This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft File: UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft (raw, json) Hash identifier: k/P6nIbGPT82kZgDkCGKIVAuPb2Tbiv62CnbanOp3Mg= Subject key identifier: 41:54:96:8C:70:1A:F0:75:DE:92:B6:75:15:AC:43:26:EB:76:51:44 Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F Certificate issuer: /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F Certificate serial: 30E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft Manifest number: 30D0 Signing time: Sat 06 Dec 2025 15:15:14 +0000 Manifest this update: Sat 06 Dec 2025 15:15:14 +0000 Manifest next update: Sat 13 Dec 2025 15:15:14 +0000 Files and hashes: 1: UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl (hash: 2PoiKwGCl/o+JwPkfoX3e7zrI3x1IWEcpY0IcOZDNG8=) 2: E5DB5238DFBD11EC8E203126C4F9AE02.roa (hash: ZrmmPRVPNdXmVUqASzwRt7WIJ8A+6EE3tmK84hv8/3g=) 3: B8B02658C16B11EEA7D01A7DC4F9AE02.roa (hash: inEKK4l1A/n9MCoAdqgbUu3ySJUn1ofzfsmCuXBMLoQ=) 4: 446A425EA6BB11ED9D458785C4F9AE02.roa (hash: b3tJCOFhrOxNwX+xrXj/RF8CaJdbbK6dUe5Fw9N8cng=) 5: 43DADDD0A6BB11ED9D458785C4F9AE02.roa (hash: pqhARhh64EGCd2MgnNHnrxWDNycvjlNc8wDHcPRwifg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12514 (0x30e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B1DA, serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F Validity Not Before: Dec 6 15:15:14 2025 GMT Not After : Dec 13 15:15:14 2025 GMT Subject: CN=69344882-30e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:78:71:be:d7:82:67:03:36:4e:32:f1:d5:30: fc:54:5e:d0:a9:f0:de:0c:a1:82:49:00:dd:20:ef: db:f8:da:70:ee:d4:3d:c8:9a:6e:25:a5:44:3c:24: 7f:de:02:c9:60:b8:36:76:80:f2:8e:f8:f0:00:1e: 41:1a:04:ca:77:46:35:02:ec:36:34:0c:8c:4b:45: fc:b5:d7:bd:b0:ae:97:6e:fe:07:84:fd:26:2a:ab: e1:ac:c4:bd:8b:0d:07:5e:63:53:9e:d9:99:11:47: bf:5b:28:0f:be:25:27:01:db:a2:9b:a7:28:c3:d2: cc:0f:b7:dc:0f:15:41:55:f1:2e:e4:9a:a5:fa:0f: 60:65:53:ce:7e:ee:57:51:11:7d:cc:91:a7:b9:11: c1:9a:14:1c:ff:72:93:76:d8:34:13:83:19:1a:b1: fc:70:9b:49:d3:49:70:93:f9:37:9b:6e:a0:66:d8: 45:0a:10:55:1b:a1:e8:ec:58:62:27:58:ee:95:56: cb:8e:dc:14:2a:a2:18:e5:30:7f:ab:8e:e9:36:70: 2a:54:11:34:da:fa:7f:50:75:5e:44:0c:6c:8a:87: 0f:9a:5e:3f:23:19:80:73:92:c7:68:3b:e6:ee:a6: f8:78:74:c9:4c:7b:aa:75:2d:be:52:84:37:81:c6: b2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:54:96:8C:70:1A:F0:75:DE:92:B6:75:15:AC:43:26:EB:76:51:44 X509v3 Authority Key Identifier: keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f6:b4:36:ce:1a:34:59:89:05:27:28:db:30:ca:47:18:c8: 8c:e3:cb:f2:aa:6c:d2:04:0d:32:04:27:96:63:00:88:f4:63: fc:50:88:44:fd:74:7a:11:c6:a9:06:66:79:61:5b:17:e4:9e: 87:4a:7d:ac:19:76:b1:3d:36:ba:72:57:40:18:12:47:c8:8b: e2:c8:27:f5:b1:85:98:19:51:36:1b:54:1a:54:b2:77:b4:a9: d7:ce:ee:e7:99:00:7f:0e:20:33:a7:34:97:73:66:3a:03:38: 5f:ac:ee:3f:3a:b1:70:0f:ae:44:f2:59:fc:13:ed:fe:7c:16: d4:73:d0:f5:f6:e0:d3:dd:14:eb:8d:ae:1e:a1:ce:34:d3:4c: 7d:a2:6d:7d:5d:7d:95:f0:66:09:d5:02:fc:57:28:95:38:e3: e4:89:7c:c6:fb:22:56:61:cf:cc:c7:c5:20:55:fd:71:8d:2e: 51:b3:c9:e1:eb:c0:88:fa:97:e0:ba:a6:b5:30:f9:ae:8a:62: e1:7d:46:fd:c3:b5:63:80:63:14:88:e3:dd:64:e5:da:f5:0e: f2:1a:23:3d:54:d7:1d:75:dc:92:80:8a:b7:d8:31:0b:3b:dc: 53:d1:78:7d:85:c5:ad:0a:3a:ff:f9:1c:17:59:86:13:d0:cb: e7:d2:97:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IxREExMTAvBgNVBAUTKDUwRTY2ODNBNkFGNDY0NEI2OEExMUMyMkRBN0YzQTY1 QjMxMkMwNkYwHhcNMjUxMjA2MTUxNTE0WhcNMjUxMjEzMTUxNTE0WjAYMRYwFAYD VQQDEw02OTM0NDg4Mi0zMGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHhxvteCZwM2TjLx1TD8VF7QqfDeDKGCSQDdIO/b+Npw7tQ9yJpuJaVEPCR/ 3gLJYLg2doDyjvjwAB5BGgTKd0Y1Auw2NAyMS0X8tde9sK6Xbv4HhP0mKqvhrMS9 iw0HXmNTntmZEUe/WygPviUnAduim6cow9LMD7fcDxVBVfEu5Jql+g9gZVPOfu5X URF9zJGnuRHBmhQc/3KTdtg0E4MZGrH8cJtJ00lwk/k3m26gZthFChBVG6Ho7Fhi J1julVbLjtwUKqIY5TB/q47pNnAqVBE02vp/UHVeRAxsiocPml4/IxmAc5LHaDvm 7qb4eHTJTHuqdS2+UoQ3gcayfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFUloxw GvB13pK2dRWsQybrdlFEMB8GA1UdIwQYMBaAFFDmaDpq9GRLaKEcItp/OmWzEsBv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS8xNEI3NkJDOEVE MEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpFdG9vUndpMm44NlpiTVN3 RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPWm9PbXIwWkV0b29Sd2kybjg2WmJNU3dHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjFEQS8xNEI3NkJDOEVEMEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpF dG9vUndpMm44NlpiTVN3RzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa9rQ2zho0WYkFJyjbMMpHGMiM48vyqmzSBA0yBCeWYwCI9GP8UIhE /XR6EcapBmZ5YVsX5J6HSn2sGXaxPTa6cldAGBJHyIviyCf1sYWYGVE2G1QaVLJ3 tKnXzu7nmQB/DiAzpzSXc2Y6AzhfrO4/OrFwD65E8ln8E+3+fBbUc9D19uDT3RTr ja4eoc4000x9om19XX2V8GYJ1QL8VyiVOOPkiXzG+yJWYc/Mx8UgVf1xjS5Rs8nh 68CI+pfguqa1MPmuimLhfUb9w7VjgGMUiOPdZOXa9Q7yGiM9VNcdddySgIq32DEL O9xT0Xh9hcWtCjr/+RwXWYYT0Mvn0pce -----END CERTIFICATE-----Generated at Sun Dec 7 01:37:18 2025 by rpki-client