This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft File: UCfzGS691UlQo5w9EwlKcfHTMmY.mft (raw, json) Hash identifier: W/UA1OEqbeexHFjHQE/MfSo+xSh+E2SAmJetXuTALX4= Subject key identifier: CA:42:F4:66:2B:0A:23:87:F3:CC:2E:A1:12:44:B2:8D:F3:14:94:71 Authority key identifier: 50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 Certificate issuer: /CN=A91A3078/serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Certificate serial: 0B6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft Manifest number: 0B50 Signing time: Sat 20 Dec 2025 18:46:50 +0000 Manifest this update: Sat 20 Dec 2025 18:46:50 +0000 Manifest next update: Sat 27 Dec 2025 18:46:50 +0000 Files and hashes: 1: UCfzGS691UlQo5w9EwlKcfHTMmY.crl (hash: kHRhMg3nGy8WIx5y47jL1Sh7ZwKgAjRMlxZmuIdfB1s=) 2: CEFEEFEA854E11EBA2CFDC87C4F9AE02.roa (hash: neskcJ2ryIraX5yGhHnDKoHimVr5nfZfeUgF/8p7xpw=) 3: F3F7D2B0CE9711ECA2477C19C4F9AE02.roa (hash: YSanlXPMFGlUc59onSU43QiRooXV0uHeNRhQl6sQvzs=) 4: CDD62642854E11EBA2CFDC87C4F9AE02.roa (hash: EMIkCzah8q7OcQkgGcb8CJSovHyJ1MV1+D6g6V84DdU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2927 (0xb6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3078, serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Validity Not Before: Dec 20 18:46:50 2025 GMT Not After : Dec 27 18:46:50 2025 GMT Subject: CN=6946ef1a-d2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:18:c2:14:89:4a:fa:4f:e8:82:eb:bc:63:12: a9:21:e5:22:9d:1b:fc:90:9c:86:27:70:9b:12:69: 70:8e:45:88:46:55:28:78:01:92:e5:97:23:a7:90: e7:8c:4e:b6:e0:43:78:ce:75:ef:3e:83:27:01:2f: 67:d7:a5:94:98:5b:3e:64:91:8e:6a:a7:77:82:8c: 6e:df:59:6c:ab:40:35:03:6c:f7:65:e2:2b:66:48: b4:2b:74:dc:82:99:d7:e4:f2:8e:15:1c:f0:b7:85: 59:58:72:9e:6d:2f:29:83:99:6e:5c:03:9d:b4:44: e3:d4:b6:66:5f:2e:cb:15:97:3a:53:2a:d7:65:92: f7:48:ec:ed:96:7c:66:44:fb:db:c2:8c:35:86:32: 63:07:b2:09:eb:3b:8b:31:54:c9:ba:63:27:31:34: 69:89:f0:5e:57:2d:df:61:b6:a0:dd:c9:02:84:20: ba:48:82:f4:24:72:b5:d5:a9:b0:8b:a7:70:67:0f: 5b:63:36:58:3e:d5:19:f2:3b:53:0d:6f:81:44:16: ae:43:fb:1f:80:75:41:88:30:1c:7c:a2:16:53:75: 88:02:e6:97:46:ef:63:c3:3b:c9:30:a8:71:e5:66: ef:e8:80:fd:1f:2f:8c:4d:c1:8d:b3:25:36:d7:54: 40:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:42:F4:66:2B:0A:23:87:F3:CC:2E:A1:12:44:B2:8D:F3:14:94:71 X509v3 Authority Key Identifier: