This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft File: UmRCqpPf8MUTmmF7DeZFtznmvs0.mft (raw, json) Hash identifier: LNWSXJEGMIgiMBfHwKGHMSXTRPhvnIGGvysY/n/RJEk= Subject key identifier: 47:44:AE:AD:1B:80:62:E7:B5:93:6B:27:7B:FE:BD:57:61:5C:BA:D1 Authority key identifier: 52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD Certificate issuer: /CN=A9140D7D/serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Certificate serial: 0A4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft Manifest number: 0A42 Signing time: Sat 06 Dec 2025 18:56:52 +0000 Manifest this update: Sat 06 Dec 2025 18:56:52 +0000 Manifest next update: Sat 13 Dec 2025 18:56:52 +0000 Files and hashes: 1: UmRCqpPf8MUTmmF7DeZFtznmvs0.crl (hash: LqY1/WwBPzSFVImKWInGMzEaRVXctq5WusCyWOHICjQ=) 2: 1C9AB3F67D6711EA90858415C4F9AE02.roa (hash: oi91Qfh6vx3udOQFWmZQlAlwWv2n7sWukG/Y5qWMZrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2636 (0xa4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D7D, serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Validity Not Before: Dec 6 18:56:52 2025 GMT Not After : Dec 13 18:56:52 2025 GMT Subject: CN=69347c74-29ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6e:00:8e:e3:77:7f:59:26:57:c2:bb:8a:97: af:11:a4:63:0d:d4:b9:b2:aa:bf:09:e2:6d:1e:cb: 30:d1:98:10:c6:f6:0a:5d:96:b9:00:87:ef:b4:1c: ba:a0:45:5f:3b:29:69:c7:dc:b6:06:1f:9a:d6:29: 60:be:4f:cb:81:e9:6a:85:df:cc:63:a8:ae:7f:81: a0:e1:68:7e:a5:ad:42:ef:80:96:0e:35:57:1b:fc: f9:ce:f7:82:54:cc:75:74:02:35:b1:54:1a:2a:35: c5:ce:86:d7:50:4b:ab:fc:f1:18:dd:97:17:8f:7e: c3:2c:e4:2d:bc:d8:3c:69:bd:a6:ef:be:59:c9:90: 0f:9e:a5:c8:90:07:66:16:3c:e2:c9:e3:d0:94:84: fa:f1:58:f1:30:51:f7:b8:1e:4a:74:cb:52:72:c5: 79:5e:0c:04:8b:f7:44:a9:39:41:93:39:03:0c:9e: bd:f5:a8:66:ed:91:5e:d7:92:8d:e5:ad:77:98:8d: c4:b9:29:86:6e:77:d4:3f:24:fa:62:b3:53:b4:0a: 9c:33:77:3f:df:d7:ac:ec:44:35:a2:97:c6:f7:fe: 87:22:6b:81:e0:4f:86:63:31:ea:73:ce:1e:4c:ea: bf:09:ad:b6:d8:a6:5a:9d:ee:48:a6:72:92:54:39: 7e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:44:AE:AD:1B:80:62:E7:B5:93:6B:27:7B:FE:BD:57:61:5C:BA:D1 X509v3 Authority Key Identifier: keyid:52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:fa:ac:2c:89:36:d0:c1:a1:bd:d7:39:16:b2:b7:52:5c:b7: 16:87:08:aa:49:73:64:0d:b3:86:ec:30:3c:23:b3:f9:f4:8c: 01:3c:ef:96:04:78:ac:f8:48:34:ce:7e:f0:09:f5:15:d4:6c: 0e:ea:4c:af:bc:bb:53:42:94:d7:14:c6:a7:1a:51:13:9f:86: 96:81:15:32:ac:71:a4:27:11:dc:e1:a3:44:c8:96:28:35:ca: 1f:f3:bd:1e:77:71:9d:56:4e:be:19:40:84:26:5e:a7:74:9b: a8:00:26:64:61:1b:04:54:44:98:6a:db:8f:a0:5f:85:f4:6a: 57:02:22:d0:b0:d0:e7:b6:65:31:13:91:20:d7:cd:75:f4:8b: 85:24:2d:b4:8d:0f:58:e2:ab:32:2c:f4:eb:64:42:4f:e0:9b: a7:10:69:34:cb:fe:8e:10:b4:64:8a:2b:57:6d:2d:ef:d6:f6: e5:9c:e5:6a:03:3a:5c:65:9d:61:9c:b4:41:ab:14:44:3c:90: 0c:96:82:bd:74:76:fc:eb:df:34:4f:26:bf:62:87:9b:53:b3: 6d:e8:99:14:0a:09:2e:cb:04:4f:6c:d1:d5:ee:80:e8:03:47: 2c:ea:88:16:d5:16:a7:df:72:23:e0:9f:62:c0:9b:4b:30:37: 77:b4:d8:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEN0QxMTAvBgNVBAUTKDUyNjQ0MkFBOTNERkYwQzUxMzlBNjE3QjBERTY0NUI3 MzlFNkJFQ0QwHhcNMjUxMjA2MTg1NjUyWhcNMjUxMjEzMTg1NjUyWjAYMRYwFAYD VQQDEw02OTM0N2M3NC0yOWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtm4AjuN3f1kmV8K7ipevEaRjDdS5sqq/CeJtHssw0ZgQxvYKXZa5AIfvtBy6 oEVfOylpx9y2Bh+a1ilgvk/Lgelqhd/MY6iuf4Gg4Wh+pa1C74CWDjVXG/z5zveC VMx1dAI1sVQaKjXFzobXUEur/PEY3ZcXj37DLOQtvNg8ab2m775ZyZAPnqXIkAdm FjziyePQlIT68VjxMFH3uB5KdMtScsV5XgwEi/dEqTlBkzkDDJ699ahm7ZFe15KN 5a13mI3EuSmGbnfUPyT6YrNTtAqcM3c/39es7EQ1opfG9/6HImuB4E+GYzHqc84e TOq/Ca222KZane5IpnKSVDl+DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdErq0b gGLntZNrJ3v+vVdhXLrRMB8GA1UdIwQYMBaAFFJkQqqT3/DFE5phew3mRbc55r7N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ3RC83MTZEMkYzNjdE NjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhNVVRtbUY3RGVaRnR6bm12 czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VtUkNxcFBmOE1VVG1tRjdEZVpGdHpubXZzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQ3RC83MTZEMkYzNjdENjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhN VVRtbUY3RGVaRnR6bm12czAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV+qwsiTbQwaG91zkWsrdSXLcWhwiqSXNkDbOG7DA8I7P59IwBPO+W BHis+Eg0zn7wCfUV1GwO6kyvvLtTQpTXFManGlETn4aWgRUyrHGkJxHc4aNEyJYo Ncof870ed3GdVk6+GUCEJl6ndJuoACZkYRsEVESYatuPoF+F9GpXAiLQsNDntmUx E5Eg18119IuFJC20jQ9Y4qsyLPTrZEJP4JunEGk0y/6OELRkiitXbS3v1vblnOVq AzpcZZ1hnLRBqxREPJAMloK9dHb86980Tya/YoebU7Nt6JkUCgkuywRPbNHV7oDo A0cs6ogW1Ran33Ij4J9iwJtLMDd3tNhY -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:45 2025 by rpki-client