This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft File: UyQGWmE9LRB4F5xiFjcczGp3UHo.mft (raw, json) Hash identifier: FyU1EEttYOrsiIHH6IETz4EhqaxIG6XKS/I0QQkgImU= Subject key identifier: 06:CF:94:C2:90:8F:AF:FB:89:71:79:E4:CF:94:FD:58:98:42:28:31 Authority key identifier: 53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A Certificate issuer: /CN=A9158EC4/serialNumber=5324065A613D2D1078179C6216371CCC6A77507A Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft Manifest number: 0143 Signing time: Fri 05 Dec 2025 02:29:59 +0000 Manifest this update: Fri 05 Dec 2025 02:29:59 +0000 Manifest next update: Fri 12 Dec 2025 02:29:59 +0000 Files and hashes: 1: UyQGWmE9LRB4F5xiFjcczGp3UHo.crl (hash: sbFuIFqPwJa/0yDurf/GnKeQdbRdxD3DT9ctsTljEuM=) 2: 2805F2D6E5B511EEB34EF35AC4F9AE02.roa (hash: 0mdd1hPCY77vgsAR82vZE3qWvhrgXofs3UYJMwrKnGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158EC4, serialNumber=5324065A613D2D1078179C6216371CCC6A77507A Validity Not Before: Dec 5 02:29:59 2025 GMT Not After : Dec 12 02:29:59 2025 GMT Subject: CN=693243a7-ea21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:fa:b6:73:57:fa:0e:a0:72:cf:d8:f2:55: c0:be:3a:1a:c3:e3:33:3a:fe:8c:da:30:03:3f:79: 5d:ce:7a:db:a3:27:bb:2c:8d:c9:99:a6:b3:6a:34: 31:eb:eb:8f:b3:7f:d7:82:13:30:f7:23:c0:0e:f8: ff:1e:32:d7:d9:d2:4f:c4:3d:c0:0d:67:e2:d7:a4: 48:45:1e:c8:2b:fc:6b:d4:cf:fe:f3:20:67:7d:d1: 10:7a:0e:70:95:f4:d0:d7:4a:29:67:af:43:f2:89: c7:d6:5a:f3:8f:71:51:d7:98:3d:c7:3b:9a:52:48: 6d:d4:97:7f:07:a7:57:a5:21:64:9e:e3:9f:ee:0b: 2a:3b:a8:ec:6b:0f:b2:60:02:5c:18:d4:14:88:d7: 77:0b:4e:ee:83:9f:15:5f:bd:d0:ef:bb:80:6a:46: b0:b4:40:07:f4:2a:74:2a:53:41:a6:3a:6e:e9:06: 2b:68:c7:5f:5e:c0:bd:b6:ea:d6:cd:30:9b:53:eb: 5f:5d:1d:2a:a4:0d:37:cc:14:1b:9a:89:38:15:10: de:32:54:cf:50:1a:95:f2:7a:5f:c5:e1:31:80:9c: 3e:c5:29:9a:b4:3a:46:96:1b:52:d6:c4:0f:34:a7: 47:6b:02:2f:a1:8a:e4:ec:4f:71:9e:58:16:64:a4: 02:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CF:94:C2:90:8F:AF:FB:89:71:79:E4:CF:94:FD:58:98:42:28:31 X509v3 Authority Key Identifier: keyid:53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:a1:ac:fe:79:d8:0c:e8:5c:66:22:0a:b4:d2:8a:c5:c0:b8: 8b:63:e2:48:06:f5:5b:ff:3f:96:10:79:69:15:58:c1:6a:b2: 