This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft File: UG14DtF5dIDxUlE0f8KEQ9culQc.mft (raw, json) Hash identifier: Pi/3K/K8VA0Mg3IewCSdCb03fxMc93uiVr6osEyEwJU= Subject key identifier: 68:80:C2:58:3A:5F:C5:9D:B5:4B:7E:D7:10:B7:57:2A:C0:2C:0C:58 Authority key identifier: 50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07 Certificate issuer: /CN=A917EB0C/serialNumber=506D780ED1797480F15251347FC28443D72E9507 Certificate serial: 0C48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft Manifest number: 0C29 Signing time: Thu 04 Dec 2025 18:12:09 +0000 Manifest this update: Thu 04 Dec 2025 18:12:09 +0000 Manifest next update: Thu 11 Dec 2025 18:12:09 +0000 Files and hashes: 1: UG14DtF5dIDxUlE0f8KEQ9culQc.crl (hash: Her9Oc6MGkRUfDybHHu5kpWV+MzViQiDt//IIQfdbow=) 2: E5B6117E2BC611EAB1456E4CC4F9AE02.roa (hash: 8xiW94BgUeQq9ZYVRmXYA3GrrXRDCnXkWRMC2enXdlY=) 3: FB2EC05CA3B111EE92169F16C4F9AE02.roa (hash: ZnbBQLWijX811JvZiE0GpFPKxpLE1gcXnN9dflC4yH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:12:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3144 (0xc48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EB0C, serialNumber=506D780ED1797480F15251347FC28443D72E9507 Validity Not Before: Dec 4 18:12:09 2025 GMT Not After : Dec 11 18:12:09 2025 GMT Subject: CN=6931cef9-8279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:85:b2:f0:54:de:60:ac:af:6c:11:ff:57:1d: 7f:3f:9a:19:9c:19:27:34:c7:0c:9f:b2:72:f6:87: 06:67:2c:13:b4:d3:f4:43:55:5f:bc:12:7b:29:a4: 47:70:ad:1a:30:35:d2:66:5a:c4:8f:e7:26:9b:f4: 8f:b0:91:be:1b:b4:35:6a:4b:21:98:8b:b2:1a:36: 3b:b5:34:e0:ff:79:99:0b:f7:1a:54:55:48:83:eb: 40:76:56:f8:5c:b6:b1:68:e6:9e:b1:ac:8c:8c:0f: c6:68:1b:7e:77:b4:3e:12:e8:14:2d:ac:c9:e1:6e: 5e:79:b8:94:28:c7:47:67:41:a0:07:88:2e:7b:96: 69:45:21:7e:10:14:f8:f4:10:7e:5c:df:a9:ea:fb: a9:fe:72:28:58:2a:e8:2b:30:1b:29:8b:1a:43:48: f9:fd:9d:4b:c6:ae:a4:63:92:18:0e:0d:c4:be:f2: 96:24:93:2b:21:75:81:35:fd:30:9a:a8:a0:31:c4: 9b:5f:50:9e:b5:81:ea:19:b7:1f:6b:a2:05:a5:70: 84:a7:f3:9b:32:0c:06:58:27:29:5e:ae:e0:b2:a5: ec:ed:2c:a2:9d:d2:b2:64:23:3c:fc:8b:b0:08:8b: e6:c3:67:53:15:8a:bb:ff:ff:ec:dd:41:d5:41:52: 62:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:80:C2:58:3A:5F:C5:9D:B5:4B:7E:D7:10:B7:57:2A:C0:2C:0C:58 X509v3 Authority Key Identifier: keyid:50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:f0:18:70:cf:34:c6:c0:20:1c:dd:67:df:97:0f:b2:a3:0f: 