This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft File: uFvtmb90CrrVo5nJ31_plipt6PE.mft (raw, json) Hash identifier: nkpjei0m1XEW54bjWdgPgwTIhC7RUo526y24SqArZro= Subject key identifier: DC:D3:36:FD:29:1C:35:BF:BA:9D:EB:37:4C:7A:23:BE:89:B7:8A:A3 Authority key identifier: B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1 Certificate issuer: /CN=A9195DE5/serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1 Certificate serial: 084A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft Manifest number: 0832 Signing time: Wed 10 Dec 2025 19:45:22 +0000 Manifest this update: Wed 10 Dec 2025 19:45:21 +0000 Manifest next update: Wed 17 Dec 2025 19:45:21 +0000 Files and hashes: 1: uFvtmb90CrrVo5nJ31_plipt6PE.crl (hash: FGLxq59Y6F1WYH0iD2DgiYljv6VMc9Zms38qdO0sc2I=) 2: 709F917AF74111EF98C99938C4F9AE02.roa (hash: 1qf+iawoit0ys+iUAf7LEY7HtRnvUIOTI+MZhHCWuYU=) 3: C7ADA138F4C011EAA7B25986C4F9AE02.roa (hash: G5UBtJsfZQZ4SV+yPTNK/ejUFIGmrip9sZG7FP0b4Cg=) 4: C8633DEAF4C011EAA7B25986C4F9AE02.roa (hash: ux6FaGhfWyv2H1NDOSXEk7LrVXGwR7MCaj2E49kXMHg=) 5: 70017B5CF74111EF98C99938C4F9AE02.roa (hash: 2qfdADfdo36JxITYdf4pd34OcKO4BbP5IH9WNGohmvk=) 6: C6EDD52EF4C011EAA7B25986C4F9AE02.roa (hash: qyqw3i3GL6h/SgQPPtxyHJkhrm/uWWSr5nGAKt/Qapg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 19:45:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2122 (0x84a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195DE5, serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1 Validity Not Before: Dec 10 19:45:21 2025 GMT Not After : Dec 17 19:45:21 2025 GMT Subject: CN=6939cdd2-e3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7e:a7:96:4a:49:ba:c5:18:68:c0:92:ed:31: 08:2d:b3:9d:ec:13:68:98:1c:af:0e:6f:c9:66:95: 5b:51:70:c4:95:f4:3d:11:27:e7:b4:13:e4:34:dd: da:0b:9b:36:ce:5e:42:c6:72:97:35:95:92:62:ce: a8:e5:76:11:c8:df:ca:aa:77:19:99:44:aa:1d:91: e8:76:95:41:5a:3a:5e:3f:98:34:27:a3:f6:20:e9: ef:6d:bb:b5:8a:43:55:65:91:99:58:1f:a4:6a:53: d3:76:ec:ec:ed:d2:1e:7e:c5:4e:50:c4:56:85:b3: a2:31:a5:d0:c0:ea:28:bf:cd:3f:3d:7d:2d:c9:03: 3b:23:19:53:af:24:b2:8f:5e:0d:b2:55:c3:b9:c9: 1b:7f:a1:67:61:ee:c8:b3:26:94:3d:84:d2:ce:af: a7:00:ce:43:25:13:e6:98:23:68:53:28:fb:55:27: ba:27:2e:33:53:33:ad:f1:10:09:6d:fc:9a:a4:44: 71:ce:b3:14:a4:45:55:4b:85:f0:63:c9:95:2e:c2: d9:55:76:3b:01:d5:97:88:51:d7:fc:39:e6:9b:e2: 42:ac:a9:1c:c6:c4:3a:a7:16:ed:d7:09:5d:4e:10: 48:e7:62:d8:7a:9a:53:96:64:f9:e0:4b:f1:86:91: fa:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D3:36:FD:29:1C:35:BF:BA:9D:EB:37:4C:7A:23:BE:89:B7:8A:A3 