This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft File: uMGYUq7H2lGkUL59p9lYc77eNzQ.mft (raw, json) Hash identifier: BS52REUNi+C8dWeSowi9sfG7OzchyHP2e953oVZxgZw= Subject key identifier: C6:54:E1:B6:3F:C8:5E:5D:E0:25:25:93:8D:99:90:8C:27:EA:1A:BE Authority key identifier: B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34 Certificate issuer: /CN=A917C78E/serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft Manifest number: E1 Signing time: Sun 21 Dec 2025 04:38:55 +0000 Manifest this update: Sun 21 Dec 2025 04:38:54 +0000 Manifest next update: Sun 28 Dec 2025 04:38:54 +0000 Files and hashes: 1: uMGYUq7H2lGkUL59p9lYc77eNzQ.crl (hash: pFO9k83fApzoc1inQwbbv35sErwf9YtTXA47ND/jZ6s=) 2: 91F29F5E86DD11EFB3D7A929C4F9AE02.roa (hash: ZCgG7FYX4Z+FrZu/NpwbDBG7rLXKjEvv9WpnC42UALI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C78E, serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734 Validity Not Before: Dec 21 04:38:54 2025 GMT Not After : Dec 28 04:38:54 2025 GMT Subject: CN=694779de-4a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:22:86:30:12:f2:c1:8b:03:cf:e4:ee:17:7d: 5a:52:72:fd:85:f9:ec:ae:e0:a2:b6:b4:9c:c0:31: 96:1a:6b:67:a9:05:82:0d:32:da:c2:3f:65:29:5b: 1d:c2:31:4e:94:b5:4b:a7:64:de:63:9f:e1:78:ee: 08:f3:d3:65:e1:6c:0c:df:4a:98:be:d4:c4:7c:e6: d4:7b:61:e8:12:84:2e:dd:8d:1e:39:9a:d4:4c:31: ca:56:d6:e5:67:54:ca:14:08:45:74:5e:5d:b3:e5: 08:10:b8:04:4a:8f:85:bd:0c:98:17:2b:37:9c:eb: e7:b5:ee:48:26:69:5d:c3:b2:fb:86:66:2e:c0:24: ab:e7:3c:85:7c:70:74:10:bd:b0:21:c6:34:98:03: c5:c2:64:bd:f8:86:a5:9d:8a:fc:f4:65:3f:3b:64: 8d:21:24:4a:dc:56:80:4f:3a:e4:f0:8b:da:10:79: 97:cb:f6:1b:92:9f:2d:ed:f8:80:fc:10:99:2e:80: e5:1a:89:3b:f3:36:9e:7f:fe:95:15:f0:4c:dd:2f: 67:c6:82:2a:e1:d9:60:a2:90:9b:f2:a1:26:73:87: ff:3f:78:2f:37:f8:24:c8:fe:7c:21:44:dd:d0:1a: 71:52:18:7a:d7:37:f6:ee:61:6c:dc:4b:5b:4f:d1: 55:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:54:E1:B6:3F:C8:5E:5D:E0:25:25:93:8D:99:90:8C:27:EA:1A:BE X509v3 Authority Key Identifier: keyid:B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:27:1a:cc:9b:9e:ed:07:79:f0:77:b7:14:e7:8e:b0:19:8b: ef:97:7c:30:f3:92:0e:dd:4c:6d:5e:ca:58:6a:4d:b4:71:16: 48:e2:fa:4f:40:5a:0a:9e:94:99:1a:8b:cd:40:df:96:97:4b: 34:65:14:fb:9a:e9:d9:12:81:63:ab:64:1f:25:3e:64:a1:73: 51:66:5c:29:5e:48:86:81:6f:a1:f0:0a:95:76:3c:d9:11:11: f6:83:ee:50:5d:9a:7b:9b:e1:ba:02:88:75:5a:81:a2:88:6e: b8:f3:90:e0:d3:91:64:82:5e:4c:d1:34:fe:a7:ae:9b:b7:48: 90:dd:88:47:ba:e9:f2:21:f7:a8:59:80:4f:be:3c:f1:00:17: b0:e6:eb:1b:74:85:66:e0:b5:8e:77:ca:68:09:aa:a6:95:9c: c2:5d:0b:74:48:82:f0:55:ed:0d:3f:8d:c3:9c:c4:34:3b:b1: c1:de:24:3e:79:85:0d:7c:d3:ca:39:96:39:99:79:4b:8b:c3: db:df:3b:a3:42:56:ca:19:22:95:01:d7:15:cc:e5:ef:be:7d: c1:f5:d1:98:3c:18:12:4e:51:a6:70:18:a4:93:f3:2c:6e:99: 93:81:9c:0c:1c:c7:d3:9f:8f:a7:18:3c:26:4c:7d:f7:6c:c1: fc:3e:5d:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3OEUxMTAvBgNVBAUTKEI4QzE5ODUyQUVDN0RBNTFBNDUwQkU3REE3RDk1ODcz QkVERTM3MzQwHhcNMjUxMjIxMDQzODU0WhcNMjUxMjI4MDQzODU0WjAYMRYwFAYD VQQDDA02OTQ3NzlkZS00YTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCKGMBLywYsDz+TuF31aUnL9hfnsruCitrScwDGWGmtnqQWCDTLawj9lKVsd wjFOlLVLp2TeY5/heO4I89Nl4WwM30qYvtTEfObUe2HoEoQu3Y0eOZrUTDHKVtbl Z1TKFAhFdF5ds+UIELgESo+FvQyYFys3nOvnte5IJmldw7L7hmYuwCSr5zyFfHB0 EL2wIcY0mAPFwmS9+IalnYr89GU/O2SNISRK3FaATzrk8IvaEHmXy/Ybkp8t7fiA /BCZLoDlGok78zaef/6VFfBM3S9nxoIq4dlgopCb8qEmc4f/P3gvN/gkyP58IUTd 0BpxUhh61zf27mFs3EtbT9FVaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZU4bY/ yF5d4CUlk42ZkIwn6hq+MB8GA1UdIwQYMBaAFLjBmFKux9pRpFC+fafZWHO+3jc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Qzc4RS9BMDIwMUIyMDg2 REMxMUVGQjlFQUQwMjdDNEY5QUUwMi91TUdZVXE3SDJsR2tVTDU5cDlsWWM3N2VO elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VNR1lVcTdIMmxHa1VMNTlwOWxZYzc3ZU56US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Qzc4RS9BMDIwMUIyMDg2REMxMUVGQjlFQUQwMjdDNEY5QUUwMi91TUdZVXE3SDJs R2tVTDU5cDlsWWM3N2VOelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPJxrMm57tB3nwd7cU546wGYvvl3ww85IO3UxtXspYak20cRZI4vpP QFoKnpSZGovNQN+Wl0s0ZRT7munZEoFjq2QfJT5koXNRZlwpXkiGgW+h8AqVdjzZ ERH2g+5QXZp7m+G6Aoh1WoGiiG6485Dg05Fkgl5M0TT+p66bt0iQ3YhHuunyIfeo WYBPvjzxABew5usbdIVm4LWOd8poCaqmlZzCXQt0SILwVe0NP43DnMQ0O7HB3iQ+ eYUNfNPKOZY5mXlLi8Pb3zujQlbKGSKVAdcVzOXvvn3B9dGYPBgSTlGmcBikk/Ms bpmTgZwMHMfTn4+nGDwmTH33bMH8Pl1C -----END CERTIFICATE-----Generated at Mon Dec 22 01:03:57 2025 by rpki-client