This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft File: UnWd41wCZ5226TLqiGidwQ1czK4.mft (raw, json) Hash identifier: BUHWi1kqUTcuh5uhyzPLKh3NpXa3H4Z3M21J3sFZeR8= Subject key identifier: F9:A0:4C:A1:66:EC:33:4F:5A:9B:60:3C:66:7B:1C:FA:AA:6F:89:6F Authority key identifier: 52:75:9D:E3:5C:02:67:9D:B6:E9:32:EA:88:68:9D:C1:0D:5C:CC:AE Certificate issuer: /CN=A919014C/serialNumber=52759DE35C02679DB6E932EA88689DC10D5CCCAE Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft Manifest number: 01A9 Signing time: Sun 21 Dec 2025 02:29:27 +0000 Manifest this update: Sun 21 Dec 2025 02:29:26 +0000 Manifest next update: Sun 28 Dec 2025 02:29:26 +0000 Files and hashes: 1: UnWd41wCZ5226TLqiGidwQ1czK4.crl (hash: e8JeDpRShkYZSouE+lf1tauxyXX+E1GSgLlAwcKynnw=) 2: 503DC7FA547F11EE9512EE75C4F9AE02.roa (hash: prpO02sdaGxa9omiI4KP6Jj37m9PViRORA2hf2czA64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.crl rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919014C, serialNumber=52759DE35C02679DB6E932EA88689DC10D5CCCAE Validity Not Before: Dec 21 02:29:26 2025 GMT Not After : Dec 28 02:29:26 2025 GMT Subject: CN=69475b87-93fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2c:e7:e9:c0:de:06:75:d6:2e:4d:36:40:63: 42:c7:04:a4:7c:56:ff:55:e4:f6:d4:8c:ae:6b:a8: 58:5b:6d:4c:2e:dc:b7:a4:a3:73:d7:45:10:ab:6c: 52:c3:99:e3:0e:5c:2d:75:1d:af:c0:23:25:35:37: 42:e0:13:73:c3:b4:54:6a:19:88:31:29:20:c8:fc: 51:19:29:9e:ac:31:43:6e:ea:38:2d:a0:cc:8e:ce: d7:c4:b7:9f:0f:6a:57:c4:e5:48:b5:a7:dd:53:9b: 88:e4:7e:0d:07:8b:d6:35:07:11:84:78:86:ae:83: e3:0b:65:84:58:79:bf:0a:cc:70:97:a2:94:af:54: 6d:bc:3b:f7:5c:e7:60:b9:85:42:c2:be:0a:5f:38: 3c:a6:85:28:be:a3:93:f1:b1:dc:bd:96:08:35:41: b3:60:71:1a:5b:f8:1e:c5:53:5c:90:ff:00:2d:5f: 69:97:9a:2d:40:78:3a:5f:5f:68:a1:70:33:ef:5c: 75:97:c5:43:5d:53:8c:07:6e:b3:1b:f2:c5:32:14: a9:67:56:ba:e4:af:05:ad:b9:e1:c6:a8:83:fa:72: 2e:60:54:37:e6:9e:76:39:52:9c:04:b9:11:ec:6c: 8a:aa:bd:dd:77:28:79:4b:e1:10:79:81:c9:f5:07: 99:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A0:4C:A1:66:EC:33:4F:5A:9B:60:3C:66:7B:1C:FA:AA:6F:89:6F X509v3 Authority Key Identifier: keyid:52:75:9D:E3:5C:02:67:9D:B6:E9:32:EA:88:68:9D:C1:0D:5C:CC:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:92:63:36:25:4f:7a:70:88:83:7a:d6:cd:12:89:98:5d:a4: 