X509v3 Authority Key Identifier: keyid:B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:48:49:c3:8c:97:97:47:49:ba:88:90:f5:a3:af:71:8e:f5: 03:dd:d9:95:cd:d2:33:24:23:3c:5d:29:48:61:b7:f9:b4:71: 28:06:f2:77:8a:ba:2a:c6:0a:a8:c4:f7:89:7d:6c:79:75:b4: 94:5e:66:01:a9:f6:0c:84:6b:9c:e1:71:f7:67:13:8c:f3:cd: f9:7b:78:28:d2:86:ef:36:b5:ef:56:7b:99:51:0c:14:60:61: 58:27:00:ce:cf:00:f6:c2:c6:30:a7:62:90:55:66:7e:53:da: 2f:f3:36:f0:80:42:d5:4c:54:d0:88:fe:a5:07:c0:f5:b5:5c: 4c:a3:63:44:16:37:45:14:bd:33:a7:45:d2:72:e6:d0:0e:1b: 28:11:59:da:30:5a:f8:61:3e:ac:43:dd:c9:83:01:84:63:d5: 46:13:cc:27:62:76:fe:27:8f:d1:52:c8:04:96:6f:2a:64:ad: 15:5e:77:21:76:10:d0:b1:ad:fa:dc:5c:29:c5:1d:c7:b6:3c: 3b:ff:9f:37:7e:e3:ee:eb:94:89:25:02:76:82:fa:39:19:fb: 68:cc:de:51:38:55:0f:7c:0e:a7:0e:66:32:41:a2:58:e1:be: d5:46:74:83:36:b2:82:a9:8d:54:2c:a6:05:02:8f:47:0d:39: c6:95:f0:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVERTUxMTAvBgNVBAUTKEI4NUJFRDk5QkY3NDBBQkFENUEzOTlDOURGNUZFOTk2 MkE2REU4RjEwHhcNMjUxMjEwMTk0NTIxWhcNMjUxMjE3MTk0NTIxWjAYMRYwFAYD VQQDEw02OTM5Y2RkMi1lM2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy36nlkpJusUYaMCS7TEILbOd7BNomByvDm/JZpVbUXDElfQ9ESfntBPkNN3a C5s2zl5CxnKXNZWSYs6o5XYRyN/KqncZmUSqHZHodpVBWjpeP5g0J6P2IOnvbbu1 ikNVZZGZWB+kalPTduzs7dIefsVOUMRWhbOiMaXQwOoov80/PX0tyQM7IxlTrySy j14NslXDuckbf6FnYe7IsyaUPYTSzq+nAM5DJRPmmCNoUyj7VSe6Jy4zUzOt8RAJ bfyapERxzrMUpEVVS4XwY8mVLsLZVXY7AdWXiFHX/Dnmm+JCrKkcxsQ6pxbt1wld ThBI52LYeppTlmT54EvxhpH6CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzTNv0p HDW/up3rN0x6I76Jt4qjMB8GA1UdIwQYMBaAFLhb7Zm/dAq61aOZyd9f6ZYqbejx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NURFNS9FM0VENjVEOEY0 QkUxMUVBOUMzNUZFNkFDNEY5QUUwMi91RnZ0bWI5MENyclZvNW5KMzFfcGxpcHQ2 UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VGdnRtYjkwQ3JyVm81bkozMV9wbGlwdDZQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NURFNS9FM0VENjVEOEY0QkUxMUVBOUMzNUZFNkFDNEY5QUUwMi91RnZ0bWI5MENy clZvNW5KMzFfcGxpcHQ2UEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpSEnDjJeXR0m6iJD1o69xjvUD3dmVzdIzJCM8XSlIYbf5tHEoBvJ3 iroqxgqoxPeJfWx5dbSUXmYBqfYMhGuc4XH3ZxOM8835e3go0obvNrXvVnuZUQwU YGFYJwDOzwD2wsYwp2KQVWZ+U9ov8zbwgELVTFTQiP6lB8D1tVxMo2NEFjdFFL0z p0XScubQDhsoEVnaMFr4YT6sQ93JgwGEY9VGE8wnYnb+J4/RUsgElm8qZK0VXnch dhDQsa363FwpxR3Htjw7/583fuPu65SJJQJ2gvo5GftozN5ROFUPfA6nDmYyQaJY 4b7VRnSDNrKCqY1ULKYFAo9HDTnGlfDn -----END CERTIFICATE-----Generated at Fri Dec 12 13:02:51 2025 by rpki-client