This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft File: UhSSEEqxqLu-vYCplinU4uZjI3A.mft (raw, json) Hash identifier: Wg45N8Pf+wZn2S5qXhUGx+GXK6i5poUcvrUlXoT9GSY= Subject key identifier: A5:55:59:19:1F:1D:F5:0F:BF:67:09:72:53:A2:C6:E0:50:7E:A7:B7 Authority key identifier: 52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70 Certificate issuer: /CN=A91C7409/serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft Manifest number: 40 Signing time: Tue 23 Dec 2025 06:15:59 +0000 Manifest this update: Tue 23 Dec 2025 06:15:58 +0000 Manifest next update: Tue 30 Dec 2025 06:15:58 +0000 Files and hashes: 1: UhSSEEqxqLu-vYCplinU4uZjI3A.crl (hash: ZY5Nf1yVA6cPss2EIOsnBWdnG0iDAxZvQZKM9dgkR0o=) 2: E983DB547CB711F0AC8F9D6EC4F9AE02.roa (hash: E0HpiYi9oekDhMBwLHO28cWKce/Mgln+cFcKFRPDwlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7409, serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370 Validity Not Before: Dec 23 06:15:58 2025 GMT Not After : Dec 30 06:15:58 2025 GMT Subject: CN=694a339f-5b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:23:ea:68:fb:c9:0e:83:fe:df:9a:79:f8:5c: 6b:54:1d:d5:5e:09:d5:ce:33:4f:47:44:c3:96:ff: 1d:90:a5:06:05:59:02:45:a6:e1:98:60:7c:b7:8c: a6:44:ad:fa:fd:cd:4a:b3:8f:e0:15:47:cd:f5:dd: e5:36:a3:0a:99:81:47:82:b9:ba:68:e4:b3:a4:1e: bc:e7:8e:33:a8:0d:6f:8f:2e:46:ec:90:58:c8:ec: e2:db:fd:97:5a:14:a3:e4:ad:ad:18:dd:03:e7:c0: 1d:02:93:8e:93:03:73:16:82:08:e8:1d:12:b9:e4: 4c:30:3b:2e:59:09:bc:b8:ca:67:d1:fc:a6:bb:d0: 51:68:73:62:2f:46:cc:f2:4a:11:05:36:93:47:f7: bd:51:dc:21:6f:2f:57:7d:0c:fd:2d:d5:d6:07:66: c2:b9:f8:2e:00:8f:59:a4:14:59:55:34:5a:63:74: 8e:54:87:d1:85:f7:08:5e:d6:f2:db:1e:9f:fc:05: a0:cf:7e:fb:9b:54:df:e9:83:34:94:9a:59:31:bd: af:e0:83:9c:6c:a6:bf:64:bd:c7:f2:ec:61:33:11: 62:9a:dd:62:e3:89:4a:ae:44:a5:3c:bb:3f:0f:0b: 0a:1a:e5:80:1b:09:39:d1:cb:3d:4e:14:c4:f8:f3: 79:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:55:59:19:1F:1D:F5:0F:BF:67:09:72:53:A2:C6:E0:50:7E:A7:B7 X509v3 Authority Key Identifier: keyid:52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ef:4b:6f:12:5e:13:e0:c4:07:19:6c:fa:d3:71:98:60:88: 90:06:96:07:04:bc:07:ec:0c:75:74:67:e6:09:0f:22:04:80: e7:82:df:5c:43:7e:47:db:0e:15:d6:dd:69:46:8c:79:df:fa: 14:ce:39:5f:6a:25:46:c8:9b:5f:32:de:be:51:97:11:fd:64: 77:07:30:16:10:4a:44:da:bb:f2:6b:81:93:be:fb:51:49:6a: 50:01:ad:21:d7:79:99:7f:83:bc:cc:39:2e:08:aa:42:6a:02: cb:c8:58:0c:ea:c3:a3:e9:34:1f:d1:7c:ae:5b:d8:f6:6f:e7: c0:bc:71:07:d4:88:27:ba:d4:6a:fc:09:f3:0b:25:15:da:fd: 25:79:90:b0:a3:c1:d1:3f:4f:70:90:0a:78:af:82:cd:24:5e: ab:82:97:57:64:f5:3c:c0:7d:05:ab:e7:65:3c:a3:ae:c1:c0: a8:a9:0e:e7:34:0f:e1:48:59:5c:c1:66:52:c3:be:61:bc:48: e3:31:08:2e:03:c9:22:1f:b0:d0:66:03:5e:7e:7a:ac:53:82: 85:fc:4c:ab:83:de:b9:2e:16:eb:a7:b9:fb:02:0f:52:36:9a: 8b:f9:1b:91:f7:42:34:8d:1b:cb:f1:fc:bf:12:e1:df:2b:02: 27:8b:33:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzQwOTExMC8GA1UEBRMoNTIxNDkyMTA0QUIxQThCQkJFQkQ4MEE5OTYyOUQ0RTJF NjYzMjM3MDAeFw0yNTEyMjMwNjE1NThaFw0yNTEyMzAwNjE1NThaMBgxFjAUBgNV BAMMDTY5NGEzMzlmLTViNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBI+po+8kOg/7fmnn4XGtUHdVeCdXOM09HRMOW/x2QpQYFWQJFpuGYYHy3jKZE rfr9zUqzj+AVR8313eU2owqZgUeCubpo5LOkHrznjjOoDW+PLkbskFjI7OLb/Zda FKPkra0Y3QPnwB0Ck46TA3MWggjoHRK55EwwOy5ZCby4ymfR/Ka70FFoc2IvRszy ShEFNpNH971R3CFvL1d9DP0t1dYHZsK5+C4Aj1mkFFlVNFpjdI5Uh9GF9whe1vLb Hp/8BaDPfvubVN/pgzSUmlkxva/gg5xspr9kvcfy7GEzEWKa3WLjiUquRKU8uz8P Cwoa5YAbCTnRyz1OFMT483ndAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpVVZGR8d 9Q+/ZwlyU6LG4FB+p7cwHwYDVR0jBBgwFoAUUhSSEEqxqLu+vYCplinU4uZjI3Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3NDA5LzQxRDUyRDQ2N0NC NjExRjA4QzVGNzc2OUM0RjlBRTAyL1VoU1NFRXF4cUx1LXZZQ3BsaW5VNHVaakkz QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVWhTU0VFcXhxTHUtdllDcGxpblU0dVpqSTNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 NDA5LzQxRDUyRDQ2N0NCNjExRjA4QzVGNzc2OUM0RjlBRTAyL1VoU1NFRXF4cUx1 LXZZQ3BsaW5VNHVaakkzQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFvvS28SXhPgxAcZbPrTcZhgiJAGlgcEvAfsDHV0Z+YJDyIEgOeC31xD fkfbDhXW3WlGjHnf+hTOOV9qJUbIm18y3r5RlxH9ZHcHMBYQSkTau/JrgZO++1FJ alABrSHXeZl/g7zMOS4IqkJqAsvIWAzqw6PpNB/RfK5b2PZv58C8cQfUiCe61Gr8 CfMLJRXa/SV5kLCjwdE/T3CQCnivgs0kXquCl1dk9TzAfQWr52U8o67BwKipDuc0 D+FIWVzBZlLDvmG8SOMxCC4DySIfsNBmA15+eqxTgoX8TKuD3rkuFuunufsCD1I2 mov5G5H3QjSNG8vx/L8S4d8rAieLM3Q= -----END CERTIFICATE-----Generated at Wed Dec 24 21:21:29 2025 by rpki-client