This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft File: UoKkZCr301eZKRu6RH6hQlGk1fw.mft (raw, json) Hash identifier: HpjvlyT416D45duijlPwM98+9FKMCnrzH02+sb7pabY= Subject key identifier: A1:72:72:FB:F0:BF:EC:52:3D:A3:45:5A:80:94:71:6C:85:14:9F:FA Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Certificate serial: 08AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft Manifest number: 2056 Signing time: Sat 06 Dec 2025 16:09:33 +0000 Manifest this update: Sat 06 Dec 2025 16:09:32 +0000 Manifest next update: Sat 13 Dec 2025 16:09:32 +0000 Files and hashes: 1: UoKkZCr301eZKRu6RH6hQlGk1fw.crl (hash: JpkxtrItiUSzBhJjG6BjU05Vgx6GwBxarKQJzDRjNqU=) 2: 654665EA197611F09D2B1C76C4F9AE02.roa (hash: hgO4m8NBFvCWTk/xZ7lTPgH3uo1aBC3KP8OdcPsjkbo=) 3: B5E806CC8BC711EE899A5284C4F9AE02.roa (hash: XzzXA6m5Sfbs0sLhTPVckgYHL3ZiipFrwRLSzgKZ33U=) 4: 172C2B96197711F0A993397AC4F9AE02.roa (hash: 8Qo70bxIag9X+h+p9rkvEiGVmiiK66r021Qwo1g6tkk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2220 (0x8ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9, serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Validity Not Before: Dec 6 16:09:32 2025 GMT Not After : Dec 13 16:09:32 2025 GMT Subject: CN=6934553d-e485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:51:d0:d4:51:e6:7e:d3:47:2d:57:b5:55:1e: 04:a8:8f:ff:4f:46:f3:b7:c4:d5:b6:38:0c:48:ad: c4:e4:5c:26:39:36:5a:8c:4a:57:3a:ed:11:8e:37: 76:95:14:bd:68:2a:db:51:a5:0c:60:13:44:13:53: 34:8e:ab:22:7c:7c:55:c9:b7:b9:c8:9b:7c:d5:78: 71:72:f3:27:23:a4:bb:4f:b7:79:ac:2c:51:81:d8: 6c:6c:b6:ca:bd:96:93:ed:07:78:0e:14:a5:9b:ed: cc:42:6f:5b:7f:93:7b:f7:a3:86:27:c8:b3:8e:51: b6:e2:09:32:3f:75:96:ac:8d:2b:4c:c3:fc:75:58: a9:66:70:e2:f2:0f:94:f4:6c:82:26:52:2a:97:23: 6d:74:15:fb:58:c2:d4:7a:1a:54:d5:3f:06:62:4e: c3:41:c0:e5:79:ab:6f:ea:f9:5a:3f:cd:b2:52:b0: cb:9c:03:24:a8:12:eb:a8:73:c6:40:46:02:d1:41: b6:a8:73:87:f3:07:2b:5a:1c:f0:61:14:02:16:c6: c4:73:8c:1a:d2:12:56:e8:9a:c6:bf:f5:f8:6e:9b: ae:ac:63:1a:94:04:27:61:58:4b:85:4a:2f:ac:4e: 0e:cf:88:fa:e7:00:54:24:c1:90:0b:55:64:50:87: e8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:72:72:FB:F0:BF:EC:52:3D:A3:45:5A:80:94:71:6C:85:14:9F:FA X509v3 Authority Key Identifier: keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:a3:c1:e2:d0:db:3e:00:08:b5:be:51:e1:e1:39:82:33:56: 17:15:9c:60:b2:d1:ca:8d:3b:0a:9b:71:19:8b:33:d6:41:15: ab:8e:8a:a8:b4:ec:a8:0a:e6:fb:2f:91:e0:af:82:f2:e1:a0: 2e:6a:a3:1e:48:06:8b:5a:64:8e:73:5c:df:ed:e3:b8:3e:8b: f0:a8:ea:3c:92:76:57:53:50:88:e5:e6:41:c1:b8:a7:84:3c: b1:15:2b:91:93:9d:66:bd:35:62:3a:c1:d3:18:8c:13:88:9c: 8a:5b:ce:8b:6d:4b:f0:71:fd:12:ec:cf:3d:66:a5:26:e6:d1: 35:30:88:4a:ac:3e:94:da:53:6e:2e:04:3f:fe:3b:7d:9e:26: c2:22:c2:ba:df:e4:9b:db:dd:f4:2c:c9:0d:81:60:19:78:4b: d0:f3:fb:39:d2:6c:b9:ae:d7:35:ef:ed:ff:73:60:a4:47:42: a4:e5:53:13:d4:f0:c9:5f:c7:d5:3e:5f:c4:52:b5:16:a7:60: e8:49:60:7a:45:a1:fd:0f:c2:12:ea:96:e6:ee:09:08:f9:80: 90:c7:62:10:28:70:2c:33:a1:3d:2f:de:ab:86:45:70:0b:ee: bf:ac:fc:38:e8:e8:42:0f:ae:25:f1:78:c1:9b:07:2d:e4:48: 96:1b:c0:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDUyODJBNDY0MkFGN0QzNTc5OTI5MUJCQTQ0N0VBMTQy NTFBNEQ1RkMwHhcNMjUxMjA2MTYwOTMyWhcNMjUxMjEzMTYwOTMyWjAYMRYwFAYD VQQDEw02OTM0NTUzZC1lNDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVHQ1FHmftNHLVe1VR4EqI//T0bzt8TVtjgMSK3E5FwmOTZajEpXOu0Rjjd2 lRS9aCrbUaUMYBNEE1M0jqsifHxVybe5yJt81XhxcvMnI6S7T7d5rCxRgdhsbLbK vZaT7Qd4DhSlm+3MQm9bf5N796OGJ8izjlG24gkyP3WWrI0rTMP8dVipZnDi8g+U 9GyCJlIqlyNtdBX7WMLUehpU1T8GYk7DQcDleatv6vlaP82yUrDLnAMkqBLrqHPG QEYC0UG2qHOH8wcrWhzwYRQCFsbEc4wa0hJW6JrGv/X4bpuurGMalAQnYVhLhUov rE4Oz4j65wBUJMGQC1VkUIfoSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFycvvw v+xSPaNFWoCUcWyFFJ/6MB8GA1UdIwQYMBaAFFKCpGQq99NXmSkbukR+oUJRpNX8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAxZVpLUnU2Ukg2aFFsR2sx ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvS2taQ3IzMDFlWktSdTZSSDZoUWxHazFmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODJEOS8wRURBNkQ1RUNEREExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAx ZVpLUnU2Ukg2aFFsR2sxZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADo8Hi0Ns+AAi1vlHh4TmCM1YXFZxgstHKjTsKm3EZizPWQRWrjoqo tOyoCub7L5Hgr4Ly4aAuaqMeSAaLWmSOc1zf7eO4PovwqOo8knZXU1CI5eZBwbin hDyxFSuRk51mvTViOsHTGIwTiJyKW86LbUvwcf0S7M89ZqUm5tE1MIhKrD6U2lNu LgQ//jt9nibCIsK63+Sb2930LMkNgWAZeEvQ8/s50my5rtc17+3/c2CkR0Kk5VMT 1PDJX8fVPl/EUrUWp2DoSWB6RaH9D8IS6pbm7gkI+YCQx2IQKHAsM6E9L96rhkVw C+6/rPw46OhCD64l8XjBmwct5EiWG8C3 -----END CERTIFICATE-----Generated at Sat Dec 6 23:01:17 2025 by rpki-client