12:41:a8:05:1b:c7:64:15:bf:84:49:75:b1:70:b1:7f:cb:f1: d3:38:d8:9c:6e:ab:00:6d:f6:d3:36:90:8e:a7:ad:d1:04:48: b5:51:72:6f:b5:41:2e:21:e2:ce:1d:50:e3:21:7a:1f:cd:38: ef:df:a5:e6:6e:b3:e0:32:bc:ac:0d:9c:e5:ca:cd:a3:fc:af: 69:80:13:f5:26:1d:a5:2b:c8:90:03:bb:4c:ca:70:7b:63:ed: 27:82:32:f6:b4:4a:a5:c1:10:ef:bd:cd:6f:0f:a5:24:df:30: 8c:51:c6:e1:a4:2e:8c:46:64:ae:c1:7e:57:ef:cc:5f:96:77: 18:9a:ee:c1:f7:19:2f:bd:ad:2d:22:be:30:28:a8:e4:81:61: e4:68:a0:08:8c:b5:35:43:29:5c:e6:18:cf:7d:f0:37:c5:02: db:bd:af:2e:25:cf:be:52:23:9d:62:c7:30:a6:33:70:dd:c9: e0:8b:72:ca:d5:53:1b:56:09:29:d4:56:72:e8:06:ca:81:5a: c4:93:c2:49:97:4e:39:56:9b:04:40:ce:d3:1d:1e:0e:d5:43: cd:b9:bb:ec:ee:94:9f:c4:0a:7d:7e:6e:88:74:60:7d:9e:80: 0e:18:8c:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTAxNEMxMTAvBgNVBAUTKDUyNzU5REUzNUMwMjY3OURCNkU5MzJFQTg4Njg5REMx MEQ1Q0NDQUUwHhcNMjUxMjIxMDIyOTI2WhcNMjUxMjI4MDIyOTI2WjAYMRYwFAYD VQQDDA02OTQ3NWI4Ny05M2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmyzn6cDeBnXWLk02QGNCxwSkfFb/VeT21Iyua6hYW21MLty3pKNz10UQq2xS w5njDlwtdR2vwCMlNTdC4BNzw7RUahmIMSkgyPxRGSmerDFDbuo4LaDMjs7XxLef D2pXxOVItafdU5uI5H4NB4vWNQcRhHiGroPjC2WEWHm/Csxwl6KUr1RtvDv3XOdg uYVCwr4KXzg8poUovqOT8bHcvZYINUGzYHEaW/gexVNckP8ALV9pl5otQHg6X19o oXAz71x1l8VDXVOMB26zG/LFMhSpZ1a65K8FrbnhxqiD+nIuYFQ35p52OVKcBLkR 7GyKqr3ddyh5S+EQeYHJ9QeZgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmgTKFm 7DNPWptgPGZ7HPqqb4lvMB8GA1UdIwQYMBaAFFJ1neNcAmedtuky6ohoncENXMyu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDE0Qy8xNTRGQUMyQzU0 N0UxMUVFOEU3MTAwNzRDNEY5QUUwMi9VbldkNDF3Q1o1MjI2VExxaUdpZHdRMWN6 SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VuV2Q0MXdDWjUyMjZUTHFpR2lkd1ExY3pLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDE0Qy8xNTRGQUMyQzU0N0UxMUVFOEU3MTAwNzRDNEY5QUUwMi9VbldkNDF3Q1o1 MjI2VExxaUdpZHdRMWN6SzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIkmM2JU96cIiDetbNEomYXaQSQagFG8dkFb+ESXWxcLF/y/HTONic bqsAbfbTNpCOp63RBEi1UXJvtUEuIeLOHVDjIXofzTjv36XmbrPgMrysDZzlys2j /K9pgBP1Jh2lK8iQA7tMynB7Y+0ngjL2tEqlwRDvvc1vD6Uk3zCMUcbhpC6MRmSu wX5X78xflncYmu7B9xkvva0tIr4wKKjkgWHkaKAIjLU1Qylc5hjPffA3xQLbva8u Jc++UiOdYscwpjNw3cngi3LK1VMbVgkp1FZy6AbKgVrEk8JJl045VpsEQM7THR4O 1UPNubvs7pSfxAp9fm6IdGB9noAOGIwQ -----END CERTIFICATE-----Generated at Mon Dec 22 12:30:43 2025 by rpki-client