This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft File: UqAK42gJYToMmRW4LS7dewR_BBY.mft (raw, json) Hash identifier: ptVm6xGCiYa3eSegSSSZh1xI3yrsVXl2277DQogT0XI= Subject key identifier: A1:D7:D3:32:64:EB:FE:F6:DE:92:79:4C:AD:DA:34:4E:07:3E:73:DA Authority key identifier: 52:A0:0A:E3:68:09:61:3A:0C:99:15:B8:2D:2E:DD:7B:04:7F:04:16 Certificate issuer: /CN=A91CC4A7/serialNumber=52A00AE36809613A0C9915B82D2EDD7B047F0416 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft Manifest number: 1B Signing time: Sun 07 Dec 2025 05:47:55 +0000 Manifest this update: Sun 07 Dec 2025 05:47:54 +0000 Manifest next update: Sun 14 Dec 2025 05:47:54 +0000 Files and hashes: 1: UqAK42gJYToMmRW4LS7dewR_BBY.crl (hash: 5KbCyAkthTwTR/otdUBk9r7esjABNP3Adazqj+SS0Cc=) 2: 94CEBFFEAB4511F09AA0C458C4F9AE02.roa (hash: 1k8O6Bsioa6ijWmD1KkKknB0AK/qAIm/Rz9ZwI76zuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.crl rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC4A7, serialNumber=52A00AE36809613A0C9915B82D2EDD7B047F0416 Validity Not Before: Dec 7 05:47:54 2025 GMT Not After : Dec 14 05:47:54 2025 GMT Subject: CN=6935150a-36ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3e:04:15:bd:d2:e7:04:fd:ad:6b:97:0d:83: da:e1:06:36:22:0f:33:7a:c5:67:13:97:99:37:5d: c6:9d:4c:84:c8:a7:42:64:1d:37:dc:bb:f1:a7:dc: 7f:ff:be:85:10:af:e1:ca:78:c6:89:33:48:bb:79: ca:0e:97:c1:45:82:e0:ed:19:78:dc:fa:1b:8a:8b: 0a:8d:28:34:93:7e:64:35:cf:1d:c0:ad:a2:5d:67: bf:ce:6c:25:78:cf:c1:ff:8e:32:d7:b0:9f:3e:3d: 26:6d:fe:f4:0a:5e:ac:f8:f5:44:39:2b:a2:99:90: 66:cc:38:b3:ca:e0:a7:3c:7d:63:c6:d6:eb:a4:05: cf:2b:01:70:81:65:9c:3a:1a:fe:15:67:f2:f3:90: 59:17:99:67:04:d0:6a:b8:cf:41:88:8c:7b:e4:bf: 78:aa:43:3e:17:5b:eb:32:20:a5:2b:cc:fc:36:9d: 57:b2:7a:48:e9:5c:f9:b7:3d:69:36:c8:e0:e2:49: 1e:57:9c:76:80:b8:52:17:65:bd:24:ed:63:4b:f3: 0a:84:98:a0:64:e2:3b:24:06:37:a5:23:b9:84:dd: a8:df:7d:f5:4d:19:17:eb:93:c2:e4:85:b1:fd:61: f2:08:22:92:5f:6c:2f:e0:98:63:0c:f8:c8:b3:c7: e7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D7:D3:32:64:EB:FE:F6:DE:92:79:4C:AD:DA:34:4E:07:3E:73:DA X509v3 Authority Key Identifier: keyid:52:A0:0A:E3:68:09:61:3A:0C:99:15:B8:2D:2E:DD:7B:04:7F:04:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:0a:a2:cf:1e:1f:8a:13:5b:13:12:53:f5:a0:9f:76:65:27: