This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft File: _UnAZPyj6S3swYqPUElLIfwB8lY.mft (raw, json) Hash identifier: pRhdrNxVVBivfRzEu4VHYIZMKITqHR+Mhv3AW/XGcCM= Subject key identifier: CA:89:BF:74:C4:90:B8:F1:E5:76:E1:20:BD:EA:3C:86:B8:D2:D7:F8 Authority key identifier: FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56 Certificate issuer: /CN=A91934DE/serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256 Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft Manifest number: 0200 Signing time: Fri 19 Dec 2025 01:43:06 +0000 Manifest this update: Fri 19 Dec 2025 01:43:06 +0000 Manifest next update: Fri 26 Dec 2025 01:43:06 +0000 Files and hashes: 1: _UnAZPyj6S3swYqPUElLIfwB8lY.crl (hash: MtGN1ZovgdrE7QbVcFn0ATptDACp1OFVFLda4pViYMo=) 2: 358556D2D98F11EDA9A38028C4F9AE02.roa (hash: w60npFN7Kaoau14A8nUumKIk6Z7FI9jzoRmBuAraQgw=) 3: 05F11BACDF4A11EDA4190947C4F9AE02.roa (hash: xNw6lqRZVzml6zGHz7sRyZFWQnA5LMwPw8PJ9UjVWeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:43:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91934DE, serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256 Validity Not Before: Dec 19 01:43:06 2025 GMT Not After : Dec 26 01:43:06 2025 GMT Subject: CN=6944adaa-e8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2b:2b:79:c9:cd:2f:58:00:65:94:8e:c7:57: 1d:93:33:34:a2:9e:2c:9f:f8:8e:a4:82:70:f0:22: ab:07:25:2d:8b:7d:72:22:3c:46:6e:fe:f5:37:37: c8:6a:8d:57:e0:e9:24:8d:0f:82:80:40:15:b4:9c: fe:0f:d0:df:69:37:3e:c1:0d:76:40:b3:be:82:c0: 16:3c:08:4c:a8:3a:a9:0c:db:a7:9c:6f:23:25:bd: 2c:ed:cc:68:d4:76:e1:58:8b:d5:26:0c:75:15:28: 81:22:c6:21:c5:cb:5b:ed:db:f0:f7:ef:a5:59:ea: fa:07:d5:ec:92:41:ec:bb:f5:a9:76:6a:3d:ab:00: 2f:27:63:1b:33:c0:8c:05:8c:36:46:71:cb:0d:9a: cf:3a:8d:92:37:a0:30:d2:12:2d:89:2f:f4:a7:ed: a6:ad:f0:e1:96:46:72:64:6f:57:79:03:eb:a9:da: f1:f6:92:66:60:5c:32:55:cc:a0:da:a1:52:ee:d6: e2:d4:48:f4:ba:fe:96:32:4f:64:a9:7d:23:ad:2c: 50:0d:8a:89:2e:b4:ea:53:8c:f5:8a:cf:ba:43:cf: 1c:d9:e8:d2:c9:03:6b:01:ff:3f:f6:2d:0a:65:66: 66:1d:f4:87:60:53:8e:b1:70:cb:0e:bb:fc:5b:b4: e8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:89:BF:74:C4:90:B8:F1:E5:76:E1:20:BD:EA:3C:86:B8:D2:D7:F8 X509v3 Authority Key Identifier: keyid:FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f2:06:af:1b:a3:43:dd:64:ac:3e:b4:83:0e:31:e7:03:22: 