This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft File: _UXMVAPGTPsjCqfe7RC8aCKNdHM.mft (raw, json) Hash identifier: i/iq+xrAjG+ICBZAyFohJKDD7IUzwI/FMa1sV9OSgFQ= Subject key identifier: 0A:F7:F6:F0:B0:AF:EE:16:4D:17:4A:5F:AB:F0:A3:26:F9:4C:03:D8 Authority key identifier: FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73 Certificate issuer: /CN=A9186BCC/serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft Manifest number: 01AA Signing time: Tue 09 Dec 2025 01:25:00 +0000 Manifest this update: Tue 09 Dec 2025 01:24:59 +0000 Manifest next update: Tue 16 Dec 2025 01:24:59 +0000 Files and hashes: 1: _UXMVAPGTPsjCqfe7RC8aCKNdHM.crl (hash: pjMShZoDpPeiYXm2NvX4WXhP6X7RQkK6UQoq2lwaHwk=) 2: 6B62D92248D511EEBE05CC7FC4F9AE02.roa (hash: aad5STWtZPNgSUZlTpHai7ItORShh/+m60YWqMbY2wU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 01:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186BCC, serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473 Validity Not Before: Dec 9 01:24:59 2025 GMT Not After : Dec 16 01:24:59 2025 GMT Subject: CN=69377a6b-41f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7c:c3:77:b4:a7:bf:00:85:62:12:9e:66:be: 19:f5:50:f5:b9:a5:49:06:eb:c4:f1:d4:49:13:6f: 60:b3:dd:e8:34:66:65:f9:2a:eb:aa:0c:9c:46:ca: 36:9d:43:55:7c:e1:78:ad:26:e0:03:83:0e:04:69: 53:b9:3a:de:59:18:62:e8:be:db:0f:64:80:13:1c: 60:b0:b9:03:c3:e2:46:2f:66:d2:2c:11:9f:96:76: 63:5c:fc:1c:e6:39:84:59:16:89:13:df:79:f2:a6: 66:b3:12:65:52:ed:21:3e:59:ba:d9:29:a7:09:fc: 42:c9:64:c1:9f:5c:ee:65:55:77:d1:d8:91:f2:19: 21:2a:82:43:27:1e:25:37:12:a5:14:22:1d:f0:39: 7b:a3:a3:38:f4:97:a9:df:5a:22:b9:28:72:30:83: 2c:ea:79:af:ea:25:00:89:e3:03:7e:42:34:8a:9e: 6f:99:40:ee:0e:84:20:8e:00:0b:42:0b:45:25:aa: 1c:36:b8:70:9e:4e:94:e9:26:2a:73:70:ec:b4:c4: 37:a2:59:07:3b:7f:87:41:df:d1:60:9c:da:6d:6b: c1:75:67:bc:ca:04:33:73:b7:56:b5:83:18:2c:e2: ae:b1:c4:8f:d2:c6:5c:7f:25:ce:d7:4a:48:1f:31: da:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F7:F6:F0:B0:AF:EE:16:4D:17:4A:5F:AB:F0:A3:26:F9:4C:03:D8 X509v3 Authority Key Identifier: keyid:FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:30:c8:38:b2:b6:ea:52:50:45:03:f1:b0:d6:ba:57:26:5b: 29:61:32:ea:dd:6c:9f:c5:83:95:83:1d:25:d5:9f:a8:4e:95: a6:06:b1:3d:5d:d9:97:c9:86:fe:c7:05:d4:00:71:7f:6a:3e: 79:46:73:ea:49:7e:0b:0b:1c:ec:f3:a9:93:9c:75:41:cb:78: b4:31:f5:70:43:2d:81:f5:ab:11:c0:ee:36:43:99:cb:77:5c: 40:35:48:aa:37:c9:89:a3:c8:4c:c0:52:05:de:c8:4c:9b:2f: be:d8:b8:22:ce:f7:cb:18:ac:22:0c:7b:24:f9:d1:27:4a:b6: f3:ee:05:1b:31:bd:8b:d2:f1:76:9a:a6:d7:6d:98:a8:e6:08: f2:b1:47:77:2b:89:4f:ab:9c:d2:e5:63:ee:26:d1:04:8d:95: 8c:02:9f:cc:e4:52:ca:13:a9:15:37:77:ba:3a:37:27:0e:19: e2:ba:85:56:1d:81:6e:0e:c4:52:ec:0b:26:5c:74:34:32:b6: 93:c5:1e:3b:02:97:69:b8:ac:eb:36:8c:47:e6:fc:3f:bb:2c: 3c:68:7e:e0:de:86:b2:4d:b9:89:c2:01:29:c4:16:01:28:d7: f1:80:8b:ac:49:01:eb:7e:ba:d4:dc:a5:89:dd:ec:09:b0:68: dc:20:34:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZCQ0MxMTAvBgNVBAUTKEZENDVDQzU0MDNDNjRDRkIyMzBBQTdERUVEMTBCQzY4 MjI4RDc0NzMwHhcNMjUxMjA5MDEyNDU5WhcNMjUxMjE2MDEyNDU5WjAYMRYwFAYD VQQDEw02OTM3N2E2Yi00MWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6XzDd7SnvwCFYhKeZr4Z9VD1uaVJBuvE8dRJE29gs93oNGZl+SrrqgycRso2 nUNVfOF4rSbgA4MOBGlTuTreWRhi6L7bD2SAExxgsLkDw+JGL2bSLBGflnZjXPwc 5jmEWRaJE9958qZmsxJlUu0hPlm62SmnCfxCyWTBn1zuZVV30diR8hkhKoJDJx4l NxKlFCId8Dl7o6M49Jep31oiuShyMIMs6nmv6iUAieMDfkI0ip5vmUDuDoQgjgAL QgtFJaocNrhwnk6U6SYqc3DstMQ3olkHO3+HQd/RYJzabWvBdWe8ygQzc7dWtYMY LOKuscSP0sZcfyXO10pIHzHaRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAr39vCw r+4WTRdKX6vwoyb5TAPYMB8GA1UdIwQYMBaAFP1FzFQDxkz7Iwqn3u0QvGgijXRz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkJDQy85MDRFNTBGMDQ4 RDQxMUVFQjVENkExN0JDNEY5QUUwMi9fVVhNVkFQR1RQc2pDcWZlN1JDOGFDS05k SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VWE1WQVBHVFBzakNxZmU3UkM4YUNLTmRITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkJDQy85MDRFNTBGMDQ4RDQxMUVFQjVENkExN0JDNEY5QUUwMi9fVVhNVkFQR1RQ c2pDcWZlN1JDOGFDS05kSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYMMg4srbqUlBFA/Gw1rpXJlspYTLq3WyfxYOVgx0l1Z+oTpWmBrE9 XdmXyYb+xwXUAHF/aj55RnPqSX4LCxzs86mTnHVBy3i0MfVwQy2B9asRwO42Q5nL d1xANUiqN8mJo8hMwFIF3shMmy++2LgizvfLGKwiDHsk+dEnSrbz7gUbMb2L0vF2 mqbXbZio5gjysUd3K4lPq5zS5WPuJtEEjZWMAp/M5FLKE6kVN3e6OjcnDhniuoVW HYFuDsRS7AsmXHQ0MraTxR47ApdpuKzrNoxH5vw/uyw8aH7g3oayTbmJwgEpxBYB KNfxgIusSQHrfrrU3KWJ3ewJsGjcIDRh -----END CERTIFICATE-----Generated at Thu Dec 11 23:55:09 2025 by rpki-client