This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft File: ul-4WRv8DEUKTkTW_D47x76GVBY.mft (raw, json) Hash identifier: 2uYIlTJlEzJ6B61btl4tDxHN7K7kVNV6WeAUpYKuakE= Subject key identifier: B3:22:B9:29:9E:4D:25:A4:A6:3D:13:E2:77:BA:6C:AB:6E:7D:B2:75 Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 Certificate issuer: /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft Manifest number: 0136 Signing time: Tue 23 Dec 2025 03:31:31 +0000 Manifest this update: Tue 23 Dec 2025 03:31:31 +0000 Manifest next update: Tue 30 Dec 2025 03:31:31 +0000 Files and hashes: 1: ul-4WRv8DEUKTkTW_D47x76GVBY.crl (hash: Jok8xyPNVtEl8PRYrAV10sdOdj31B1Ri7XjRUsBXFtI=) 2: E5AB5A60546911EF9AE9DC1CC4F9AE02.roa (hash: bsOFqF88ssvO68Cm8Ame+jksnHjJ98Qo8WHk2fC18fw=) 3: E30E4FF605E511EF868E0F6DC4F9AE02.roa (hash: jb52alxfqmopNXaWzE+J3NyrR4hDhCWX65ruTvYQprU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5213, serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Validity Not Before: Dec 23 03:31:31 2025 GMT Not After : Dec 30 03:31:31 2025 GMT Subject: CN=694a0d13-f253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a8:c7:c4:d0:21:d8:f6:67:c4:29:c0:6c:b2: b2:5d:5d:33:db:6c:cf:37:48:43:8d:80:24:6c:dd: 2f:15:bc:4b:e7:6f:8c:24:93:85:e4:42:1c:95:db: 7a:11:ce:27:73:d8:0b:fc:9c:fd:37:80:0d:65:ad: ab:0d:f5:80:3c:1f:85:8c:db:13:fd:5e:35:c8:0b: 48:b8:bc:49:7e:3b:33:d8:b6:92:d0:32:03:15:3a: 51:99:72:ae:55:20:bd:bb:17:23:93:66:cd:19:f8: ae:25:54:5f:93:29:1a:7d:61:dd:55:d6:2a:f8:34: 77:cf:b9:96:5d:c0:2a:70:cb:4e:17:a8:1d:b7:b3: 88:6a:53:f3:e1:64:64:77:a5:76:f4:1d:82:35:a7: 0a:e2:5b:2e:a1:cb:95:0b:35:d9:02:73:f4:3d:3f: 8a:ad:6e:91:bc:17:de:49:ac:45:ac:57:e1:0a:40: 99:c9:73:eb:87:43:0e:80:c2:03:6c:17:ff:94:d3: 0b:48:14:7a:81:b2:9f:49:eb:f3:38:bc:75:8d:1f: 51:c0:21:4a:f1:0a:f6:b7:9f:a8:d4:3a:63:0a:6e: aa:92:d2:cb:d1:17:47:30:38:cd:3e:81:40:a8:41: 1a:32:49:67:8e:a9:6b:c8:b5:b7:31:f7:00:45:23: c8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:22:B9:29:9E:4D:25:A4:A6:3D:13:E2:77:BA:6C:AB:6E:7D:B2:75 X509v3 Authority Key Identifier: keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:7b:34:54:e6:14:af:f7:29:47:6b:b6:d2:aa:ea:44:ff:87: 3d:f1:9d:32:d2:d0:a3:da:97:f4:5d:68:17:cb:fd:0a:c0:11: 51:bf:3a:60:ed:b2:c6:0a:21:f8:30:32:08:ce:ad:9c:e3:70: 7e:d1:44:69:75:2d:ca:e1:0e:37:dd:0f:bd:7f:49:da:8a:a1: 04:cc:71:6d:4a:25:02:97:ea:50:e4:48:f1:7d:3f:93:ca:fa: 79:9f:f8:49:ae:6f:9f:cc:67:1f:ba:42:ef:a8:c3:00:b9:eb: 93:bb:c0:15:7d:c4:65:39:af:6d:05:2e:d2:26:36:da:0f:18: 69:18:7b:1e:a6:c0:17:31:f9:41:ca:95:dd:ce:e1:e9:45:b1: b5:0a:fc:12:c1:92:87:43:ef:4a:07:f2:86:1f:46:79:2a:94: 57:0e:e5:66:28:df:9d:cf:47:6b:f5:9f:95:08:f5:10:80:1c: c5:48:25:b9:00:1f:64:8e:e2:f4:4d:95:ae:96:9f:56:2c:ef: 35:6d:4f:6d:ed:55:4b:ea:64:e6:df:e2:80:f1:1d:64:5c:95: 61:58:f2:4e:d2:5b:83:3d:24:c5:5d:0d:18:0a:ad:bd:18:2f: ab:8d:8b:32:11:9a:1f:dc:dd:da:66:fc:75:ea:44:c9:4a:28: f4:7c:84:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUyMTMxMTAvBgNVBAUTKEJBNUZCODU5MUJGQzBDNDUwQTRFNDRENkZDM0UzQkM3 QkU4NjU0MTYwHhcNMjUxMjIzMDMzMTMxWhcNMjUxMjMwMDMzMTMxWjAYMRYwFAYD VQQDDA02OTRhMGQxMy1mMjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6jHxNAh2PZnxCnAbLKyXV0z22zPN0hDjYAkbN0vFbxL52+MJJOF5EIcldt6 Ec4nc9gL/Jz9N4ANZa2rDfWAPB+FjNsT/V41yAtIuLxJfjsz2LaS0DIDFTpRmXKu VSC9uxcjk2bNGfiuJVRfkykafWHdVdYq+DR3z7mWXcAqcMtOF6gdt7OIalPz4WRk d6V29B2CNacK4lsuocuVCzXZAnP0PT+KrW6RvBfeSaxFrFfhCkCZyXPrh0MOgMID bBf/lNMLSBR6gbKfSevzOLx1jR9RwCFK8Qr2t5+o1DpjCm6qktLL0RdHMDjNPoFA qEEaMklnjqlryLW3MfcARSPITwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMiuSme TSWkpj0T4ne6bKtufbJ1MB8GA1UdIwQYMBaAFLpfuFkb/AxFCk5E1vw+O8e+hlQW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTIxMy81NTQzQkNDNDA1 RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERFVUtUa1RXX0Q0N3g3NkdW QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VsLTRXUnY4REVVS1RrVFdfRDQ3eDc2R1ZCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTIxMy81NTQzQkNDNDA1RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERF VUtUa1RXX0Q0N3g3NkdWQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5ezRU5hSv9ylHa7bSqupE/4c98Z0y0tCj2pf0XWgXy/0KwBFRvzpg 7bLGCiH4MDIIzq2c43B+0URpdS3K4Q433Q+9f0naiqEEzHFtSiUCl+pQ5EjxfT+T yvp5n/hJrm+fzGcfukLvqMMAueuTu8AVfcRlOa9tBS7SJjbaDxhpGHsepsAXMflB ypXdzuHpRbG1CvwSwZKHQ+9KB/KGH0Z5KpRXDuVmKN+dz0dr9Z+VCPUQgBzFSCW5 AB9kjuL0TZWulp9WLO81bU9t7VVL6mTm3+KA8R1kXJVhWPJO0luDPSTFXQ0YCq29 GC+rjYsyEZof3N3aZvx16kTJSij0fISB -----END CERTIFICATE-----Generated at Wed Dec 24 15:59:11 2025 by rpki-client