This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft File: Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft (raw, json) Hash identifier: wiWFSoHPHes2rDVFJQXMDBGvRHOFG7bFFFuPg2Lv/EE= Subject key identifier: C8:BD:36:37:20:B7:83:D7:F8:EF:DE:E4:B4:EE:52:CE:22:F5:23:98 Authority key identifier: 52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4 Certificate issuer: /CN=A918549C/serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft Manifest number: 0109 Signing time: Fri 05 Dec 2025 03:10:14 +0000 Manifest this update: Fri 05 Dec 2025 03:10:13 +0000 Manifest next update: Fri 12 Dec 2025 03:10:13 +0000 Files and hashes: 1: Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl (hash: 3NUciWqdtVNLtzcJnW9QhMvxGvoyWVKG73AfhgJ8R0k=) 2: D5C6712C2BF811F0A209EF6DC4F9AE02.roa (hash: 8rr+Ae0hpqDQA95PGvgN3goNJqA35l83x4zl3ssPb/c=) 3: 627CDAE66FE011EF937A9931C4F9AE02.roa (hash: sF1oxR3P0INbgPwkH87j+/9/A1n7qBr9P83Zm+8FV2A=) 4: AC038F18740611F0B304387CC4F9AE02.roa (hash: Odj1pliiYQRq/sR/Y5HzPODQczZMdgtZfqLJSE59i+w=) 5: 4C7FE6802C7711F084452D84C4F9AE02.roa (hash: DoSA6UaERiqEdMCY3op+YtVmTlaoSDMgolhw801td7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918549C, serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4 Validity Not Before: Dec 5 03:10:13 2025 GMT Not After : Dec 12 03:10:13 2025 GMT Subject: CN=69324d15-30cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:07:e1:08:c7:74:ef:99:fa:0c:fe:1c:a2:83: 40:7f:03:e0:d7:fa:9b:84:b4:37:db:2e:b7:5b:ff: 58:88:ee:bd:f4:fc:b0:fd:f7:dc:47:97:c6:c7:38: f3:60:19:05:52:50:3b:68:69:bf:c1:c2:b6:f3:4a: 80:fe:90:2e:3d:ad:27:52:a5:67:b5:29:ba:93:71: 48:cf:13:e9:a6:4f:8e:ad:f3:4b:e6:44:b1:a3:95: 65:ad:d2:db:d5:17:44:bc:ea:8b:fe:b1:45:c8:84: ed:9f:b5:0c:be:4e:ef:28:d4:dc:17:5a:13:a8:ef: a1:4e:b8:62:9d:f7:7d:e7:d9:35:bf:45:1b:18:28: a2:28:b6:00:07:f1:11:97:1e:86:31:38:b7:9d:30: 05:ca:fe:3f:9e:d9:96:88:f1:33:95:75:0b:8c:f4: 49:cb:96:96:0d:e9:ea:d9:b3:78:be:52:66:8d:00: 51:59:a8:f4:21:a8:ab:1e:9f:d3:49:a3:d7:a4:41: 27:5b:23:33:aa:15:33:82:c8:e3:97:4d:aa:d2:5d: c4:87:b5:b5:60:58:85:09:ad:35:c5:5a:4f:71:d1: 17:55:50:6e:2f:35:b8:b2:cd:66:58:75:16:c8:64: 58:4b:8b:f9:4a:0f:46:c1:b2:32:39:9d:12:9c:33: 2d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BD:36:37:20:B7:83:D7:F8:EF:DE:E4:B4:EE:52:CE:22:F5:23:98 X509v3 Authority Key Identifier: keyid:52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:63:c2:bb:24:36:07:5f:02:76:ac:d2:e6:0a:ab:2b:e9:9f: 