This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft File: UCfzGS691UlQo5w9EwlKcfHTMmY.mft (raw, json) Hash identifier: 3FePt0qSzmNf787UEJgzmw3WvosCoOvOls1UfY8/jCA= Subject key identifier: C2:08:93:64:3E:29:E3:E7:3B:72:49:9D:D4:06:99:18:0B:A3:00:4B Authority key identifier: 50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 Certificate issuer: /CN=A91A3078/serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Certificate serial: 0B6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft Manifest number: 0B4B Signing time: Wed 10 Dec 2025 18:24:49 +0000 Manifest this update: Wed 10 Dec 2025 18:24:48 +0000 Manifest next update: Wed 17 Dec 2025 18:24:48 +0000 Files and hashes: 1: UCfzGS691UlQo5w9EwlKcfHTMmY.crl (hash: J0uWxPlRb20k7vrG64sZKiJH5HF9aXFzwnnqixp30gE=) 2: F3F7D2B0CE9711ECA2477C19C4F9AE02.roa (hash: YSanlXPMFGlUc59onSU43QiRooXV0uHeNRhQl6sQvzs=) 3: CDD62642854E11EBA2CFDC87C4F9AE02.roa (hash: EMIkCzah8q7OcQkgGcb8CJSovHyJ1MV1+D6g6V84DdU=) 4: CEFEEFEA854E11EBA2CFDC87C4F9AE02.roa (hash: neskcJ2ryIraX5yGhHnDKoHimVr5nfZfeUgF/8p7xpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 18:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2922 (0xb6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3078, serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Validity Not Before: Dec 10 18:24:48 2025 GMT Not After : Dec 17 18:24:48 2025 GMT Subject: CN=6939baf1-4bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f9:e7:4c:f5:d8:50:2f:a7:84:05:63:8b:cb: 21:34:19:dd:31:45:60:4b:dd:d1:0d:de:46:b6:e8: a6:3a:fc:c3:65:7f:84:4a:18:22:1f:a4:58:23:68: 90:99:78:7d:3c:70:e8:23:7d:b3:4a:25:24:30:03: 8f:45:80:bc:28:f4:90:f1:6a:37:ff:53:58:97:aa: 3d:c7:be:e4:20:9a:b2:bc:8b:c7:e9:f9:6e:c2:3f: b2:8f:9d:b5:67:40:e9:b4:5e:38:06:8b:0b:48:fa: 1a:91:0c:a2:c0:b6:e9:66:e6:87:ff:4c:fc:98:cd: 60:bd:e0:28:ed:6a:25:dc:8d:7b:f5:a9:8a:7d:29: 75:ca:b0:7e:34:b3:86:87:9f:09:49:bc:1a:26:eb: 14:3c:77:9b:8b:79:19:67:03:a7:97:f2:1f:45:4b: f7:3a:ed:0b:41:b2:35:0e:73:cb:1f:39:34:bc:0a: 1b:38:6b:e8:17:ca:35:18:53:16:20:a8:92:d3:d2: 43:2e:6d:e7:f4:bb:19:f5:2f:2a:5e:9f:9c:16:25: b9:a9:60:eb:ac:d9:bd:68:51:f8:70:63:03:58:cb: 0b:7b:3b:c7:86:e3:a2:6d:c7:21:5a:d7:33:39:ff: 03:53:26:17:ae:29:78:4f:fa:30:6f:e6:fb:26:38: 60:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:08:93:64:3E:29:E3:E7:3B:72:49:9D:D4:06:99:18:0B:A3:00:4B X509v3 Authority Key Identifier: