This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft File: uFvtmb90CrrVo5nJ31_plipt6PE.mft (raw, json) Hash identifier: 9lPYdpHlbAKjMTmfFAsMr0OCRQmF0fgOOHha/NRsO0I= Subject key identifier: 02:32:38:97:77:C6:3F:E5:3B:4C:82:4B:69:D6:B1:98:42:F6:F1:15 Authority key identifier: B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1 Certificate issuer: /CN=A9195DE5/serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1 Certificate serial: 0847 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft Manifest number: 082F Signing time: Thu 04 Dec 2025 19:55:43 +0000 Manifest this update: Thu 04 Dec 2025 19:55:43 +0000 Manifest next update: Thu 11 Dec 2025 19:55:43 +0000 Files and hashes: 1: uFvtmb90CrrVo5nJ31_plipt6PE.crl (hash: T0Qyl+U3uXv7R0LckAxVwRp2B7CfhsoRHdmoCekbANA=) 2: 709F917AF74111EF98C99938C4F9AE02.roa (hash: 1qf+iawoit0ys+iUAf7LEY7HtRnvUIOTI+MZhHCWuYU=) 3: C7ADA138F4C011EAA7B25986C4F9AE02.roa (hash: G5UBtJsfZQZ4SV+yPTNK/ejUFIGmrip9sZG7FP0b4Cg=) 4: C8633DEAF4C011EAA7B25986C4F9AE02.roa (hash: ux6FaGhfWyv2H1NDOSXEk7LrVXGwR7MCaj2E49kXMHg=) 5: 70017B5CF74111EF98C99938C4F9AE02.roa (hash: 2qfdADfdo36JxITYdf4pd34OcKO4BbP5IH9WNGohmvk=) 6: C6EDD52EF4C011EAA7B25986C4F9AE02.roa (hash: qyqw3i3GL6h/SgQPPtxyHJkhrm/uWWSr5nGAKt/Qapg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:55:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2119 (0x847) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195DE5, serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1 Validity Not Before: Dec 4 19:55:43 2025 GMT Not After : Dec 11 19:55:43 2025 GMT Subject: CN=6931e73f-3a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c3:e0:c7:da:70:4f:09:e8:b2:ca:a7:5a:69: 89:c7:e0:79:af:c6:db:11:2c:f6:0d:46:db:c4:66: 5a:53:5b:9b:2b:79:ee:53:7e:e7:40:46:e4:3e:0c: e9:71:08:58:ab:6e:df:6a:23:01:18:dc:76:97:15: f3:04:80:6f:ab:61:b1:64:ae:46:9e:88:15:68:2f: 87:fc:3a:3a:71:f1:7b:3b:0c:9a:78:f0:37:f6:30: b1:f7:d3:4d:37:d5:1d:f1:f3:d6:d8:8b:48:56:18: e5:7b:dc:f6:19:6a:91:01:0d:57:c8:46:d6:42:4b: 0d:77:7e:38:c2:01:85:93:52:89:cc:74:3f:de:e1: df:f6:0b:08:b1:16:69:ce:c2:b4:58:11:2d:f2:c7: 06:fc:45:25:84:07:5f:2e:d0:37:85:cc:9a:d4:e5: 91:f4:aa:4b:82:b3:b2:7b:7d:3f:c0:5d:69:45:2d: 7d:cc:5c:53:b4:5b:0e:07:6a:86:4b:9b:6a:ad:27: a2:96:90:36:3e:38:9a:4f:7a:11:81:23:55:3b:e5: d3:83:5f:c2:84:5f:74:f0:42:c3:1f:7e:57:2c:f9: 71:ca:94:9a:f3:4f:62:e4:73:53:49:82:a0:45:3f: f8:62:3d:cc:30:ea:89:2b:fc:c1:4e:60:68:88:4c: 4a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:32:38:97:77:C6:3F:E5:3B:4C:82:4B:69:D6:B1:98:42:F6:F1:15 