This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft File: UjNwqBpuUUYYrnypeV_dEQs1Djc.mft (raw, json) Hash identifier: JI2dYH/ne7ss82jBn01N81k52n8JV1GE/js3Ek+vOEA= Subject key identifier: 8B:76:C0:39:1A:FC:89:78:DD:B9:EA:26:B5:D3:D3:67:CF:F5:DE:25 Authority key identifier: 52:33:70:A8:1A:6E:51:46:18:AE:7C:A9:79:5F:DD:11:0B:35:0E:37 Certificate issuer: /CN=A91C6CB6/serialNumber=523370A81A6E514618AE7CA9795FDD110B350E37 Certificate serial: 0CF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft Manifest number: 0CDE Signing time: Mon 22 Dec 2025 17:46:21 +0000 Manifest this update: Mon 22 Dec 2025 17:46:21 +0000 Manifest next update: Mon 29 Dec 2025 17:46:21 +0000 Files and hashes: 1: UjNwqBpuUUYYrnypeV_dEQs1Djc.crl (hash: BetwA7EQB9xM/nVK11IwvCbjCwgWiRXX+4bx40Su2J0=) 2: 04E274DA27CB11EE8FA6F46CC4F9AE02.roa (hash: QC+kAoIXXpY6brDwehpJKK1cCBvEWnBsopkp3/fuZEY=) 3: E683FA78277E11EE9D54C13AC4F9AE02.roa (hash: w0i/ARt9lCVRkjFZbSD4igkj3UoeypjyUlDGFiTsJMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.crl rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:46:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3316 (0xcf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CB6, serialNumber=523370A81A6E514618AE7CA9795FDD110B350E37 Validity Not Before: Dec 22 17:46:21 2025 GMT Not After : Dec 29 17:46:21 2025 GMT Subject: CN=694983ed-50ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:24:6b:d8:3b:a9:e1:47:9c:d1:91:95:1e:eb: 6f:00:18:d6:57:52:f9:ed:e1:9e:0d:70:83:43:78: 8a:9c:d0:e2:50:c3:e1:89:5c:15:e9:ff:20:dc:e2: 72:5f:63:53:78:5c:bf:cd:4e:43:5f:dc:f8:02:07: 07:05:f2:fc:bb:81:da:16:3f:07:89:cb:6f:38:ef: 00:90:59:f4:ad:e5:9b:9e:4d:a8:ec:74:26:e7:43: 27:30:11:3a:8b:b9:d4:51:18:22:4a:b0:4b:9a:15: 0b:1d:11:eb:18:4f:9f:2a:c8:79:e1:fc:03:c9:9b: 8b:17:8e:b1:f5:ab:cf:34:56:89:f3:db:aa:93:e0: ef:05:7e:c6:81:a5:8a:12:18:84:70:3b:4e:ae:aa: 7b:f1:0c:eb:80:a6:96:1f:d0:33:c3:46:7f:76:b2: 7d:5a:26:f6:89:a5:aa:bf:57:c3:3a:b8:c4:97:06: 56:8b:84:2a:42:f5:dd:92:f8:a3:f7:b8:f6:d8:98: aa:35:fe:66:af:93:44:59:2e:76:6e:2a:88:ac:a0: 37:8f:51:f1:88:e4:78:48:b5:2c:d5:0a:57:7c:ae: 74:12:3a:29:22:62:f8:87:0e:29:f2:06:26:01:9c: 79:16:9d:86:4e:70:5d:e6:54:db:46:8e:fe:4b:87: ab:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:76:C0:39:1A:FC:89:78:DD:B9:EA:26:B5:D3:D3:67:CF:F5:DE:25 X509v3 Authority Key Identifier: