This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft File: UzfctqkbQdUhGkTCFqljq6zH4rA.mft (raw, json) Hash identifier: LaMo58SJ4MkgwevS43reYttLYtY2gZ+Lgq5M6yK9aOI= Subject key identifier: 4F:15:FE:2C:D4:DD:27:E8:52:3E:39:9C:C3:4F:B2:4B:D7:E5:6C:69 Authority key identifier: 53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0 Certificate issuer: /CN=A9197FBC/serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0 Certificate serial: 3500 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft Manifest number: 34F5 Signing time: Sat 06 Dec 2025 14:40:30 +0000 Manifest this update: Sat 06 Dec 2025 14:40:30 +0000 Manifest next update: Sat 13 Dec 2025 14:40:30 +0000 Files and hashes: 1: UzfctqkbQdUhGkTCFqljq6zH4rA.crl (hash: 8x1sVt9NkjMEdVP6Ovpxg+Csm22aSVVQQeMpgBPmF/Q=) 2: 8DFE2984EAD811ECA1ED8915C4F9AE02.roa (hash: bVOSER1nz+Nqxke0I5JF7QpaXaB+v1ZvyVVn2hKZsmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.crl rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13568 (0x3500) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197FBC, serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0 Validity Not Before: Dec 6 14:40:30 2025 GMT Not After : Dec 13 14:40:30 2025 GMT Subject: CN=6934405e-f296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:73:f1:cd:0f:f3:8e:f2:eb:bb:fe:b3:be:91: c8:75:2f:67:cd:85:aa:c4:d8:9d:50:33:bb:a9:0f: c5:d3:ab:98:fd:98:b7:a2:dd:2a:e9:db:b9:59:e5: e5:96:f3:41:6c:a9:de:ac:0e:17:a8:f4:5e:20:f0: b0:ef:a8:91:de:4a:dc:7a:7f:79:c9:e7:6c:20:f8: c5:d3:e9:09:f9:85:7c:37:ff:69:d9:77:ae:e4:b7: 2a:96:01:b4:e5:c0:74:a5:e3:05:c3:08:65:ed:e3: 7e:76:71:8b:a3:3a:1e:36:ad:ab:91:4e:02:a7:16: 4f:25:fa:54:81:b1:64:ee:df:81:36:14:5b:c2:b0: 30:48:1b:c4:ab:d8:59:e0:a6:aa:c6:ef:f5:da:49: 5d:7c:cd:f8:8e:0a:0a:7a:4d:7a:35:fb:da:e3:83: 39:d3:e9:a3:c4:de:74:f3:c3:eb:07:ed:24:8c:59: 51:0c:22:84:c0:c1:b9:e1:cf:9f:e2:64:44:44:55: fe:b2:1b:7b:fe:16:36:c7:0f:95:95:85:c8:8f:9f: 86:fa:7d:07:9e:3a:fb:71:ab:2e:95:d4:82:66:07: e6:40:73:ac:50:0f:19:ab:78:f4:59:5a:6d:a9:32: 5a:8e:a1:a8:b0:b7:b7:54:d0:13:05:cb:42:3e:29: 47:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:15:FE:2C:D4:DD:27:E8:52:3E:39:9C:C3:4F:B2:4B:D7:E5:6C:69 X509v3 Authority Key Identifier: keyid:53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:eb:cd:e9:70:b8:15:18:ff:d6:1c:a1:a5:1a:3d:54:01:54: 