X509v3 Authority Key Identifier: keyid:B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:c4:a1:5d:7f:db:8b:e9:ab:e4:98:b8:39:d5:c6:d4:31:80: ac:1e:ef:7f:c6:ba:ca:a6:0a:99:4f:f7:cb:73:d6:4a:9f:ef: 13:4e:26:d5:85:3a:45:8d:ea:8d:82:de:94:2a:1e:f4:10:db: eb:e1:29:b9:36:43:9a:91:7b:4d:d6:18:e8:a5:7b:3c:33:b1: 47:0a:78:ec:c4:80:52:a1:7c:2f:d5:c9:25:83:0f:10:95:72: 16:54:c3:dc:f9:91:8e:81:0e:5f:25:7e:2a:b0:5e:73:76:0b: bc:3e:b1:54:83:bf:38:dd:f4:89:b8:01:9f:08:6d:be:13:f8: 57:98:24:5d:e0:41:9b:df:e4:05:6b:de:71:1d:4f:c9:62:99: 37:f0:06:69:df:92:f4:5b:36:18:bf:b9:9a:a6:43:3f:b0:2f: 9c:ef:d4:2e:7b:1a:7b:88:b5:15:af:95:5d:c9:df:05:10:ac: 30:c2:74:7c:73:76:9a:d7:a1:98:3e:ce:50:72:7c:ff:b3:44: db:42:46:a4:00:01:26:07:26:ae:00:11:25:34:db:48:3c:c8: 46:d7:71:c2:bf:c7:24:89:32:cc:f8:e4:61:fc:e7:83:b7:5a: 77:d7:88:9c:63:eb:58:fc:8e:05:e2:91:45:c2:c0:d7:b1:fd: d1:88:af:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVERTUxMTAvBgNVBAUTKEI4NUJFRDk5QkY3NDBBQkFENUEzOTlDOURGNUZFOTk2 MkE2REU4RjEwHhcNMjUxMjA0MTk1NTQzWhcNMjUxMjExMTk1NTQzWjAYMRYwFAYD VQQDEw02OTMxZTczZi0zYTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8Pgx9pwTwnossqnWmmJx+B5r8bbESz2DUbbxGZaU1ubK3nuU37nQEbkPgzp cQhYq27faiMBGNx2lxXzBIBvq2GxZK5GnogVaC+H/Do6cfF7OwyaePA39jCx99NN N9Ud8fPW2ItIVhjle9z2GWqRAQ1XyEbWQksNd344wgGFk1KJzHQ/3uHf9gsIsRZp zsK0WBEt8scG/EUlhAdfLtA3hcya1OWR9KpLgrOye30/wF1pRS19zFxTtFsOB2qG S5tqrSeilpA2PjiaT3oRgSNVO+XTg1/ChF908ELDH35XLPlxypSa809i5HNTSYKg RT/4Yj3MMOqJK/zBTmBoiExKswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIyOJd3 xj/lO0yCS2nWsZhC9vEVMB8GA1UdIwQYMBaAFLhb7Zm/dAq61aOZyd9f6ZYqbejx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NURFNS9FM0VENjVEOEY0 QkUxMUVBOUMzNUZFNkFDNEY5QUUwMi91RnZ0bWI5MENyclZvNW5KMzFfcGxpcHQ2 UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VGdnRtYjkwQ3JyVm81bkozMV9wbGlwdDZQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NURFNS9FM0VENjVEOEY0QkUxMUVBOUMzNUZFNkFDNEY5QUUwMi91RnZ0bWI5MENy clZvNW5KMzFfcGxpcHQ2UEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhxKFdf9uL6avkmLg51cbUMYCsHu9/xrrKpgqZT/fLc9ZKn+8TTibV hTpFjeqNgt6UKh70ENvr4Sm5NkOakXtN1hjopXs8M7FHCnjsxIBSoXwv1cklgw8Q lXIWVMPc+ZGOgQ5fJX4qsF5zdgu8PrFUg7843fSJuAGfCG2+E/hXmCRd4EGb3+QF a95xHU/JYpk38AZp35L0WzYYv7mapkM/sC+c79Quexp7iLUVr5Vdyd8FEKwwwnR8 c3aa16GYPs5Qcnz/s0TbQkakAAEmByauABElNNtIPMhG13HCv8ckiTLM+ORh/OeD t1p314icY+tY/I4F4pFFwsDXsf3RiK/N -----END CERTIFICATE-----Generated at Sat Dec 6 17:26:48 2025 by rpki-client