keyid:52:33:70:A8:1A:6E:51:46:18:AE:7C:A9:79:5F:DD:11:0B:35:0E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:b5:f5:52:4d:13:e9:6d:73:bb:8d:67:bf:18:14:10:ac:19: a9:9a:ae:28:63:18:51:36:ab:a9:96:ec:ca:96:13:b2:1d:99: c5:49:03:70:5f:6a:e0:ae:82:2d:d0:b8:6d:af:07:cb:68:dd: 25:f1:cc:e5:39:80:60:40:ea:11:02:9d:70:2f:62:92:0f:d3: 9a:d6:01:c7:0a:49:2a:31:80:bd:89:a4:f0:7c:b0:31:7c:25: 4d:e7:cc:c9:a1:19:f0:d1:4e:9c:d0:fe:bd:13:46:ac:12:e9: 8c:08:6c:14:cf:be:12:71:f0:b3:81:cb:71:e3:2c:a9:5b:ad: c4:28:2e:bc:0f:7d:17:3a:75:c0:25:17:a1:03:39:7d:2f:14: 41:b6:1f:86:79:84:e7:17:90:ca:6e:a1:28:02:8c:37:c3:72: 58:c0:4f:b5:ba:04:74:03:60:d1:45:d2:cb:b5:a6:d3:86:6c: fd:b0:6a:b0:54:c8:e9:a8:92:5a:b8:ac:d2:b0:ab:0f:91:68: 49:62:fa:7a:83:e7:b7:88:bc:59:e7:71:c1:5c:ee:fa:ec:75: 64:28:54:21:28:83:d5:5e:d4:fd:42:e7:f6:8b:3c:01:34:11: 42:00:0a:8a:2f:09:73:77:9d:4e:8c:1f:1f:02:f6:96:b8:a0: 0f:ab:36:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQjYxMTAvBgNVBAUTKDUyMzM3MEE4MUE2RTUxNDYxOEFFN0NBOTc5NUZERDEx MEIzNTBFMzcwHhcNMjUxMjIyMTc0NjIxWhcNMjUxMjI5MTc0NjIxWjAYMRYwFAYD VQQDDA02OTQ5ODNlZC01MGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCRr2Dup4Uec0ZGVHutvABjWV1L57eGeDXCDQ3iKnNDiUMPhiVwV6f8g3OJy X2NTeFy/zU5DX9z4AgcHBfL8u4HaFj8HictvOO8AkFn0reWbnk2o7HQm50MnMBE6 i7nUURgiSrBLmhULHRHrGE+fKsh54fwDyZuLF46x9avPNFaJ89uqk+DvBX7GgaWK EhiEcDtOrqp78QzrgKaWH9Azw0Z/drJ9Wib2iaWqv1fDOrjElwZWi4QqQvXdkvij 97j22JiqNf5mr5NEWS52biqIrKA3j1HxiOR4SLUs1QpXfK50EjopImL4hw4p8gYm AZx5Fp2GTnBd5lTbRo7+S4erwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIt2wDka /Il43bnqJrXT02fP9d4lMB8GA1UdIwQYMBaAFFIzcKgablFGGK58qXlf3RELNQ43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNCNi8yQTRGNTc1RUZF MTQxMUU5ODFDMjY1NTlDNEY5QUUwMi9Vak53cUJwdVVVWVlybnlwZVZfZEVRczFE amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VqTndxQnB1VVVZWXJueXBlVl9kRVFzMURqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNCNi8yQTRGNTc1RUZFMTQxMUU5ODFDMjY1NTlDNEY5QUUwMi9Vak53cUJwdVVV WVlybnlwZVZfZEVRczFEamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwtfVSTRPpbXO7jWe/GBQQrBmpmq4oYxhRNqupluzKlhOyHZnFSQNw X2rgroIt0LhtrwfLaN0l8czlOYBgQOoRAp1wL2KSD9Oa1gHHCkkqMYC9iaTwfLAx fCVN58zJoRnw0U6c0P69E0asEumMCGwUz74ScfCzgctx4yypW63EKC68D30XOnXA JRehAzl9LxRBth+GeYTnF5DKbqEoAow3w3JYwE+1ugR0A2DRRdLLtabThmz9sGqw VMjpqJJauKzSsKsPkWhJYvp6g+e3iLxZ53HBXO767HVkKFQhKIPVXtT9Quf2izwB NBFCAAqKLwlzd51OjB8fAvaWuKAPqzYV -----END CERTIFICATE-----Generated at Tue Dec 23 11:40:33 2025 by rpki-client