This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft File: 0uwHkLxOvTQHyVB05rVrQAA4Eto.mft (raw, json) Hash identifier: UbdAVN4h3qnNquM+5qxAR00EcgSGamfrbjnVr7/F1TI= Subject key identifier: 71:EC:8E:1B:02:A7:1A:4A:A9:19:9C:BB:40:7A:F8:12:BB:1B:E6:99 Authority key identifier: D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA Certificate issuer: /CN=A91D87CF/serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA Certificate serial: 0B37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft Manifest number: 0B2F Signing time: Sat 20 Dec 2025 18:48:06 +0000 Manifest this update: Sat 20 Dec 2025 18:48:06 +0000 Manifest next update: Sat 27 Dec 2025 18:48:06 +0000 Files and hashes: 1: 0uwHkLxOvTQHyVB05rVrQAA4Eto.crl (hash: FcfQ+NcukWMCTRl2a6CRo6deEybZiIJ98hi9ednQSrU=) 2: 5E2A4C584ED911EAA7F1A521C4F9AE02.roa (hash: QAE/MC+xtHDwjDC4We28f6uqNECigc7G6Vc7+DGOZ34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2871 (0xb37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D87CF, serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA Validity Not Before: Dec 20 18:48:06 2025 GMT Not After : Dec 27 18:48:06 2025 GMT Subject: CN=6946ef66-68c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4b:38:13:79:35:2a:72:ef:8c:2d:dd:97:da: d2:61:c6:53:b2:f1:ee:8f:41:3a:14:cd:bb:d5:2a: 35:88:0a:43:6b:d9:3e:13:0a:08:0c:24:7f:b9:b7: 2b:70:a2:da:97:d0:ce:db:08:3c:08:d0:99:69:88: af:9a:2b:d2:1e:66:2c:ff:9e:d9:de:93:b9:e8:6c: cf:87:37:08:05:a0:0f:2c:c5:e6:c9:ab:b2:af:5f: c9:8a:79:c0:9b:3a:55:51:3d:01:2c:1e:c3:a2:85: 1e:2d:e0:4c:ec:ba:78:25:01:60:af:b4:35:6a:5c: e3:a2:57:0e:5e:ba:ef:6a:b7:cf:a7:a5:88:21:5f: c8:30:2b:71:3c:f7:0a:30:bc:fc:05:0f:33:e6:c1: fc:0d:48:33:d2:29:19:a0:fe:c0:32:5c:93:7e:4b: 05:c4:08:5e:fb:5d:3b:62:2e:9d:d4:81:d5:7b:30: d7:aa:48:69:33:a6:d9:e9:2a:93:fe:2a:b8:53:9e: f8:2c:e4:9f:46:30:68:e7:03:d6:3c:41:f1:f3:21: 32:38:3a:de:96:42:2c:a9:05:e3:aa:9b:78:f0:86: fe:da:1f:13:d7:a6:83:f8:57:5b:c8:e0:03:bd:0c: 0f:8d:c4:e3:30:46:f8:3e:ef:a4:45:4b:8e:9b:55: 4d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EC:8E:1B:02:A7:1A:4A:A9:19:9C:BB:40:7A:F8:12:BB:1B:E6:99 X509v3 Authority Key Identifier: keyid:D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:6f:78:71:b5:9b:1d:da:80:08:ad:6e:17:f9:d6:b9:55:ac: 8c:86:3c:97:83:34:89:d4:63:5b:6c:d8:93:01:9d:c6:2f:7c: 3f:98:6d:76:61:79:f2:3e:2b:ad:53:93:c9:f1:38:ed:90:d0: 61:01:15:dd:e7:27:7f:ba:0f:d2:f4:bc:cf:1c:0e:84:60:c9: f6:76:3c:f3:f2:3b:61:92:21:7a:97:87:0f:9d:a4:26:a7:64: a9:82:28:e5:08:7e:62:d2:67:1c:4c:27:d2:af:cf:55:81:c8: d7:14:e7:30:e1:e2:ae:d7:c5:b8:29:90:61:b4:a8:f1:fe:37: c3:b0:bf:fc:2f:84:1e:4b:a7:1f:01:0c:6d:9f:b9:03:f6:be: 7f:f4:51:87:14:eb:cf:ea:34:da:63:13:19:03:f5:e1:4e:e4: 9b:62:c1:2d:cc:80:e6:58:01:70:a5:e0:05:3e:67:09:1c:94: 8d:f4:fa:df:f6:e6:42:1a:3e:65:27:5e:69:f4:0c:94:13:a4: ab:d6:1c:bd:5f:2b:4e:5b:45:bc:f1:c4:f4:0c:46:a7:3a:88: ab:9d:03:62:1d:e2:02:54:77:bc:69:ad:b0:cf:89:55:46:6a: 3d:a3:66:eb:5b:d3:2f:55:d4:43:93:47:b0:58:47:05:eb:16: 66:67:66:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3Q0YxMTAvBgNVBAUTKEQyRUMwNzkwQkM0RUJEMzQwN0M5NTA3NEU2QjU2QjQw MDAzODEyREEwHhcNMjUxMjIwMTg0ODA2WhcNMjUxMjI3MTg0ODA2WjAYMRYwFAYD VQQDDA02OTQ2ZWY2Ni02OGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUs4E3k1KnLvjC3dl9rSYcZTsvHuj0E6FM271So1iApDa9k+EwoIDCR/ubcr cKLal9DO2wg8CNCZaYivmivSHmYs/57Z3pO56GzPhzcIBaAPLMXmyauyr1/JinnA mzpVUT0BLB7DooUeLeBM7Lp4JQFgr7Q1alzjolcOXrrvarfPp6WIIV/IMCtxPPcK MLz8BQ8z5sH8DUgz0ikZoP7AMlyTfksFxAhe+107Yi6d1IHVezDXqkhpM6bZ6SqT /iq4U574LOSfRjBo5wPWPEHx8yEyODrelkIsqQXjqpt48Ib+2h8T16aD+FdbyOAD vQwPjcTjMEb4Pu+kRUuOm1VNBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHsjhsC pxpKqRmcu0B6+BK7G+aZMB8GA1UdIwQYMBaAFNLsB5C8Tr00B8lQdOa1a0AAOBLa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODdDRi9FNjg1QjEyQTRF RDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZUUUh5VkIwNXJWclFBQTRF dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB1d0hrTHhPdlRRSHlWQjA1clZyUUFBNEV0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODdDRi9FNjg1QjEyQTRFRDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZU UUh5VkIwNXJWclFBQTRFdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5b3hxtZsd2oAIrW4X+da5VayMhjyXgzSJ1GNbbNiTAZ3GL3w/mG12 YXnyPiutU5PJ8TjtkNBhARXd5yd/ug/S9LzPHA6EYMn2djzz8jthkiF6l4cPnaQm p2SpgijlCH5i0mccTCfSr89VgcjXFOcw4eKu18W4KZBhtKjx/jfDsL/8L4QeS6cf AQxtn7kD9r5/9FGHFOvP6jTaYxMZA/XhTuSbYsEtzIDmWAFwpeAFPmcJHJSN9Prf 9uZCGj5lJ15p9AyUE6Sr1hy9XytOW0W88cT0DEanOoirnQNiHeICVHe8aa2wz4lV Rmo9o2brW9MvVdRDk0ewWEcF6xZmZ2Yd -----END CERTIFICATE-----Generated at Mon Dec 22 08:52:34 2025 by rpki-client