This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft File: UudzDz1hVWPrWMn6dZKhvYBbWjU.mft (raw, json) Hash identifier: tyh8EhoZQ0bg7mGzRAi56cP0PDQN0FaECJYj4lAI+1g= Subject key identifier: 60:36:4A:1B:B8:4A:9A:58:2F:78:4A:E3:26:BC:E6:B1:84:2A:EC:DA Authority key identifier: 52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35 Certificate issuer: /CN=A914D9BE/serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35 Certificate serial: 0241 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft Manifest number: 023E Signing time: Tue 23 Dec 2025 00:52:24 +0000 Manifest this update: Tue 23 Dec 2025 00:52:24 +0000 Manifest next update: Tue 30 Dec 2025 00:52:24 +0000 Files and hashes: 1: UudzDz1hVWPrWMn6dZKhvYBbWjU.crl (hash: WA03k4MnGO2GneEI6GCLOVGO7ITbqaknMklqfe4yRp8=) 2: AE148B2A6BB911ED97343873C4F9AE02.roa (hash: h7PFINLKglbbD51solfuF7q/5uroEa7Bk3jUBzQnwh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D9BE, serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35 Validity Not Before: Dec 23 00:52:24 2025 GMT Not After : Dec 30 00:52:24 2025 GMT Subject: CN=6949e7c8-91b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0a:28:6f:ac:38:36:51:e3:38:42:59:56:ad: 73:f4:dd:f1:9b:b2:11:14:d7:98:2e:05:48:4b:88: 1e:e4:8e:49:8a:d5:f1:7e:75:dc:7f:54:16:fb:57: 6f:36:46:f0:06:a9:f6:3a:87:37:4b:ee:17:36:63: 0b:8f:e2:8c:6c:af:7e:dc:b6:86:79:2d:a4:2a:82: be:2f:07:7c:06:06:85:13:66:66:55:e5:e7:11:e9: 03:2f:83:43:e1:b3:3b:c1:d1:74:b7:5a:ff:91:90: b9:d3:c8:0f:0f:95:ac:b8:9c:70:2c:57:04:46:a1: 20:82:2a:79:9a:84:23:91:1b:83:99:c6:93:68:68: 1e:97:60:bf:f4:b9:09:ee:1e:35:c5:b3:d2:57:22: f0:bd:ef:e4:c3:35:ea:59:97:58:36:ad:a6:87:e2: 78:cd:cf:f6:2f:bf:2d:7f:63:68:27:a4:0a:6a:cb: ef:89:7f:fb:1c:14:5c:c3:c1:9a:54:2d:32:a9:f3: eb:d4:78:b8:21:e8:9d:bd:70:a6:c1:73:71:37:81: 6a:e1:75:18:d2:b0:ea:e9:6c:f8:29:21:64:67:be: 60:61:4e:bf:9d:58:33:63:47:cc:b1:17:fc:9a:fe: 6f:c1:c7:d0:ea:81:57:b1:c3:ce:f6:b5:53:4e:b5: fc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:36:4A:1B:B8:4A:9A:58:2F:78:4A:E3:26:BC:E6:B1:84:2A:EC:DA X509v3 Authority Key Identifier: keyid:52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:0a:21:36:87:d8:0f:ce:92:8b:ab:80:1f:79:4a:7d:c2:26: 22:1a:24:31:85:dc:00:a4:e0:a1:e4:5b:90:b0:4d:ba:c1:0d: 11:e8:c9:aa:00:95:ec:4f:3f:09:9e:84:93:69:32:f5:46:9f: a7:d2:f7:70:17:22:3c:1e:58:5e:57:96:d9:6f:42:49:01:5c: 79:0c:0f:86:a5:25:e1:46:e0:11:26:1d:af:84:02:5a:39:d5: 05:0d:98:f8:16:0f:0f:f8:42:e4:7d:c1:06:42:b5:34:e2:dd: fe:54:95:b4:a0:29:cb:f2:6b:5a:3d:d9:b5:2d:e6:0c:6f:19: 01:a6:e7:a5:a8:4b:72:f8:0d:a8:57:42:c6:87:7a:30:6b:57: 35:e3:55:05:d7:a2:75:5c:b9:f4:ee:16:f2:84:a7:63:1a:ed: 22:fd:39:03:0e:57:1a:2d:8e:f6:b8:1b:5e:24:37:cf:cd:0a: 9c:ab:8d:91:7b:ed:71:9f:4e:5e:f0:5e:a4:42:a9:1f:7f:f7: 90:a4:cc:b2:27:fe:a0:2e:b5:88:83:92:e1:7b:18:3a:e6:15: b7:35:3a:f6:8d:f2:24:da:0b:f2:33:c9:8f:dd:c1:db:00:bb: dc:5c:56:53:71:58:e5:e8:f3:0c:8d:c9:f5:b8:2d:af:49:32: 0c:e3:20:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ5QkUxMTAvBgNVBAUTKDUyRTc3MzBGM0Q2MTU1NjNFQjU4QzlGQTc1OTJBMUJE ODA1QjVBMzUwHhcNMjUxMjIzMDA1MjI0WhcNMjUxMjMwMDA1MjI0WjAYMRYwFAYD VQQDDA02OTQ5ZTdjOC05MWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoAoob6w4NlHjOEJZVq1z9N3xm7IRFNeYLgVIS4ge5I5JitXxfnXcf1QW+1dv NkbwBqn2Ooc3S+4XNmMLj+KMbK9+3LaGeS2kKoK+Lwd8BgaFE2ZmVeXnEekDL4ND 4bM7wdF0t1r/kZC508gPD5WsuJxwLFcERqEggip5moQjkRuDmcaTaGgel2C/9LkJ 7h41xbPSVyLwve/kwzXqWZdYNq2mh+J4zc/2L78tf2NoJ6QKasvviX/7HBRcw8Ga VC0yqfPr1Hi4IeidvXCmwXNxN4Fq4XUY0rDq6Wz4KSFkZ75gYU6/nVgzY0fMsRf8 mv5vwcfQ6oFXscPO9rVTTrX8rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGA2Shu4 SppYL3hK4ya85rGEKuzaMB8GA1UdIwQYMBaAFFLncw89YVVj61jJ+nWSob2AW1o1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDlCRS82RkNGQjg2NjZC QjUxMUVEQUIwODUzNkZDNEY5QUUwMi9VdWR6RHoxaFZXUHJXTW42ZFpLaHZZQmJX alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V1ZHpEejFoVldQcldNbjZkWktodllCYldqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDlCRS82RkNGQjg2NjZCQjUxMUVEQUIwODUzNkZDNEY5QUUwMi9VdWR6RHoxaFZX UHJXTW42ZFpLaHZZQmJXalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpCiE2h9gPzpKLq4AfeUp9wiYiGiQxhdwApOCh5FuQsE26wQ0R6Mmq AJXsTz8JnoSTaTL1Rp+n0vdwFyI8HlheV5bZb0JJAVx5DA+GpSXhRuARJh2vhAJa OdUFDZj4Fg8P+ELkfcEGQrU04t3+VJW0oCnL8mtaPdm1LeYMbxkBpuelqEty+A2o V0LGh3owa1c141UF16J1XLn07hbyhKdjGu0i/TkDDlcaLY72uBteJDfPzQqcq42R e+1xn05e8F6kQqkff/eQpMyyJ/6gLrWIg5Lhexg65hW3NTr2jfIk2gvyM8mP3cHb ALvcXFZTcVjl6PMMjcn1uC2vSTIM4yCq -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:41 2025 by rpki-client