This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft File: -uYgHGZjkjQL7hOO1BeZuobapog.mft (raw, json) Hash identifier: u3w039/+Sl6cCucdT8morWnyl+c1F6eJxotnItAOeWE= Subject key identifier: CA:37:20:B9:09:CF:F3:A5:83:CC:48:9D:E7:71:E4:A0:19:22:7E:EE Authority key identifier: FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88 Certificate issuer: /CN=A9158840/serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688 Certificate serial: 0CA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft Manifest number: 0C96 Signing time: Mon 22 Dec 2025 18:03:41 +0000 Manifest this update: Mon 22 Dec 2025 18:03:41 +0000 Manifest next update: Mon 29 Dec 2025 18:03:41 +0000 Files and hashes: 1: -uYgHGZjkjQL7hOO1BeZuobapog.crl (hash: zzf5OH7bZqS2iFxCh26DC5YdWTurD/n1MZCGxh5eNDU=) 2: 513421B0E3AB11EF9C68465CC4F9AE02.roa (hash: mlVkB+7ujlhO8btL2ps7uhMDXe5XJv8Dd1h2jm6wy4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3239 (0xca7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158840, serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688 Validity Not Before: Dec 22 18:03:41 2025 GMT Not After : Dec 29 18:03:41 2025 GMT Subject: CN=694987fd-f0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2c:e1:63:2a:c2:a6:2f:1a:97:5b:83:7c:59: 70:ae:76:53:ce:55:13:4f:5c:95:21:b2:0b:84:be: 9d:05:aa:4c:95:8b:85:9f:51:0b:3b:23:90:6a:c3: 6e:8d:f9:43:92:62:2d:6a:30:93:4f:a7:8e:9b:23: df:08:23:f0:a8:42:85:a0:58:20:8b:60:4b:07:69: 2c:99:10:35:f8:2d:fb:57:02:de:83:ae:0c:f2:be: ef:13:8c:43:93:0e:1a:d0:85:aa:59:9c:51:2b:31: d2:20:8a:ec:60:51:1f:ce:e5:1e:61:3d:94:5b:40: b4:cd:f7:4f:03:1a:c9:9e:8c:8a:80:8a:9c:ab:d2: 6d:86:4a:90:85:5a:6e:97:7b:c3:e5:7e:35:fd:a1: dd:51:f3:58:48:5e:de:6f:9d:b1:4d:83:1d:fa:3e: f4:48:7b:ac:8f:02:34:91:8e:7c:2b:2f:ad:3e:e2: 74:f1:81:4f:54:63:80:bd:6f:b4:ef:d6:2a:60:d0: b6:67:b2:4a:7a:fb:df:34:d5:f7:f8:49:e0:9a:99: de:30:4e:c1:02:fe:55:ed:7a:e2:79:b6:6c:47:2f: 3f:73:6c:db:5f:35:a4:35:0b:44:f5:cb:d2:9d:dc: a9:95:e6:d9:2e:c0:0b:e4:88:60:8f:54:b0:e4:7c: 96:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:37:20:B9:09:CF:F3:A5:83:CC:48:9D:E7:71:E4:A0:19:22:7E:EE X509v3 Authority Key Identifier: keyid:FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:b0:70:b0:98:fc:12:64:21:b0:94:d4:f9:a7:9f:5b:ce:c1: 13:d8:08:df:a5:63:2e:3b:36:8d:7c:d4:5f:9b:4f:62:b3:aa: 22:f6:c4:e8:38:97:a0:6c:8e:c3:1d:df:84:77:c9:dd:12:d6: 54:bf:58:6b:18:77:b4:87:fb:c7:07:4c:07:27:07:5a:b0:cb: 19:55:b4:12:b7:1d:66:96:46:11:68:a3:86:ef:4e:1b:8e:80: e8:0d:cd:09:32:b5:30:f4:4c:f6:81:f4:e5:62:54:a6:25:a9: aa:8e:d7:f7:32:1b:42:62:06:2c:4d:8d:3d:ae:d6:1a:31:5c: 75:1d:78:68:27:f2:fa:d5:c5:82:f2:a2:94:56:76:31:fd:80: 32:f5:8c:57:55:73:15:39:20:0d:d1:0b:4f:ed:0d:f3:1e:56: a4:fd:f9:b5:db:bf:96:42:b5:d3:84:86:af:1c:6f:70:d6:58: 55:56:87:d8:9e:37:94:9a:62:61:e5:2f:a0:72:d7:f6:6f:b1: 0f:e0:33:16:48:46:7a:37:83:c4:a9:e9:09:02:74:0b:7c:a4: aa:48:2e:bb:8e:eb:46:00:20:39:5e:40:a1:20:43:d7:76:1e: 4a:9e:7c:05:52:fd:07:b8:d1:dd:b9:79:75:d5:a5:f6:47:c0: ff:61:4f:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg4NDAxMTAvBgNVBAUTKEZBRTYyMDFDNjY2MzkyMzQwQkVFMTM4RUQ0MTc5OUJB ODZEQUE2ODgwHhcNMjUxMjIyMTgwMzQxWhcNMjUxMjI5MTgwMzQxWjAYMRYwFAYD VQQDDA02OTQ5ODdmZC1mMGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CzhYyrCpi8al1uDfFlwrnZTzlUTT1yVIbILhL6dBapMlYuFn1ELOyOQasNu jflDkmItajCTT6eOmyPfCCPwqEKFoFggi2BLB2ksmRA1+C37VwLeg64M8r7vE4xD kw4a0IWqWZxRKzHSIIrsYFEfzuUeYT2UW0C0zfdPAxrJnoyKgIqcq9JthkqQhVpu l3vD5X41/aHdUfNYSF7eb52xTYMd+j70SHusjwI0kY58Ky+tPuJ08YFPVGOAvW+0 79YqYNC2Z7JKevvfNNX3+EngmpneME7BAv5V7XriebZsRy8/c2zbXzWkNQtE9cvS ndyplebZLsAL5Ihgj1Sw5HyWpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMo3ILkJ z/Olg8xInedx5KAZIn7uMB8GA1UdIwQYMBaAFPrmIBxmY5I0C+4TjtQXmbqG2qaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODg0MC82MTc3MzMyQTBC ODIxMUVBODA0MTE1NEJDNEY5QUUwMi8tdVlnSEdaamtqUUw3aE9PMUJlWnVvYmFw b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11WWdIR1pqa2pRTDdoT08xQmVadW9iYXBvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODg0MC82MTc3MzMyQTBCODIxMUVBODA0MTE1NEJDNEY5QUUwMi8tdVlnSEdaamtq UUw3aE9PMUJlWnVvYmFwb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtsHCwmPwSZCGwlNT5p59bzsET2AjfpWMuOzaNfNRfm09is6oi9sTo OJegbI7DHd+Ed8ndEtZUv1hrGHe0h/vHB0wHJwdasMsZVbQStx1mlkYRaKOG704b joDoDc0JMrUw9Ez2gfTlYlSmJamqjtf3MhtCYgYsTY09rtYaMVx1HXhoJ/L61cWC 8qKUVnYx/YAy9YxXVXMVOSAN0QtP7Q3zHlak/fm127+WQrXThIavHG9w1lhVVofY njeUmmJh5S+gctf2b7EP4DMWSEZ6N4PEqekJAnQLfKSqSC67jutGACA5XkChIEPX dh5KnnwFUv0HuNHduXl11aX2R8D/YU84 -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:12 2025 by rpki-client