This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft File: UkWN1qz9QNreWs3IL01ZLaUp58c.mft (raw, json) Hash identifier: qctvh+0zXWmHt0e4oGfsBqkoAA47Ur7Q1SA+sm6gEfE= Subject key identifier: 2D:D4:05:AE:F1:47:C2:3E:C0:13:7E:20:41:05:EF:1B:99:DF:B1:EF Authority key identifier: 52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7 Certificate issuer: /CN=A91DDDA7/serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7 Certificate serial: 0976 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft Manifest number: 0976 Signing time: Mon 22 Dec 2025 19:27:48 +0000 Manifest this update: Mon 22 Dec 2025 19:27:48 +0000 Manifest next update: Mon 29 Dec 2025 19:27:48 +0000 Files and hashes: 1: UkWN1qz9QNreWs3IL01ZLaUp58c.crl (hash: YW8J2u6X/WR6HBqDKi0FkmAIC3gL5+L0LJDje5ZVId0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2422 (0x976) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDDA7, serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7 Validity Not Before: Dec 22 19:27:48 2025 GMT Not After : Dec 29 19:27:48 2025 GMT Subject: CN=69499bb4-e7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b2:4a:87:43:8a:9c:18:37:ea:fe:7e:37:a4: e4:54:d1:9f:67:73:a9:fe:11:c6:36:ff:3c:e8:66: b5:5b:46:d4:b3:e4:5c:cb:62:c7:98:41:56:3b:4d: d4:23:83:a2:79:16:7f:2d:6e:fb:29:a5:09:fb:ea: de:4f:46:ce:23:19:f8:9d:cf:c3:69:47:53:ce:cf: 39:c1:80:65:be:8b:f2:db:69:fb:b8:ed:03:e8:5a: cb:3f:d8:49:9d:62:13:c2:11:49:5d:9a:9c:58:27: 05:b9:01:10:f2:cf:42:da:fb:f9:7a:f3:81:8c:ab: 10:1c:cc:26:df:65:ad:a2:36:88:47:79:e7:51:ba: 52:70:93:76:6b:66:f2:09:65:51:5e:24:84:b7:42: fb:72:a3:02:8d:a8:6f:62:98:57:03:7a:16:93:c0: d9:e4:6a:7e:f0:80:55:4a:fa:2b:65:40:f3:72:f5: 09:d4:69:99:cf:fd:69:ce:dc:7e:2d:62:0b:2d:4d: 72:03:02:14:45:8d:82:2d:1c:60:d3:72:cd:32:ec: 9c:3e:a5:fe:b3:31:18:58:69:34:70:94:e6:ce:12: 8b:25:96:4c:9d:ed:94:bf:11:88:e0:29:3f:3f:80: e1:bb:26:20:80:55:b1:8f:08:03:b4:19:5b:cb:35: c1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D4:05:AE:F1:47:C2:3E:C0:13:7E:20:41:05:EF:1B:99:DF:B1:EF X509v3 Authority Key Identifier: keyid:52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:18:30:fc:e8:78:8b:b9:e0:0a:ec:99:3d:c1:f2:b2:59:1e: 49:7d:59:ab:77:58:d1:21:41:4c:a0:e8:39:ef:ba:27:f4:84: 50:7c:c0:56:2d:72:36:7b:3b:f2:b3:67:4f:3e:f5:e6:a2:ee: 34:95:b3:54:f8:ae:be:81:06:8d:6d:d2:f7:85:65:10:a7:a6: f3:b0:30:2e:43:24:e6:c2:34:38:0e:e2:72:1c:b8:6d:3e:42: d5:70:33:5f:27:db:05:96:eb:74:c6:a0:6e:60:9f:b1:3c:17: 09:90:17:5c:c7:f8:e7:28:34:10:f9:b7:85:c9:92:f6:27:19: 96:0d:f5:ac:f9:9c:80:ac:18:e7:35:3d:1e:09:ea:70:94:27: 09:f8:fa:b7:7f:d9:c0:31:6a:e1:88:5b:5e:58:32:82:e6:17: 16:1d:35:46:7b:41:c2:19:69:29:68:fc:8b:c3:fa:70:e0:5f: 73:4d:32:e7:6a:b3:51:27:af:01:db:5a:b2:31:3f:39:32:b4: a3:8f:26:7b:29:66:28:97:84:1a:6e:84:d1:aa:8d:43:71:34: d4:49:5f:c9:44:3f:64:06:a4:ac:38:14:10:f4:d6:c5:2b:ef: 4f:4e:56:34:a2:4a:09:4d:c3:f5:ae:12:af:2e:22:b6:6b:49: dc:71:62:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREQTcxMTAvBgNVBAUTKDUyNDU4REQ2QUNGRDQwREFERTVBQ0RDODJGNEQ1OTJE QTUyOUU3QzcwHhcNMjUxMjIyMTkyNzQ4WhcNMjUxMjI5MTkyNzQ4WjAYMRYwFAYD VQQDDA02OTQ5OWJiNC1lN2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoLJKh0OKnBg36v5+N6TkVNGfZ3Op/hHGNv886Ga1W0bUs+Rcy2LHmEFWO03U I4OieRZ/LW77KaUJ++reT0bOIxn4nc/DaUdTzs85wYBlvovy22n7uO0D6FrLP9hJ nWITwhFJXZqcWCcFuQEQ8s9C2vv5evOBjKsQHMwm32WtojaIR3nnUbpScJN2a2by CWVRXiSEt0L7cqMCjahvYphXA3oWk8DZ5Gp+8IBVSvorZUDzcvUJ1GmZz/1pztx+ LWILLU1yAwIURY2CLRxg03LNMuycPqX+szEYWGk0cJTmzhKLJZZMne2UvxGI4Ck/ P4DhuyYggFWxjwgDtBlbyzXBeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3UBa7x R8I+wBN+IEEF7xuZ37HvMB8GA1UdIwQYMBaAFFJFjdas/UDa3lrNyC9NWS2lKefH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERBNy8xQ0JGRTY0NEE1 MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFOcmVXczNJTDAxWkxhVXA1 OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VrV04xcXo5UU5yZVdzM0lMMDFaTGFVcDU4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RERBNy8xQ0JGRTY0NEE1MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFO cmVXczNJTDAxWkxhVXA1OGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuGDD86HiLueAK7Jk9wfKyWR5JfVmrd1jRIUFMoOg577on9IRQfMBW LXI2ezvys2dPPvXmou40lbNU+K6+gQaNbdL3hWUQp6bzsDAuQyTmwjQ4DuJyHLht PkLVcDNfJ9sFlut0xqBuYJ+xPBcJkBdcx/jnKDQQ+beFyZL2JxmWDfWs+ZyArBjn NT0eCepwlCcJ+Pq3f9nAMWrhiFteWDKC5hcWHTVGe0HCGWkpaPyLw/pw4F9zTTLn arNRJ68B21qyMT85MrSjjyZ7KWYol4QaboTRqo1DcTTUSV/JRD9kBqSsOBQQ9NbF K+9PTlY0okoJTcP1rhKvLiK2a0nccWJq -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:26 2025 by rpki-client