This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft File: Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft (raw, json) Hash identifier: TJbTjTrW4zHT8goa9PMxLxChHJQ/54LN1ed+5lX6BBI= Subject key identifier: 7C:02:04:ED:42:5A:8A:8D:0B:87:B7:3A:82:18:8A:15:01:46:B2:D6 Authority key identifier: 53:2E:70:54:C4:71:BF:F2:ED:7A:6A:18:8E:D3:73:63:65:E4:60:8A Certificate issuer: /CN=A9149ACD/serialNumber=532E7054C471BFF2ED7A6A188ED3736365E4608A Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft Manifest number: 3B Signing time: Tue 23 Dec 2025 06:19:26 +0000 Manifest this update: Tue 23 Dec 2025 06:19:25 +0000 Manifest next update: Tue 30 Dec 2025 06:19:25 +0000 Files and hashes: 1: Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl (hash: 0XP9q09/qxtm6rmNPup6z7bhPijhBxJ9sf4LOciWpAU=) 2: 286C872684B011F08D2ED42CC4F9AE02.roa (hash: zLa9BDHDG7v+U27ctD90rRBbm+JhYqq8GC5uRJX34CA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149ACD, serialNumber=532E7054C471BFF2ED7A6A188ED3736365E4608A Validity Not Before: Dec 23 06:19:25 2025 GMT Not After : Dec 30 06:19:25 2025 GMT Subject: CN=694a346e-4828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3d:60:b2:2a:a8:f4:f7:6d:f4:89:64:eb:b0: d1:f5:67:53:4c:15:23:1d:9f:b3:3f:40:78:a6:65: d5:be:b9:5f:a0:b3:06:ae:6a:94:4e:58:1f:cc:9b: 7c:46:50:08:b5:93:fb:8d:e6:a9:6a:ef:fe:09:61: bb:c8:56:ee:e3:38:74:d6:27:cb:34:a9:c9:41:98: 8c:32:2e:2c:49:da:26:25:9d:a2:12:2f:c1:12:2a: 2d:de:58:0f:48:4a:15:f7:3e:a1:6b:43:1a:e7:ea: 25:d1:0e:a6:69:80:b5:e6:36:f0:a6:06:f7:96:27: 5f:a6:7b:45:1c:3e:48:74:0d:0d:52:63:0e:ac:8c: f8:56:52:a8:ae:94:56:5d:be:9b:2e:68:18:40:0c: 9b:ec:29:ff:28:c4:ed:cd:cc:52:af:78:9d:49:a2: b2:4f:2b:08:5d:7e:c4:fd:b9:46:ee:2b:e6:6c:e8: 5f:6d:cc:3c:39:f8:56:e6:49:04:84:a6:a6:87:8c: 51:0c:ec:28:d9:3e:ec:49:98:40:0f:ef:da:f4:a1: 94:15:ae:19:eb:26:a7:56:32:47:75:ba:87:cc:54: 08:2f:20:ba:dc:8c:84:13:c6:e5:f6:e1:18:e9:0a: b9:4d:fe:32:9f:75:ea:21:b9:cc:32:a8:4f:21:ae: 09:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:02:04:ED:42:5A:8A:8D:0B:87:B7:3A:82:18:8A:15:01:46:B2:D6 X509v3 Authority Key Identifier: keyid:53:2E:70:54:C4:71:BF:F2:ED:7A:6A:18:8E:D3:73:63:65:E4:60:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:6e:ba:fe:d3:81:31:92:f9:e3:48:34:0e:49:72:1a:db:38: