This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft File: u-KUkERtaHB2W05h1-ubIsYARjg.mft (raw, json) Hash identifier: SRVtwPoNdCe/691DNgifCGoynfeA152fkrCyNM/L+ko= Subject key identifier: F9:74:17:C3:18:B8:92:74:C1:CB:E8:7B:E6:14:D3:64:F5:40:BE:BC Authority key identifier: BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38 Certificate issuer: /CN=A9186D83/serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638 Certificate serial: 0CD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft Manifest number: 0CBB Signing time: Thu 04 Dec 2025 17:49:07 +0000 Manifest this update: Thu 04 Dec 2025 17:49:06 +0000 Manifest next update: Thu 11 Dec 2025 17:49:06 +0000 Files and hashes: 1: u-KUkERtaHB2W05h1-ubIsYARjg.crl (hash: 3c9N3C4aAgVv2THRzUGapYKH3epun8Xlp4/y5ySTrAc=) 2: 8BA504FCB27911EB978CE10AC4F9AE02.roa (hash: n01/3EIjRvyLbA9XmobgbcsSzY3lQa7SmWy3AZPr1nQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3284 (0xcd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D83, serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638 Validity Not Before: Dec 4 17:49:06 2025 GMT Not After : Dec 11 17:49:06 2025 GMT Subject: CN=6931c993-faa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e5:32:23:c2:f3:fe:5f:c9:e5:4f:79:36:3a: 7e:be:d3:f5:08:92:98:4b:6d:26:be:56:f1:7c:ea: fb:f0:5c:42:6f:81:79:9a:a9:c7:6a:f7:c5:21:2d: 41:8c:e3:d8:ef:47:15:64:ee:ef:1d:10:54:6e:44: 6a:64:c9:31:70:5a:e7:68:bb:d6:53:07:4f:fe:ee: cf:e7:6a:e8:f4:45:9f:7c:9e:70:93:8f:99:a5:7a: 72:1b:9f:fe:02:c5:d4:4f:8b:a3:42:32:19:9a:d2: 91:da:66:88:76:06:9f:b0:8c:b9:43:c4:61:0e:5d: a3:4c:15:a0:d2:29:85:9f:e0:b4:0d:0a:7d:13:7b: f1:cb:d4:71:78:40:d9:46:30:bd:fe:13:76:bb:3d: bb:ff:c3:b9:42:99:d3:99:25:80:55:97:8a:43:98: 76:7e:fc:3c:a0:ee:c9:ff:28:8d:23:b2:fc:dd:1c: 98:56:49:84:06:45:11:2e:4d:e5:d7:ae:6f:db:55: 85:49:c4:1c:18:05:71:6e:cb:b1:e6:b4:14:f8:ac: ae:f9:f2:a2:e6:50:a4:a9:aa:97:89:e0:d1:1c:c5: 25:b1:23:62:0c:21:c5:8e:42:06:c4:5d:2d:d8:c0: 88:50:a5:c5:4e:da:a7:23:1f:33:4b:10:49:4b:42: 71:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:74:17:C3:18:B8:92:74:C1:CB:E8:7B:E6:14:D3:64:F5:40:BE:BC X509v3 Authority Key Identifier: keyid:BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:a8:a1:14:4b:71:00:f9:82:db:6d:71:a1:70:b2:67:41:a7: 05:05:13:ad:f3:b9:cc:aa:9d:c8:44:35:91:4f:e0:84:84:a5: 7d:01:65:21:63:ec:23:7b:26:d8:9f:39:ba:a2:e9:f8:95:d0: 3c:79:2e:05:5e:80:6d:48:e0:81:c1:c7:c1:c7:45:10:a7:72: 97:6f:0c:6e:ba:fd:a0:95:ae:fe:b5:73:e2:db:e2:17:15:14: 88:20:0a:57:23:d5:58:f8:80:71:10:fa:83:0a:3a:66:8d:1e: 8c:15:f8:c0:fd:7c:3a:53:6f:d8:22:cd:f0:7f:92:12:27:f9: af:e6:c8:32:a8:6d:6e:19:40:e3:24:fd:5a:41:8b:20:09:87: 3b:41:bb:3d:71:f2:af:8e:79:42:5e:70:dd:49:f1:c7:f6:44: e9:0c:2c:f0:5f:99:82:eb:c6:5c:a3:ba:6c:28:e9:06:90:56: 99:f4:ba:b3:35:1b:79:1c:4c:6d:7c:ce:0d:f6:b1:8b:36:52: 84:9c:6e:3a:f0:cf:af:59:3f:d4:0d:89:d9:bd:5e:76:5b:41: 49:76:d5:bb:79:ac:1e:b1:15:eb:a9:76:0a:da:98:4e:0b:2c: 4a:cc:8f:0e:b1:17:19:ec:82:86:34:f0:d7:fa:67:f0:53:dd: fa:07:0d:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEODMxMTAvBgNVBAUTKEJCRTI5NDkwNDQ2RDY4NzA3NjVCNEU2MUQ3RUI5QjIy QzYwMDQ2MzgwHhcNMjUxMjA0MTc0OTA2WhcNMjUxMjExMTc0OTA2WjAYMRYwFAYD VQQDEw02OTMxYzk5My1mYWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6uUyI8Lz/l/J5U95Njp+vtP1CJKYS20mvlbxfOr78FxCb4F5mqnHavfFIS1B jOPY70cVZO7vHRBUbkRqZMkxcFrnaLvWUwdP/u7P52ro9EWffJ5wk4+ZpXpyG5/+ AsXUT4ujQjIZmtKR2maIdgafsIy5Q8RhDl2jTBWg0imFn+C0DQp9E3vxy9RxeEDZ RjC9/hN2uz27/8O5QpnTmSWAVZeKQ5h2fvw8oO7J/yiNI7L83RyYVkmEBkURLk3l 165v21WFScQcGAVxbsux5rQU+Kyu+fKi5lCkqaqXieDRHMUlsSNiDCHFjkIGxF0t 2MCIUKXFTtqnIx8zSxBJS0JxUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPl0F8MY uJJ0wcvoe+YU02T1QL68MB8GA1UdIwQYMBaAFLvilJBEbWhwdltOYdfrmyLGAEY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ4My8xNDk3NDdCRTA2 MkExMUVBOEM5QTc0NDRDNEY5QUUwMi91LUtVa0VSdGFIQjJXMDVoMS11YklzWUFS amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtS1VrRVJ0YUhCMlcwNWgxLXViSXNZQVJqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ4My8xNDk3NDdCRTA2MkExMUVBOEM5QTc0NDRDNEY5QUUwMi91LUtVa0VSdGFI QjJXMDVoMS11YklzWUFSamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSqKEUS3EA+YLbbXGhcLJnQacFBROt87nMqp3IRDWRT+CEhKV9AWUh Y+wjeybYnzm6oun4ldA8eS4FXoBtSOCBwcfBx0UQp3KXbwxuuv2gla7+tXPi2+IX FRSIIApXI9VY+IBxEPqDCjpmjR6MFfjA/Xw6U2/YIs3wf5ISJ/mv5sgyqG1uGUDj JP1aQYsgCYc7Qbs9cfKvjnlCXnDdSfHH9kTpDCzwX5mC68Zco7psKOkGkFaZ9Lqz NRt5HExtfM4N9rGLNlKEnG468M+vWT/UDYnZvV52W0FJdtW7eawesRXrqXYK2phO CyxKzI8OsRcZ7IKGNPDX+mfwU936Bw0B -----END CERTIFICATE-----Generated at Sat Dec 6 16:13:10 2025 by rpki-client