This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft File: uCqc9vnMgDxqa3BmLYB-xR2C290.mft (raw, json) Hash identifier: JabfB/ya7m+DJMDjA/nh5yNfeg7EStsEXA4GZyxFXAI= Subject key identifier: 42:A5:AA:A6:54:98:36:0E:EB:0A:0F:DA:56:B3:20:08:09:1C:7E:4C Authority key identifier: B8:2A:9C:F6:F9:CC:80:3C:6A:6B:70:66:2D:80:7E:C5:1D:82:DB:DD Certificate issuer: /CN=A911F92A/serialNumber=B82A9CF6F9CC803C6A6B70662D807EC51D82DBDD Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft Manifest number: 32 Signing time: Fri 05 Dec 2025 05:45:51 +0000 Manifest this update: Fri 05 Dec 2025 05:45:50 +0000 Manifest next update: Fri 12 Dec 2025 05:45:50 +0000 Files and hashes: 1: uCqc9vnMgDxqa3BmLYB-xR2C290.crl (hash: 57Z3ojeIgiD3D1XJT9ll76WqXPk9VZ9b/tdga9wpRqg=) 2: B3DED21C86C911F0BAF28043C4F9AE02.roa (hash: 9/hSsX9hwKIrL5GIgW4HmDzYzfmGg7Yjp9XdBQRPSv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.crl rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F92A, serialNumber=B82A9CF6F9CC803C6A6B70662D807EC51D82DBDD Validity Not Before: Dec 5 05:45:50 2025 GMT Not After : Dec 12 05:45:50 2025 GMT Subject: CN=6932718f-fcfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f4:cc:d2:8a:de:6d:cf:cd:00:95:76:c5:e1: 26:35:8e:5f:28:96:0c:f5:e3:1c:d5:e0:f0:b9:bd: b0:2b:e4:f3:83:bc:c4:1a:9d:b5:8f:a7:26:30:b6: 32:18:af:ad:9f:ef:08:83:c0:39:50:3a:e4:f7:22: b6:67:99:38:9f:e5:d8:37:83:70:db:1d:2c:fc:20: f4:54:03:cc:00:95:dd:b6:81:bb:c6:01:b2:6d:37: e4:1b:47:d4:3c:92:62:08:15:fe:0c:e1:2d:e2:db: 95:fd:a9:50:4b:a5:15:b8:00:7d:24:44:2b:c1:47: 94:7e:5b:4f:a5:b9:96:af:bd:9f:74:b0:95:99:be: 32:bf:77:bb:d2:c6:31:34:63:4b:8d:24:ae:98:71: 03:bf:36:b1:c7:00:f8:0c:b2:7f:02:6a:69:08:14: 31:09:62:f8:3f:08:c2:4d:63:52:dc:0e:b0:23:d4: d4:60:4d:e7:6c:24:07:e3:1b:63:a5:f3:45:52:da: 85:15:95:67:8a:6b:a4:db:08:c0:3c:69:a2:3b:5b: 46:04:62:75:5f:81:8f:50:12:72:79:cc:13:7a:5c: b2:8d:f9:71:73:a8:a7:15:38:32:81:ee:ec:26:f8: 2b:5e:61:5e:03:cf:1b:15:a4:34:6c:20:5a:b1:87: b1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A5:AA:A6:54:98:36:0E:EB:0A:0F:DA:56:B3:20:08:09:1C:7E:4C X509v3 Authority Key Identifier: keyid:B8:2A:9C:F6:F9:CC:80:3C:6A:6B:70:66:2D:80:7E:C5:1D:82:DB:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:71:03:df:4d:ed:5f:33:aa:25:91:d9:03:da:d0:14:c6:00: 