This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft File: uLRz022lJgglzQu_YvbsGQ00Ahg.mft (raw, json) Hash identifier: 3xgdHDvfoumqmjT2GMEaxDRQfNHKH79zRbaHYybIehY= Subject key identifier: 5C:EA:64:95:DA:0A:D3:DD:89:BB:C4:73:F3:7F:AD:E2:A6:71:D9:CF Authority key identifier: B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18 Certificate issuer: /CN=A91C5D81/serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218 Certificate serial: 34FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft Manifest number: 34F7 Signing time: Sat 20 Dec 2025 14:18:14 +0000 Manifest this update: Sat 20 Dec 2025 14:18:14 +0000 Manifest next update: Sat 27 Dec 2025 14:18:14 +0000 Files and hashes: 1: uLRz022lJgglzQu_YvbsGQ00Ahg.crl (hash: t9H5KuViLMhSjxsXzbWrZ/5Ud6Wg1F1RtwWifl1H6J4=) 2: 75C18F96305811EB94E3192FC4F9AE02.roa (hash: oI8UmPtI+e/lNHKPjl/mA09y7Gr50NMbgC5wn6SXx2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13565 (0x34fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D81, serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218 Validity Not Before: Dec 20 14:18:14 2025 GMT Not After : Dec 27 14:18:14 2025 GMT Subject: CN=6946b026-1659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f7:c0:b2:dd:47:18:7f:b3:cb:62:2c:7e:e3: 6e:d8:db:30:5f:46:0f:b7:81:0e:a2:5f:51:c5:93: c7:00:2d:93:5d:27:70:1f:2e:39:be:e7:87:4a:22: 83:b3:32:d2:74:9c:09:b0:99:eb:15:d4:b3:34:93: 01:25:bf:94:28:9d:7f:b7:9e:13:60:91:ba:00:36: 2d:5e:30:1b:e4:04:8b:a8:7b:1d:fd:2d:db:01:6a: e5:cc:85:e1:35:e7:af:ef:dd:84:86:ef:57:52:77: c8:c0:a8:70:b0:36:f0:57:3e:1a:f8:01:3e:f3:e9: 7a:e5:4b:c7:de:9a:8a:e4:c5:6d:13:ed:ab:2c:b3: 9a:80:8e:0c:bc:85:bb:df:b1:d1:f6:20:07:31:4e: 7c:c8:e3:f9:00:82:b4:59:a3:7d:77:63:e1:3a:44: d6:9b:34:13:96:58:55:bd:94:dc:e3:f7:89:95:78: 73:6e:fd:dc:3d:3a:89:98:9f:95:fc:17:da:de:98: da:b2:52:85:47:85:b0:17:b7:f1:c8:2e:fe:3f:ec: 0c:08:56:1d:4d:bc:8d:e0:1c:64:08:39:f9:a3:63: bc:ab:1f:ca:49:3c:4b:cf:c9:ed:d9:4f:e5:ec:82: 97:15:e8:b3:36:ff:48:52:68:9c:5c:35:1d:69:d1: a9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EA:64:95:DA:0A:D3:DD:89:BB:C4:73:F3:7F:AD:E2:A6:71:D9:CF X509v3 Authority Key Identifier: keyid:B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:29:28:69:e8:17:1d:ba:34:ab:a7:de:43:17:9a:82:60:41: 24:3e:8e:09:41:b8:e7:24:9a:08:4f:68:3b:e7:ea:55:be:d6: da:80:84:53:9d:5e:3e:8e:c3:90:26:f0:1a:14:38:c7:3b:a9: 41:25:39:19:a1:2d:20:8b:cd:0b:1a:b2:92:bd:c2:b0:f2:b9: bf:10:16:d3:1d:fa:16:cf:b5:09:d2:22:5c:08:6f:b4:3d:c9: 86:8d:56:c4:b6:04:c4:c5:71:63:52:88:73:00:ac:eb:63:f5: 62:ea:f7:e2:71:4f:79:0c:5e:c3:5e:76:5d:02:c3:b9:9b:56: bb:0c:1c:9c:c8:4b:96:02:66:cf:d3:26:cc:76:3d:66:0e:5f: 9f:22:ec:9c:d9:78:23:54:46:1c:4e:33:59:16:84:56:d6:e3: 74:40:95:f3:6d:71:f1:ea:66:d0:03:02:7b:89:2d:b7:e9:ba: 18:f5:3d:5a:f4:17:4c:f9:55:4b:0c:45:17:a3:2a:68:6f:96: 11:e8:c6:3b:af:43:3b:24:78:e1:ea:21:3e:6b:d2:f5:5c:74: fc:a6:9b:ca:e2:24:f1:64:27:69:0c:e1:1d:a3:52:63:bc:c1: 2c:19:44:46:31:57:3c:38:d1:8b:14:5c:ad:b5:36:85:2e:68: 2e:8d:f8:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVEODExMTAvBgNVBAUTKEI4QjQ3M0QzNkRBNTI2MDgyNUNEMEJCRjYyRjZFQzE5 MEQzNDAyMTgwHhcNMjUxMjIwMTQxODE0WhcNMjUxMjI3MTQxODE0WjAYMRYwFAYD VQQDDA02OTQ2YjAyNi0xNjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4PfAst1HGH+zy2IsfuNu2NswX0YPt4EOol9RxZPHAC2TXSdwHy45vueHSiKD szLSdJwJsJnrFdSzNJMBJb+UKJ1/t54TYJG6ADYtXjAb5ASLqHsd/S3bAWrlzIXh Neev792Ehu9XUnfIwKhwsDbwVz4a+AE+8+l65UvH3pqK5MVtE+2rLLOagI4MvIW7 37HR9iAHMU58yOP5AIK0WaN9d2PhOkTWmzQTllhVvZTc4/eJlXhzbv3cPTqJmJ+V /Bfa3pjaslKFR4WwF7fxyC7+P+wMCFYdTbyN4BxkCDn5o2O8qx/KSTxLz8nt2U/l 7IKXFeizNv9IUmicXDUdadGpWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzqZJXa CtPdibvEc/N/reKmcdnPMB8GA1UdIwQYMBaAFLi0c9NtpSYIJc0Lv2L27BkNNAIY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQ4MS80NzA1OUREODFE NkUxMUUyOUI3NkFBQUYwOEIwMkNEMi91TFJ6MDIybEpnZ2x6UXVfWXZic0dRMDBB aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VMUnowMjJsSmdnbHpRdV9ZdmJzR1EwMEFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQ4MS80NzA1OUREODFENkUxMUUyOUI3NkFBQUYwOEIwMkNEMi91TFJ6MDIybEpn Z2x6UXVfWXZic0dRMDBBaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdKShp6BcdujSrp95DF5qCYEEkPo4JQbjnJJoIT2g75+pVvtbagIRT nV4+jsOQJvAaFDjHO6lBJTkZoS0gi80LGrKSvcKw8rm/EBbTHfoWz7UJ0iJcCG+0 PcmGjVbEtgTExXFjUohzAKzrY/Vi6vficU95DF7DXnZdAsO5m1a7DBycyEuWAmbP 0ybMdj1mDl+fIuyc2XgjVEYcTjNZFoRW1uN0QJXzbXHx6mbQAwJ7iS236boY9T1a 9BdM+VVLDEUXoypob5YR6MY7r0M7JHjh6iE+a9L1XHT8ppvK4iTxZCdpDOEdo1Jj vMEsGURGMVc8ONGLFFyttTaFLmgujfiB -----END CERTIFICATE-----Generated at Sun Dec 21 06:08:53 2025 by rpki-client