This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft File: xUK94Lg0fDed4d4dgkOpLLlMh00.mft (raw, json) Hash identifier: e8egRf+FmcH4xvoE+wFQegvnS/xREIHRHn0ZXsMWexc= Subject key identifier: 40:0E:93:2B:11:FC:19:53:1F:B9:EF:43:FE:6F:D9:BF:A0:8A:C2:77 Authority key identifier: C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D Certificate issuer: /CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft Manifest number: 016C Signing time: Tue 23 Dec 2025 02:57:26 +0000 Manifest this update: Tue 23 Dec 2025 02:57:26 +0000 Manifest next update: Tue 30 Dec 2025 02:57:26 +0000 Files and hashes: 1: xUK94Lg0fDed4d4dgkOpLLlMh00.crl (hash: kGZMJgNpkWiO/dtmlDXbWeWZBsydPj2VcquNIYassuc=) 2: FE9EA8D4B67A11EEB24FA643C4F9AE02.roa (hash: rlUj0HWvLYRWR8L5dccxDGpfDl0LUtE4Msb9H1/d8Ik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB297, serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D Validity Not Before: Dec 23 02:57:26 2025 GMT Not After : Dec 30 02:57:26 2025 GMT Subject: CN=694a0516-1548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:30:6a:90:68:8f:7e:86:ce:9f:a8:60:3a:c2: db:9a:ed:28:03:d7:54:b2:76:45:b5:e1:9d:20:45: 38:61:56:2d:03:0a:b5:e9:ed:cf:ba:85:98:78:70: 57:d1:9d:96:b9:b5:ff:fd:e1:6c:d3:6b:14:ba:5e: e8:73:4f:94:91:67:09:10:f2:24:17:d4:e6:54:3c: e8:5b:79:1e:1e:69:37:c2:2c:70:29:4a:69:23:32: c6:bf:3e:3d:17:1f:4c:a2:d8:6e:90:fe:11:e2:52: 42:d6:da:cf:70:d9:ac:4c:9b:49:46:33:f2:06:69: db:92:02:b2:dc:6c:17:87:c4:53:37:0d:26:69:61: 05:f9:33:9d:cf:14:13:da:fb:15:48:ee:e3:49:42: ed:e6:f4:8e:06:a3:27:ea:50:7c:9d:63:48:94:db: 7d:1c:1b:da:e5:4d:96:d7:1f:1a:e2:32:32:86:dc: b7:8d:f0:f7:53:d9:d8:f6:c2:18:76:c9:76:69:6d: a9:1f:45:a2:aa:82:c6:21:1f:27:0b:56:2b:b5:a4: 7e:e4:7c:da:d9:4a:87:64:c6:1c:3a:55:9f:4d:b4: 4e:b2:a2:14:d9:6f:95:3a:e8:48:4b:f5:56:7c:c3: 8b:d1:b6:5a:11:8f:2a:cc:8c:41:64:05:36:d7:12: 7f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0E:93:2B:11:FC:19:53:1F:B9:EF:43:FE:6F:D9:BF:A0:8A:C2:77 X509v3 Authority Key Identifier: keyid:C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:2d:0a:c6:ae:91:64:10:8f:28:a7:56:d7:cf:5a:a8:42:48: 18:2d:53:9f:0d:0d:85:eb:5d:e7:42:0a:11:22:67:05:61:de: 4b:36:66:59:dc:70:f0:ee:f7:ea:6d:72:0c:8a:3b:45:ac:3c: ec:3b:92:58:b6:99:f0:a8:6d:6a:a6:58:90:90:db:65:4d:47: 49:a5:71:b3:01:5a:df:17:82:63:d8:5f:57:a3:69:35:c9:6a: 5f:c7:23:26:9d:36:96:1f:0b:24:7c:1a:28:9e:5f:ee:84:d9: 22:82:75:24:98:71:21:3b:d9:ce:12:7e:f4:80:83:74:d2:14: ec:fd:30:d0:24:17:93:b7:2b:8e:2c:c0:fd:a9:d9:d8:dc:80: 5c:58:bd:08:73:1e:7a:ed:e1:81:df:9a:3f:59:97:0d:b3:29: 58:21:b8:88:6d:f2:19:fb:2e:41:a1:8b:fc:17:3f:54:cb:15: 4d:6a:f2:9a:e3:4a:0e:56:b8:38:23:3b:f0:ff:5f:1c:f3:34: 6b:c8:6d:cd:c0:07:65:fe:c1:c8:02:7a:10:0a:7d:0c:cb:52: 6b:87:7b:b8:2d:8a:57:00:a1:9f:34:7b:3c:e9:16:e4:9f:1d: a3:60:b2:cc:94:94:c2:51:25:e4:5f:81:b1:39:f4:e9:27:05: 68:8b:1b:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIyOTcxMTAvBgNVBAUTKEM1NDJCREUwQjgzNDdDMzc5REUxREUxRDgyNDNBOTJD Qjk0Qzg3NEQwHhcNMjUxMjIzMDI1NzI2WhcNMjUxMjMwMDI1NzI2WjAYMRYwFAYD VQQDDA02OTRhMDUxNi0xNTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmjBqkGiPfobOn6hgOsLbmu0oA9dUsnZFteGdIEU4YVYtAwq16e3PuoWYeHBX 0Z2WubX//eFs02sUul7oc0+UkWcJEPIkF9TmVDzoW3keHmk3wixwKUppIzLGvz49 Fx9MothukP4R4lJC1trPcNmsTJtJRjPyBmnbkgKy3GwXh8RTNw0maWEF+TOdzxQT 2vsVSO7jSULt5vSOBqMn6lB8nWNIlNt9HBva5U2W1x8a4jIyhty3jfD3U9nY9sIY dsl2aW2pH0WiqoLGIR8nC1YrtaR+5Hza2UqHZMYcOlWfTbROsqIU2W+VOuhIS/VW fMOL0bZaEY8qzIxBZAU21xJ/aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAOkysR /BlTH7nvQ/5v2b+gisJ3MB8GA1UdIwQYMBaAFMVCveC4NHw3neHeHYJDqSy5TIdN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjI5Ny85QTg5MEU2RUI1 RTExMUVFQTBBNjE3NkRDNEY5QUUwMi94VUs5NExnMGZEZWQ0ZDRkZ2tPcExMbE1o MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVSzk0TGcwZkRlZDRkNGRna09wTExsTWgwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjI5Ny85QTg5MEU2RUI1RTExMUVFQTBBNjE3NkRDNEY5QUUwMi94VUs5NExnMGZE ZWQ0ZDRkZ2tPcExMbE1oMDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNLQrGrpFkEI8op1bXz1qoQkgYLVOfDQ2F613nQgoRImcFYd5LNmZZ 3HDw7vfqbXIMijtFrDzsO5JYtpnwqG1qpliQkNtlTUdJpXGzAVrfF4Jj2F9Xo2k1 yWpfxyMmnTaWHwskfBoonl/uhNkignUkmHEhO9nOEn70gIN00hTs/TDQJBeTtyuO LMD9qdnY3IBcWL0Icx567eGB35o/WZcNsylYIbiIbfIZ+y5BoYv8Fz9UyxVNavKa 40oOVrg4Izvw/18c8zRryG3NwAdl/sHIAnoQCn0My1Jrh3u4LYpXAKGfNHs86Rbk nx2jYLLMlJTCUSXkX4GxOfTpJwVoixuh -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:14 2025 by rpki-client