b8:36:26:92:9b:ef:a1:8e:ef:a9:08:05:ad:4c:b7:ae:e6:62: 38:9f:83:c8:41:85:0f:d9:08:be:ef:a3:ea:71:b6:dc:94:71: 35:94:25:d8:6d:a8:a6:e1:06:3d:49:14:55:81:52:bd:98:7a: 38:17:b1:df:37:4e:1a:f9:f5:f2:52:91:e6:af:b7:f2:e5:32: e5:ac:6d:29:c5:eb:61:b7:00:a2:13:34:20:95:32:17:36:45: 0d:ce:67:5a:9d:57:8a:44:5f:2e:12:5b:97:f8:8f:16:63:aa: 9b:8f:71:8b:e0:d9:a8:5a:4b:5d:0f:5c:2d:18:6c:51:75:5e: 96:8f:35:a4:38:26:98:b5:74:71:36:49:24:3d:ac:ea:88:64: ea:97:10:41:c6:c1:12:44:b7:d8:64:6b:cd:a9:73:cc:7c:5d: 5f:5c:3a:5f:85:d4:82:7b:a7:54:aa:91:87:50:78:bf:34:65: b5:7a:e8:10:dc:a5:18:64:fe:4f:e2:9c:07:9f:e2:ad:cc:6e: 24:6c:0a:74:84:96:be:97:34:65:a7:3a:10:ac:2a:90:0e:0e: ef:e3:a4:eb:df:30:f4:86:77:db:a8:5a:46:8c:60:a2:5d:72: bf:3f:8f:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzRBNzExMC8GA1UEBRMoNTJBMDBBRTM2ODA5NjEzQTBDOTkxNUI4MkQyRUREN0Iw NDdGMDQxNjAeFw0yNTEyMDcwNTQ3NTRaFw0yNTEyMTQwNTQ3NTRaMBgxFjAUBgNV BAMTDTY5MzUxNTBhLTM2ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJPgQVvdLnBP2ta5cNg9rhBjYiDzN6xWcTl5k3XcadTITIp0JkHTfcu/Gn3H// voUQr+HKeMaJM0i7ecoOl8FFguDtGXjc+huKiwqNKDSTfmQ1zx3AraJdZ7/ObCV4 z8H/jjLXsJ8+PSZt/vQKXqz49UQ5K6KZkGbMOLPK4Kc8fWPG1uukBc8rAXCBZZw6 Gv4VZ/LzkFkXmWcE0Gq4z0GIjHvkv3iqQz4XW+syIKUrzPw2nVeyekjpXPm3PWk2 yODiSR5XnHaAuFIXZb0k7WNL8wqEmKBk4jskBjelI7mE3ajfffVNGRfrk8LkhbH9 YfIIIpJfbC/gmGMM+Mizx+cRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUodfTMmTr /vbeknlMrdo0Tgc+c9owHwYDVR0jBBgwFoAUUqAK42gJYToMmRW4LS7dewR/BBYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDNEE3LzA1OERENkFFQUI0 NTExRjA4NDNEMDY1N0M0RjlBRTAyL1VxQUs0MmdKWVRvTW1SVzRMUzdkZXdSX0JC WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVXFBSzQyZ0pZVG9NbVJXNExTN2Rld1JfQkJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND NEE3LzA1OERENkFFQUI0NTExRjA4NDNEMDY1N0M0RjlBRTAyL1VxQUs0MmdKWVRv TW1SVzRMUzdkZXdSX0JCWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHwKos8eH4oTWxMSU/Wgn3ZlJ7g2JpKb76GO76kIBa1Mt67mYjifg8hB hQ/ZCL7vo+pxttyUcTWUJdhtqKbhBj1JFFWBUr2YejgXsd83Thr59fJSkeavt/Ll MuWsbSnF62G3AKITNCCVMhc2RQ3OZ1qdV4pEXy4SW5f4jxZjqpuPcYvg2ahaS10P XC0YbFF1XpaPNaQ4Jpi1dHE2SSQ9rOqIZOqXEEHGwRJEt9hka82pc8x8XV9cOl+F 1IJ7p1SqkYdQeL80ZbV66BDcpRhk/k/inAef4q3MbiRsCnSElr6XNGWnOhCsKpAO Du/jpOvfMPSGd9uoWkaMYKJdcr8/jw8= -----END CERTIFICATE-----Generated at Mon Dec 8 05:58:47 2025 by rpki-client