c7:f0:e4:eb:11:07:08:c7:c1:24:65:55:df:17:6c:19:02:3c: 4b:83:18:b9:34:a2:c3:c6:28:44:17:c9:d3:9d:5e:a2:c1:23: 3c:f2:ba:d4:45:47:d8:a4:3d:e2:f5:9d:96:45:04:a5:6f:2b: b3:0b:08:36:52:a0:d4:ef:da:53:87:30:83:cc:7a:51:83:f2: 2d:02:ed:13:75:86:33:a4:aa:e1:86:82:9a:49:45:24:f7:d3: be:cd:12:fa:2a:01:6c:bb:22:35:82:dd:f9:dc:c4:37:68:27: 9d:c6:46:e0:3a:4f:ff:80:61:71:4a:05:58:cf:b3:78:d0:65: fe:64:5f:02:99:49:5e:60:2a:96:a4:e9:e7:c7:1f:52:ba:6e: 10:22:b5:57:fe:ea:82:f7:4c:1a:cf:35:41:dd:fe:79:80:3c: 8b:15:76:72:0b:75:e1:66:49:6d:5b:e3:32:fd:51:72:12:eb: e3:2d:70:32:32:b8:ff:db:1b:da:a0:f8:d1:3f:aa:8c:d7:a4: fe:3c:66:55:2c:88:59:85:a7:9e:fa:e8:ca:ad:7e:35:7b:1c: 19:e7:1e:5a:0b:8d:97:cf:96:9e:04:40:eb:46:6b:20:62:f2: ff:63:b8:91 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OUFDRDExMC8GA1UEBRMoNTMyRTcwNTRDNDcxQkZGMkVEN0E2QTE4OEVEMzczNjM2 NUU0NjA4QTAeFw0yNTEyMjMwNjE5MjVaFw0yNTEyMzAwNjE5MjVaMBgxFjAUBgNV BAMMDTY5NGEzNDZlLTQ4MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtPWCyKqj09230iWTrsNH1Z1NMFSMdn7M/QHimZdW+uV+gswauapROWB/Mm3xG UAi1k/uN5qlq7/4JYbvIVu7jOHTWJ8s0qclBmIwyLixJ2iYlnaISL8ESKi3eWA9I ShX3PqFrQxrn6iXRDqZpgLXmNvCmBveWJ1+me0UcPkh0DQ1SYw6sjPhWUqiulFZd vpsuaBhADJvsKf8oxO3NzFKveJ1JorJPKwhdfsT9uUbuK+Zs6F9tzDw5+FbmSQSE pqaHjFEM7CjZPuxJmEAP79r0oZQVrhnrJqdWMkd1uofMVAgvILrcjIQTxuX24Rjp CrlN/jKfdeohucwyqE8hrgmhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfAIE7UJa io0Lh7c6ghiKFQFGstYwHwYDVR0jBBgwFoAUUy5wVMRxv/LtemoYjtNzY2XkYIow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5QUNEL0Q4MzVBOTBFODRB RjExRjBBRDdDREUyQkM0RjlBRTAyL1V5NXdWTVJ4dl9MdGVtb1lqdE56WTJYa1lJ by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVXk1d1ZNUnh2X0x0ZW1vWWp0TnpZMlhrWUlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 QUNEL0Q4MzVBOTBFODRBRjExRjBBRDdDREUyQkM0RjlBRTAyL1V5NXdWTVJ4dl9M dGVtb1lqdE56WTJYa1lJby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIJuuv7TgTGS+eNINA5JchrbOMfw5OsRBwjHwSRlVd8XbBkCPEuDGLk0 osPGKEQXydOdXqLBIzzyutRFR9ikPeL1nZZFBKVvK7MLCDZSoNTv2lOHMIPMelGD 8i0C7RN1hjOkquGGgppJRST3077NEvoqAWy7IjWC3fncxDdoJ53GRuA6T/+AYXFK BVjPs3jQZf5kXwKZSV5gKpak6efHH1K6bhAitVf+6oL3TBrPNUHd/nmAPIsVdnIL deFmSW1b4zL9UXIS6+MtcDIyuP/bG9qg+NE/qozXpP48ZlUsiFmFp5766MqtfjV7 HBnnHloLjZfPlp4EQOtGayBi8v9juJE= -----END CERTIFICATE-----Generated at Wed Dec 24 21:21:54 2025 by rpki-client