This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft File: UK8aopMCL3bNH1G6DdWKW4lmkVo.mft (raw, json) Hash identifier: iFm0JwC/H16R2E7e+ouoVcNcOyBiBluy4Tsn32Q/ueI= Subject key identifier: 63:9F:B5:39:67:5A:DB:4B:81:46:99:CA:C4:50:DC:EA:C6:1D:FC:BF Authority key identifier: 50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A Certificate issuer: /CN=A915AC36/serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft Manifest number: 0C Signing time: Mon 15 Dec 2025 07:27:44 +0000 Manifest this update: Mon 15 Dec 2025 07:27:44 +0000 Manifest next update: Mon 22 Dec 2025 07:27:44 +0000 Files and hashes: 1: UK8aopMCL3bNH1G6DdWKW4lmkVo.crl (hash: 2HD+h15OBUDDxDALLBKlilTQn4w5VjGyilzeafylxPc=) 2: 7D88011ACF4011F08FF1FE52C4F9AE02.roa (hash: /IHW3aHM/SUsb9kiCoK1jZIm/hDv2f3qYZbCqQZYAZs=) 3: BBD396F8CC1D11F09B362031C4F9AE02.roa (hash: gh8+qv3MhaUl1O19jg6tnVa+KoQIkfYNDiOkghKWIjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 07:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AC36, serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A Validity Not Before: Dec 15 07:27:44 2025 GMT Not After : Dec 22 07:27:44 2025 GMT Subject: CN=693fb870-9a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a9:79:42:de:b4:bd:97:5d:53:f8:93:44:82: de:9c:0d:d7:d8:18:37:0f:b3:61:19:0d:29:d8:84: 29:27:49:43:9e:88:7e:60:ce:ce:d9:0a:f4:1b:1f: 04:1f:1b:aa:47:96:bb:4d:b9:f9:c8:e9:cb:33:26: 86:92:ab:cb:97:ac:95:d0:b8:b9:ee:9d:2a:2c:ed: 06:9d:38:d3:c1:57:22:19:2a:46:11:37:06:ad:2d: 77:f4:97:c2:ac:56:c1:37:de:a9:85:59:a9:15:60: a6:5b:fe:0f:87:0f:07:93:fc:1c:0e:a5:67:c3:44: f1:96:89:77:f3:7c:eb:0c:bd:f0:49:af:fe:a3:cf: 3b:a3:12:26:83:5a:ab:9c:78:57:be:f5:01:4d:ef: 9e:be:7f:25:ba:f4:68:59:d5:c0:3d:bc:d1:a2:44: 87:7c:34:d0:2f:3e:d2:40:23:01:28:0d:40:04:3a: 4d:5c:63:13:0f:74:ba:e3:ba:1b:cb:c3:ad:eb:b3: 1b:b6:2c:4f:a8:bb:38:df:f8:7e:46:30:78:8d:91: dc:71:0f:57:2f:23:2d:65:fc:12:86:7c:b4:1d:74: f6:64:d1:6b:74:1d:ff:64:12:16:fa:e4:9f:d2:01: 0f:eb:0e:82:e5:1b:40:32:60:e9:b9:b5:cd:2d:9c: f6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9F:B5:39:67:5A:DB:4B:81:46:99:CA:C4:50:DC:EA:C6:1D:FC:BF X509v3 Authority Key Identifier: keyid:50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:10:bc:9f:a9:27:6c:d9:14:30:20:08:64:2c:fe:6b:7b:da: 