This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft File: uttpn6AqlXLm70n0-Rof4Kc8LI0.mft (raw, json) Hash identifier: WaDU9hd/XtijnT+zKqxaJLfx2XCDcBjOppNaoMpN1d4= Subject key identifier: 43:B1:5E:4D:7F:3E:C9:7C:B2:54:C8:61:C7:32:24:79:C1:55:4B:5E Authority key identifier: BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D Certificate issuer: /CN=A91E27B9/serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D Certificate serial: 0875 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft Manifest number: 085F Signing time: Mon 22 Dec 2025 20:06:09 +0000 Manifest this update: Mon 22 Dec 2025 20:06:08 +0000 Manifest next update: Mon 29 Dec 2025 20:06:08 +0000 Files and hashes: 1: uttpn6AqlXLm70n0-Rof4Kc8LI0.crl (hash: 5/AZNAKiGOK/NkjKecWeUrq8EFfrOvywNz8irZAi34g=) 2: C8BD376C3ADF11EC85EB255FC4F9AE02.roa (hash: TSiEeadhDUJoSMwAUqYhtuLIX4q41FceDd825B0nJzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:06:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2165 (0x875) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E27B9, serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D Validity Not Before: Dec 22 20:06:08 2025 GMT Not After : Dec 29 20:06:08 2025 GMT Subject: CN=6949a4b0-8420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b7:ca:9b:7d:d7:83:37:eb:f6:cf:b9:20:5e: 76:a6:f1:e3:9e:cf:6f:f3:ad:ec:ba:fc:41:e3:ec: dd:b0:c7:c4:4a:aa:02:cc:83:e7:2b:71:2b:36:87: cd:92:7e:ce:4b:05:94:66:7a:b0:29:ad:e1:ea:92: 0b:29:e9:65:49:c2:44:5a:7c:52:aa:8e:f1:fc:ba: 34:a8:01:52:2c:a2:0f:2d:0f:51:45:42:73:49:83: 01:a1:1d:27:fc:06:64:63:bb:89:55:36:37:f6:df: 11:44:2d:ca:d1:f5:88:52:1b:3e:ca:89:fc:f4:0b: 62:6e:27:b4:3c:99:c5:d4:14:3a:07:79:ce:48:e7: e0:9b:a2:97:60:c6:e7:da:fe:3d:a3:af:b9:f6:c4: 81:3b:40:fd:76:ae:76:0d:c9:d6:bb:c7:9b:00:94: eb:8a:52:50:8d:d8:6f:a9:d9:4c:a9:2c:d3:f2:22: 09:aa:e8:af:61:c4:71:8d:fe:f4:f9:d5:65:33:0a: 0a:5e:08:6f:0a:28:8f:3c:d4:ea:a7:71:b6:42:4d: 6a:e2:36:9a:1b:40:14:e0:3a:99:c9:a5:65:dc:e2: 00:9f:22:46:1a:54:95:5d:99:2f:d8:e8:ce:f2:90: 0b:27:88:62:bd:d8:4d:99:a7:a9:97:8b:b6:ab:88: c9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B1:5E:4D:7F:3E:C9:7C:B2:54:C8:61:C7:32:24:79:C1:55:4B:5E X509v3 Authority Key Identifier: keyid:BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:72:2e:3e:68:25:98:81:b8:1d:db:79:70:b6:a7:c9:35:5e: 32:1a:8c:88:2a:4d:b7:bd:c0:98:f6:2a:8f:7d:48:69:bd:d0: 21:67:29:22:58:0d:5b:25:56:37:9c:62:e0:26:9f:ca:84:14: 6a:8c:1c:ad:c4:2a:01:36:f4:bb:0f:78:72:c5:e6:a5:37:7c: 0c:2a:59:7f:7c:32:24:84:91:58:76:5e:ee:6a:3b:4c:8d:d2: a0:9d:e6:86:0c:7c:fa:7c:92:16:c9:eb:5d:2a:bb:7f:a0:6c: fd:29:08:97:1e:2e:04:bb:0d:39:ce:c3:0e:b8:c8:37:ce:6b: b1:b8:f0:12:4e:c2:66:5e:99:63:47:a2:b5:f8:e4:e0:bf:b0: aa:c2:24:cf:2b:bb:71:18:a5:80:cb:9b:55:e4:7b:de:b1:be: b3:e2:ca:72:7c:cd:33:9c:4e:41:88:7b:d8:0f:0c:94:0f:cd: 82:0c:48:9a:5e:bb:ea:2e:8c:6e:3d:5f:fc:5f:b6:e1:3f:73: 7d:11:f9:9c:ad:21:c3:11:cf:89:8c:e8:e6:45:06:a5:6b:59: 69:d7:67:cf:a7:73:6d:a3:55:f5:12:89:e4:e6:25:af:38:ab: 06:59:47:17:a0:6b:4f:6e:e7:81:49:83:7b:da:b2:84:41:71: 6d:44:e3:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3QjkxMTAvBgNVBAUTKEJBREI2OTlGQTAyQTk1NzJFNkVGNDlGNEY5MUExRkUw QTczQzJDOEQwHhcNMjUxMjIyMjAwNjA4WhcNMjUxMjI5MjAwNjA4WjAYMRYwFAYD VQQDDA02OTQ5YTRiMC04NDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurfKm33Xgzfr9s+5IF52pvHjns9v863suvxB4+zdsMfESqoCzIPnK3ErNofN kn7OSwWUZnqwKa3h6pILKellScJEWnxSqo7x/Lo0qAFSLKIPLQ9RRUJzSYMBoR0n /AZkY7uJVTY39t8RRC3K0fWIUhs+yon89Atibie0PJnF1BQ6B3nOSOfgm6KXYMbn 2v49o6+59sSBO0D9dq52DcnWu8ebAJTrilJQjdhvqdlMqSzT8iIJquivYcRxjf70 +dVlMwoKXghvCiiPPNTqp3G2Qk1q4jaaG0AU4DqZyaVl3OIAnyJGGlSVXZkv2OjO 8pALJ4hivdhNmaepl4u2q4jJ4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOxXk1/ Psl8slTIYccyJHnBVUteMB8GA1UdIwQYMBaAFLrbaZ+gKpVy5u9J9PkaH+CnPCyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjdCOS84NEJBNzQ4MkYw Q0UxMUVBODkxQjJDNzZDNEY5QUUwMi91dHRwbjZBcWxYTG03MG4wLVJvZjRLYzhM STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V0dHBuNkFxbFhMbTcwbjAtUm9mNEtjOExJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjdCOS84NEJBNzQ4MkYwQ0UxMUVBODkxQjJDNzZDNEY5QUUwMi91dHRwbjZBcWxY TG03MG4wLVJvZjRLYzhMSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGci4+aCWYgbgd23lwtqfJNV4yGoyIKk23vcCY9iqPfUhpvdAhZyki WA1bJVY3nGLgJp/KhBRqjBytxCoBNvS7D3hyxealN3wMKll/fDIkhJFYdl7uajtM jdKgneaGDHz6fJIWyetdKrt/oGz9KQiXHi4Euw05zsMOuMg3zmuxuPASTsJmXplj R6K1+OTgv7CqwiTPK7txGKWAy5tV5Hvesb6z4spyfM0znE5BiHvYDwyUD82CDEia XrvqLoxuPV/8X7bhP3N9EfmcrSHDEc+JjOjmRQala1lp12fPp3Nto1X1Eonk5iWv OKsGWUcXoGtPbueBSYN72rKEQXFtRONR -----END CERTIFICATE-----Generated at Mon Dec 22 22:22:03 2025 by rpki-client