This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft File: UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft (raw, json) Hash identifier: OX262mnlu6JHvjOvXXVOrqhHl9HtMlpmElHi6pHzhrU= Subject key identifier: EE:10:C1:EF:5A:B3:56:AC:00:69:81:BF:47:23:64:D8:1E:F7:11:F6 Authority key identifier: 52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13 Certificate issuer: /CN=A91DD1CC/serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft Manifest number: 58 Signing time: Wed 03 Dec 2025 05:22:33 +0000 Manifest this update: Wed 03 Dec 2025 05:22:32 +0000 Manifest next update: Wed 10 Dec 2025 05:22:32 +0000 Files and hashes: 1: UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl (hash: JWqmgf0O+pzBhej3OzBQtAdYEz8gjCntmKYAGAGN+ZY=) 2: 0745DA884A3C11F0AFF98454C4F9AE02.roa (hash: aHkW6AI6M6GCpQTIMNKGhCjE+iAmC4ZK4etHz7DUzdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD1CC, serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813 Validity Not Before: Dec 3 05:22:32 2025 GMT Not After : Dec 10 05:22:32 2025 GMT Subject: CN=692fc919-9664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:86:f0:96:8c:0f:78:a2:b5:2b:66:1f:38:02: b2:12:67:e5:41:6d:f5:74:4e:67:c5:6d:4b:be:cb: 6c:ec:b0:3e:be:48:c4:0e:80:c4:29:89:fc:00:4e: 06:94:04:f7:49:48:5a:b4:cd:ec:bb:f8:98:b2:c7: 96:ce:78:f4:25:69:54:b3:d7:2c:5f:11:4b:f5:e2: c8:66:d0:82:5d:e5:59:05:c9:db:3e:db:ad:b1:88: fe:07:13:b0:84:2b:28:2b:45:cc:6e:e9:00:84:78: 15:98:2b:6c:ab:d1:df:2a:55:b8:65:04:ec:31:a2: 9a:57:31:75:7b:83:ed:9c:5b:33:fd:1d:a6:50:7c: 99:f2:6b:3c:ce:59:93:53:9d:54:7c:62:8b:94:7d: 58:73:74:42:8c:1e:cf:03:04:af:07:21:79:6e:a2: f6:b7:d1:e8:d4:40:c8:bd:d3:9d:7e:be:c0:ce:a1: 71:6d:f8:db:58:78:18:5e:80:f1:59:4f:82:b5:7c: 4a:62:cc:6a:dc:4c:11:da:0a:94:60:45:5d:24:61: 0a:75:d4:ca:2a:0d:df:96:14:0b:8b:06:30:02:20: 3a:a3:f7:14:1a:9e:48:1c:e5:a9:e0:bf:73:4f:e1: 15:88:e4:64:51:99:de:fa:fb:fb:9a:b3:3b:cf:ce: f7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:10:C1:EF:5A:B3:56:AC:00:69:81:BF:47:23:64:D8:1E:F7:11:F6 X509v3 Authority Key Identifier: keyid:52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:cf:72:79:79:e7:3d:26:d5:fe:f8:6a:14:b7:79:42:26:4c: 43:e4:ca:32:6f:68:6f:6c:06:9e:e8:4d:b0:bd:c3:46:44:db: 92:93:bf:04:9f:3c:0f:55:ac:fe:3a:e9:ae:15:44:3e:0f:51: 68:45:0c:f6:54:d6:2c:20:93:53:86:34:3d:be:c9:8f:ec:04: af:aa:75:1d:1b:89:e9:d2:85:a8:6b:fc:b8:1c:5b:b6:d6:1e: d1:3a:59:16:04:bd:77:4a:bd:c0:34:e9:10:07:3c:b4:13:1f: bd:10:f4:77:92:2f:69:24:16:3a:aa:00:86:3d:92:cf:06:f7: c9:61:4e:59:b2:e0:be:73:41:01:ba:76:49:f9:c8:df:b8:49: 39:7b:83:7c:60:ff:cb:3d:c0:a0:6a:c1:d4:ee:16:14:9e:77: 0b:ba:29:da:33:48:7e:66:a1:f9:96:a1:16:20:18:44:3d:9a: 50:78:d1:55:46:7e:10:84:d5:52:fd:17:07:d1:d2:79:75:b3: 60:4c:63:75:5e:09:1c:b2:de:97:27:76:4e:7b:e1:d2:35:1b: 6f:ed:95:53:52:a9:52:7e:12:db:c0:5e:19:bf:22:f2:fc:18: ab:9d:fa:2e:3d:90:c6:b3:c3:fb:6c:e1:2e:91:9d:78:23:53: ff:22:1e:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDFDQzExMC8GA1UEBRMoNTIzMUM0NTc0MTNCOUM3OUNENUIzMDBEODRBNDNCMDAz OUJCNjgxMzAeFw0yNTEyMDMwNTIyMzJaFw0yNTEyMTAwNTIyMzJaMBgxFjAUBgNV BAMTDTY5MmZjOTE5LTk2NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQhvCWjA94orUrZh84ArISZ+VBbfV0TmfFbUu+y2zssD6+SMQOgMQpifwATgaU BPdJSFq0zey7+Jiyx5bOePQlaVSz1yxfEUv14shm0IJd5VkFyds+262xiP4HE7CE KygrRcxu6QCEeBWYK2yr0d8qVbhlBOwxoppXMXV7g+2cWzP9HaZQfJnyazzOWZNT nVR8YouUfVhzdEKMHs8DBK8HIXluova30ejUQMi9051+vsDOoXFt+NtYeBhegPFZ T4K1fEpizGrcTBHaCpRgRV0kYQp11MoqDd+WFAuLBjACIDqj9xQankgc5angv3NP 4RWI5GRRmd76+/uaszvPzvcVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7hDB71qz VqwAaYG/RyNk2B73EfYwHwYDVR0jBBgwFoAUUjHEV0E7nHnNWzANhKQ7ADm7aBMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMUNDLzczOTA2ODBFNEEz QTExRjBCRDVDMUI0RkM0RjlBRTAyL1VqSEVWMEU3bkhuTld6QU5oS1E3QURtN2FC TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVWpIRVYwRTduSG5OV3pBTmhLUTdBRG03YUJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MUNDLzczOTA2ODBFNEEzQTExRjBCRDVDMUI0RkM0RjlBRTAyL1VqSEVWMEU3bkhu Tld6QU5oS1E3QURtN2FCTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKDPcnl55z0m1f74ahS3eUImTEPkyjJvaG9sBp7oTbC9w0ZE25KTvwSf PA9VrP466a4VRD4PUWhFDPZU1iwgk1OGND2+yY/sBK+qdR0bienShahr/LgcW7bW HtE6WRYEvXdKvcA06RAHPLQTH70Q9HeSL2kkFjqqAIY9ks8G98lhTlmy4L5zQQG6 dkn5yN+4STl7g3xg/8s9wKBqwdTuFhSedwu6KdozSH5mofmWoRYgGEQ9mlB40VVG fhCE1VL9FwfR0nl1s2BMY3VeCRyy3pcndk574dI1G2/tlVNSqVJ+EtvAXhm/IvL8 GKud+i49kMazw/ts4S6RnXgjU/8iHhc= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:34 2025 by rpki-client