1d:0b:ba:02:23:8a:86:09:c7:21:51:6a:6c:f4:15:06:6e:21: ef:96:57:55:b0:5e:9a:75:04:1f:2e:c9:c5:68:30:1b:e5:a5: 34:36:5f:69:76:f6:6f:bd:aa:7d:0f:61:fb:a2:d9:c8:44:23: 8f:f6:7c:96:dc:e2:32:e9:1e:45:e7:f8:2c:0b:41:53:c1:db: 4b:47:c3:32:71:d0:5d:82:88:ef:29:62:c8:52:7e:cf:d7:7c: 4c:7b:2a:40:30:79:66:42:1f:79:b2:a7:d9:1b:f6:b4:17:49: 83:98:b1:86:3e:5e:d7:28:a1:5d:e4:5a:4b:26:30:21:34:8a: ad:9f:0a:7d:11:5d:cc:09:a1:46:8f:fc:dd:39:77:4b:d0:c2: fc:c0:8b:72:52:c3:f5:48:c8:40:c4:7d:a9:c0:d0:d6:31:1a: c4:62:7b:17:7e:b4:f6:7f:7a:95:d5:44:cd:2d:0b:f3:cb:0b: 25:27:50:74:e6:88:28:dc:65:24:39:d1:de:31:c4:6e:f7:84: ca:c7:50:51:f0:96:aa:78:0b:04:bb:0b:a0:8c:33:0b:66:8d: 8f:6a:27:9a:3b:9c:cf:80:e4:a2:51:62:72:96:7b:fb:d9:e7: 34:16:15:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VCMEMxMTAvBgNVBAUTKDUwNkQ3ODBFRDE3OTc0ODBGMTUyNTEzNDdGQzI4NDQz RDcyRTk1MDcwHhcNMjUxMjA0MTgxMjA5WhcNMjUxMjExMTgxMjA5WjAYMRYwFAYD VQQDEw02OTMxY2VmOS04Mjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYWy8FTeYKyvbBH/Vx1/P5oZnBknNMcMn7Jy9ocGZywTtNP0Q1VfvBJ7KaRH cK0aMDXSZlrEj+cmm/SPsJG+G7Q1akshmIuyGjY7tTTg/3mZC/caVFVIg+tAdlb4 XLaxaOaesayMjA/GaBt+d7Q+EugULazJ4W5eebiUKMdHZ0GgB4gue5ZpRSF+EBT4 9BB+XN+p6vup/nIoWCroKzAbKYsaQ0j5/Z1Lxq6kY5IYDg3EvvKWJJMrIXWBNf0w mqigMcSbX1CetYHqGbcfa6IFpXCEp/ObMgwGWCcpXq7gsqXs7SyindKyZCM8/Iuw CIvmw2dTFYq7///s3UHVQVJiSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiAwlg6 X8WdtUt+1xC3VyrALAxYMB8GA1UdIwQYMBaAFFBteA7ReXSA8VJRNH/ChEPXLpUH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUIwQy82MTM3NUI2QTIy MkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJRHhVbEUwZjhLRVE5Y3Vs UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VHMTREdEY1ZElEeFVsRTBmOEtFUTljdWxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUIwQy82MTM3NUI2QTIyMkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJ RHhVbEUwZjhLRVE5Y3VsUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU8BhwzzTGwCAc3Wfflw+yow8dC7oCI4qGCcchUWps9BUGbiHvlldV sF6adQQfLsnFaDAb5aU0Nl9pdvZvvap9D2H7otnIRCOP9nyW3OIy6R5F5/gsC0FT wdtLR8MycdBdgojvKWLIUn7P13xMeypAMHlmQh95sqfZG/a0F0mDmLGGPl7XKKFd 5FpLJjAhNIqtnwp9EV3MCaFGj/zdOXdL0ML8wItyUsP1SMhAxH2pwNDWMRrEYnsX frT2f3qV1UTNLQvzywslJ1B05ogo3GUkOdHeMcRu94TKx1BR8JaqeAsEuwugjDML Zo2PaieaO5zPgOSiUWJylnv72ec0FhUn -----END CERTIFICATE-----Generated at Sat Dec 6 17:26:47 2025 by rpki-client