keyid:50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:74:d2:4b:de:60:fc:4c:6d:11:b3:f5:a5:d8:05:b9:c1:c1: 37:2a:dc:ca:88:89:b8:c6:4a:11:ff:32:25:4b:98:41:7b:57: 68:2c:49:dc:85:94:36:cf:b8:aa:ae:c5:8e:b1:cf:20:77:93: 20:3c:08:f9:42:18:a7:2a:ab:bc:ab:fc:c7:9a:4d:7b:ff:2c: 20:02:ad:5b:02:ee:81:d9:4f:59:c9:a5:2c:4d:bd:59:b8:80: 46:f0:1d:5a:8e:e1:db:5f:20:09:4b:41:54:38:fd:8e:4b:3b: 63:96:57:56:b0:4c:e2:dd:7b:d0:32:88:ce:a7:98:84:c5:5a: 94:21:cc:f3:27:57:87:16:91:99:8f:a1:1e:df:62:53:69:1c: 7b:d2:4b:a5:7f:9e:6f:f3:f8:89:7a:2f:20:9c:2d:cb:31:57: a8:9e:3d:e8:8b:2f:f2:82:97:88:ba:a6:95:3d:ff:b8:1f:7a: 05:cb:d2:1f:69:28:a3:ba:bd:ca:eb:75:18:41:b2:10:cd:02: 57:6b:97:f1:17:7b:bb:be:2b:4e:26:38:9d:cd:b5:0e:0b:20: 9d:e9:60:a9:18:f0:d4:50:9b:66:f5:a3:8f:12:b1:6a:da:96: 6a:a6:ba:2a:12:86:0e:e7:06:28:44:2a:ed:a4:c1:1b:2a:e8: 47:02:e3:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwNzgxMTAvBgNVBAUTKDUwMjdGMzE5MkVCREQ1NDk1MEEzOUMzRDEzMDk0QTcx RjFEMzMyNjYwHhcNMjUxMjEwMTgyNDQ4WhcNMjUxMjE3MTgyNDQ4WjAYMRYwFAYD VQQDEw02OTM5YmFmMS00YmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvnnTPXYUC+nhAVji8shNBndMUVgS93RDd5GtuimOvzDZX+EShgiH6RYI2iQ mXh9PHDoI32zSiUkMAOPRYC8KPSQ8Wo3/1NYl6o9x77kIJqyvIvH6fluwj+yj521 Z0DptF44BosLSPoakQyiwLbpZuaH/0z8mM1gveAo7Wol3I179amKfSl1yrB+NLOG h58JSbwaJusUPHebi3kZZwOnl/IfRUv3Ou0LQbI1DnPLHzk0vAobOGvoF8o1GFMW IKiS09JDLm3n9LsZ9S8qXp+cFiW5qWDrrNm9aFH4cGMDWMsLezvHhuOibcchWtcz Of8DUyYXril4T/owb+b7JjhgdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIIk2Q+ KePnO3JJndQGmRgLowBLMB8GA1UdIwQYMBaAFFAn8xkuvdVJUKOcPRMJSnHx0zJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA3OC84NjMwQjFDODRD OEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFVbFFvNXc5RXdsS2NmSFRN bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VDZnpHUzY5MVVsUW81dzlFd2xLY2ZIVE1tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzA3OC84NjMwQjFDODRDOEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFV bFFvNXc5RXdsS2NmSFRNbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxdNJL3mD8TG0Rs/Wl2AW5wcE3KtzKiIm4xkoR/zIlS5hBe1doLEnc hZQ2z7iqrsWOsc8gd5MgPAj5QhinKqu8q/zHmk17/ywgAq1bAu6B2U9ZyaUsTb1Z uIBG8B1ajuHbXyAJS0FUOP2OSztjlldWsEzi3XvQMojOp5iExVqUIczzJ1eHFpGZ j6Ee32JTaRx70kulf55v8/iJei8gnC3LMVeonj3oiy/ygpeIuqaVPf+4H3oFy9If aSijur3K63UYQbIQzQJXa5fxF3u7vitOJjidzbUOCyCd6WCpGPDUUJtm9aOPErFq 2pZqproqEoYO5wYoRCrtpMEbKuhHAuMX -----END CERTIFICATE-----Generated at Fri Dec 12 08:02:33 2025 by rpki-client