This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft File: umn8tA4zSXV_ok-OM1eRxfAEXVg.mft (raw, json) Hash identifier: gHIAD+mIU+xjOQpisZ/HWJGPAuEHF3ktN5UQ/DJWFYQ= Subject key identifier: D7:6C:24:C6:71:B7:17:9F:A8:F2:A8:84:36:13:FB:C3:65:35:22:5A Authority key identifier: BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58 Certificate issuer: /CN=A91EBA81/serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58 Certificate serial: 0482 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft Manifest number: 0477 Signing time: Mon 22 Dec 2025 23:12:14 +0000 Manifest this update: Mon 22 Dec 2025 23:12:14 +0000 Manifest next update: Mon 29 Dec 2025 23:12:14 +0000 Files and hashes: 1: umn8tA4zSXV_ok-OM1eRxfAEXVg.crl (hash: 7VXqJnVHJ7Amhh8yc2XMCjpQ4ZHaxTdsDfVyhMcSmUg=) 2: 159DA092E9B711EFB8454123C4F9AE02.roa (hash: tjoX2rKURmmp0SIpilUWla3AD/nRXhfocceVz0iL1og=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1154 (0x482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA81, serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58 Validity Not Before: Dec 22 23:12:14 2025 GMT Not After : Dec 29 23:12:14 2025 GMT Subject: CN=6949d04e-31cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:07:62:da:03:e3:44:88:0f:5f:e8:c8:c8:e8: c4:1f:8a:24:f8:66:eb:26:be:cf:ca:20:a9:5a:88: 4e:44:0f:0e:75:3a:b0:ec:2e:db:3f:4f:d6:71:2c: da:28:fa:e3:06:85:47:5c:a3:d6:1a:3f:f2:bd:d7: 64:06:15:ff:85:33:71:74:88:ed:a1:eb:73:e8:8d: c6:c5:f7:25:9f:fd:0b:0b:e7:b3:64:d4:ab:3a:ce: 1f:13:de:d5:da:b3:4d:93:fd:76:0d:2a:c1:be:5b: 41:76:03:d5:4f:2a:d1:e0:b5:1e:17:da:ba:7a:12: 27:6e:7e:ff:86:3e:77:93:c8:c3:e4:ee:20:bd:f4: a7:c4:60:46:5a:2c:66:75:02:96:b6:5e:d4:9d:b1: 25:50:d5:bd:fd:40:02:5e:95:7f:c5:42:83:3b:57: 3d:fb:d3:3d:3f:00:55:f2:e5:bc:b6:e8:01:1e:8e: 31:8a:30:21:4e:dd:10:dd:19:dc:ca:1d:16:7b:9d: cc:78:9f:4c:bd:f2:a2:4d:09:3a:1e:43:ae:77:09: 40:ea:2d:87:6e:b2:a7:79:5e:22:95:e2:6b:44:d1: 5c:5f:9e:6d:45:19:c3:c3:d0:f2:f2:33:a6:9f:64: be:38:3d:87:04:80:e9:45:e6:58:0a:ff:ea:9e:26: bd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:6C:24:C6:71:B7:17:9F:A8:F2:A8:84:36:13:FB:C3:65:35:22:5A X509v3 Authority Key Identifier: keyid:BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:53:ab:a8:63:60:1e:42:43:05:b2:e9:1a:c1:da:f5:42:ed: 86:3b:fc:2d:c6:3a:f2:3f:70:67:07:e5:8a:5c:87:b4:7b:06: 24:c7:45:18:a3:e0:87:36:87:15:16:96:9b:08:7b:8b:5f:8e: c7:a4:67:95:29:67:67:15:dd:fb:86:0a:17:48:04:04:fc:9f: d9:98:90:4d:8f:4c:0f:31:a4:b4:4d:fd:a2:66:40:f7:08:5d: a6:8f:d4:c9:ee:12:c9:a4:9e:14:b4:bc:bf:d2:11:c6:92:1f: 50:f5:2a:1c:b0:39:d8:ef:44:d3:a9:4a:6f:56:84:6e:9e:11: d8:7c:eb:85:1a:00:b2:ba:4e:66:82:7c:e0:6f:24:15:b6:6f: d3:45:53:21:73:80:1e:2e:68:d6:bf:08:8c:88:70:b8:c6:8d: 29:0c:e4:9d:55:13:da:12:73:44:e4:9e:c7:9e:96:5f:cf:0b: 5b:33:04:11:6e:80:f3:29:03:d4:05:ce:f3:e7:ae:a3:40:9d: 58:fe:12:87:a8:e2:d7:d1:a8:62:2d:8d:b0:82:bf:d4:de:d7: d2:51:40:c5:50:fe:b1:d5:b6:1f:5a:cd:aa:07:29:54:48:69: c0:99:af:c0:f2:e8:8c:90:29:89:c5:e3:ec:bc:7d:f8:8b:06: 8b:05:a4:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBODExMTAvBgNVBAUTKEJBNjlGQ0I0MEUzMzQ5NzU3RkEyNEY4RTMzNTc5MUM1 RjAwNDVENTgwHhcNMjUxMjIyMjMxMjE0WhcNMjUxMjI5MjMxMjE0WjAYMRYwFAYD VQQDDA02OTQ5ZDA0ZS0zMWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQdi2gPjRIgPX+jIyOjEH4ok+GbrJr7PyiCpWohORA8OdTqw7C7bP0/WcSza KPrjBoVHXKPWGj/yvddkBhX/hTNxdIjtoetz6I3Gxfcln/0LC+ezZNSrOs4fE97V 2rNNk/12DSrBvltBdgPVTyrR4LUeF9q6ehInbn7/hj53k8jD5O4gvfSnxGBGWixm dQKWtl7UnbElUNW9/UACXpV/xUKDO1c9+9M9PwBV8uW8tugBHo4xijAhTt0Q3Rnc yh0We53MeJ9MvfKiTQk6HkOudwlA6i2HbrKneV4ileJrRNFcX55tRRnDw9Dy8jOm n2S+OD2HBIDpReZYCv/qnia9AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdsJMZx txefqPKohDYT+8NlNSJaMB8GA1UdIwQYMBaAFLpp/LQOM0l1f6JPjjNXkcXwBF1Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE4MS9DRTEzNkJEMDc0 NTcxMUVDQjM5ODc1MThDNEY5QUUwMi91bW44dEE0elNYVl9vay1PTTFlUnhmQUVY VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vtbjh0QTR6U1hWX29rLU9NMWVSeGZBRVhWZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkE4MS9DRTEzNkJEMDc0NTcxMUVDQjM5ODc1MThDNEY5QUUwMi91bW44dEE0elNY Vl9vay1PTTFlUnhmQUVYVmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJU6uoY2AeQkMFsukawdr1Qu2GO/wtxjryP3BnB+WKXIe0ewYkx0UY o+CHNocVFpabCHuLX47HpGeVKWdnFd37hgoXSAQE/J/ZmJBNj0wPMaS0Tf2iZkD3 CF2mj9TJ7hLJpJ4UtLy/0hHGkh9Q9SocsDnY70TTqUpvVoRunhHYfOuFGgCyuk5m gnzgbyQVtm/TRVMhc4AeLmjWvwiMiHC4xo0pDOSdVRPaEnNE5J7HnpZfzwtbMwQR boDzKQPUBc7z566jQJ1Y/hKHqOLX0ahiLY2wgr/U3tfSUUDFUP6x1bYfWs2qBylU SGnAma/A8uiMkCmJxePsvH34iwaLBaQq -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:33 2025 by rpki-client