This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft File: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft (raw, json) Hash identifier: FVQPWBYI5wrqtuxV4z2LLKZ2P3dXh3Uw/7TJvabotP8= Subject key identifier: 07:5F:FE:12:75:4F:5D:61:D1:F8:28:D0:79:07:4A:27:06:12:85:90 Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211 Certificate serial: 0667 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft Manifest number: 0644 Signing time: Thu 04 Dec 2025 21:30:48 +0000 Manifest this update: Thu 04 Dec 2025 21:30:48 +0000 Manifest next update: Thu 11 Dec 2025 21:30:48 +0000 Files and hashes: 1: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl (hash: T5MI9PK9UjgmAvW7QsNN1pI/ikXhK+QchTIRS63r6lw=) 2: C9BA671C3A2611F0908A2B20C4F9AE02.roa (hash: hAsOFqLGhlXPlJQqq8o+TJ1lqU96PHU1fRQ8ll9kM1c=) 3: F44E1EECCD8411EF88CD1464C4F9AE02.roa (hash: RAzhHtW1VH/eUjgZQiEsm0Ej6j+0F6PlwpjTpjOi8Jo=) 4: F4C73FCACD8411EF88CD1464C4F9AE02.roa (hash: EkzwfsPvhq1FP6pm5CT4LDCnqWr4szU6ESASOp0o6DU=) 5: B6116DBEC9C811F0931CA339C4F9AE02.roa (hash: mpDokGSx8dS0Rov34wArgaejqPAfetY5gGpqf+We+RE=) 6: 3FE8CD1051B111F0932E1173C4F9AE02.roa (hash: RB6HB76Hd37I1Qyua/UNLhe473Y5QaFhWKPCNvGT+Jc=) 7: DBF856463A3011F0B0C6F437C4F9AE02.roa (hash: 3y3NqdGA4Yb7KDxIbZnutCZORNmNgdB027E2G7UT98A=) 8: F559B7E2CD8411EF88CD1464C4F9AE02.roa (hash: 1YFs0Zqq59OdTTfQ9TRBhg+ye+627iyYVeuBlex3Kfk=) 9: 044C4ED6A26711ED8095F74DC4F9AE02.roa (hash: ehyJGIeBDK390bSFLx2HamOEcgKmw6zu6VhcLaVRD/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1639 (0x667) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211 Validity Not Before: Dec 4 21:30:48 2025 GMT Not After : Dec 11 21:30:48 2025 GMT Subject: CN=6931fd88-0375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:83:b1:ec:81:4a:d0:24:e6:e6:89:dd:c1:2d: bf:8a:87:dd:62:79:aa:ac:3f:e2:95:74:07:fd:45: 32:d8:cc:43:60:28:70:1d:d1:1c:e9:9b:ef:4c:bd: 69:3e:cc:3d:93:48:ec:4f:ce:42:a1:fc:b2:6b:b5: 37:07:32:21:20:ab:8f:88:c4:19:61:33:50:74:d4: fa:40:4a:6c:00:e0:b6:ae:de:7b:80:24:c8:5e:e4: 9c:1f:3b:c0:f8:c0:d6:bb:dd:4b:df:ee:80:fd:31: 54:99:19:65:a2:3b:55:8a:5d:30:ca:c6:2a:d9:41: dc:69:df:af:7f:2b:95:4a:1e:b7:22:cc:0c:f6:c5: 3b:a3:fd:70:06:08:69:52:f0:bd:f0:13:b1:1a:b0: 17:99:2c:82:42:1b:d1:38:34:d2:fb:91:6a:98:6b: 89:d7:8d:e9:59:d1:90:11:2f:ff:5d:e0:e1:1c:2c: a9:cd:1c:ac:5e:9f:30:4d:93:bd:79:e1:48:56:01: 1b:bc:25:4d:f0:d6:28:40:66:36:cd:35:1d:fd:e2: c8:12:2e:64:84:93:22:5f:9d:99:d0:06:00:70:93: c2:bd:23:bf:4b:d8:26:07:76:bd:3b:1a:42:e0:f3: 57:97:d5:83:52:b7:24:4c:1c:16:88:06:7c:a1:6e: