This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft File: uokBTrxJS2f9iz-C6LOO9vbFck0.mft (raw, json) Hash identifier: g+JxamkYqjKN89o4gUNpBOuG2dtZQ8q3yjgEZvdgmfU= Subject key identifier: CE:A0:3B:E6:5A:94:A7:81:5B:2F:30:2F:20:95:9A:EC:5F:52:3C:96 Authority key identifier: BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D Certificate issuer: /CN=A91C4EC7/serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Certificate serial: 0160 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft Manifest number: 015A Signing time: Fri 21 Nov 2025 02:27:07 +0000 Manifest this update: Fri 21 Nov 2025 02:27:06 +0000 Manifest next update: Fri 28 Nov 2025 02:27:06 +0000 Files and hashes: 1: uokBTrxJS2f9iz-C6LOO9vbFck0.crl (hash: bC2JFL54iybG5+ykaZv0+Mw6dFu5Hr9ralEDRlXrDLk=) 2: ED352AAEBFE511EEBB3B4D25C4F9AE02.roa (hash: Cg10Lh1/jWjaqO5EBHv5C6vMK3khuwZ/+iMJMpvh7AE=) 3: 7FC61EDC2E1D11EF933E9981C4F9AE02.roa (hash: lJjM0vXxFGkR8fpKRXKFywWPgH/0gbH+qkVNiWKRaAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Nov 2025 02:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4EC7, serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Validity Not Before: Nov 21 02:27:06 2025 GMT Not After : Nov 28 02:27:06 2025 GMT Subject: CN=691fcdfb-bda8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a1:79:f4:a8:9e:f7:fb:d7:ed:f7:da:66:7e: e5:81:22:9f:1c:e9:4b:e9:60:96:36:0f:cd:76:99: 21:81:fb:82:16:f3:7c:d1:d0:49:d8:2e:e2:3d:9d: 07:04:3e:52:36:b0:c9:de:cb:cd:7a:64:f1:39:c2: 13:d1:72:1c:ca:9e:ac:b2:58:08:37:c0:8f:83:fb: 9b:c6:0a:7f:21:cb:c8:a5:28:21:41:41:4f:d6:85: 4f:6c:89:7d:34:47:eb:67:9e:d7:51:4b:b1:6e:22: f3:d6:5a:e4:6f:37:d4:95:6e:be:11:97:f8:e6:ce: a6:b1:b1:ed:e0:4d:26:c7:41:cd:54:3c:92:ec:80: 9a:be:91:4c:37:5c:9c:77:16:b4:e5:3d:62:61:47: db:eb:01:9a:92:2b:06:d2:45:16:28:0e:e7:86:4a: d7:e1:74:66:9e:5f:88:d6:3d:bb:33:b5:44:bd:59: 43:e0:eb:d2:77:38:98:35:f4:1d:56:ae:ad:99:bc: 9d:23:78:e3:98:61:13:2f:5c:03:0a:0f:33:53:db: f9:0a:4a:7d:ee:dd:a0:e9:c6:d8:45:13:b3:dc:fd: 84:84:b1:05:16:17:83:ae:ec:fd:73:bd:64:70:30: 6b:05:0e:04:74:33:98:1f:0f:af:1c:8b:4e:da:45: 46:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A0:3B:E6:5A:94:A7:81:5B:2F:30:2F:20:95:9A:EC:5F:52:3C:96 X509v3 Authority Key Identifier: keyid:BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:5f:6a:a9:4c:b3:d5:90:38:6f:b4:b4:a0:9d:fb:24:2f:7d: 75:82:bc:f6:85:18:88:63:8e:7f:3b:3a:0f:26:d0:2c:4c:22: 33:a8:bf:d2:84:ff:56:2a:fb:01:45:30:17:c4:81:9b:02:90: 49:6e:fe:47:58:de:71:9d:3e:30:2e:9e:21:07:78:f6:e7:32: c3:d2:2b:1f:e5:ff:ff:4f:fd:71:18:b3:63:59:39:ce:0f:70: 65:b0:72:5b:24:0f:76:07:fc:68:7d:7d:42:a3:d6:69:30:c7: c6:2b:6f:65:9c:2f:99:f1:f2:33:31:af:eb:2a:65:8f:c7:c4: 45:af:19:f8:b5:6a:f3:38:37:bb:a2:16:0a:58:90:07:53:35: a8:08:65:c6:38:0b:03:a9:39:5e:06:91:a4:b6:45:60:d7:c2: e9:2f:f9:fd:e9:94:37:89:af:00:21:74:c1:2d:f4:ef:f0:cf: aa:7f:08:63:85:30:d3:c1:43:c1:b2:15:6b:c5:00:bd:ef:82: e4:da:97:b2:c2:0d:97:3d:79:54:e7:91:fc:e1:17:97:46:47: 69:70:c9:95:15:61:77:7d:12:c2:f1:02:c8:53:e9:3b:24:57: 78:c7:6d:e5:88:e9:c3:6a:a6:80:d0:d2:a5:c2:33:49:d4:2b: 74:f5:9b:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFQzcxMTAvBgNVBAUTKEJBODkwMTRFQkM0OTRCNjdGRDhCM0Y4MkU4QjM4RUY2 RjZDNTcyNEQwHhcNMjUxMTIxMDIyNzA2WhcNMjUxMTI4MDIyNzA2WjAYMRYwFAYD VQQDEw02OTFmY2RmYi1iZGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1aF59Kie9/vX7ffaZn7lgSKfHOlL6WCWNg/NdpkhgfuCFvN80dBJ2C7iPZ0H BD5SNrDJ3svNemTxOcIT0XIcyp6sslgIN8CPg/ubxgp/IcvIpSghQUFP1oVPbIl9 NEfrZ57XUUuxbiLz1lrkbzfUlW6+EZf45s6msbHt4E0mx0HNVDyS7ICavpFMN1yc dxa05T1iYUfb6wGakisG0kUWKA7nhkrX4XRmnl+I1j27M7VEvVlD4OvSdziYNfQd Vq6tmbydI3jjmGETL1wDCg8zU9v5Ckp97t2g6cbYRROz3P2EhLEFFheDruz9c71k cDBrBQ4EdDOYHw+vHItO2kVGXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6gO+Za lKeBWy8wLyCVmuxfUjyWMB8GA1UdIwQYMBaAFLqJAU68SUtn/Ys/guizjvb2xXJN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEVDNy83NTc1Nzg3MEJG RTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMyZjlpei1DNkxPTzl2YkZj azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vva0JUcnhKUzJmOWl6LUM2TE9POXZiRmNrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEVDNy83NTc1Nzg3MEJGRTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMy Zjlpei1DNkxPTzl2YkZjazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkX2qpTLPVkDhvtLSgnfskL311grz2hRiIY45/OzoPJtAsTCIzqL/S hP9WKvsBRTAXxIGbApBJbv5HWN5xnT4wLp4hB3j25zLD0isf5f//T/1xGLNjWTnO D3BlsHJbJA92B/xofX1Co9ZpMMfGK29lnC+Z8fIzMa/rKmWPx8RFrxn4tWrzODe7 ohYKWJAHUzWoCGXGOAsDqTleBpGktkVg18LpL/n96ZQ3ia8AIXTBLfTv8M+qfwhj hTDTwUPBshVrxQC974Lk2peywg2XPXlU55H84ReXRkdpcMmVFWF3fRLC8QLIU+k7 JFd4x23liOnDaqaA0NKlwjNJ1Ct09Zum -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:57 2025 by rpki-client