This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft File: uMGYUq7H2lGkUL59p9lYc77eNzQ.mft (raw, json) Hash identifier: LQXPb4xgGrtyPemt9adPgxgNZpMf0GWET0sQfhLEik4= Subject key identifier: 1B:DA:AF:1C:24:85:D6:73:DA:2E:84:6E:C3:B7:CE:F9:69:A3:D9:DD Authority key identifier: B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34 Certificate issuer: /CN=A917C78E/serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft Manifest number: D9 Signing time: Fri 05 Dec 2025 03:36:33 +0000 Manifest this update: Fri 05 Dec 2025 03:36:32 +0000 Manifest next update: Fri 12 Dec 2025 03:36:32 +0000 Files and hashes: 1: uMGYUq7H2lGkUL59p9lYc77eNzQ.crl (hash: Af+Kw5lTlc9Y1Wfknh9oCkWEklqbKp6YXPXzBBSo0Zw=) 2: 91F29F5E86DD11EFB3D7A929C4F9AE02.roa (hash: ZCgG7FYX4Z+FrZu/NpwbDBG7rLXKjEvv9WpnC42UALI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:36:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C78E, serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734 Validity Not Before: Dec 5 03:36:32 2025 GMT Not After : Dec 12 03:36:32 2025 GMT Subject: CN=69325341-782b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e3:6a:47:43:b2:f9:cb:a7:1c:39:e2:5d:1b: b6:ea:f4:f8:48:74:2c:18:d6:92:72:39:7f:86:79: 93:63:03:e5:02:07:15:c1:35:43:89:17:8e:1b:73: c9:06:e8:3d:5e:4c:da:23:5b:ab:cb:b1:1c:bb:81: 06:ab:80:ea:de:01:e9:3a:fc:c2:80:76:6d:e1:8b: c9:d0:df:d9:d9:7e:67:6b:3c:fb:d1:77:8c:31:cf: be:b6:42:d2:61:59:25:8c:8b:5d:e5:15:d3:69:cc: 3c:b1:35:3f:7e:df:4d:03:e3:34:d7:3e:b1:14:dc: 01:6a:f8:cb:7b:5e:d9:68:39:10:f2:92:2d:9e:28: 56:a5:f5:d6:4c:6d:d1:03:24:da:5e:d2:c1:9c:ad: 17:29:a6:30:6c:8a:85:0c:38:0c:c7:6e:8e:db:3d: 82:52:94:2e:23:d8:ac:8f:a9:9f:91:32:21:f9:61: 0d:70:ae:e9:eb:78:34:3a:f9:61:f3:d4:28:37:4a: 62:b1:64:de:bf:a9:e9:39:19:65:81:1b:30:b3:d6: e0:e2:10:bd:f9:40:e3:33:25:4b:8b:9c:92:a0:0f: 11:82:1d:ba:fa:aa:2d:c3:85:20:6d:40:79:a8:5d: 1b:e8:0e:01:ae:98:7c:74:89:d9:18:7a:1a:44:85: 05:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DA:AF:1C:24:85:D6:73:DA:2E:84:6E:C3:B7:CE:F9:69:A3:D9:DD X509v3 Authority Key Identifier: keyid:B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:a6:b4:a4:7a:46:cb:23:23:4c:23:9d:c2:9d:ff:c8:af:7b: f9:14:14:1c:02:b7:96:22:34:68:a4:90:f5:95:a5:cb:ed:f6: ef:7b:ed:06:c1:12:70:02:b7:fc:8d:eb:16:40:c8:04:bf:41: 22:3c:aa:00:6f:60:bc:13:b2:00:22:34:8d:3a:a1:87:c1:03: 87:87:39:96:ed:53:e6:f8:52:2e:7a:48:dc:bb:ee:ee:2d:39: ac:08:a2:94:37:45:de:82:b2:76:28:39:2f:63:aa:de:68:92: 9d:6b:f8:a3:7e:8a:c1:3e:19:1b:6a:1c:fc:59:4d:1c:a5:93: 62:2a:6c:05:0d:10:b2:21:86:e4:87:88:6e:85:16:12:a3:bb: ba:8e:97:0d:1f:bc:c5:18:fe:7a:63:4e:47:6d:d8:09:ca:d0: 07:fe:47:e1:93:69:8d:26:86:c3:d2:02:cc:c3:b2:25:a5:82: 8d:5e:e5:96:2e:45:47:73:75:e8:8e:28:1a:03:77:60:c3:f8: 63:e6:3e:7e:bd:6d:27:b5:39:50:f7:70:79:83:52:13:7f:37: 05:ee:13:86:cf:05:0e:2c:5f:1d:d6:eb:ce:46:4a:e5:1b:d8: 48:5d:85:65:93:1b:68:82:5c:a4:ae:9c:07:49:57:d4:0f:15: 1b:c6:30:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3OEUxMTAvBgNVBAUTKEI4QzE5ODUyQUVDN0RBNTFBNDUwQkU3REE3RDk1ODcz QkVERTM3MzQwHhcNMjUxMjA1MDMzNjMyWhcNMjUxMjEyMDMzNjMyWjAYMRYwFAYD VQQDEw02OTMyNTM0MS03ODJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+NqR0Oy+cunHDniXRu26vT4SHQsGNaScjl/hnmTYwPlAgcVwTVDiReOG3PJ Bug9XkzaI1ury7Ecu4EGq4Dq3gHpOvzCgHZt4YvJ0N/Z2X5nazz70XeMMc++tkLS YVkljItd5RXTacw8sTU/ft9NA+M01z6xFNwBavjLe17ZaDkQ8pItnihWpfXWTG3R AyTaXtLBnK0XKaYwbIqFDDgMx26O2z2CUpQuI9isj6mfkTIh+WENcK7p63g0Ovlh 89QoN0pisWTev6npORllgRsws9bg4hC9+UDjMyVLi5ySoA8Rgh26+qotw4UgbUB5 qF0b6A4Brph8dInZGHoaRIUFjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvarxwk hdZz2i6EbsO3zvlpo9ndMB8GA1UdIwQYMBaAFLjBmFKux9pRpFC+fafZWHO+3jc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Qzc4RS9BMDIwMUIyMDg2 REMxMUVGQjlFQUQwMjdDNEY5QUUwMi91TUdZVXE3SDJsR2tVTDU5cDlsWWM3N2VO elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VNR1lVcTdIMmxHa1VMNTlwOWxZYzc3ZU56US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Qzc4RS9BMDIwMUIyMDg2REMxMUVGQjlFQUQwMjdDNEY5QUUwMi91TUdZVXE3SDJs R2tVTDU5cDlsWWM3N2VOelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJprSkekbLIyNMI53Cnf/Ir3v5FBQcAreWIjRopJD1laXL7fbve+0G wRJwArf8jesWQMgEv0EiPKoAb2C8E7IAIjSNOqGHwQOHhzmW7VPm+FIuekjcu+7u LTmsCKKUN0XegrJ2KDkvY6reaJKda/ijforBPhkbahz8WU0cpZNiKmwFDRCyIYbk h4huhRYSo7u6jpcNH7zFGP56Y05HbdgJytAH/kfhk2mNJobD0gLMw7IlpYKNXuWW LkVHc3XojigaA3dgw/hj5j5+vW0ntTlQ93B5g1ITfzcF7hOGzwUOLF8d1uvORkrl G9hIXYVlkxtoglykrpwHSVfUDxUbxjDh -----END CERTIFICATE-----Generated at Sun Dec 7 01:55:41 2025 by rpki-client