This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft File: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft (raw, json) Hash identifier: IwpcjYTAh2qlQL2LSsYVGuNMMkKrYGvQwe5iSPZuWUs= Subject key identifier: 53:BD:80:D4:5A:4E:59:86:46:92:88:BA:62:54:75:AB:C6:E1:13:61 Authority key identifier: B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62 Certificate issuer: /CN=A91D1149/serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762 Certificate serial: 0EC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft Manifest number: 0EB8 Signing time: Mon 22 Dec 2025 17:19:57 +0000 Manifest this update: Mon 22 Dec 2025 17:19:56 +0000 Manifest next update: Mon 29 Dec 2025 17:19:56 +0000 Files and hashes: 1: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl (hash: +LRmkGY7gb57gWEAOZMk8PlfZBJRKvIJXWM2Baq9w5A=) 2: BD22841E9E4911E9A136D25AC4F9AE02.roa (hash: Gdmjy4eOm23bZo0u+QNI+KYIouesOlIiUyP5E+hvG08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3778 (0xec2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1149, serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762 Validity Not Before: Dec 22 17:19:56 2025 GMT Not After : Dec 29 17:19:56 2025 GMT Subject: CN=69497dbc-e8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e1:39:b8:4b:34:01:7b:dc:ba:a7:71:0d:98: 96:92:ec:fe:d7:83:8e:dc:0a:f7:e5:d4:a0:29:33: c2:24:bd:08:20:64:07:95:1a:d6:ae:e5:14:c0:6f: 9d:53:c6:54:dd:e4:26:96:9a:ac:ea:5e:de:d7:97: 3d:fc:1c:cd:a2:53:33:44:cd:d0:9e:65:ec:c7:17: f5:14:30:9c:60:6a:3b:2c:c5:80:7e:82:4a:92:a0: e8:cc:0f:b3:be:92:f0:b1:2c:7b:cc:9d:7e:38:38: ea:77:bb:2e:b4:62:fc:9a:be:f4:6a:ac:e9:5c:d0: be:a7:2d:f7:06:37:50:5c:68:f7:53:7e:9c:e9:f0: c7:f3:cc:23:2c:7c:19:05:ee:c9:e4:83:6a:fc:9c: e5:e1:4a:3f:b5:6e:1e:93:f9:69:99:12:76:8f:66: ee:46:e4:8d:5b:bc:a8:93:12:5b:18:a9:c6:b5:f9: 91:82:ee:78:8b:09:7d:bb:08:7f:7f:fd:6b:bf:b6: f2:44:5a:18:e9:11:73:bd:e7:27:81:f3:7f:09:74: 8c:8b:85:94:d2:78:51:31:8b:bf:bc:c3:b8:e0:9e: ca:95:10:09:18:ac:2b:03:ed:ed:4a:d1:e9:08:95: 26:f3:7e:c7:f1:e6:3b:c1:31:a5:c8:bf:21:71:6e: 89:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BD:80:D4:5A:4E:59:86:46:92:88:BA:62:54:75:AB:C6:E1:13:61 X509v3 Authority Key Identifier: keyid:B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:45:08:96:5f:4d:ff:18:e6:8e:38:fd:27:dc:22:84:56:9e: 96:f9:9d:24:67:b6:5a:d3:41:44:2b:dc:c9:14:74:b1:61:d4: 99:f2:97:21:b5:5f:c6:4d:63:0e:3a:64:48:a9:4a:66:7f:94: 7c:08:63:69:eb:3a:6f:9d:67:7c:09:3c:8a:a3:49:84:f2:3f: 27:ef:46:c3:e2:20:d5:29:5e:d3:a8:e3:0b:50:00:10:8c:0e: 63:44:31:b0:fa:61:86:7d:87:5f:fb:32:a4:2b:e3:24:f9:e5: d0:4d:77:e9:20:c0:f0:f3:3b:76:63:84:85:92:ea:01:58:65: 74:eb:e5:fc:1a:b2:99:62:fa:0d:ec:85:5c:c9:0f:80:b9:26: 2f:06:9f:bf:e4:46:8a:fd:7d:d4:b8:24:9b:ee:cb:7e:c7:94: 70:ea:d3:f6:74:18:b8:8b:d8:a2:4b:69:a4:1e:0b:fa:f6:d4: b7:b0:68:2f:f4:f0:ea:11:dc:c9:df:e8:cc:c6:f2:bf:c7:59: ba:0c:45:f3:29:1f:30:bb:c9:04:a8:84:a3:d1:ed:f6:87:03: e5:a5:42:79:92:06:8d:94:53:e7:51:00:f4:d3:a7:d3:e5:4a: e9:fd:8e:76:ae:60:4d:e4:8f:a2:2a:51:e5:bb:03:10:51:ac: cc:a2:f8:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExNDkxMTAvBgNVBAUTKEI4MzQwMUNGQkM0MDVDRkI1MkZEQTBGRUJENEEwMkI3 QjFDRTI3NjIwHhcNMjUxMjIyMTcxOTU2WhcNMjUxMjI5MTcxOTU2WjAYMRYwFAYD VQQDDA02OTQ5N2RiYy1lOGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1eE5uEs0AXvcuqdxDZiWkuz+14OO3Ar35dSgKTPCJL0IIGQHlRrWruUUwG+d U8ZU3eQmlpqs6l7e15c9/BzNolMzRM3QnmXsxxf1FDCcYGo7LMWAfoJKkqDozA+z vpLwsSx7zJ1+ODjqd7sutGL8mr70aqzpXNC+py33BjdQXGj3U36c6fDH88wjLHwZ Be7J5INq/Jzl4Uo/tW4ek/lpmRJ2j2buRuSNW7yokxJbGKnGtfmRgu54iwl9uwh/ f/1rv7byRFoY6RFzvecngfN/CXSMi4WU0nhRMYu/vMO44J7KlRAJGKwrA+3tStHp CJUm837H8eY7wTGlyL8hcW6JkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFO9gNRa TlmGRpKIumJUdavG4RNhMB8GA1UdIwQYMBaAFLg0Ac+8QFz7Uv2g/r1KArexzidi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTE0OS8yNEJCMjRDRTlF NDkxMUU5OUY4QkNDNTlDNEY5QUUwMi91RFFCejd4QVhQdFNfYUQtdlVvQ3Q3SE9K MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VEUUJ6N3hBWFB0U19hRC12VW9DdDdIT0oySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTE0OS8yNEJCMjRDRTlFNDkxMUU5OUY4QkNDNTlDNEY5QUUwMi91RFFCejd4QVhQ dFNfYUQtdlVvQ3Q3SE9KMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACRQiWX03/GOaOOP0n3CKEVp6W+Z0kZ7Za00FEK9zJFHSxYdSZ8pch tV/GTWMOOmRIqUpmf5R8CGNp6zpvnWd8CTyKo0mE8j8n70bD4iDVKV7TqOMLUAAQ jA5jRDGw+mGGfYdf+zKkK+Mk+eXQTXfpIMDw8zt2Y4SFkuoBWGV06+X8GrKZYvoN 7IVcyQ+AuSYvBp+/5EaK/X3UuCSb7st+x5Rw6tP2dBi4i9iiS2mkHgv69tS3sGgv 9PDqEdzJ3+jMxvK/x1m6DEXzKR8wu8kEqISj0e32hwPlpUJ5kgaNlFPnUQD006fT 5Urp/Y52rmBN5I+iKlHluwMQUazMovjJ -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:30 2025 by rpki-client