This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft File: UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft (raw, json) Hash identifier: /l2JdpoyawCe52MNQ0UPWGBMMV/bFndznapqjYAozfo= Subject key identifier: 61:13:36:2F:2A:E8:53:3D:49:91:CC:72:3C:38:F4:C3:90:CB:6C:33 Authority key identifier: 52:B2:19:95:42:9C:44:F8:A7:F4:EC:99:E5:30:40:87:0D:6D:38:5B Certificate issuer: /CN=A91A459D/serialNumber=52B21995429C44F8A7F4EC99E53040870D6D385B Certificate serial: 0A42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrIZlUKcRPin9OyZ5TBAhw1tOFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft Manifest number: 0A3B Signing time: Mon 22 Dec 2025 19:08:13 +0000 Manifest this update: Mon 22 Dec 2025 19:08:13 +0000 Manifest next update: Mon 29 Dec 2025 19:08:13 +0000 Files and hashes: 1: UrIZlUKcRPin9OyZ5TBAhw1tOFs.crl (hash: cGjrQ2us/WQ3eqgP+DYdCi3LzjrJragA1A6aJf4TQhw=) 2: 21028CF67EF811EAAD47CD30C4F9AE02.roa (hash: +gB8ZHO5MMKVGP2yT3GNNhFPo53EwfTpImIrJ+ySljI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.crl rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrIZlUKcRPin9OyZ5TBAhw1tOFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2626 (0xa42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A459D, serialNumber=52B21995429C44F8A7F4EC99E53040870D6D385B Validity Not Before: Dec 22 19:08:13 2025 GMT Not After : Dec 29 19:08:13 2025 GMT Subject: CN=6949971d-7bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:95:d1:65:06:b5:86:14:a7:00:6f:a6:01:3a: 42:db:cc:34:50:31:f5:be:70:ff:be:da:23:2e:9a: f7:96:48:92:d7:fb:83:bb:44:72:64:3d:e5:48:a9: 57:3f:99:14:10:cb:27:a9:40:f4:6f:ff:ad:41:98: 20:dd:8a:81:d2:35:01:59:0c:5f:bd:5b:2d:71:e2: 83:16:b9:d0:b9:eb:50:16:28:94:1c:1a:f6:26:ae: f6:d4:af:27:00:2f:44:0d:56:df:4f:a4:3d:82:72: 0b:6b:d4:24:f5:6f:b9:c4:18:d9:dd:a0:63:c2:33: c1:18:13:4c:2d:45:4f:a7:d0:67:9d:47:13:67:63: 3c:ac:03:36:a4:8a:35:00:bb:57:9a:41:0e:37:f4: 23:51:04:22:45:4e:63:7c:1b:45:44:35:ec:ce:1b: 82:81:84:2c:22:28:fc:3c:af:bb:3b:7e:ee:34:a1: 6b:ee:44:9c:56:8d:af:e6:af:08:8a:2d:54:22:a3: 87:26:8b:ee:41:a0:a0:b5:ff:f3:7b:43:26:b5:5b: 13:12:75:76:3b:70:ee:5a:d1:fd:4f:8f:59:72:a7: d5:32:41:cb:3b:c7:ac:6f:aa:8f:a3:c3:81:ad:4a: 87:60:94:ef:66:60:75:f2:19:79:1d:b8:da:6f:bf: 2d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:13:36:2F:2A:E8:53:3D:49:91:CC:72:3C:38:F4:C3:90:CB:6C:33 X509v3 Authority Key Identifier: keyid:52:B2:19:95:42:9C:44:F8:A7:F4:EC:99:E5:30:40:87:0D:6D:38:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrIZlUKcRPin9OyZ5TBAhw1tOFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c1:b6:34:d7:45:a3:49:3a:31:3b:21:07:a0:04:5e:9b:42: 9b:52:66:f8:0a:19:c4:87:82:3b:07:18:46:8c:07:64:e7:5a: a3:89:80:5c:45:a8:5e:c0:5b:77:26:2d:d5:e2:48:ca:b3:b6: bd:9c:7c:81:47:d0:c3:e1:92:16:6e:81:c8:47:ce:fe:84:f4: c3:66:03:8c:bb:2c:4f:e9:b7:b8:ff:b0:ac:c9:d5:cd:74:70: 41:6e:f1:33:5f:9a:f4:e6:90:a9:96:da:56:c1:4f:c2:54:58: de:d7:9c:a6:13:a6:16:50:9d:41:a9:4c:ac:0a:88:b9:4e:bf: 2d:e3:72:b5:fe:ec:17:70:d3:a5:67:71:27:23:9d:f4:a9:bf: 6e:25:f3:7a:d8:cd:0c:e4:c8:9a:a0:d7:7e:ce:66:1d:07:fb: cc:cc:6d:c2:76:10:24:0f:ce:0f:f6:48:dc:3e:9b:2a:36:fc: 70:25:c4:c4:56:28:37:2e:34:c1:2d:68:77:8b:ea:e5:4c:b2: 52:c7:f6:3f:be:22:63:be:b3:e1:14:63:f4:da:ef:b3:0b:dd: 23:43:e7:4f:39:7d:5e:84:73:84:23:ad:5c:51:98:cc:32:4e: 77:5c:bf:62:3d:c5:0c:70:9d:d8:9c:2a:05:6f:4c:d4:31:d1: 0d:20:9b:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1OUQxMTAvBgNVBAUTKDUyQjIxOTk1NDI5QzQ0RjhBN0Y0RUM5OUU1MzA0MDg3 MEQ2RDM4NUIwHhcNMjUxMjIyMTkwODEzWhcNMjUxMjI5MTkwODEzWjAYMRYwFAYD VQQDDA02OTQ5OTcxZC03YmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlpXRZQa1hhSnAG+mATpC28w0UDH1vnD/vtojLpr3lkiS1/uDu0RyZD3lSKlX P5kUEMsnqUD0b/+tQZgg3YqB0jUBWQxfvVstceKDFrnQuetQFiiUHBr2Jq721K8n AC9EDVbfT6Q9gnILa9Qk9W+5xBjZ3aBjwjPBGBNMLUVPp9BnnUcTZ2M8rAM2pIo1 ALtXmkEON/QjUQQiRU5jfBtFRDXszhuCgYQsIij8PK+7O37uNKFr7kScVo2v5q8I ii1UIqOHJovuQaCgtf/ze0MmtVsTEnV2O3DuWtH9T49ZcqfVMkHLO8esb6qPo8OB rUqHYJTvZmB18hl5Hbjab78tGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGETNi8q 6FM9SZHMcjw49MOQy2wzMB8GA1UdIwQYMBaAFFKyGZVCnET4p/TsmeUwQIcNbThb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDU5RC81RkFCOTcyRTdF RjYxMUVBQTk3OUEzMkRDNEY5QUUwMi9VcklabFVLY1JQaW45T3laNVRCQWh3MXRP RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VySVpsVUtjUlBpbjlPeVo1VEJBaHcxdE9Gcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDU5RC81RkFCOTcyRTdFRjYxMUVBQTk3OUEzMkRDNEY5QUUwMi9VcklabFVLY1JQ aW45T3laNVRCQWh3MXRPRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPwbY010WjSToxOyEHoARem0KbUmb4ChnEh4I7BxhGjAdk51qjiYBc RahewFt3Ji3V4kjKs7a9nHyBR9DD4ZIWboHIR87+hPTDZgOMuyxP6be4/7CsydXN dHBBbvEzX5r05pCpltpWwU/CVFje15ymE6YWUJ1BqUysCoi5Tr8t43K1/uwXcNOl Z3EnI530qb9uJfN62M0M5MiaoNd+zmYdB/vMzG3CdhAkD84P9kjcPpsqNvxwJcTE Vig3LjTBLWh3i+rlTLJSx/Y/viJjvrPhFGP02u+zC90jQ+dPOX1ehHOEI61cUZjM Mk53XL9iPcUMcJ3YnCoFb0zUMdENIJsA -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:33 2025 by rpki-client