This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft File: UO_h33KRXtM2HbVZtba4Pq4-88A.mft (raw, json) Hash identifier: czOxBODAlnr7HvnUQhdhwdl9FVmsHyXV17UrRT0uBww= Subject key identifier: 42:37:95:E4:EA:ED:1F:05:18:FA:FA:2C:1A:7B:50:72:4B:7E:13:FB Authority key identifier: 50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 Certificate issuer: /CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Certificate serial: 0ABD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft Manifest number: 0AB5 Signing time: Mon 22 Dec 2025 18:57:32 +0000 Manifest this update: Mon 22 Dec 2025 18:57:32 +0000 Manifest next update: Mon 29 Dec 2025 18:57:32 +0000 Files and hashes: 1: UO_h33KRXtM2HbVZtba4Pq4-88A.crl (hash: 1Bjx3gF3uUCXnZCjF79hIY+z6D1b+kI896NR25NtBiA=) 2: 0357A064679D11EABD681D0FC4F9AE02.roa (hash: mb1FJ1ZS6esstfDqUEL1wYQIE+BKhyKC1hq9B43udJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2749 (0xabd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149DF2, serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Validity Not Before: Dec 22 18:57:32 2025 GMT Not After : Dec 29 18:57:32 2025 GMT Subject: CN=6949949c-5a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:12:be:e5:dc:ed:39:21:03:ff:e3:34:ec:33: a7:f5:05:64:05:22:8f:22:86:b2:1b:7a:2f:a5:9a: 47:62:fe:11:4a:bb:da:92:ab:af:94:12:f1:60:76: 04:75:3d:fc:4a:6a:63:72:b7:34:f2:82:11:fd:c4: f7:13:28:de:95:6e:2f:31:05:ed:90:39:08:cc:e3: c9:6b:5e:c0:c1:74:96:86:a8:de:52:72:76:ab:46: 09:4c:c5:3a:4e:34:bf:8f:b9:40:86:ff:c4:fd:a4: de:34:7a:e2:23:ad:96:9c:3a:d8:fa:ae:dd:97:aa: 70:fe:e5:b2:df:de:80:52:47:8f:db:56:25:75:5d: e3:57:8d:aa:95:03:69:3a:91:77:a5:e7:e6:55:62: e2:79:94:72:9d:ae:e1:1f:4f:c2:99:33:1a:8b:d0: 03:17:a1:d2:81:0e:89:0f:ab:07:b6:5a:78:22:37: 6c:04:09:82:0e:b1:bc:1a:c3:e3:68:38:ff:64:df: ab:ae:17:e5:96:20:90:0b:c5:b6:22:55:dd:9d:7d: b2:af:e8:94:67:c4:ae:fc:08:7c:4a:a9:37:59:f0: 3a:05:22:71:24:a2:1d:48:b0:bf:a2:3a:36:ba:71: 9b:fd:4f:e6:75:2e:90:4e:aa:6e:fe:3c:55:e1:5f: 49:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:37:95:E4:EA:ED:1F:05:18:FA:FA:2C:1A:7B:50:72:4B:7E:13:FB X509v3 Authority Key Identifier: keyid:50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:db:79:21:7e:1c:4d:79:01:80:53:12:1b:6b:24:e1:1f:2c: 0c:88:1c:e1:18:1d:9a:80:9a:04:f4:38:33:d2:b8:82:65:e6: 2d:1d:0e:a4:99:df:59:ad:6d:0e:57:e8:b5:99:c0:68:9a:d0: 83:7f:a4:ba:e6:bf:49:ab:aa:eb:96:32:81:ee:26:a8:91:31: c1:92:3e:e4:60:e6:46:67:54:43:9d:82:44:0b:76:d2:64:f2: b0:b3:da:bb:42:51:68:bd:7d:6f:70:83:07:48:a8:4b:d6:b8: 41:20:15:68:db:7d:41:96:bd:16:9c:b9:5f:fb:d0:f5:a1:96: cc:90:ca:76:15:82:0e:6e:8e:3f:7c:f5:57:d4:59:f2:9f:80: 99:78:1e:97:d6:d3:e4:fc:3c:36:ba:16:2c:4b:c5:81:2d:f2: ae:75:4c:5f:11:dd:d2:42:6a:15:06:4d:dd:f9:8b:5f:73:01: 1d:b8:29:b3:c6:86:a5:7f:88:d6:21:92:24:6d:5b:0f:75:27: 52:df:6b:69:32:a7:dc:aa:e8:1c:2b:f8:d3:89:be:3e:dc:bc: a8:a4:b9:b6:1d:36:a7:fa:ca:d0:af:c7:a9:70:c5:e0:bd:7c: 6a:9b:7d:1d:fe:7b:87:2b:21:8d:6c:b2:26:9b:a1:1a:94:8e: 08:8d:2d:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlERjIxMTAvBgNVBAUTKDUwRUZFMURGNzI5MTVFRDMzNjFEQjU1OUI1QjZCODNF QUUzRUYzQzAwHhcNMjUxMjIyMTg1NzMyWhcNMjUxMjI5MTg1NzMyWjAYMRYwFAYD VQQDDA02OTQ5OTQ5Yy01YTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xK+5dztOSED/+M07DOn9QVkBSKPIoayG3ovpZpHYv4RSrvakquvlBLxYHYE dT38Smpjcrc08oIR/cT3EyjelW4vMQXtkDkIzOPJa17AwXSWhqjeUnJ2q0YJTMU6 TjS/j7lAhv/E/aTeNHriI62WnDrY+q7dl6pw/uWy396AUkeP21YldV3jV42qlQNp OpF3pefmVWLieZRyna7hH0/CmTMai9ADF6HSgQ6JD6sHtlp4IjdsBAmCDrG8GsPj aDj/ZN+rrhflliCQC8W2IlXdnX2yr+iUZ8Su/Ah8Sqk3WfA6BSJxJKIdSLC/ojo2 unGb/U/mdS6QTqpu/jxV4V9JGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEI3leTq 7R8FGPr6LBp7UHJLfhP7MB8GA1UdIwQYMBaAFFDv4d9ykV7TNh21WbW2uD6uPvPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OURGMi85OTk4RjFDNDY3 OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0TTJIYlZadGJhNFBxNC04 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPX2gzM0tSWHRNMkhiVlp0YmE0UHE0LTg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OURGMi85OTk4RjFDNDY3OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0 TTJIYlZadGJhNFBxNC04OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF23khfhxNeQGAUxIbayThHywMiBzhGB2agJoE9Dgz0riCZeYtHQ6k md9ZrW0OV+i1mcBomtCDf6S65r9Jq6rrljKB7iaokTHBkj7kYOZGZ1RDnYJEC3bS ZPKws9q7QlFovX1vcIMHSKhL1rhBIBVo231Blr0WnLlf+9D1oZbMkMp2FYIObo4/ fPVX1Fnyn4CZeB6X1tPk/Dw2uhYsS8WBLfKudUxfEd3SQmoVBk3d+YtfcwEduCmz xoalf4jWIZIkbVsPdSdS32tpMqfcqugcK/jTib4+3LyopLm2HTan+srQr8epcMXg vXxqm30d/nuHKyGNbLImm6EalI4IjS0w -----END CERTIFICATE-----Generated at Tue Dec 23 02:07:53 2025 by rpki-client