This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft File: UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft (raw, json) Hash identifier: OPRoaJDdR+TLuM7YSnhRnv/Q83fHNmKZk9g/i3Zd2Ig= Subject key identifier: CB:D6:06:8F:18:F2:F0:AF:23:43:27:11:62:65:C3:1D:B4:66:60:88 Authority key identifier: 51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB Certificate issuer: /CN=A91EBA1C/serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB Certificate serial: 22FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft Manifest number: 22AE Signing time: Sat 20 Dec 2025 15:42:59 +0000 Manifest this update: Sat 20 Dec 2025 15:42:59 +0000 Manifest next update: Sat 27 Dec 2025 15:42:59 +0000 Files and hashes: 1: UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl (hash: dCEaMlGYkDD2gWVkEvr1vzMtH9VsCYKt6HE1lep3O3E=) 2: 233533AABAE011F09A0D810BC4F9AE02.roa (hash: tvFbBzaDYUotRjgEHrDkKjONeDoR4INE8M3QZSE99/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:42:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8957 (0x22fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA1C, serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB Validity Not Before: Dec 20 15:42:59 2025 GMT Not After : Dec 27 15:42:59 2025 GMT Subject: CN=6946c403-2632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1d:34:51:28:65:8c:c6:44:bb:93:5c:2c:bd: ed:a9:a5:c6:45:f7:da:2a:b4:73:1f:0f:eb:e4:c2: e0:8d:8c:78:84:63:b2:3d:4c:39:e0:c0:15:aa:9d: fb:2a:fe:ca:4f:e0:8d:7f:fb:47:b7:a6:5e:90:d3: 70:65:92:61:5d:c3:9f:df:24:22:f2:bf:ec:a1:8a: c3:6a:d3:31:35:b4:fd:90:e0:75:b9:bf:73:1f:49: ad:0e:d1:20:df:58:6a:45:d0:1a:0a:c1:23:b0:f8: 50:7b:c7:79:98:7d:6b:66:0b:bc:12:7d:af:b0:76: 9c:e3:ec:37:d6:d9:eb:76:e9:d2:94:10:05:f5:36: e3:90:fc:fc:64:d8:27:5b:82:c9:86:97:35:6c:1b: 28:5e:80:21:52:fd:e0:6f:86:ad:6f:b6:5c:7b:5f: 2f:0f:55:1b:88:4a:1b:77:cb:a1:7b:fc:5d:da:5c: e7:f4:19:b2:07:8f:80:e4:63:60:29:c4:b1:59:b3: 51:2a:1d:e6:61:0e:fc:e1:29:27:9b:0e:43:80:2a: f8:f6:f2:7d:12:86:90:ce:0c:5a:79:79:14:e6:e1: a1:65:a5:30:87:7c:15:3a:f6:d2:07:41:ab:ae:1a: 80:7a:96:b5:29:3c:10:48:f0:29:4c:8e:06:d7:58: 4d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D6:06:8F:18:F2:F0:AF:23:43:27:11:62:65:C3:1D:B4:66:60:88 X509v3 Authority Key Identifier: keyid:51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:04:13:6b:fd:b6:ed:21:69:fc:db:be:8f:d4:3d:43:92:5f: 4f:2b:5d:70:1d:1c:ca:fb:5e:6e:48:ba:a9:79:8a:76:01:a8: 6b:e6:12:8a:6f:c3:4f:12:ee:7a:37:b9:80:d8:68:9d:3f:78: 21:3c:8d:1b:60:d4:29:b0:d6:7e:b7:8f:64:01:6c:8c:4a:9b: 5a:c3:1e:aa:00:d9:e0:7f:70:3a:fd:c3:70:a2:27:ff:a3:01: 77:e0:60:f9:b4:8f:76:02:81:b5:9b:c1:79:ae:09:36:22:d0: ce:0d:11:f5:0e:b1:fd:df:fb:3e:32:be:f9:a6:a5:50:51:06: 01:c9:aa:ba:b4:cd:a4:19:9d:9c:64:25:48:c2:70:e4:e2:79: 39:6d:94:a3:8d:13:b2:9e:a8:7b:4e:6b:b2:78:5a:86:d7:60: 62:a7:64:0a:6b:ee:d5:aa:4f:3f:5e:42:19:7c:43:0e:af:6c: 25:65:75:32:a9:92:f0:b6:ad:cb:58:8b:52:b6:75:6e:1e:63: 70:6c:b7:60:7d:45:96:64:6f:ca:6b:9c:56:5a:c0:33:d5:23: 64:6d:b0:4d:31:16:9b:cc:e9:ae:fe:31:31:7c:1c:8c:81:a1: 83:81:bf:20:f4:92:76:dc:eb:f7:c3:34:6e:9a:8d:15:34:2b: 2e:34:0a:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBMUMxMTAvBgNVBAUTKDUxQzI2MTFCNDYxREQ1MTE4MzVBNTE0MUY4QUVFNTAy RDNBMzlBRUIwHhcNMjUxMjIwMTU0MjU5WhcNMjUxMjI3MTU0MjU5WjAYMRYwFAYD VQQDDA02OTQ2YzQwMy0yNjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxh00UShljMZEu5NcLL3tqaXGRffaKrRzHw/r5MLgjYx4hGOyPUw54MAVqp37 Kv7KT+CNf/tHt6ZekNNwZZJhXcOf3yQi8r/soYrDatMxNbT9kOB1ub9zH0mtDtEg 31hqRdAaCsEjsPhQe8d5mH1rZgu8En2vsHac4+w31tnrdunSlBAF9TbjkPz8ZNgn W4LJhpc1bBsoXoAhUv3gb4atb7Zce18vD1UbiEobd8uhe/xd2lzn9BmyB4+A5GNg KcSxWbNRKh3mYQ784Sknmw5DgCr49vJ9EoaQzgxaeXkU5uGhZaUwh3wVOvbSB0Gr rhqAepa1KTwQSPApTI4G11hNwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMvWBo8Y 8vCvI0MnEWJlwx20ZmCIMB8GA1UdIwQYMBaAFFHCYRtGHdURg1pRQfiu5QLTo5rr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkExQy82M0IyMTRBMkM4 MTUxMUU1ODFEMjA4ODRDNEY5QUUwMi9VY0poRzBZZDFSR0RXbEZCLUs3bEF0T2pt dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VjSmhHMFlkMVJHRFdsRkItSzdsQXRPam11cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkExQy82M0IyMTRBMkM4MTUxMUU1ODFEMjA4ODRDNEY5QUUwMi9VY0poRzBZZDFS R0RXbEZCLUs3bEF0T2ptdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3BBNr/bbtIWn8276P1D1Dkl9PK11wHRzK+15uSLqpeYp2Aahr5hKK b8NPEu56N7mA2GidP3ghPI0bYNQpsNZ+t49kAWyMSptawx6qANngf3A6/cNwoif/ owF34GD5tI92AoG1m8F5rgk2ItDODRH1DrH93/s+Mr75pqVQUQYByaq6tM2kGZ2c ZCVIwnDk4nk5bZSjjROynqh7TmuyeFqG12Bip2QKa+7Vqk8/XkIZfEMOr2wlZXUy qZLwtq3LWItStnVuHmNwbLdgfUWWZG/Ka5xWWsAz1SNkbbBNMRabzOmu/jExfByM gaGDgb8g9JJ23Ov3wzRumo0VNCsuNAo+ -----END CERTIFICATE-----Generated at Sun Dec 21 04:45:59 2025 by rpki-client