This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft File: Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft (raw, json) Hash identifier: q/yT+ichFWR0kElRObU1Osr+9a63HqLoZkLq0lScsbk= Subject key identifier: 20:DE:A0:EE:2E:74:A5:34:98:38:80:3A:C6:67:65:FB:28:68:6A:3B Authority key identifier: 53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82 Certificate issuer: /CN=A91F3AF8/serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682 Certificate serial: 081D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft Manifest number: 0811 Signing time: Thu 18 Dec 2025 20:27:48 +0000 Manifest this update: Thu 18 Dec 2025 20:27:47 +0000 Manifest next update: Thu 25 Dec 2025 20:27:47 +0000 Files and hashes: 1: Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl (hash: 0i2nIFGV/RvVdg0GqV7xVt7X0SxOpDg3z7kEvkXFy5g=) 2: 3791632A030011EB909C3244C4F9AE02.roa (hash: dB3zmsBTd89CRpUWBbCoSsuPQSrK3XC84t7uk9x1cA8=) 3: CC08667A7A6011EB9BC9937BC4F9AE02.roa (hash: Z/3rZQtnqfOwNEnHVO1+ydXZ5JjAuPVHRMvibrG3oIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2077 (0x81d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3AF8, serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682 Validity Not Before: Dec 18 20:27:47 2025 GMT Not After : Dec 25 20:27:47 2025 GMT Subject: CN=694463c3-38e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d0:ce:98:52:95:d2:2b:87:59:b7:ec:c3:27: 31:ea:5f:b2:b7:7e:d4:dd:a9:6a:c6:d3:b2:1d:8d: 57:b3:0e:8b:70:32:cf:f7:6e:21:a8:94:f5:77:cb: f0:e9:44:e0:ba:64:61:a5:5d:55:0a:94:83:9b:91: 23:77:40:75:17:30:15:42:01:be:7e:ab:16:11:c1: 1d:c6:cf:03:90:b6:7b:0f:7e:ab:87:6c:36:79:2e: 06:af:dc:9b:66:ae:3f:f6:56:90:ab:3e:86:06:33: 87:91:72:67:dc:aa:b1:53:1f:c8:8a:a5:ff:dd:da: 3f:15:9b:5c:18:de:14:e4:04:60:ab:44:b9:28:ca: 6b:d8:b5:09:1e:f8:5c:23:ee:8b:5c:27:6f:80:2e: d3:9e:66:1d:3d:07:50:8a:c7:73:f2:30:ed:07:b7: a1:a4:5b:6c:5f:23:a9:6b:9d:e6:6c:8a:97:eb:f2: ef:53:1e:48:6d:55:87:71:1d:db:36:72:1a:e2:37: 30:4f:b4:57:0b:ec:16:a1:d9:43:e6:8f:d0:18:54: a4:87:0f:2c:44:c9:41:60:13:07:98:7d:93:fd:19: 0c:7b:41:42:5c:3a:6c:0c:9a:08:9e:13:ee:6f:1f: 96:59:01:b6:04:ea:c6:01:d0:fc:37:c6:4a:67:da: 63:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DE:A0:EE:2E:74:A5:34:98:38:80:3A:C6:67:65:FB:28:68:6A:3B X509v3 Authority Key Identifier: keyid:53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:af:e2:01:4b:9b:bf:7b:c7:2f:e1:5b:ba:3c:14:0e:af:c4: 