4d:63:84:e5:d1:f0:f7:70:2d:6a:28:12:e9:9a:ef:67:8d:fe: 2c:87:ed:ce:96:02:b4:81:76:aa:9c:20:7d:b5:c7:84:8e:8e: 7b:1a:ef:10:14:97:68:66:38:46:f1:a1:55:84:29:bc:f5:4e: 81:43:c2:f7:fd:e6:ec:64:dc:f0:55:68:bc:fb:85:40:aa:60: 98:68:ba:26:a2:0b:d5:97:a3:4d:36:d5:e9:8c:1c:e2:61:18: 25:00:cb:f7:6a:f8:72:11:79:a8:27:24:8a:ee:8d:a7:54:e7: 50:3f:91:96:f5:30:68:c4:97:35:f6:3a:3a:84:f6:6a:a6:78: 33:06:6c:a6:ab:8a:e1:b8:bc:7c:8f:bc:51:7b:35:2c:ee:53: b5:a3:52:da:ed:19:61:f2:36:4b:21:13:cc:f1:d6:81:e1:4a: f6:19:81:dd:42:96:22:1d:e8:75:97:fa:8c:1d:5a:ec:b7:0d: a9:87:7d:df:4f:cc:e7:f3:f7:5c:23:45:b7:26:4d:66:54:8b: c8:2b:d6:ad:f3:c1:7c:06:48:74:cf:11:a6:f8:2a:4d:b2:2d: 24:f5:25:ce:b5:ac:8b:e7:c2:83:2b:cc:c1:d6:9b:f6:03:b0: 05:16:fc:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdGQkMxMTAvBgNVBAUTKDUzMzdEQ0I2QTkxQjQxRDUyMTFBNDRDMjE2QTk2M0FC QUNDN0UyQjAwHhcNMjUxMjA2MTQ0MDMwWhcNMjUxMjEzMTQ0MDMwWjAYMRYwFAYD VQQDEw02OTM0NDA1ZS1mMjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0HPxzQ/zjvLru/6zvpHIdS9nzYWqxNidUDO7qQ/F06uY/Zi3ot0q6du5WeXl lvNBbKnerA4XqPReIPCw76iR3krcen95yedsIPjF0+kJ+YV8N/9p2Xeu5LcqlgG0 5cB0peMFwwhl7eN+dnGLozoeNq2rkU4CpxZPJfpUgbFk7t+BNhRbwrAwSBvEq9hZ 4Kaqxu/12kldfM34jgoKek16Nfva44M50+mjxN5088PrB+0kjFlRDCKEwMG54c+f 4mRERFX+sht7/hY2xw+VlYXIj5+G+n0Hnjr7casuldSCZgfmQHOsUA8Zq3j0WVpt qTJajqGosLe3VNATBctCPilHBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8V/izU 3SfoUj45nMNPskvX5WxpMB8GA1UdIwQYMBaAFFM33LapG0HVIRpEwhapY6usx+Kw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0ZCQy8zNzMwODM4MDFE OTMxMUUyOEFCRTlFRjYwOEIwMkNEMi9VemZjdHFrYlFkVWhHa1RDRnFsanE2ekg0 ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6ZmN0cWtiUWRVaEdrVENGcWxqcTZ6SDRyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0ZCQy8zNzMwODM4MDFEOTMxMUUyOEFCRTlFRjYwOEIwMkNEMi9VemZjdHFrYlFk VWhHa1RDRnFsanE2ekg0ckEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW683pcLgVGP/WHKGlGj1UAVRNY4Tl0fD3cC1qKBLpmu9njf4sh+3O lgK0gXaqnCB9tceEjo57Gu8QFJdoZjhG8aFVhCm89U6BQ8L3/ebsZNzwVWi8+4VA qmCYaLomogvVl6NNNtXpjBziYRglAMv3avhyEXmoJySK7o2nVOdQP5GW9TBoxJc1 9jo6hPZqpngzBmymq4rhuLx8j7xRezUs7lO1o1La7Rlh8jZLIRPM8daB4Ur2GYHd QpYiHeh1l/qMHVrstw2ph33fT8zn8/dcI0W3Jk1mVIvIK9at88F8Bkh0zxGm+CpN si0k9SXOtayL58KDK8zB1pv2A7AFFvzL -----END CERTIFICATE-----Generated at Sun Dec 7 07:14:53 2025 by rpki-client