e0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5F:FE:12:75:4F:5D:61:D1:F8:28:D0:79:07:4A:27:06:12:85:90 X509v3 Authority Key Identifier: keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:83:6f:5a:6c:07:26:9a:d5:ae:54:58:d2:5c:a5:c4:b1:0b: 64:e1:62:e4:04:4e:8c:3e:bd:4e:d1:2f:db:fc:e1:64:31:13: 0a:1e:b4:89:1a:c8:fe:cc:fb:f1:11:9d:84:a7:bc:67:81:00: df:25:f5:35:7b:46:83:a0:2c:c9:f1:ed:d9:17:51:73:13:47: 2c:a3:e0:bc:53:32:7c:d2:67:cd:ab:71:0b:8a:3f:df:4d:39: 3f:04:9a:2d:50:0e:57:f9:e7:57:77:62:94:0d:7e:5f:d5:62: 8c:27:42:4e:bf:3f:f5:13:75:08:d6:1a:05:96:96:b1:44:8f: a2:ad:bf:bd:76:c0:4a:03:70:21:eb:44:5f:e5:d1:3b:f7:28: cb:92:d6:cf:7e:a0:13:41:96:92:d7:77:3f:f4:76:5a:c0:cc: b9:0a:27:48:2f:a7:eb:b9:66:b4:9b:d5:c7:eb:e5:fd:bf:0b: c1:c2:06:af:12:0c:e4:3a:21:dd:67:d9:fd:60:05:2f:8d:c8: aa:ca:f7:ea:8b:20:8e:1d:8a:cd:0e:4b:77:73:16:5f:9d:54: 31:40:bd:61:03:a6:2b:d8:ae:5d:e4:53:64:09:e2:6e:80:e7: 7a:84:1d:20:ae:d2:c3:31:f8:af:9e:75:9a:25:48:ad:85:64: ce:56:e7:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc3NjExMTAvBgNVBAUTKDUxRDVDQzJENUU0MjhGQzk1NTE0OUY1NzYyMTE5MDRG MDVCQUYyMTEwHhcNMjUxMjA0MjEzMDQ4WhcNMjUxMjExMjEzMDQ4WjAYMRYwFAYD VQQDEw02OTMxZmQ4OC0wMzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3YOx7IFK0CTm5ondwS2/iofdYnmqrD/ilXQH/UUy2MxDYChwHdEc6ZvvTL1p Psw9k0jsT85Cofyya7U3BzIhIKuPiMQZYTNQdNT6QEpsAOC2rt57gCTIXuScHzvA +MDWu91L3+6A/TFUmRllojtVil0wysYq2UHcad+vfyuVSh63IswM9sU7o/1wBghp UvC98BOxGrAXmSyCQhvRODTS+5FqmGuJ143pWdGQES//XeDhHCypzRysXp8wTZO9 eeFIVgEbvCVN8NYoQGY2zTUd/eLIEi5khJMiX52Z0AYAcJPCvSO/S9gmB3a9OxpC 4PNXl9WDUrckTBwWiAZ8oW7gLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdf/hJ1 T11h0fgo0HkHSicGEoWQMB8GA1UdIwQYMBaAFFHVzC1eQo/JVRSfV2IRkE8FuvIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzc2MS8wRTRCOTE2OEJE MzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4bFZGSjlYWWhHUVR3VzY4 aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkWE1MVjVDajhsVkZKOVhZaEdRVHdXNjhoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzc2MS8wRTRCOTE2OEJEMzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4 bFZGSjlYWWhHUVR3VzY4aEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8g29abAcmmtWuVFjSXKXEsQtk4WLkBE6MPr1O0S/b/OFkMRMKHrSJ Gsj+zPvxEZ2Ep7xngQDfJfU1e0aDoCzJ8e3ZF1FzE0cso+C8UzJ80mfNq3ELij/f TTk/BJotUA5X+edXd2KUDX5f1WKMJ0JOvz/1E3UI1hoFlpaxRI+irb+9dsBKA3Ah 60Rf5dE79yjLktbPfqATQZaS13c/9HZawMy5CidIL6fruWa0m9XH6+X9vwvBwgav EgzkOiHdZ9n9YAUvjciqyvfqiyCOHYrNDkt3cxZfnVQxQL1hA6Yr2K5d5FNkCeJu gOd6hB0grtLDMfivnnWaJUithWTOVufo -----END CERTIFICATE-----Generated at Sat Dec 6 18:54:06 2025 by rpki-client