This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft File: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft (raw, json) Hash identifier: 9Wc1x8aPE4PO437DhDdRr5L7eUlpmtXAiltzV8W1A/g= Subject key identifier: 7C:DD:B8:DB:75:12:2F:C1:82:7B:C1:F1:0E:85:E5:6F:B7:A0:5D:5E Authority key identifier: D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2 Certificate issuer: /CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft Manifest number: 013E Signing time: Sun 07 Dec 2025 02:47:20 +0000 Manifest this update: Sun 07 Dec 2025 02:47:19 +0000 Manifest next update: Sun 14 Dec 2025 02:47:19 +0000 Files and hashes: 1: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl (hash: 9IYGPfjo5gWSGOp4qgGLQd5vNeZd/GxzoHPQJWPp1yQ=) 2: 99244E94FE0211EEB1F40344C4F9AE02.roa (hash: ryfpBDCWcmiRZYqeao/rsVyXOOOGDWQajzrZGBcgq+0=) 3: 03BA6992ED7711EE9998FC11C4F9AE02.roa (hash: NecAjd+CZeOPqXXjjBIs9rEIjFJr1slo8jl+q1zHuq8=) 4: 38556AC6ED7711EEA7B2AF12C4F9AE02.roa (hash: x08O0LKYaX3hn9bkCscla0qFn3NKZcPh8LO75bK0AIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 02:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE959, serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2 Validity Not Before: Dec 7 02:47:19 2025 GMT Not After : Dec 14 02:47:19 2025 GMT Subject: CN=6934eab7-7682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:64:4a:8d:66:a9:5a:c8:71:ad:71:3c:f7:11: f1:9f:e0:30:36:b6:dc:23:03:cf:4b:c5:73:92:cc: 53:6a:ce:7f:da:2f:53:93:2c:22:e8:84:bd:c4:aa: 5f:de:41:3b:fe:ef:85:c9:7a:3c:5b:03:21:a4:85: dd:ec:a1:86:0c:9e:cc:9a:e2:1e:5f:e7:b6:cc:20: 51:83:ad:10:67:95:62:06:fe:42:89:28:9c:5a:c5: e1:18:af:a2:a9:2d:bd:4c:20:2b:1c:c2:4f:78:43: 96:bc:8f:91:7d:a7:a0:69:ef:60:c4:c3:e6:4b:46: 79:65:b5:c9:3f:fe:f1:41:f0:d0:a1:61:4b:01:79: da:7d:26:39:74:21:4b:08:82:39:3d:a0:0e:96:03: 61:d6:4d:f0:b3:85:2d:41:f1:04:67:8a:18:b4:d4: 0c:16:ae:17:d6:58:51:08:85:98:89:be:10:9e:33: 8b:be:b6:60:d7:c7:8d:e7:18:b4:fe:12:2e:5d:43: f9:05:56:6d:34:be:a1:bd:a9:74:7b:a6:07:e5:ae: 6d:df:38:5b:69:d4:d3:d1:2c:35:4e:fd:e0:f6:2a: f2:82:13:6e:30:86:e7:22:fb:8e:49:68:5f:73:f5: b9:3a:e4:b3:af:b2:3e:ad:e2:d7:b1:37:c2:3d:13: a2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DD:B8:DB:75:12:2F:C1:82:7B:C1:F1:0E:85:E5:6F:B7:A0:5D:5E X509v3 Authority Key Identifier: keyid:D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:71:97:df:c8:76:c9:37:a0:8c:07:85:78:d8:5f:03:52:aa: 