This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft File: U-OPHbJadp7S9ONa2_fqxILGEaU.mft (raw, json) Hash identifier: /FVuiprGEWRQ72m8guA3Q65kTK7DdGh4P7ub4qqzpZQ= Subject key identifier: 23:16:04:7D:03:66:A5:86:9C:26:7A:08:45:59:9D:5C:FE:CB:60:4F Authority key identifier: 53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5 Certificate issuer: /CN=A91449DF/serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5 Certificate serial: 0848 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft Manifest number: 083A Signing time: Mon 22 Dec 2025 20:11:10 +0000 Manifest this update: Mon 22 Dec 2025 20:11:09 +0000 Manifest next update: Mon 29 Dec 2025 20:11:09 +0000 Files and hashes: 1: U-OPHbJadp7S9ONa2_fqxILGEaU.crl (hash: 9WpHfAA0HhOddC4BFL+04Bc3jbA9hSTjITXLOM6dKsE=) 2: E5ADB5CAF73A11EAB074A016C4F9AE02.roa (hash: 5gmOQtkKxWW9Qw4MLRwAk1SjVnxQF5ADYbWLh30B7jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2120 (0x848) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91449DF, serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5 Validity Not Before: Dec 22 20:11:09 2025 GMT Not After : Dec 29 20:11:09 2025 GMT Subject: CN=6949a5de-24fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4d:63:3d:93:4b:56:df:c6:ac:5d:a7:6d:74: e6:fd:f8:07:ca:63:7c:3b:10:80:f2:66:a1:54:6d: f3:8b:04:ac:fe:1c:ab:46:c3:de:8a:92:d0:02:7f: f9:7f:62:02:de:51:78:e6:ba:64:b1:f7:04:b2:c2: 04:eb:98:1f:6e:86:96:41:86:6b:6e:f1:2b:7c:ad: c1:6a:a0:79:22:6e:29:23:a4:d2:21:8b:69:c0:1e: 74:9e:73:bc:6e:08:c7:1f:e5:ea:1b:1f:37:78:f7: 1f:b4:9a:b8:72:8b:7e:95:a7:f9:63:cf:96:75:8f: 5e:b9:29:23:ee:54:1b:de:22:a5:d5:69:19:bd:13: b9:f3:71:ea:f9:d5:b5:29:ce:9b:c9:92:55:31:c6: ac:37:b3:0d:a2:66:68:00:95:10:8f:31:ea:ad:30: 5d:dd:b5:55:d3:88:c0:16:06:9d:cb:57:98:53:d3: 5c:e3:da:cc:d4:20:a8:1d:94:45:51:1c:d9:a6:41: 80:c3:de:6d:ba:42:e5:6a:12:bf:6c:b2:da:50:20: 9a:e7:17:3b:d0:7f:11:95:4a:3d:be:06:b6:23:bd: 2b:a9:5d:81:b9:6a:e4:fa:ab:c7:99:8d:f7:3b:58: 98:b1:24:95:d8:2a:2f:89:3e:2f:cb:28:4e:c1:2e: 73:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:16:04:7D:03:66:A5:86:9C:26:7A:08:45:59:9D:5C:FE:CB:60:4F X509v3 Authority Key Identifier: keyid:53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:6b:65:df:83:9b:ee:ea:5c:33:48:30:b9:e0:43:cf:f7:a3: 5f:77:fa:89:79:63:a1:f8:ad:64:39:ad:91:63:6f:3d:e6:b2: 90:4a:5a:e8:50:47:12:d5:48:f3:69:aa:a5:9b:06:18:9e:90: 95:f8:e2:ad:d8:3e:5c:5d:d4:11:66:cc:80:35:cb:ea:14:7f: 9c:65:db:b6:84:f8:86:fc:2d:ca:93:34:6f:2f:27:ab:04:e2: 6d:35:7a:57:d5:36:26:de:20:91:cd:e1:91:e3:d0:6d:ba:7d: 17:8d:ab:b3:85:aa:f6:2a:1f:47:c7:09:a1:29:eb:60:73:82: 8f:34:01:9a:ad:7a:68:f3:91:e0:9c:6d:f5:da:1f:98:3f:64: 3c:06:f3:52:b3:12:f7:0c:25:e2:ca:36:66:88:61:2c:44:5f: b4:d7:4c:5a:f7:6a:2f:77:90:fa:45:cf:8c:53:ff:d0:29:d7: 92:22:bc:01:66:c3:34:9c:33:fb:15:ff:10:14:dd:95:fb:7d: c4:34:37:c5:80:5e:68:b5:02:89:d4:20:a9:80:40:22:62:49: 09:11:5d:09:e6:82:59:21:f7:b3:43:60:50:6e:5f:76:42:42: b2:92:53:f3:24:6a:36:d3:a3:15:3b:f7:21:c5:a5:30:02:71: 05:b8:1e:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ5REYxMTAvBgNVBAUTKDUzRTM4RjFEQjI1QTc2OUVEMkY0RTM1QURCRjdFQUM0 ODJDNjExQTUwHhcNMjUxMjIyMjAxMTA5WhcNMjUxMjI5MjAxMTA5WjAYMRYwFAYD VQQDDA02OTQ5YTVkZS0yNGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlk1jPZNLVt/GrF2nbXTm/fgHymN8OxCA8mahVG3ziwSs/hyrRsPeipLQAn/5 f2IC3lF45rpksfcEssIE65gfboaWQYZrbvErfK3BaqB5Im4pI6TSIYtpwB50nnO8 bgjHH+XqGx83ePcftJq4cot+laf5Y8+WdY9euSkj7lQb3iKl1WkZvRO583Hq+dW1 Kc6byZJVMcasN7MNomZoAJUQjzHqrTBd3bVV04jAFgady1eYU9Nc49rM1CCoHZRF URzZpkGAw95tukLlahK/bLLaUCCa5xc70H8RlUo9vga2I70rqV2BuWrk+qvHmY33 O1iYsSSV2CoviT4vyyhOwS5z/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMWBH0D ZqWGnCZ6CEVZnVz+y2BPMB8GA1UdIwQYMBaAFFPjjx2yWnae0vTjWtv36sSCxhGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDlERi8wNEI3Q0Y3NEY3 M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRwN1M5T05hMl9mcXhJTEdF YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UtT1BIYkphZHA3UzlPTmEyX2ZxeElMR0VhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDlERi8wNEI3Q0Y3NEY3M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRw N1M5T05hMl9mcXhJTEdFYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCya2Xfg5vu6lwzSDC54EPP96Nfd/qJeWOh+K1kOa2RY2895rKQSlro UEcS1UjzaaqlmwYYnpCV+OKt2D5cXdQRZsyANcvqFH+cZdu2hPiG/C3KkzRvLyer BOJtNXpX1TYm3iCRzeGR49Btun0Xjauzhar2Kh9HxwmhKetgc4KPNAGarXpo85Hg nG312h+YP2Q8BvNSsxL3DCXiyjZmiGEsRF+010xa92ovd5D6Rc+MU//QKdeSIrwB ZsM0nDP7Ff8QFN2V+33ENDfFgF5otQKJ1CCpgEAiYkkJEV0J5oJZIfezQ2BQbl92 QkKyklPzJGo206MVO/chxaUwAnEFuB5l -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:32 2025 by rpki-client