This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft File: UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft (raw, json) Hash identifier: 05C/coXScaE1BglMOf/1Oxi29sWSOGQ79T9Gy+U00Zc= Subject key identifier: 5F:A5:5D:6C:24:91:B7:EA:59:1B:7C:5C:20:95:34:FF:0F:F7:25:42 Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4 Certificate issuer: /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft Manifest number: 5E Signing time: Wed 03 Dec 2025 05:20:12 +0000 Manifest this update: Wed 03 Dec 2025 05:20:11 +0000 Manifest next update: Wed 10 Dec 2025 05:20:11 +0000 Files and hashes: 1: UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl (hash: KJtBTOPznHAAnRNPxBloQ+i5ltIkS89CSdoWYu1/yQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:20:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4 Validity Not Before: Dec 3 05:20:11 2025 GMT Not After : Dec 10 05:20:11 2025 GMT Subject: CN=692fc88c-4540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:59:6b:04:4f:ff:a4:d2:f2:e6:94:38:f2:6d: 7e:9a:51:a7:8b:0c:97:e4:5f:c2:76:57:00:ee:42: 88:54:f0:6e:07:9d:62:30:78:47:b6:da:23:61:3b: 31:91:c5:a3:a7:bd:46:c9:b2:be:e5:ad:24:a7:b5: bd:77:39:6e:76:59:1a:84:77:86:24:26:2e:b0:b3: 0e:1a:03:b0:bb:ce:37:37:be:d9:a5:b4:ee:72:8c: 61:0d:f1:ac:71:56:06:0d:0c:1b:70:2e:76:15:67: 4b:ea:a9:23:b3:03:72:2e:50:a5:39:98:99:85:96: 9f:a7:04:ed:96:92:ec:14:27:3f:1e:47:dc:64:78: a9:b2:d5:aa:a9:66:93:4b:9d:db:a7:f8:83:2d:c3: c7:3d:b1:6f:c4:6f:1d:37:73:18:74:ff:02:ac:19: fe:db:d0:8f:66:63:c6:27:40:51:a8:e3:15:38:79: b6:d6:3e:32:1c:89:96:7c:e6:57:5d:df:a7:68:0c: 2c:ce:60:2c:53:ef:3b:a9:ac:14:cb:22:ab:29:44: f2:38:d1:d5:ca:09:b4:a9:f1:e7:ce:14:41:06:8d: 74:fb:a8:fa:92:64:6e:73:aa:f0:8e:69:9f:15:c3: f8:f3:0c:a6:7d:5b:d1:33:1b:42:23:9e:e1:32:48: fc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A5:5D:6C:24:91:B7:EA:59:1B:7C:5C:20:95:34:FF:0F:F7:25:42 X509v3 Authority Key Identifier: keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:0f:8c:3f:5c:de:7e:2d:c5:e7:b2:68:04:cf:a8:1f:74:17: 3a:55:3c:f5:b0:ac:c2:e5:45:c7:76:2c:51:1f:c2:02:e9:fa: 69:e3:d6:0d:ac:48:67:43:25:95:cb:58:64:b3:c8:a8:af:97: 9c:08:fa:3f:a2:48:d7:fa:d1:8c:84:5f:ee:61:ab:6f:8e:03: 44:32:1e:d5:79:8c:7a:17:91:08:7c:a5:fa:7e:aa:fb:fe:3b: 07:cd:5b:5e:84:4c:a0:d6:ac:6f:e0:46:b5:1e:6c:e8:f8:f4: 1e:50:07:22:5e:06:98:ac:f7:35:61:33:16:2f:1f:cb:dc:d0: de:11:32:d3:60:4d:98:2c:6a:bb:58:af:1d:19:39:8c:83:9d: 06:94:fd:9b:4a:48:9b:94:71:e5:37:5d:30:c5:c6:dc:30:ee: c0:0c:5d:fe:3d:86:44:a6:6c:0d:6b:f3:ff:7e:6d:19:af:c2: 60:b7:57:df:19:d4:66:e8:18:0b:e9:2d:6b:c8:ec:27:cb:22: 65:b0:57:e1:32:e6:49:74:01:a3:8b:c5:bf:98:05:ee:cc:04: 7b:71:7d:16:45:43:fc:c9:45:a4:2c:50:a3:d9:23:08:af:1f: 8e:ba:4f:d4:05:53:6a:3d:1b:d8:d8:84:93:7f:94:9f:9c:05: 77:07:0a:3f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 REU2QzExMC8GA1UEBRMoNTBBQUZDNkEzRUY3NUIyMkI3NjgzQ0FCNjNEODRCRTQy OTE5NTRCNDAeFw0yNTEyMDMwNTIwMTFaFw0yNTEyMTAwNTIwMTFaMBgxFjAUBgNV BAMTDTY5MmZjODhjLTQ1NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4WWsET/+k0vLmlDjybX6aUaeLDJfkX8J2VwDuQohU8G4HnWIweEe22iNhOzGR xaOnvUbJsr7lrSSntb13OW52WRqEd4YkJi6wsw4aA7C7zjc3vtmltO5yjGEN8axx VgYNDBtwLnYVZ0vqqSOzA3IuUKU5mJmFlp+nBO2WkuwUJz8eR9xkeKmy1aqpZpNL ndun+IMtw8c9sW/Ebx03cxh0/wKsGf7b0I9mY8YnQFGo4xU4ebbWPjIciZZ85ldd 36doDCzOYCxT7zuprBTLIqspRPI40dXKCbSp8efOFEEGjXT7qPqSZG5zqvCOaZ8V w/jzDKZ9W9EzG0IjnuEySPxNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUX6VdbCSR t+pZG3xcIJU0/w/3JUIwHwYDVR0jBBgwFoAUUKr8aj73WyK3aDyrY9hL5CkZVLQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVERTZDLzZCQzM3NUIwNDNE NDExRjA5MEI0NzY2OEM0RjlBRTAyL1VLcjhhajczV3lLM2FEeXJZOWhMNUNrWlZM US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVUtyOGFqNzNXeUszYUR5clk5aEw1Q2taVkxRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVE RTZDLzZCQzM3NUIwNDNENDExRjA5MEI0NzY2OEM0RjlBRTAyL1VLcjhhajczV3lL M2FEeXJZOWhMNUNrWlZMUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJkPjD9c3n4txeeyaATPqB90FzpVPPWwrMLlRcd2LFEfwgLp+mnj1g2s SGdDJZXLWGSzyKivl5wI+j+iSNf60YyEX+5hq2+OA0QyHtV5jHoXkQh8pfp+qvv+ OwfNW16ETKDWrG/gRrUebOj49B5QByJeBpis9zVhMxYvH8vc0N4RMtNgTZgsartY rx0ZOYyDnQaU/ZtKSJuUceU3XTDFxtww7sAMXf49hkSmbA1r8/9+bRmvwmC3V98Z 1GboGAvpLWvI7CfLImWwV+Ey5kl0AaOLxb+YBe7MBHtxfRZFQ/zJRaQsUKPZIwiv H466T9QFU2o9G9jYhJN/lJ+cBXcHCj8= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:19 2025 by rpki-client