUUzRkNEQzMyNzNGNEQxOEQz RTMwNDVEQzAwHhcNMjUxMjIwMTcwMTQwWhcNMjUxMjI3MTcwMTQwWjAYMRYwFAYD VQQDDA02OTQ2ZDY3NC04ZmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGq3sjdU0lnUgWhS2XYhLmpMYLKhZnOts1fMVnjbwz1NmZ8/a7Yq4DuvfecP OlpUnG+DNDzY/e2KLyqBS/YR4Krt5HAygtC4+w44FzrXZKsoeHINOIaM083McuHC E+PzM6p0VaUz8efifhALYPf1J30BP1L2lGWM8a9Wo6jX68krQSQE60qsU3l6yjoG 3BpcSVfs3VyaQL/pTEeHphP5fOhmSkUDEgAeFURM+Cc/CBgpu+bdKeB9OflYarnR 02UIGqwq64lHBhTgUL+dgDX/oBW59bSRAPm6rRqMFcPU3AFleggMzBmTTeREsiiT dlCVW9YQTwWm+6zh5wqRbPtN3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcBKteY riPD8dKYq96VdG3rrUEFMB8GA1UdIwQYMBaAFFMpcAtN3a2eP83DJz9NGNPjBF3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJaNF96Y01uUDAwWTAtTUVY Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5bHdDMDNkclo0X3pjTW5QMDBZMC1NRVhjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwOS8zQjM2N0JDRTMzQjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJa NF96Y01uUDAwWTAtTUVYY0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCABj/goblWPspjaOadOG+FSDb8/Md3CTwvVz4mf9vh/xWvOBIEQeX MkTE6AURQhE+sjzsky9AeJAlaSLQ8YtQr2D1U2F6uGGbMIwN1+DmlXtBygyCvJhq vxhepzlDFFw65k8XkdMUIBJIjDfhGpV9MbufxhPS3VmY1EVnz5rFiFT+sUICLTBH k9ADIzscCcCwlSZ+PXTHsK4eucz5XLmrMDypbU2BmkVM8USnWg1LzHcHi4mmhVYl 0ekc1NjhFeVCKhuFdv+ggAEpZrnnRrevVPbP00qRIl43NUrecAGhtw+xxjFM4aeq TTbdzMtXCf7SMnuD6dkTdnk6JcOXKnEk -----END CERTIFICATE-----Generated at Sun Dec 21 23:16:20 2025 by rpki-client