This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft File: Ut5nj6808fJ7_XLOdS9c1X6ME84.mft (raw, json) Hash identifier: d4gYdUGy6f7q+mvLoH19Xk+BEE2jk66LAwSTNZzSYW4= Subject key identifier: B3:B6:E3:F7:99:29:48:F7:89:6E:15:1C:A8:D4:FC:C7:10:7A:00:69 Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE Certificate issuer: /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE Certificate serial: 023B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft Manifest number: 0233 Signing time: Tue 23 Dec 2025 01:01:58 +0000 Manifest this update: Tue 23 Dec 2025 01:01:58 +0000 Manifest next update: Tue 30 Dec 2025 01:01:58 +0000 Files and hashes: 1: Ut5nj6808fJ7_XLOdS9c1X6ME84.crl (hash: JLu7hCcmbMHiw0/ck4NKBun8ztdk5l3OwTdBpFnswZ8=) 2: F5D6B6B8810811ED9EA03683C4F9AE02.roa (hash: WWuM765nOGpRARWICFdR3WrAuYsh9pXJlLffK+z2xm8=) 3: F69540BA810811ED9EA03683C4F9AE02.roa (hash: WdWxS6dCM7XMQ2LQO0o9GTTA7XcowvkD2iePT2v6AE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 571 (0x23b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91781C0, serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE Validity Not Before: Dec 23 01:01:58 2025 GMT Not After : Dec 30 01:01:58 2025 GMT Subject: CN=6949ea06-e76e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2a:82:c0:2d:86:3d:01:14:8f:24:99:21:5f: bb:0d:d6:1a:74:81:a6:5c:20:8c:74:ae:ef:15:fc: 54:a9:1f:ed:e5:49:1b:16:9f:c3:12:47:96:1d:a8: 23:1e:8e:aa:08:c4:a0:be:02:a8:14:98:1f:de:a9: 1c:cf:be:fe:fd:cc:fd:bf:67:ce:38:4e:5b:e0:09: bd:bf:5a:f8:f6:61:a9:01:f3:be:42:03:14:15:b0: 69:86:0c:48:c8:dd:3f:c1:65:8e:d8:e2:7f:76:6a: 5d:f6:72:fe:a6:aa:ef:da:bb:71:67:3d:02:15:11: cd:37:d1:4f:77:14:70:a9:45:45:b5:5c:81:94:69: d6:d2:0e:76:36:43:22:f6:8f:cd:ec:93:b8:bb:95: 1a:b0:df:94:22:81:7c:0b:2a:2f:13:65:d0:dc:1e: 61:73:0d:69:c1:68:2b:f2:96:95:c9:e0:c6:c2:56: 85:7a:30:73:c2:86:43:5c:be:a0:d2:7f:2c:2f:c6: aa:78:cd:15:bc:22:f9:06:66:71:90:e0:ec:73:dc: e7:ac:c0:23:1a:87:c1:11:d8:48:b7:29:f9:d0:37: 74:3f:e7:f7:1a:f2:c1:c9:ef:65:f8:bb:5d:35:5b: 06:93:98:d3:ff:c0:d3:c7:d3:8d:cc:02:66:6a:cd: b6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B6:E3:F7:99:29:48:F7:89:6E:15:1C:A8:D4:FC:C7:10:7A:00:69 X509v3 Authority Key Identifier: keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:4f:07:68:ad:5d:12:af:51:80:e4:63:d9:8a:20:4d:a6:50: 27:df:87:d5:ea:fd:51:56:51:52:c3:cd:1e:32:53:97:d5:cd: 38:dd:80:11:c8:f9:42:c1:fd:0b:0c:61:b6:a2:04:68:cf:30: 10:7a:7a:56:c9:d3:8d:df:7c:12:cd:94:23:ca:65:49:55:38: 53:6c:7f:20:13:05:15:19:62:55:c3:95:bb:37:53:df:f8:26: b1:4f:15:07:65:f0:86:f5:90:dd:0b:32:cd:53:df:5b:d5:31: 6c:17:a4:61:dc:a4:5f:16:ba:51:57:84:61:a6:0e:b3:bf:2d: 2a:e6:da:75:9a:30:9c:eb:7a:10:19:3b:2d:0c:98:ed:42:1b: b6:df:f9:3a:96:0b:ca:53:08:f7:93:35:18:b5:5d:c7:9f:01: 47:9e:39:52:27:bc:f8:b9:ad:dc:ce:05:b3:69:32:37:6e:34: 1d:e7:ff:9f:79:6e:cb:0f:23:6b:83:08:16:58:60:b8:b1:48: c8:93:94:69:5c:c8:9b:50:da:fb:32:4e:be:ef:7b:bc:ff:80: d6:c2:71:49:03:84:9e:10:ae:2e:a7:4e:97:a1:a5:7b:f0:50: 03:76:6b:63:b3:33:2c:8c:86:ec:3e:48:34:ce:57:56:19:a9: a3:7f:30:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzgxQzAxMTAvBgNVBAUTKDUyREU2NzhGQUYzNEYxRjI3QkZENzJDRTc1MkY1Q0Q1 N0U4QzEzQ0UwHhcNMjUxMjIzMDEwMTU4WhcNMjUxMjMwMDEwMTU4WjAYMRYwFAYD VQQDDA02OTQ5ZWEwNi1lNzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiqCwC2GPQEUjySZIV+7DdYadIGmXCCMdK7vFfxUqR/t5UkbFp/DEkeWHagj Ho6qCMSgvgKoFJgf3qkcz77+/cz9v2fOOE5b4Am9v1r49mGpAfO+QgMUFbBphgxI yN0/wWWO2OJ/dmpd9nL+pqrv2rtxZz0CFRHNN9FPdxRwqUVFtVyBlGnW0g52NkMi 9o/N7JO4u5UasN+UIoF8CyovE2XQ3B5hcw1pwWgr8paVyeDGwlaFejBzwoZDXL6g 0n8sL8aqeM0VvCL5BmZxkODsc9znrMAjGofBEdhItyn50Dd0P+f3GvLBye9l+Ltd NVsGk5jT/8DTx9ONzAJmas22owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLO24/eZ KUj3iW4VHKjU/McQegBpMB8GA1UdIwQYMBaAFFLeZ4+vNPHye/1yznUvXNV+jBPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODFDMC8yRjI4OUVENjgx MDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhmSjdfWExPZFM5YzFYNk1F ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V0NW5qNjgwOGZKN19YTE9kUzljMVg2TUU4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODFDMC8yRjI4OUVENjgxMDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhm SjdfWExPZFM5YzFYNk1FODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWTwdorV0Sr1GA5GPZiiBNplAn34fV6v1RVlFSw80eMlOX1c043YAR yPlCwf0LDGG2ogRozzAQenpWydON33wSzZQjymVJVThTbH8gEwUVGWJVw5W7N1Pf +CaxTxUHZfCG9ZDdCzLNU99b1TFsF6Rh3KRfFrpRV4Rhpg6zvy0q5tp1mjCc63oQ GTstDJjtQhu23/k6lgvKUwj3kzUYtV3HnwFHnjlSJ7z4ua3czgWzaTI3bjQd5/+f eW7LDyNrgwgWWGC4sUjIk5RpXMibUNr7Mk6+73u8/4DWwnFJA4SeEK4up06XoaV7 8FADdmtjszMsjIbsPkg0zldWGamjfzAp -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:32 2025 by rpki-client