This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft File: uHa2DaKzyctmxyu5_Kc77ssR_dE.mft (raw, json) Hash identifier: ED2Gq7wt4IU2k2P1RkFvI/Oo2p5NWT5vPs20c01z4W0= Subject key identifier: 22:5A:C6:F0:74:0C:38:A0:AA:45:0A:4A:63:D5:BC:5A:F3:CA:DC:8B Authority key identifier: B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 Certificate issuer: /CN=A912611F/serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Certificate serial: 1049 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft Manifest number: 19C1 Signing time: Sat 06 Dec 2025 16:53:43 +0000 Manifest this update: Sat 06 Dec 2025 16:53:42 +0000 Manifest next update: Sat 13 Dec 2025 16:53:42 +0000 Files and hashes: 1: uHa2DaKzyctmxyu5_Kc77ssR_dE.crl (hash: 0YV/jmAbTR3wOvQ1qqQyX/3ExqOCiA0au71VWCbW2CM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4169 (0x1049) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912611F, serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Validity Not Before: Dec 6 16:53:42 2025 GMT Not After : Dec 13 16:53:42 2025 GMT Subject: CN=69345f96-1d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7d:3d:e2:f1:7c:d4:ca:b2:f9:87:bc:10:5b: 8a:eb:b9:b7:8b:1c:81:b4:15:a8:55:8b:e5:35:f6: f9:41:26:03:4c:cc:ed:13:02:f1:64:81:8f:04:26: d6:24:01:2a:29:8c:64:12:d2:7e:c8:eb:eb:00:be: 6b:24:1f:d6:e5:8d:1f:4d:fb:b8:7b:f7:b8:50:30: 4e:9a:ff:d4:e2:8f:7e:13:65:23:dd:68:14:cf:7e: 5f:1f:e2:ee:44:47:9d:b7:9f:1d:f3:67:af:7f:4f: a8:fd:e9:97:31:e6:3a:91:32:b5:d3:3f:dc:59:4e: d9:a8:06:f0:50:cb:52:58:81:b4:b8:64:15:68:6e: 25:56:37:ee:1b:ee:ee:fc:7d:d8:f8:60:a9:69:b6: 3a:37:97:0e:e6:ac:31:9f:31:27:e0:12:b7:6c:d3: 3a:f8:60:ed:2e:60:cb:3d:1d:d8:b6:40:2c:0f:fd: 01:3f:b5:13:23:8b:98:29:c7:ad:67:4e:15:2a:4b: d9:8e:22:a3:cf:ca:77:85:ed:b3:0e:1d:9c:41:d4: 40:aa:f2:83:60:59:c4:bc:24:bb:78:70:0f:60:cf: ae:ae:60:79:64:93:a9:eb:73:70:42:04:0c:7b:dd: b1:3d:d8:8d:a6:56:4c:d8:22:d2:d1:07:8e:3f:90: e9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5A:C6:F0:74:0C:38:A0:AA:45:0A:4A:63:D5:BC:5A:F3:CA:DC:8B X509v3 Authority Key Identifier: keyid:B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:f0:61:59:4f:72:b6:99:9f:ab:0e:74:8e:7d:54:8a:51:03: c0:57:2b:de:68:6c:b2:32:c4:22:b3:18:2a:67:0f:f1:b7:50: 33:eb:90:54:b0:61:1a:0d:20:4e:ce:eb:e0:df:e5:8d:06:3b: bb:ad:6e:97:55:4a:18:fa:9c:12:c1:e6:0a:3c:30:8b:06:92: a0:d0:1d:c9:d8:e3:7f:d7:5d:23:37:af:5a:cb:d6:6a:27:15: 4e:f6:aa:b8:c4:f5:cb:71:2e:95:15:8b:b4:7f:c0:8e:aa:d9: 70:cd:52:c5:34:24:d2:27:1c:56:d8:e4:76:bb:34:df:44:e4: 65:26:73:e8:26:44:7c:9f:f7:6c:f3:65:30:12:ce:8a:b1:07: 47:ac:72:43:ee:87:fa:6a:ab:60:29:ae:58:e3:16:ad:2d:b7: a5:e3:c2:f5:17:8f:1d:0c:46:56:7d:6c:05:a7:a6:07:4e:c0: b9:2e:a7:4a:c7:46:84:4a:09:fa:5c:7f:b7:5e:05:06:6a:8f: a2:fb:45:1a:08:1b:67:6d:c9:57:97:61:95:90:e7:dc:0e:a7: c2:57:ec:6d:98:d1:75:b8:0e:81:2c:33:b6:8e:39:86:66:0d: 80:7d:e6:83:49:d5:40:40:66:12:8a:a2:4d:c4:57:83:2a:39: 10:86:f2:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxMUYxMTAvBgNVBAUTKEI4NzZCNjBEQTJCM0M5Q0I2NkM3MkJCOUZDQTczQkVF Q0IxMUZERDEwHhcNMjUxMjA2MTY1MzQyWhcNMjUxMjEzMTY1MzQyWjAYMRYwFAYD VQQDEw02OTM0NWY5Ni0xZDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4X094vF81Mqy+Ye8EFuK67m3ixyBtBWoVYvlNfb5QSYDTMztEwLxZIGPBCbW JAEqKYxkEtJ+yOvrAL5rJB/W5Y0fTfu4e/e4UDBOmv/U4o9+E2Uj3WgUz35fH+Lu REedt58d82evf0+o/emXMeY6kTK10z/cWU7ZqAbwUMtSWIG0uGQVaG4lVjfuG+7u /H3Y+GCpabY6N5cO5qwxnzEn4BK3bNM6+GDtLmDLPR3YtkAsD/0BP7UTI4uYKcet Z04VKkvZjiKjz8p3he2zDh2cQdRAqvKDYFnEvCS7eHAPYM+urmB5ZJOp63NwQgQM e92xPdiNplZM2CLS0QeOP5DpxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJaxvB0 DDigqkUKSmPVvFrzytyLMB8GA1UdIwQYMBaAFLh2tg2is8nLZscrufynO+7LEf3R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjExRi80QThCMDRFQTRD N0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenljdG14eXU1X0tjNzdzc1Jf ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VIYTJEYUt6eWN0bXh5dTVfS2M3N3NzUl9kRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjExRi80QThCMDRFQTRDN0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenlj dG14eXU1X0tjNzdzc1JfZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj8GFZT3K2mZ+rDnSOfVSKUQPAVyveaGyyMsQisxgqZw/xt1Az65BU sGEaDSBOzuvg3+WNBju7rW6XVUoY+pwSweYKPDCLBpKg0B3J2ON/110jN69ay9Zq JxVO9qq4xPXLcS6VFYu0f8COqtlwzVLFNCTSJxxW2OR2uzTfRORlJnPoJkR8n/ds 82UwEs6KsQdHrHJD7of6aqtgKa5Y4xatLbel48L1F48dDEZWfWwFp6YHTsC5LqdK x0aESgn6XH+3XgUGao+i+0UaCBtnbclXl2GVkOfcDqfCV+xtmNF1uA6BLDO2jjmG Zg2AfeaDSdVAQGYSiqJNxFeDKjkQhvK2 -----END CERTIFICATE-----Generated at Sat Dec 6 18:53:38 2025 by rpki-client