This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft File: uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft (raw, json) Hash identifier: laAv1sdDmPMdWKZvizTsWXm+GPluKBGOvAvrzMvJOkg= Subject key identifier: 24:E6:3D:1E:3E:CB:6A:26:C4:A4:B2:C6:E6:A1:AB:FD:95:AF:F9:C9 Authority key identifier: B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD Certificate issuer: /CN=A9170829/serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD Certificate serial: 04A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft Manifest number: 0644 Signing time: Mon 22 Dec 2025 23:07:38 +0000 Manifest this update: Mon 22 Dec 2025 23:07:37 +0000 Manifest next update: Mon 29 Dec 2025 23:07:37 +0000 Files and hashes: 1: uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl (hash: AS6d6wZpN184JQaE+U6NqlwCc5SBxZY7rmTu4VWS1/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1190 (0x4a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170829, serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD Validity Not Before: Dec 22 23:07:37 2025 GMT Not After : Dec 29 23:07:37 2025 GMT Subject: CN=6949cf3a-462e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:53:28:4f:45:cb:b1:49:08:04:9d:b8:12:a2: 6c:82:0f:75:16:e8:51:cd:8b:a6:c9:b5:13:b8:b3: 6d:6b:5f:39:c8:14:68:e8:85:0b:54:a3:b6:2a:b2: f2:b5:af:13:87:d6:06:6b:30:f6:98:4c:40:e8:75: 51:b3:f5:e1:d4:d0:f9:8f:ce:b9:e5:75:5d:8a:ab: f8:3a:af:15:a6:16:03:5f:cd:2e:18:be:cc:01:4d: c7:78:78:6c:30:22:d1:b8:8e:51:ca:de:54:0c:e8: 57:9a:cd:5b:58:d3:e8:85:45:52:0d:e9:43:1e:9d: 09:f2:69:96:7f:5e:24:ef:30:f8:70:fc:30:f0:d7: 2c:ea:a6:1e:48:be:b1:4f:fc:ce:63:8c:b7:c9:76: 45:a2:00:8e:00:49:9c:5d:44:e3:10:2d:31:ac:c1: d2:04:d4:31:0b:44:0a:57:56:e4:41:e7:44:cd:60: 02:45:a2:51:58:d4:d9:fc:10:1a:3b:21:d7:05:9c: 6e:e3:92:9a:50:bf:96:d3:7b:46:48:3a:cc:8a:db: a6:47:2f:33:62:79:14:2e:4b:75:7d:28:5f:42:37: 64:3e:d5:37:0e:01:d4:74:75:d1:e8:2f:c2:90:09: 51:50:d9:e9:ee:39:32:fe:06:e6:bf:69:34:19:1e: cf:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E6:3D:1E:3E:CB:6A:26:C4:A4:B2:C6:E6:A1:AB:FD:95:AF:F9:C9 X509v3 Authority Key Identifier: keyid:B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:57:34:2f:6f:96:89:ad:7f:5d:eb:a6:42:b7:62:d9:85:49: fa:97:b6:02:cb:b6:f2:02:6a:6e:c6:c6:bb:7b:21:f0:7a:ff: a4:67:1d:56:63:50:dc:d2:c4:e6:a2:e4:3b:a5:0e:f7:8a:27: 56:24:c5:cf:01:f7:3d:2b:5c:38:7a:d3:d2:2e:2c:ce:39:d6: b3:8f:12:f0:f2:5e:6d:6c:9e:79:c7:d2:21:82:ad:bc:e0:36: 22:c0:f8:7f:2c:b7:f5:4b:d0:69:83:2a:83:a6:35:2c:77:76: 99:53:61:34:eb:ae:e5:60:1f:9d:cf:8d:61:ae:a0:08:fd:87: 10:f2:7d:b6:b9:28:0d:48:e5:05:6f:b0:5b:ba:5d:e5:d2:d7: d6:14:53:d5:fb:b5:11:c8:95:7f:e6:6b:a1:59:34:c4:07:a0: 7a:52:e3:d7:0d:d8:12:36:f5:af:75:c2:1b:e9:72:99:7c:69: 41:fc:9a:22:a5:37:1d:ed:76:96:68:2c:37:4e:e5:28:ab:08: 41:d5:9c:44:45:8f:3a:52:75:04:a8:c2:c4:43:11:4d:d3:7a: 9a:37:a3:35:93:4a:f1:8a:7f:cb:99:90:67:c5:f0:bb:bd:dc: bc:a3:a5:bd:83:11:78:63:a6:93:bc:74:c9:da:84:8f:31:9b: 45:bd:3e:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA4MjkxMTAvBgNVBAUTKEI4Rjg0NkI0MzUzQjY0MjlBQzQwNDNGMzJCQjc4OTRD RjgzODU1RkQwHhcNMjUxMjIyMjMwNzM3WhcNMjUxMjI5MjMwNzM3WjAYMRYwFAYD VQQDDA02OTQ5Y2YzYS00NjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn1MoT0XLsUkIBJ24EqJsgg91FuhRzYumybUTuLNta185yBRo6IULVKO2KrLy ta8Th9YGazD2mExA6HVRs/Xh1ND5j8655XVdiqv4Oq8VphYDX80uGL7MAU3HeHhs MCLRuI5Ryt5UDOhXms1bWNPohUVSDelDHp0J8mmWf14k7zD4cPww8Ncs6qYeSL6x T/zOY4y3yXZFogCOAEmcXUTjEC0xrMHSBNQxC0QKV1bkQedEzWACRaJRWNTZ/BAa OyHXBZxu45KaUL+W03tGSDrMitumRy8zYnkULkt1fShfQjdkPtU3DgHUdHXR6C/C kAlRUNnp7jky/gbmv2k0GR7P2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTmPR4+ y2omxKSyxuahq/2Vr/nJMB8GA1UdIwQYMBaAFLj4RrQ1O2QprEBD8yu3iUz4OFX9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDgyOS83NjY3QkVEMDYz QTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi91UGhHdERVN1pDbXNRRVB6SzdlSlRQZzRW ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VQaEd0RFU3WkNtc1FFUHpLN2VKVFBnNFZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDgyOS83NjY3QkVEMDYzQTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi91UGhHdERVN1pD bXNRRVB6SzdlSlRQZzRWZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyVzQvb5aJrX9d66ZCt2LZhUn6l7YCy7byAmpuxsa7eyHwev+kZx1W Y1Dc0sTmouQ7pQ73iidWJMXPAfc9K1w4etPSLizOOdazjxLw8l5tbJ55x9Ihgq28 4DYiwPh/LLf1S9BpgyqDpjUsd3aZU2E0667lYB+dz41hrqAI/YcQ8n22uSgNSOUF b7Bbul3l0tfWFFPV+7URyJV/5muhWTTEB6B6UuPXDdgSNvWvdcIb6XKZfGlB/Joi pTcd7XaWaCw3TuUoqwhB1ZxERY86UnUEqMLEQxFN03qaN6M1k0rxin/LmZBnxfC7 vdy8o6W9gxF4Y6aTvHTJ2oSPMZtFvT6Z -----END CERTIFICATE-----Generated at Tue Dec 23 16:30:51 2025 by rpki-client