keyid:50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:a6:54:77:b7:7a:09:7e:7c:8d:71:ce:32:61:b3:5d:69:4d: f3:d6:23:b3:72:e2:ed:b5:e0:51:61:ff:7a:ad:a4:29:58:43: 7e:8f:4b:d7:07:c0:76:f8:d9:01:06:ed:d0:dc:3d:a7:39:2e: 7f:d4:53:64:81:b3:d8:eb:47:57:77:8c:66:0a:a2:23:bd:46: 2e:af:15:98:5e:68:fb:b6:b3:7c:b2:14:67:ef:e9:83:59:15: 0a:08:f2:5f:10:a6:2b:2c:e7:a7:f7:fa:73:0b:e6:c4:67:08: 54:d5:8f:c8:ad:53:77:f4:60:d8:4e:f4:f5:4e:db:54:ad:c8: 11:40:44:29:83:53:e9:88:8a:5d:cd:89:cb:2e:da:bf:17:d4: a1:1a:70:86:33:0f:96:82:36:cd:da:f5:44:cb:c1:ea:58:df: 7e:39:9a:de:d7:a2:64:9e:5a:d3:0b:43:fc:81:e1:66:26:bf: 66:53:4e:21:79:5d:89:01:91:c2:3a:58:73:dd:81:90:f2:5a: 53:0a:97:8f:28:45:4a:64:8a:45:65:24:b7:51:f2:b8:69:7c: 61:4c:74:62:f9:a2:00:c8:ba:be:1d:c3:49:30:d9:e2:f7:6a: 90:8f:94:18:69:3d:47:51:2d:ed:eb:6a:45:1d:48:2b:a4:5c: e4:66:5f:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwNzgxMTAvBgNVBAUTKDUwMjdGMzE5MkVCREQ1NDk1MEEzOUMzRDEzMDk0QTcx RjFEMzMyNjYwHhcNMjUxMjIwMTg0NjUwWhcNMjUxMjI3MTg0NjUwWjAYMRYwFAYD VQQDDA02OTQ2ZWYxYS1kMmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlhjCFIlK+k/oguu8YxKpIeUinRv8kJyGJ3CbEmlwjkWIRlUoeAGS5Zcjp5Dn jE624EN4znXvPoMnAS9n16WUmFs+ZJGOaqd3goxu31lsq0A1A2z3ZeIrZki0K3Tc gpnX5PKOFRzwt4VZWHKebS8pg5luXAOdtETj1LZmXy7LFZc6UyrXZZL3SOztlnxm RPvbwow1hjJjB7IJ6zuLMVTJumMnMTRpifBeVy3fYbag3ckChCC6SIL0JHK11amw i6dwZw9bYzZYPtUZ8jtTDW+BRBauQ/sfgHVBiDAcfKIWU3WIAuaXRu9jwzvJMKhx 5Wbv6ID9Hy+MTcGNsyU211RArQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpC9GYr CiOH88wuoRJEso3zFJRxMB8GA1UdIwQYMBaAFFAn8xkuvdVJUKOcPRMJSnHx0zJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA3OC84NjMwQjFDODRD OEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFVbFFvNXc5RXdsS2NmSFRN bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VDZnpHUzY5MVVsUW81dzlFd2xLY2ZIVE1tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzA3OC84NjMwQjFDODRDOEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFV bFFvNXc5RXdsS2NmSFRNbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3plR3t3oJfnyNcc4yYbNdaU3z1iOzcuLtteBRYf96raQpWEN+j0vX B8B2+NkBBu3Q3D2nOS5/1FNkgbPY60dXd4xmCqIjvUYurxWYXmj7trN8shRn7+mD WRUKCPJfEKYrLOen9/pzC+bEZwhU1Y/IrVN39GDYTvT1TttUrcgRQEQpg1PpiIpd zYnLLtq/F9ShGnCGMw+WgjbN2vVEy8HqWN9+OZre16JknlrTC0P8geFmJr9mU04h eV2JAZHCOlhz3YGQ8lpTCpePKEVKZIpFZSS3UfK4aXxhTHRi+aIAyLq+HcNJMNni 92qQj5QYaT1HUS3t62pFHUgrpFzkZl9n -----END CERTIFICATE-----Generated at Sun Dec 21 12:59:00 2025 by rpki-client