8d:39:a6:e8:99:d0:8f:12:e6:a9:a4:74:20:56:1a:96:db:cc: cf:02:40:76:64:2e:31:34:bb:cb:73:78:09:6f:69:70:17:7d: 18:1a:e6:61:15:dd:2a:48:53:84:57:29:56:da:f5:e7:70:d1: ca:ac:c4:fe:75:78:b5:4c:ff:12:02:d0:89:ca:14:aa:82:5f: ed:6b:af:06:42:70:80:26:2e:31:d4:ea:05:18:a1:de:57:0d: 39:26:a3:41:dd:5f:fb:0a:ae:6a:03:56:1c:bc:3e:04:8a:66: 6a:09:84:26:11:6a:95:09:4e:d2:d6:29:7e:a1:9e:f3:79:0a: d6:9a:fd:6b:b5:e1:cb:3d:bd:45:ba:2e:08:1d:cd:8f:64:5d: b2:94:7a:6d:c3:63:9f:f0:ee:f1:94:97:67:ea:9e:77:f2:97: 44:be:2c:7c:e4:bc:91:e1:f6:34:59:c1:08:27:02:a6:9c:af: 15:c8:ce:40:67:d1:6e:c5:84:96:fc:72:b0:12:10:60:5d:71: 43:aa:5e:1b:4f:99:b7:89:95:66:df:7c:6c:e2:e4:6f:cc:6f: 3b:2b:d0:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFQzQxMTAvBgNVBAUTKDUzMjQwNjVBNjEzRDJEMTA3ODE3OUM2MjE2MzcxQ0ND NkE3NzUwN0EwHhcNMjUxMjA1MDIyOTU5WhcNMjUxMjEyMDIyOTU5WjAYMRYwFAYD VQQDEw02OTMyNDNhNy1lYTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArI76tnNX+g6gcs/Y8lXAvjoaw+MzOv6M2jADP3ldznrboye7LI3JmaazajQx 6+uPs3/XghMw9yPADvj/HjLX2dJPxD3ADWfi16RIRR7IK/xr1M/+8yBnfdEQeg5w lfTQ10opZ69D8onH1lrzj3FR15g9xzuaUkht1Jd/B6dXpSFknuOf7gsqO6jsaw+y YAJcGNQUiNd3C07ug58VX73Q77uAakawtEAH9Cp0KlNBpjpu6QYraMdfXsC9turW zTCbU+tfXR0qpA03zBQbmok4FRDeMlTPUBqV8npfxeExgJw+xSmatDpGlhtS1sQP NKdHawIvoYrk7E9xnlgWZKQCpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbPlMKQ j6/7iXF55M+U/ViYQigxMB8GA1UdIwQYMBaAFFMkBlphPS0QeBecYhY3HMxqd1B6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEVDNC80NTA2NDc5MEU1 QjExMUVFOUUzNUMzMzNDNEY5QUUwMi9VeVFHV21FOUxSQjRGNXhpRmpjY3pHcDNV SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5UUdXbUU5TFJCNEY1eGlGamNjekdwM1VIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEVDNC80NTA2NDc5MEU1QjExMUVFOUUzNUMzMzNDNEY5QUUwMi9VeVFHV21FOUxS QjRGNXhpRmpjY3pHcDNVSG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfoaz+edgM6FxmIgq00orFwLiLY+JIBvVb/z+WEHlpFVjBarKNOabo mdCPEuappHQgVhqW28zPAkB2ZC4xNLvLc3gJb2lwF30YGuZhFd0qSFOEVylW2vXn cNHKrMT+dXi1TP8SAtCJyhSqgl/ta68GQnCAJi4x1OoFGKHeVw05JqNB3V/7Cq5q A1YcvD4EimZqCYQmEWqVCU7S1il+oZ7zeQrWmv1rteHLPb1Fui4IHc2PZF2ylHpt w2Of8O7xlJdn6p538pdEvix85LyR4fY0WcEIJwKmnK8VyM5AZ9FuxYSW/HKwEhBg XXFDql4bT5m3iZVm33xs4uRvzG87K9AX -----END CERTIFICATE-----Generated at Sun Dec 7 02:58:56 2025 by rpki-client