This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft File: UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft (raw, json) Hash identifier: 3d7DydcBx0SpL5TiFMuUxe0IoQ5U/sc0NwnSdFLJodQ= Subject key identifier: 52:4D:11:9D:38:30:78:10:26:54:2B:0D:5E:B0:74:7A:5B:2B:13:F6 Authority key identifier: 51:3E:CE:73:EE:9E:A3:25:EA:44:29:31:B0:06:2B:D8:BF:30:4A:76 Certificate issuer: /CN=A91C575E/serialNumber=513ECE73EE9EA325EA442931B0062BD8BF304A76 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft Manifest number: 3C Signing time: Tue 23 Dec 2025 06:20:58 +0000 Manifest this update: Tue 23 Dec 2025 06:20:58 +0000 Manifest next update: Tue 30 Dec 2025 06:20:58 +0000 Files and hashes: 1: UT7Oc-6eoyXqRCkxsAYr2L8wSnY.crl (hash: sCSrpS7CEOSLGUecjEVM9iADorU3ByBnhtKMSLJ+ME4=) 2: 3FD60CEC896B11F0A99C2258C4F9AE02.roa (hash: L2I2C5AaIi5CRCmOivb7F6/dBQAFh3PeT7bznCfpjdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.crl rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C575E, serialNumber=513ECE73EE9EA325EA442931B0062BD8BF304A76 Validity Not Before: Dec 23 06:20:58 2025 GMT Not After : Dec 30 06:20:58 2025 GMT Subject: CN=694a34ca-fb16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f9:87:46:71:46:f9:ed:ff:43:bb:0d:be:18: 76:60:08:a5:69:46:0e:66:0f:e3:fc:b1:7b:3f:b3: 8d:35:54:8a:af:1f:4b:77:6f:cb:c2:ff:88:dd:cb: 29:e2:2a:fd:35:52:5d:fe:75:60:dc:80:22:f5:41: 1e:9e:03:6c:4c:46:7f:67:e1:a3:57:04:26:e8:e2: a0:09:36:e9:b7:4e:57:7f:c2:5b:6d:26:0f:a1:98: 7a:bb:be:ba:e9:da:a0:f9:43:a6:5e:6c:a1:79:5f: 2b:24:98:7f:36:68:e7:f5:2b:fd:a1:18:32:eb:10: fd:8e:18:90:e4:31:4e:2d:8d:f8:11:e6:4e:04:e6: 54:2a:77:c6:45:72:45:d4:b8:38:9f:38:19:2e:29: c8:90:f4:8c:cd:fc:15:08:0d:e0:99:37:98:ea:08: 1b:9b:17:41:fa:f2:0c:11:4e:ee:75:be:e9:b9:e4: fa:23:74:1c:d5:a4:77:dd:7a:14:6b:5a:2e:a9:be: 71:8f:13:2f:60:ba:5b:42:a0:31:e4:d5:41:fc:04: fa:d9:f3:6b:03:2f:bf:cb:48:47:06:4e:3b:0d:3d: 51:29:eb:3a:b5:ec:2f:4d:8d:c8:58:37:11:71:8d: 86:14:57:77:d8:e9:61:25:11:06:b1:d8:03:0c:58: 57:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4D:11:9D:38:30:78:10:26:54:2B:0D:5E:B0:74:7A:5B:2B:13:F6 X509v3 Authority Key Identifier: keyid:51:3E:CE:73:EE:9E:A3:25:EA:44:29:31:B0:06:2B:D8:BF:30:4A:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:ed:26:01:df:aa:1a:f8:62:90:35:6c:a3:b7:65:85:43:1a: 