34:82:db:f2:0a:a0:1e:9c:75:6d:9c:79:ed:9c:4c:80:3e:64: 03:00:81:1f:94:2d:86:ca:2c:cc:62:42:11:51:da:10:3b:3c: 42:ba:8a:37:0b:69:c9:26:b4:e8:f5:d5:90:56:51:05:db:b7: 65:fd:bd:dd:fd:71:c4:b0:ae:7e:26:49:95:76:0a:0e:57:4b: 7f:3d:da:cd:ff:d0:76:75:85:ad:99:9b:75:7e:aa:9c:b8:56: fd:c7:03:0c:b4:9a:4b:54:77:20:44:cf:88:bd:52:8b:76:93: cf:7b:79:1f:b5:10:6b:03:f0:b0:41:56:86:9b:f1:1a:01:fa: 8c:43:80:53:28:1b:65:99:33:75:67:90:17:38:3c:f8:cb:92: b0:31:f1:da:5f:5c:b6:7b:5c:e3:23:84:37:5a:6e:e1:2a:71: 95:31:03:74:6d:18:68:39:b2:80:8a:8f:83:d7:61:4f:b6:46: 45:a9:b3:fc:38:51:14:39:55:02:b5:34:3e:92:3a:93:7f:01: d0:15:cd:2a:0f:cb:65:58:11:21:1c:65:c1:0e:b2:e8:6e:d6: 87:63:62:21:1f:7e:fc:cf:a3:bb:16:84:f4:dd:0d:ef:1c:e9: 74:57:00:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0OUMxMTAvBgNVBAUTKDUyRURGRURGRUExNTM1QzEzRUU4QTAwRTU1RkM3RDUx NDQ2RDY3RDQwHhcNMjUxMjA1MDMxMDEzWhcNMjUxMjEyMDMxMDEzWjAYMRYwFAYD VQQDEw02OTMyNGQxNS0zMGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+gfhCMd075n6DP4cooNAfwPg1/qbhLQ32y63W/9YiO699Pyw/ffcR5fGxzjz YBkFUlA7aGm/wcK280qA/pAuPa0nUqVntSm6k3FIzxPppk+OrfNL5kSxo5VlrdLb 1RdEvOqL/rFFyITtn7UMvk7vKNTcF1oTqO+hTrhinfd959k1v0UbGCiiKLYAB/ER lx6GMTi3nTAFyv4/ntmWiPEzlXULjPRJy5aWDenq2bN4vlJmjQBRWaj0IairHp/T SaPXpEEnWyMzqhUzgsjjl02q0l3Eh7W1YFiFCa01xVpPcdEXVVBuLzW4ss1mWHUW yGRYS4v5Sg9GwbIyOZ0SnDMtiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMi9Njcg t4PX+O/e5LTuUs4i9SOYMB8GA1UdIwQYMBaAFFLt/t/qFTXBPuigDlX8fVFEbWfU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQ5Qy9FNkFCMkNERTRB MzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9VdTMtMy1vVk5jRS02S0FPVmZ4OVVVUnRa OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V1My0zLW9WTmNFLTZLQU9WZng5VVVSdFo5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTQ5Qy9FNkFCMkNERTRBMzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9VdTMtMy1vVk5j RS02S0FPVmZ4OVVVUnRaOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfY8K7JDYHXwJ2rNLmCqsr6Z80gtvyCqAenHVtnHntnEyAPmQDAIEf lC2GyizMYkIRUdoQOzxCuoo3C2nJJrTo9dWQVlEF27dl/b3d/XHEsK5+JkmVdgoO V0t/PdrN/9B2dYWtmZt1fqqcuFb9xwMMtJpLVHcgRM+IvVKLdpPPe3kftRBrA/Cw QVaGm/EaAfqMQ4BTKBtlmTN1Z5AXODz4y5KwMfHaX1y2e1zjI4Q3Wm7hKnGVMQN0 bRhoObKAio+D12FPtkZFqbP8OFEUOVUCtTQ+kjqTfwHQFc0qD8tlWBEhHGXBDrLo btaHY2IhH378z6O7FoT03Q3vHOl0VwBO -----END CERTIFICATE-----Generated at Sun Dec 7 02:46:07 2025 by rpki-client