02:d7:12:87:28:f2:37:d7:af:8a:62:df:3c:da:55:97:30:5e: d5:3e:98:5c:3f:e2:8a:b1:0f:4f:ed:27:32:89:05:26:d8:9f: d0:78:2b:bf:dd:84:42:46:c5:dd:3a:f6:2e:d9:92:7f:55:2a: 56:1d:87:29:af:15:8b:bb:97:ef:cd:47:9f:78:1e:a4:46:38: 20:84:22:1a:71:19:01:7f:76:6a:b4:82:e3:23:c4:d8:9d:2f: 75:c3:36:fd:41:a9:57:3b:04:e0:8f:21:f1:db:78:24:3b:87: 3f:88:d8:a1:7e:10:3a:44:ac:21:50:6a:14:d9:7d:da:71:71: fe:e9:7a:1b:63:4c:b4:fa:09:aa:41:b0:76:45:9a:03:be:22: c6:39:0b:54:15:f7:10:68:7b:3e:ae:a8:53:89:7e:0f:c0:a9: 09:5b:1a:c1:8a:a4:f9:4b:fc:19:aa:ea:02:f9:4c:53:e6:1c: 87:a5:d1:11:4f:f2:81:04:d2:c0:2c:a7:73:f7:68:c7:4e:76: 0a:21:32:8d:0d:a8:fa:d2:d8:36:93:4a:c0:10:16:8d:89:27: b2:11:80:e0:d3:e6:cc:9d:c4:97:de:56:9e:2b:7d:18:a5:3c: 9f:f6:9c:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QUMzNjExMC8GA1UEBRMoNTBBRjFBQTI5MzAyMkY3NkNEMUY1MUJBMERENThBNUI4 OTY2OTE1QTAeFw0yNTEyMTUwNzI3NDRaFw0yNTEyMjIwNzI3NDRaMBgxFjAUBgNV BAMMDTY5M2ZiODcwLTlhNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3qXlC3rS9l11T+JNEgt6cDdfYGDcPs2EZDSnYhCknSUOeiH5gzs7ZCvQbHwQf G6pHlrtNufnI6cszJoaSq8uXrJXQuLnunSos7QadONPBVyIZKkYRNwatLXf0l8Ks VsE33qmFWakVYKZb/g+HDweT/BwOpWfDRPGWiXfzfOsMvfBJr/6jzzujEiaDWquc eFe+9QFN756+fyW69GhZ1cA9vNGiRId8NNAvPtJAIwEoDUAEOk1cYxMPdLrjuhvL w63rsxu2LE+ouzjf+H5GMHiNkdxxD1cvIy1l/BKGfLQddPZk0Wt0Hf9kEhb65J/S AQ/rDoLlG0AyYOm5tc0tnPZ3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUY5+1OWda 20uBRpnKxFDc6sYd/L8wHwYDVR0jBBgwFoAUUK8aopMCL3bNH1G6DdWKW4lmkVow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBQzM2L0VEMEM4MUEwQ0Mx QjExRjA5QURBOEYyQ0M0RjlBRTAyL1VLOGFvcE1DTDNiTkgxRzZEZFdLVzRsbWtW by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVUs4YW9wTUNMM2JOSDFHNkRkV0tXNGxta1ZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB QzM2L0VEMEM4MUEwQ0MxQjExRjA5QURBOEYyQ0M0RjlBRTAyL1VLOGFvcE1DTDNi TkgxRzZEZFdLVzRsbWtWby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACoQvJ+pJ2zZFDAgCGQs/mt72gLXEoco8jfXr4pi3zzaVZcwXtU+mFw/ 4oqxD0/tJzKJBSbYn9B4K7/dhEJGxd069i7Zkn9VKlYdhymvFYu7l+/NR594HqRG OCCEIhpxGQF/dmq0guMjxNidL3XDNv1BqVc7BOCPIfHbeCQ7hz+I2KF+EDpErCFQ ahTZfdpxcf7pehtjTLT6CapBsHZFmgO+IsY5C1QV9xBoez6uqFOJfg/AqQlbGsGK pPlL/Bmq6gL5TFPmHIel0RFP8oEE0sAsp3P3aMdOdgohMo0NqPrS2DaTSsAQFo2J J7IRgODT5sydxJfeVp4rfRilPJ/2nFQ= -----END CERTIFICATE-----Generated at Tue Dec 16 11:47:36 2025 by rpki-client