1b:cf:30:05:67:cf:72:e3:c8:77:b5:a3:33:c0:48:a1:b9:8e: b4:19:85:85:3e:a9:82:74:09:65:31:3d:3a:0d:59:47:44:99: e5:8e:6d:a0:77:9e:2f:17:2d:71:aa:77:66:82:0f:96:85:49: 3c:2a:7f:26:17:e8:4e:8a:55:5f:e9:b6:72:4d:07:4a:f0:0f: 27:5c:4b:ee:dc:78:8b:da:dd:7e:13:ce:e0:90:20:03:0a:45: 1c:ae:d5:ab:85:f5:c3:bb:15:4f:54:8e:52:34:24:32:30:b5: f6:70:dc:c4:36:96:b7:a0:e3:3c:af:55:4a:23:cb:e3:5a:6c: 67:01:5b:63:ee:d3:5c:cf:6e:a9:91:f5:4c:ce:51:68:43:2e: ed:fe:8e:97:bf:c2:52:90:5f:30:c4:6b:ad:ac:9b:94:88:8d: ab:8b:52:b9:e1:78:ce:65:5e:cf:e8:c4:7a:b3:90:bf:0f:f2: 87:dd:f1:7a:29:e2:ce:e2:7e:b7:a3:e6:85:c3:70:13:20:e7: f7:44:b5:17:41:fd:ab:75:6b:e3:26:a8:2f:03:a5:78:b4:30: 0d:f7:58:98:32:2b:d9:a2:bc:07:10:10:2f:0e:8f:c7:f6:02: 1f:e8:13:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5NTkxMTAvBgNVBAUTKEQ2RUMyMkE3M0E1OUQyQUE5NTU5OTc0NzAyNzlDNjYy RDExMDg4RjIwHhcNMjUxMjA3MDI0NzE5WhcNMjUxMjE0MDI0NzE5WjAYMRYwFAYD VQQDEw02OTM0ZWFiNy03NjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmRKjWapWshxrXE89xHxn+AwNrbcIwPPS8VzksxTas5/2i9Tkywi6IS9xKpf 3kE7/u+FyXo8WwMhpIXd7KGGDJ7MmuIeX+e2zCBRg60QZ5ViBv5CiSicWsXhGK+i qS29TCArHMJPeEOWvI+Rfaegae9gxMPmS0Z5ZbXJP/7xQfDQoWFLAXnafSY5dCFL CII5PaAOlgNh1k3ws4UtQfEEZ4oYtNQMFq4X1lhRCIWYib4QnjOLvrZg18eN5xi0 /hIuXUP5BVZtNL6hval0e6YH5a5t3zhbadTT0Sw1Tv3g9iryghNuMIbnIvuOSWhf c/W5OuSzr7I+reLXsTfCPROiHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzduNt1 Ei/BgnvB8Q6F5W+3oF1eMB8GA1UdIwQYMBaAFNbsIqc6WdKqlVmXRwJ5xmLREIjy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk1OS9BQTRDNzdFQ0VE NzYxMUVFQUQ4NzFBMTFDNEY5QUUwMi8xdXdpcHpwWjBxcVZXWmRIQW5uR1l0RVFp UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF1d2lwenBaMHFxVldaZEhBbm5HWXRFUWlQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTk1OS9BQTRDNzdFQ0VENzYxMUVFQUQ4NzFBMTFDNEY5QUUwMi8xdXdpcHpwWjBx cVZXWmRIQW5uR1l0RVFpUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANcZffyHbJN6CMB4V42F8DUqobzzAFZ89y48h3taMzwEihuY60GYWF PqmCdAllMT06DVlHRJnljm2gd54vFy1xqndmgg+WhUk8Kn8mF+hOilVf6bZyTQdK 8A8nXEvu3HiL2t1+E87gkCADCkUcrtWrhfXDuxVPVI5SNCQyMLX2cNzENpa3oOM8 r1VKI8vjWmxnAVtj7tNcz26pkfVMzlFoQy7t/o6Xv8JSkF8wxGutrJuUiI2ri1K5 4XjOZV7P6MR6s5C/D/KH3fF6KeLO4n63o+aFw3ATIOf3RLUXQf2rdWvjJqgvA6V4 tDAN91iYMivZorwHEBAvDo/H9gIf6BPa -----END CERTIFICATE-----Generated at Mon Dec 8 01:15:14 2025 by rpki-client