4e:eb:91:b3:6e:42:ea:52:f3:3d:ed:9b:a1:35:36:d3:7d:4d: 0f:41:bc:ea:8b:41:de:04:75:d1:07:dc:41:d1:b6:92:7a:90: 85:01:3e:2c:3f:4b:51:ea:73:91:dd:88:9d:8d:f6:e7:a4:b7: ea:2a:05:87:a6:cc:90:8e:c8:ef:50:a7:48:d8:a5:b1:df:2a: 23:85:f5:92:c7:56:31:f4:e3:20:3e:8f:11:d6:56:eb:82:15: 88:5f:26:17:8b:3e:55:74:f0:d3:42:a4:aa:6d:c8:fc:e2:a5: 75:c1:63:e9:1e:15:ef:fe:62:e2:b4:35:3d:09:56:9a:d2:9c: 79:9b:5b:96:47:b6:b7:ee:23:fc:94:1d:ec:15:c2:0c:71:df: 56:26:fb:ba:04:70:5e:e6:aa:a3:73:95:42:7a:e9:c8:bf:24: c5:27:ec:3b:19:67:83:9d:d9:fb:f1:fc:4f:b0:da:4c:4e:83: b1:38:06:4f:89:35:37:da:7b:27:1f:02:6a:a9:9b:7d:31:36: 37:82:80:e0:22:1e:61:3a:55:8c:62:56:cb:6b:35:fd:0b:d8: ab:2d:82:99:18:d1:71:f0:4f:42:09:2e:6d:3d:78:50:45:e4: 80:13:49:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM0REUxMTAvBgNVBAUTKEZENDlDMDY0RkNBM0U5MkRFQ0MxOEE4RjUwNDk0QjIx RkMwMUYyNTYwHhcNMjUxMjE5MDE0MzA2WhcNMjUxMjI2MDE0MzA2WjAYMRYwFAYD VQQDDA02OTQ0YWRhYS1lOGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CsrecnNL1gAZZSOx1cdkzM0op4sn/iOpIJw8CKrByUti31yIjxGbv71NzfI ao1X4OkkjQ+CgEAVtJz+D9DfaTc+wQ12QLO+gsAWPAhMqDqpDNunnG8jJb0s7cxo 1HbhWIvVJgx1FSiBIsYhxctb7dvw9++lWer6B9XskkHsu/Wpdmo9qwAvJ2MbM8CM BYw2RnHLDZrPOo2SN6Aw0hItiS/0p+2mrfDhlkZyZG9XeQPrqdrx9pJmYFwyVcyg 2qFS7tbi1Ej0uv6WMk9kqX0jrSxQDYqJLrTqU4z1is+6Q88c2ejSyQNrAf8/9i0K ZWZmHfSHYFOOsXDLDrv8W7To4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqJv3TE kLjx5XbhIL3qPIa40tf4MB8GA1UdIwQYMBaAFP1JwGT8o+kt7MGKj1BJSyH8AfJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzRERS9BOTQxRDVFMkQ4 RTQxMUVEOTJFQTM2MjBDNEY5QUUwMi9fVW5BWlB5ajZTM3N3WXFQVUVsTElmd0I4 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VbkFaUHlqNlMzc3dZcVBVRWxMSWZ3QjhsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzRERS9BOTQxRDVFMkQ4RTQxMUVEOTJFQTM2MjBDNEY5QUUwMi9fVW5BWlB5ajZT M3N3WXFQVUVsTElmd0I4bFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe8gavG6ND3WSsPrSDDjHnAyJO65GzbkLqUvM97ZuhNTbTfU0PQbzq i0HeBHXRB9xB0baSepCFAT4sP0tR6nOR3YidjfbnpLfqKgWHpsyQjsjvUKdI2KWx 3yojhfWSx1Yx9OMgPo8R1lbrghWIXyYXiz5VdPDTQqSqbcj84qV1wWPpHhXv/mLi tDU9CVaa0px5m1uWR7a37iP8lB3sFcIMcd9WJvu6BHBe5qqjc5VCeunIvyTFJ+w7 GWeDndn78fxPsNpMToOxOAZPiTU32nsnHwJqqZt9MTY3goDgIh5hOlWMYlbLazX9 C9irLYKZGNFx8E9CCS5tPXhQReSAE0mK -----END CERTIFICATE-----Generated at Sat Dec 20 20:02:07 2025 by rpki-client