This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft File: uokBTrxJS2f9iz-C6LOO9vbFck0.mft (raw, json) Hash identifier: R9FkcROpXrkWh4BJpK9qrZ2ahFleUzwUq74FCGi1cF4= Subject key identifier: 2D:01:EF:F8:AF:04:E7:09:D3:0A:54:24:8C:A4:76:43:37:A3:0A:3C Authority key identifier: BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D Certificate issuer: /CN=A91C4EC7/serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Certificate serial: 017C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft Manifest number: 0174 Signing time: Wed 07 Jan 2026 03:09:10 +0000 Manifest this update: Wed 07 Jan 2026 03:09:09 +0000 Manifest next update: Wed 14 Jan 2026 03:09:09 +0000 Files and hashes: 1: uokBTrxJS2f9iz-C6LOO9vbFck0.crl (hash: dcmhQ40exmGQ4yu25Q7Acs4bBQ+59j8fhO8VxLr7k2Y=) 2: ED352AAEBFE511EEBB3B4D25C4F9AE02.roa (hash: f5h7pWtzzun3k/S2BGtGnUW7FrbyQ881r1XD1MN/1kg=) 3: 7FC61EDC2E1D11EF933E9981C4F9AE02.roa (hash: /jY4R6nSwlRv/XQPnouyDv7l31bs7KH0Yf7nwaSNSbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Jan 2026 03:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4EC7, serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Validity Not Before: Jan 7 03:09:09 2026 GMT Not After : Jan 14 03:09:09 2026 GMT Subject: CN=695dce56-424c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a4:f2:c2:56:1b:a6:14:9b:56:31:25:90:ee: c0:db:50:50:98:23:b3:ea:03:27:43:0c:a6:e3:54: 3e:d8:94:77:e3:8f:80:52:e8:13:65:02:ea:31:62: 16:1f:6f:38:00:15:40:15:d5:e0:f6:30:a7:a3:cc: 4d:c5:20:00:76:4a:47:a9:73:2d:c8:77:15:4f:34: 2b:0b:cb:dd:71:3a:e9:5f:77:35:50:e1:d0:ec:a3: 8b:c1:57:91:e5:b2:55:d5:89:62:a2:39:e5:b0:31: 54:56:b8:6a:94:5b:97:3f:9b:93:37:bb:26:c7:dc: 60:e0:db:75:9a:f0:7c:07:4b:1e:53:ce:c9:4c:a7: 78:7a:2f:d9:87:76:20:e7:ae:61:b7:ae:96:ad:fc: 47:36:5e:ce:56:81:8b:d3:3f:63:d6:11:a9:ed:15: 73:38:4a:c8:8f:46:0c:83:a6:11:c0:49:e7:c8:66: 12:64:68:d4:e5:4b:0f:f9:cf:26:83:9f:af:e7:ab: 92:c9:2e:89:47:78:df:44:5e:ad:e1:7e:d6:de:8d: 70:a4:ca:08:aa:8c:b7:7a:57:5e:77:13:07:e7:59: 1a:c4:6f:e3:27:96:c0:f4:83:2e:3a:c6:c9:13:36: 2e:2a:28:6d:cb:71:ae:14:cb:8f:1f:a3:92:79:b1: f2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:01:EF:F8:AF:04:E7:09:D3:0A:54:24:8C:A4:76:43:37:A3:0A:3C X509v3 Authority Key Identifier: keyid:BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:0c:8c:f4:6b:f1:3f:18:c1:fe:e2:a0:b7:65:6d:70:a2:21: c6:28:f5:9b:6c:22:a3:71:ab:ff:23:c9:e5:8c:ee:d2:6b:cb: eb:8c:b9:c0:d2:00:e7:8a:4f:03:5d:dc:a2:34:eb:46:3e:1a: 14:9e:b3:b2:be:33:41:1b:fd:91:aa:d7:c7:2f:02:a1:66:ad: a8:da:df:e2:29:3c:7b:01:99:c4:46:e5:43:9c:5f:81:f9:30: bb:43:cc:88:12:2a:9d:6f:6f:69:c1:92:13:5d:63:35:14:66: 51:75:fe:94:0f:de:61:7b:b6:e4:8b:6c:97:1e:fa:d6:8d:94: 91:25:94:86:6e:4e:6e:5a:72:46:48:69:03:89:eb:a6:89:6f: 69:1b:e5:49:5a:c3:16:1b:2e:d0:df:30:0f:68:c4:14:bd:8a: f4:3e:94:74:61:a6:ff:68:4e:ff:37:1e:b3:0f:de:12:fb:93: 51:7b:85:3f:c3:50:fb:e2:6b:bf:b5:99:5f:58:73:ef:b4:b6: 58:92:97:22:14:c9:6d:40:fc:30:2e:ef:65:0e:5f:aa:ed:5f: 27:46:ff:42:9c:db:d9:d9:a3:54:65:c8:de:33:aa:05:5b:92: 19:c5:56:35:0d:ca:26:e8:79:95:cb:48:19:1e:32:d5:3f:b3: 9c:8f:94:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFQzcxMTAvBgNVBAUTKEJBODkwMTRFQkM0OTRCNjdGRDhCM0Y4MkU4QjM4RUY2 RjZDNTcyNEQwHhcNMjYwMTA3MDMwOTA5WhcNMjYwMTE0MDMwOTA5WjAYMRYwFAYD VQQDDA02OTVkY2U1Ni00MjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKTywlYbphSbVjElkO7A21BQmCOz6gMnQwym41Q+2JR344+AUugTZQLqMWIW H284ABVAFdXg9jCno8xNxSAAdkpHqXMtyHcVTzQrC8vdcTrpX3c1UOHQ7KOLwVeR 5bJV1YliojnlsDFUVrhqlFuXP5uTN7smx9xg4Nt1mvB8B0seU87JTKd4ei/Zh3Yg 565ht66WrfxHNl7OVoGL0z9j1hGp7RVzOErIj0YMg6YRwEnnyGYSZGjU5UsP+c8m g5+v56uSyS6JR3jfRF6t4X7W3o1wpMoIqoy3eldedxMH51kaxG/jJ5bA9IMuOsbJ EzYuKihty3GuFMuPH6OSebHyfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0B7/iv BOcJ0wpUJIykdkM3owo8MB8GA1UdIwQYMBaAFLqJAU68SUtn/Ys/guizjvb2xXJN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEVDNy83NTc1Nzg3MEJG RTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMyZjlpei1DNkxPTzl2YkZj azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vva0JUcnhKUzJmOWl6LUM2TE9POXZiRmNrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEVDNy83NTc1Nzg3MEJGRTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMy Zjlpei1DNkxPTzl2YkZjazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaDIz0a/E/GMH+4qC3ZW1woiHGKPWbbCKjcav/I8nljO7Sa8vrjLnA 0gDnik8DXdyiNOtGPhoUnrOyvjNBG/2RqtfHLwKhZq2o2t/iKTx7AZnERuVDnF+B +TC7Q8yIEiqdb29pwZITXWM1FGZRdf6UD95he7bki2yXHvrWjZSRJZSGbk5uWnJG SGkDieumiW9pG+VJWsMWGy7Q3zAPaMQUvYr0PpR0Yab/aE7/Nx6zD94S+5NRe4U/ w1D74mu/tZlfWHPvtLZYkpciFMltQPwwLu9lDl+q7V8nRv9CnNvZ2aNUZcjeM6oF W5IZxVY1Dcom6HmVy0gZHjLVP7Ocj5Tr -----END CERTIFICATE-----Generated at Fri Jan 9 00:51:37 2026 by rpki-client