This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft File: UoKkZCr301eZKRu6RH6hQlGk1fw.mft (raw, json) Hash identifier: 83r99Ef3C6iOO66Tk8dVQgtm6f7cBX+XH30M/n+FXPk= Subject key identifier: 70:3D:7F:2C:55:89:72:40:F5:23:12:B7:91:92:B6:D6:DE:8E:62:AB Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Certificate serial: 08B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft Manifest number: 2060 Signing time: Tue 16 Dec 2025 16:28:06 +0000 Manifest this update: Tue 16 Dec 2025 16:28:06 +0000 Manifest next update: Tue 23 Dec 2025 16:28:06 +0000 Files and hashes: 1: UoKkZCr301eZKRu6RH6hQlGk1fw.crl (hash: 4HXD0pBAyavUnMXQmIspI6Ul1fmnEuE8HeBim0HzsRY=) 2: 172C2B96197711F0A993397AC4F9AE02.roa (hash: 8Qo70bxIag9X+h+p9rkvEiGVmiiK66r021Qwo1g6tkk=) 3: B5E806CC8BC711EE899A5284C4F9AE02.roa (hash: XzzXA6m5Sfbs0sLhTPVckgYHL3ZiipFrwRLSzgKZ33U=) 4: 654665EA197611F09D2B1C76C4F9AE02.roa (hash: hgO4m8NBFvCWTk/xZ7lTPgH3uo1aBC3KP8OdcPsjkbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 16:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2225 (0x8b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9, serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Validity Not Before: Dec 16 16:28:06 2025 GMT Not After : Dec 23 16:28:06 2025 GMT Subject: CN=69418896-e4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f8:a2:91:17:7f:35:44:77:88:95:ca:48:29: ac:ba:a0:a0:24:57:7a:76:9e:e3:ba:50:b9:02:5d: 93:cd:34:c5:b0:3d:b8:41:e4:a3:b6:7c:9b:01:77: d5:b9:e5:b5:96:5f:78:d6:e5:11:41:e9:b6:09:8f: bd:2d:c9:93:fd:3d:1f:67:7f:17:ae:69:c9:5f:c1: 24:9e:c4:57:81:64:c4:51:99:3e:bb:29:b6:25:06: 9a:e0:84:76:41:5d:00:42:64:71:12:6f:9c:82:75: 58:ac:3d:cc:16:a9:f5:30:7f:55:70:e5:6f:33:32: 70:c0:91:2f:eb:55:34:c2:c9:d4:79:c4:05:24:cb: 55:06:41:4a:be:47:44:f7:cc:33:4f:3e:e9:a3:c8: 1b:0e:31:59:e4:c6:71:55:ea:99:d8:08:01:82:bd: 37:0a:38:46:6b:12:38:6a:97:34:1a:d8:9a:e0:cb: b5:04:d9:2b:cb:e7:00:09:79:87:ef:15:2e:2e:e6: c7:94:14:95:e8:1c:64:d6:e8:b0:c1:a3:7a:68:55: 2d:1c:a4:8a:e9:70:7f:3c:8c:35:1f:af:25:5a:13: 3d:c1:6c:22:e7:f6:ce:ae:e0:95:bd:3d:70:d4:8c: 91:ab:e5:92:59:da:2b:1e:a7:cf:fd:f2:69:cd:02: d4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3D:7F:2C:55:89:72:40:F5:23:12:B7:91:92:B6:D6:DE:8E:62:AB X509v3 Authority Key Identifier: keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:6f:a6:b4:e4:91:22:f4:69:b2:e8:70:d5:ea:3b:0f:25:7b: e6:eb:fb:6f:ac:9e:a7:d3:77:7a:6c:a0:ee:e3:27:41:87:86: a2:3c:b3:f4:1d:31:3f:10:8c:13:66:82:cc:6d:19:a9:b4:e4: 2f:a7:92:2a:9a:97:52:65:47:60:1d:e3:57:e5:5b:c3:9d:3b: d4:4a:23:51:59:e4:60:8a:19:0c:e6:14:85:a5:d4:85:7e:2d: 74:50:1c:07:0c:db:81:27:05:ed:98:a9:ff:cf:b2:34:d9:e6: 53:3a:44:c8:50:4e:9f:ea:2a:c8:fc:69:66:c6:31:95:1b:bc: 66:e1:be:c0:ca:d3:c8:0d:64:75:89:e3:03:80:e2:b0:93:e2: ca:86:bc:9d:46:1f:d0:67:cb:1a:9c:d5:74:f1:a4:66:2b:07: 77:06:02:52:73:82:04:72:5c:76:d8:51:98:88:9e:ec:db:88: 9a:75:05:9a:2b:c4:76:fc:17:dd:10:67:26:e1:b5:68:60:0d: ef:48:17:e7:8e:8a:5c:c1:d6:2e:19:20:1e:48:87:d1:af:11: a3:09:24:dd:c9:41:75:15:d8:ff:2f:d4:61:a8:31:bc:e0:0c: ae:01:5c:0d:83:6e:6c:c4:2b:e9:43:5c:2d:20:1c:d9:be:87: bd:c0:1f:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDUyODJBNDY0MkFGN0QzNTc5OTI5MUJCQTQ0N0VBMTQy NTFBNEQ1RkMwHhcNMjUxMjE2MTYyODA2WhcNMjUxMjIzMTYyODA2WjAYMRYwFAYD VQQDDA02OTQxODg5Ni1lNGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPiikRd/NUR3iJXKSCmsuqCgJFd6dp7julC5Al2TzTTFsD24QeSjtnybAXfV ueW1ll941uURQem2CY+9LcmT/T0fZ38XrmnJX8EknsRXgWTEUZk+uym2JQaa4IR2 QV0AQmRxEm+cgnVYrD3MFqn1MH9VcOVvMzJwwJEv61U0wsnUecQFJMtVBkFKvkdE 98wzTz7po8gbDjFZ5MZxVeqZ2AgBgr03CjhGaxI4apc0Gtia4Mu1BNkry+cACXmH 7xUuLubHlBSV6Bxk1uiwwaN6aFUtHKSK6XB/PIw1H68lWhM9wWwi5/bOruCVvT1w 1IyRq+WSWdorHqfP/fJpzQLUnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHA9fyxV iXJA9SMSt5GSttbejmKrMB8GA1UdIwQYMBaAFFKCpGQq99NXmSkbukR+oUJRpNX8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAxZVpLUnU2Ukg2aFFsR2sx ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvS2taQ3IzMDFlWktSdTZSSDZoUWxHazFmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODJEOS8wRURBNkQ1RUNEREExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAx ZVpLUnU2Ukg2aFFsR2sxZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChb6a05JEi9Gmy6HDV6jsPJXvm6/tvrJ6n03d6bKDu4ydBh4aiPLP0 HTE/EIwTZoLMbRmptOQvp5IqmpdSZUdgHeNX5VvDnTvUSiNRWeRgihkM5hSFpdSF fi10UBwHDNuBJwXtmKn/z7I02eZTOkTIUE6f6irI/GlmxjGVG7xm4b7AytPIDWR1 ieMDgOKwk+LKhrydRh/QZ8sanNV08aRmKwd3BgJSc4IEclx22FGYiJ7s24iadQWa K8R2/BfdEGcm4bVoYA3vSBfnjopcwdYuGSAeSIfRrxGjCSTdyUF1Fdj/L9RhqDG8 4AyuAVwNg25sxCvpQ1wtIBzZvoe9wB99 -----END CERTIFICATE-----Generated at Tue Dec 16 19:35:24 2025 by rpki-client