38:8a:bd:5c:98:42:35:54:d6:b2:f9:e2:c3:8c:16:f2:75:3a: 44:fc:27:df:78:95:3a:9f:11:d3:7b:dc:55:31:7b:68:89:79: 9c:06:a0:6c:58:2a:e2:f5:2b:b8:2c:ce:3a:cd:71:c5:d7:ff: b4:53:33:3c:ff:e0:55:da:7d:a6:ef:1f:fd:8e:17:85:0b:49: f4:f7:a2:b2:2f:55:ae:1e:b9:6f:12:5a:96:59:d8:cd:c2:50: 17:35:fc:28:41:71:0e:84:6f:cc:41:95:4a:0d:9a:68:46:48: 74:4c:cb:54:4b:fb:71:12:b0:fa:c2:2d:12:2c:2b:78:86:4d: 38:f1:e8:f6:7a:65:93:96:1e:14:32:c3:d7:ea:62:de:d4:74: 83:cb:7c:4d:51:15:b5:4e:7b:27:34:36:ed:d5:fe:a4:fb:32: ab:24:d7:99:33:6a:d8:a2:cd:ca:95:12:3e:a0:76:04:be:d6: 29:fa:f4:3e:af:e6:3a:33:ff:24:fe:7f:0d:37:7d:ae:ed:0b: f7:3d:ac:ac:81:5f:ef:f5:86:e2:fe:df:0e:cd:9d:f1:3d:42: 03:98:df:0e:0f:0e:8c:b3:e9:4a:eb:bd:da:f5:c2:83:87:02: 1e:c7:fa:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNBRjgxMTAvBgNVBAUTKDUzMEQyOUFEQzBGQjFDRjI4MzdEMzlCQjg2MzQzNDg2 QzFDNzE2ODIwHhcNMjUxMjE4MjAyNzQ3WhcNMjUxMjI1MjAyNzQ3WjAYMRYwFAYD VQQDDA02OTQ0NjNjMy0zOGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNDOmFKV0iuHWbfswycx6l+yt37U3alqxtOyHY1Xsw6LcDLP924hqJT1d8vw 6UTgumRhpV1VCpSDm5Ejd0B1FzAVQgG+fqsWEcEdxs8DkLZ7D36rh2w2eS4Gr9yb Zq4/9laQqz6GBjOHkXJn3KqxUx/IiqX/3do/FZtcGN4U5ARgq0S5KMpr2LUJHvhc I+6LXCdvgC7TnmYdPQdQisdz8jDtB7ehpFtsXyOpa53mbIqX6/LvUx5IbVWHcR3b NnIa4jcwT7RXC+wWodlD5o/QGFSkhw8sRMlBYBMHmH2T/RkMe0FCXDpsDJoInhPu bx+WWQG2BOrGAdD8N8ZKZ9pjuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDeoO4u dKU0mDiAOsZnZfsoaGo7MB8GA1UdIwQYMBaAFFMNKa3A+xzyg305u4Y0NIbBxxaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0FGOC80ODI5N0ZFRTAy RkUxMUVCQjcwNjY0M0VDNEY5QUUwMi9VdzBwcmNEN0hQS0RmVG03aGpRMGhzSEhG b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V3MHByY0Q3SFBLRGZUbTdoalEwaHNISEZvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0FGOC80ODI5N0ZFRTAyRkUxMUVCQjcwNjY0M0VDNEY5QUUwMi9VdzBwcmNEN0hQ S0RmVG03aGpRMGhzSEhGb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIr+IBS5u/e8cv4Vu6PBQOr8Q4ir1cmEI1VNay+eLDjBbydTpE/Cff eJU6nxHTe9xVMXtoiXmcBqBsWCri9Su4LM46zXHF1/+0UzM8/+BV2n2m7x/9jheF C0n096KyL1WuHrlvElqWWdjNwlAXNfwoQXEOhG/MQZVKDZpoRkh0TMtUS/txErD6 wi0SLCt4hk048ej2emWTlh4UMsPX6mLe1HSDy3xNURW1TnsnNDbt1f6k+zKrJNeZ M2rYos3KlRI+oHYEvtYp+vQ+r+Y6M/8k/n8NN32u7Qv3PaysgV/v9Ybi/t8OzZ3x PUIDmN8ODw6Ms+lK673a9cKDhwIex/pK -----END CERTIFICATE-----Generated at Sat Dec 20 16:20:39 2025 by rpki-client