64:a6:f9:02:ba:bf:38:6a:fd:22:60:ff:8e:8c:2b:00:d0:48: a3:8d:b9:64:c6:7d:6d:dc:c9:7f:71:0a:f7:11:70:2d:7c:8e: 6e:c3:dd:f3:55:c1:0e:40:a0:19:7b:dc:93:3e:2b:2c:97:36: a3:17:28:b5:df:7e:38:9a:6c:eb:9d:70:a0:d4:2c:7e:9a:18: e7:f7:96:cf:6d:f4:ed:a1:ca:9e:b9:2f:b3:5e:25:69:f3:49: 1a:c9:a3:a6:ef:69:38:4d:f3:0a:51:05:27:08:8a:4e:49:d2: ed:c8:25:47:45:af:b3:c2:51:82:ea:27:be:84:b9:f0:6b:bd: 33:d9:bc:dd:aa:89:e1:bf:2f:cf:46:08:ac:5a:04:74:a1:9f: f3:46:57:a1:c8:a6:60:b5:48:98:2a:e2:4d:6b:32:8c:40:b7: b1:4a:5d:4c:24:d1:a1:8d:6b:f8:f1:fb:18:7d:c6:bd:6b:05: 5c:65:e7:04:bd:44:d6:6b:12:bf:22:39:83:bb:ef:fe:39:40: a0:d1:52:7c:a7:5f:6b:d4:2e:48:49:e7:ef:41:12:c7:91:a8: 4e:14:f0:4d:d5:69:23:27:86:3c:c0:1e:1f:98:da:95:39:51: 86:ff:51:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjkyQTExMC8GA1UEBRMoQjgyQTlDRjZGOUNDODAzQzZBNkI3MDY2MkQ4MDdFQzUx RDgyREJERDAeFw0yNTEyMDUwNTQ1NTBaFw0yNTEyMTIwNTQ1NTBaMBgxFjAUBgNV BAMTDTY5MzI3MThmLWZjZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH9MzSit5tz80AlXbF4SY1jl8olgz14xzV4PC5vbAr5PODvMQanbWPpyYwtjIY r62f7wiDwDlQOuT3IrZnmTif5dg3g3DbHSz8IPRUA8wAld22gbvGAbJtN+QbR9Q8 kmIIFf4M4S3i25X9qVBLpRW4AH0kRCvBR5R+W0+luZavvZ90sJWZvjK/d7vSxjE0 Y0uNJK6YcQO/NrHHAPgMsn8CamkIFDEJYvg/CMJNY1LcDrAj1NRgTedsJAfjG2Ol 80VS2oUVlWeKa6TbCMA8aaI7W0YEYnVfgY9QEnJ5zBN6XLKN+XFzqKcVODKB7uwm +CteYV4DzxsVpDRsIFqxh7FpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQqWqplSY Ng7rCg/aVrMgCAkcfkwwHwYDVR0jBBgwFoAUuCqc9vnMgDxqa3BmLYB+xR2C290w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGOTJBLzI2NjAzNzgyODZD OTExRjA4NzJGOUQyRkM0RjlBRTAyL3VDcWM5dm5NZ0R4cWEzQm1MWUIteFIyQzI5 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdUNxYzl2bk1nRHhxYTNCbUxZQi14UjJDMjkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG OTJBLzI2NjAzNzgyODZDOTExRjA4NzJGOUQyRkM0RjlBRTAyL3VDcWM5dm5NZ0R4 cWEzQm1MWUIteFIyQzI5MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKpxA99N7V8zqiWR2QPa0BTGAGSm+QK6vzhq/SJg/46MKwDQSKONuWTG fW3cyX9xCvcRcC18jm7D3fNVwQ5AoBl73JM+KyyXNqMXKLXffjiabOudcKDULH6a GOf3ls9t9O2hyp65L7NeJWnzSRrJo6bvaThN8wpRBScIik5J0u3IJUdFr7PCUYLq J76EufBrvTPZvN2qieG/L89GCKxaBHShn/NGV6HIpmC1SJgq4k1rMoxAt7FKXUwk 0aGNa/jx+xh9xr1rBVxl5wS9RNZrEr8iOYO77/45QKDRUnynX2vULkhJ5+9BEseR qE4U8E3VaSMnhjzAHh+Y2pU5UYb/UYE= -----END CERTIFICATE-----Generated at Sat Dec 6 16:14:25 2025 by rpki-client