0c:ec:db:a2:76:fa:2b:59:99:aa:a5:a0:e6:09:a9:89:93:3b: db:8e:c7:4c:2b:f0:e2:df:87:64:62:ef:82:1e:54:ce:be:dd: 98:e5:25:c9:f5:4c:2c:48:df:4a:b7:68:2d:5e:32:3a:68:b0: 28:dc:6b:46:84:67:e4:2d:a2:73:9e:2c:3a:68:d6:e7:10:5f: 32:5b:00:2f:a5:ed:b8:2c:1d:ce:26:2a:d9:90:5c:68:69:e4: e8:8c:04:ad:a8:31:12:2c:26:a1:5c:b5:84:38:01:df:d0:6e: c8:33:3c:86:54:2e:c5:3b:cb:2b:2f:9b:b0:d5:7d:36:47:da: c3:29:81:de:32:20:5b:4f:49:03:b5:5d:9f:0a:98:48:8c:74: 86:8a:ac:b8:6c:c5:e5:a4:0b:28:4d:d4:a8:a7:47:c2:e3:d5: ea:04:be:0e:68:12:2a:14:b3:9d:2b:af:4b:b3:6b:dc:bc:48: 03:3f:47:91:c2:80:85:b8:fb:8f:f5:35:ad:b9:e2:ac:4d:8c: bf:38:b7:d8:ea:07:c1:9b:5a:95:ef:73:1c:a8:7e:27:57:8e: 8a:7f:46:17:2e:3a:e3:16:b3:08:19:4c:57:88:69:c8:c3:51: 6f:3b:35:b6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NTc1RTExMC8GA1UEBRMoNTEzRUNFNzNFRTlFQTMyNUVBNDQyOTMxQjAwNjJCRDhC RjMwNEE3NjAeFw0yNTEyMjMwNjIwNThaFw0yNTEyMzAwNjIwNThaMBgxFjAUBgNV BAMMDTY5NGEzNGNhLWZiMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCp+YdGcUb57f9Duw2+GHZgCKVpRg5mD+P8sXs/s401VIqvH0t3b8vC/4jdyyni Kv01Ul3+dWDcgCL1QR6eA2xMRn9n4aNXBCbo4qAJNum3Tld/wlttJg+hmHq7vrrp 2qD5Q6ZebKF5XyskmH82aOf1K/2hGDLrEP2OGJDkMU4tjfgR5k4E5lQqd8ZFckXU uDifOBkuKciQ9IzN/BUIDeCZN5jqCBubF0H68gwRTu51vum55PojdBzVpHfdehRr Wi6pvnGPEy9gultCoDHk1UH8BPrZ82sDL7/LSEcGTjsNPVEp6zq17C9NjchYNxFx jYYUV3fY6WElEQax2AMMWFcBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUk0RnTgw eBAmVCsNXrB0elsrE/YwHwYDVR0jBBgwFoAUUT7Oc+6eoyXqRCkxsAYr2L8wSnYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1NzVFL0UyQUNCNDNBODk2 QTExRjA4MUU0NEQ1N0M0RjlBRTAyL1VUN09jLTZlb3lYcVJDa3hzQVlyMkw4d1Nu WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVVQ3T2MtNmVveVhxUkNreHNBWXIyTDh3U25ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 NzVFL0UyQUNCNDNBODk2QTExRjA4MUU0NEQ1N0M0RjlBRTAyL1VUN09jLTZlb3lY cVJDa3hzQVlyMkw4d1NuWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAITtJgHfqhr4YpA1bKO3ZYVDGgzs26J2+itZmaqloOYJqYmTO9uOx0wr 8OLfh2Ri74IeVM6+3ZjlJcn1TCxI30q3aC1eMjposCjca0aEZ+QtonOeLDpo1ucQ XzJbAC+l7bgsHc4mKtmQXGhp5OiMBK2oMRIsJqFctYQ4Ad/QbsgzPIZULsU7yysv m7DVfTZH2sMpgd4yIFtPSQO1XZ8KmEiMdIaKrLhsxeWkCyhN1KinR8Lj1eoEvg5o EioUs50rr0uza9y8SAM/R5HCgIW4+4/1Na254qxNjL84t9jqB8GbWpXvcxyofidX jop/RhcuOuMWswgZTFeIacjDUW87NbY= -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:05 2025 by rpki-client