This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/uPcTXGBh-I9CraXVMMFwUK66jYU.mft File: uPcTXGBh-I9CraXVMMFwUK66jYU.mft (raw, json) Hash identifier: yFT4Lw306CjUMs8yvoCpRT/AEHw+qA3wvH4qeNc1N7w= Subject key identifier: 3F:00:24:0D:24:47:00:BC:C0:96:83:C4:4C:AA:2B:5F:C5:43:55:D5 Authority key identifier: B8:F7:13:5C:60:61:F8:8F:42:AD:A5:D5:30:C1:70:50:AE:BA:8D:85 Certificate issuer: /CN=A91B7929/serialNumber=B8F7135C6061F88F42ADA5D530C17050AEBA8D85 Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uPcTXGBh-I9CraXVMMFwUK66jYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/uPcTXGBh-I9CraXVMMFwUK66jYU.mft Manifest number: 03 Signing time: Wed 03 Dec 2025 06:17:53 +0000 Manifest this update: Wed 03 Dec 2025 06:17:53 +0000 Manifest next update: Wed 10 Dec 2025 06:17:53 +0000 Files and hashes: 1: uPcTXGBh-I9CraXVMMFwUK66jYU.crl (hash: S0VCzqxHiaChGW98FrcYpJtUF8NdW0k4Bm8apD21wQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/uPcTXGBh-I9CraXVMMFwUK66jYU.crl rsync://rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/uPcTXGBh-I9CraXVMMFwUK66jYU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uPcTXGBh-I9CraXVMMFwUK66jYU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7929, serialNumber=B8F7135C6061F88F42ADA5D530C17050AEBA8D85 Validity Not Before: Dec 3 06:17:53 2025 GMT Not After : Dec 10 06:17:53 2025 GMT Subject: CN=692fd611-e6ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ca:7e:32:14:34:ab:57:fc:00:58:0a:2f:9c: b0:86:db:f6:05:b1:34:f2:bc:02:57:e5:82:8c:24: 96:8c:77:99:82:fe:1d:66:86:f7:bf:43:f0:e1:d6: f2:ba:9b:67:d0:29:f7:bf:c5:cf:0b:c3:47:39:47: 54:1d:f0:7c:40:8c:c2:46:c4:e4:b4:cf:ba:ed:67: f7:45:99:72:6c:10:ec:d5:c7:25:4a:c8:bb:ef:62: 8e:a3:13:15:fa:ee:80:64:33:f3:e0:d8:db:6c:74: 8a:77:e6:6d:54:b3:86:4b:16:3e:f0:d1:d8:02:0f: dc:6f:38:ae:72:6c:b3:87:e9:45:e4:2a:bf:40:ba: 68:7e:d9:24:0e:b7:fa:c1:ac:ba:f7:a7:14:a4:d9: 44:af:12:fa:40:be:e8:33:4f:33:6f:98:49:bd:f5: b8:fa:cd:53:da:c1:e1:61:7f:fb:ed:07:fc:11:72: 09:0e:33:85:f6:7e:b4:76:3c:44:ff:11:b8:b3:95: c1:ad:3e:87:94:75:b6:99:c4:5b:99:1a:e3:af:3b: 4b:7a:5d:3f:f8:4a:50:04:d8:0e:82:30:6b:c1:db: f3:a3:6b:91:1f:d4:fe:ab:2a:02:02:7e:1c:66:8e: 18:4b:71:54:6d:b5:4c:83:ce:9f:34:9d:03:d1:46: 55:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:00:24:0D:24:47:00:BC:C0:96:83:C4:4C:AA:2B:5F:C5:43:55:D5 X509v3 Authority Key Identifier: keyid:B8:F7:13:5C:60:61:F8:8F:42:AD:A5:D5:30:C1:70:50:AE:BA:8D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/uPcTXGBh-I9CraXVMMFwUK66jYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uPcTXGBh-I9CraXVMMFwUK66jYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/uPcTXGBh-I9CraXVMMFwUK66jYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:34:7b:ec:ea:d8:21:fd:44:67:5b:b8:22:48:8a:70:26:79: a4:f9:90:8d:79:76:6d:dc:ef:be:dc:8b:5b:b4:e5:ba:ef:ab: 3d:89:bd:fe:eb:63:60:74:4a:28:39:fc:1a:2f:00:83:67:18: aa:3d:1a:01:27:4f:f2:35:25:f9:da:dc:e1:06:45:88:a5:fa: 74:6f:30:7a:36:09:93:e9:0e:51:38:56:44:c0:b3:01:4d:07: 33:70:cc:38:df:85:b1:22:0a:78:ef:37:b7:36:5e:11:e7:bd: df:08:f1:2a:64:61:20:07:19:c7:ff:b0:ab:98:db:97:b3:04: 4a:2f:9e:c0:44:2d:1d:f4:d2:6f:aa:ca:f0:49:1b:01:a6:7c: cc:46:6b:17:03:0b:7a:3b:94:15:a2:af:9e:6c:9e:2e:57:20: cd:0c:00:d6:43:9c:3f:6c:ba:c2:4e:81:c3:0e:b6:50:95:7d: d2:78:01:b0:2d:5a:e8:a1:c9:f9:f2:68:43:c7:b1:66:5e:38: 3e:c0:66:be:33:ce:05:10:10:1f:01:af:e9:4c:cc:ce:b7:15: cf:7c:2b:4c:16:c1:b3:44:8e:39:06:bd:1f:0c:2c:0f:d9:cb: 1e:17:5e:3e:3e:bf:0f:08:1c:89:35:4b:47:6c:eb:25:80:27: 28:2c:99:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NzkyOTExMC8GA1UEBRMoQjhGNzEzNUM2MDYxRjg4RjQyQURBNUQ1MzBDMTcwNTBB RUJBOEQ4NTAeFw0yNTEyMDMwNjE3NTNaFw0yNTEyMTAwNjE3NTNaMBgxFjAUBgNV BAMTDTY5MmZkNjExLWU2ZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmyn4yFDSrV/wAWAovnLCG2/YFsTTyvAJX5YKMJJaMd5mC/h1mhve/Q/Dh1vK6 m2fQKfe/xc8Lw0c5R1Qd8HxAjMJGxOS0z7rtZ/dFmXJsEOzVxyVKyLvvYo6jExX6 7oBkM/Pg2NtsdIp35m1Us4ZLFj7w0dgCD9xvOK5ybLOH6UXkKr9Aumh+2SQOt/rB rLr3pxSk2USvEvpAvugzTzNvmEm99bj6zVPaweFhf/vtB/wRcgkOM4X2frR2PET/ EbizlcGtPoeUdbaZxFuZGuOvO0t6XT/4SlAE2A6CMGvB2/Oja5Ef1P6rKgICfhxm jhhLcVRttUyDzp80nQPRRlWZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPwAkDSRH ALzAloPETKorX8VDVdUwHwYDVR0jBBgwFoAUuPcTXGBh+I9CraXVMMFwUK66jYUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3OTI5L0JBNkNFMkQwQ0U3 MzExRjA4NjQzMjIxNEM0RjlBRTAyL3VQY1RYR0JoLUk5Q3JhWFZNTUZ3VUs2NmpZ VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdVBjVFhHQmgtSTlDcmFYVk1NRndVSzY2allVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 OTI5L0JBNkNFMkQwQ0U3MzExRjA4NjQzMjIxNEM0RjlBRTAyL3VQY1RYR0JoLUk5 Q3JhWFZNTUZ3VUs2NmpZVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJk0e+zq2CH9RGdbuCJIinAmeaT5kI15dm3c777ci1u05brvqz2Jvf7r Y2B0Sig5/BovAINnGKo9GgEnT/I1Jfna3OEGRYil+nRvMHo2CZPpDlE4VkTAswFN BzNwzDjfhbEiCnjvN7c2XhHnvd8I8SpkYSAHGcf/sKuY25ezBEovnsBELR300m+q yvBJGwGmfMxGaxcDC3o7lBWir55sni5XIM0MANZDnD9susJOgcMOtlCVfdJ4AbAt WuihyfnyaEPHsWZeOD7AZr4zzgUQEB8Br+lMzM63Fc98K0wWwbNEjjkGvR8MLA/Z yx4XXj4+vw8IHIk1S0ds6yWAJygsmds= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:12 2025 by rpki-client