This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft File: ujgt6jovW4xMIgXskp9gG-NP538.mft (raw, json) Hash identifier: HGGDAwtJ4GiAa1Cd55q2QYjJxrp2/ubco0N+51NqA7I= Subject key identifier: 67:59:A6:55:1A:98:E6:BF:34:A5:96:FE:77:08:DE:CB:9E:F2:9A:08 Authority key identifier: BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F Certificate issuer: /CN=A91B7B34/serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F Certificate serial: 0CA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft Manifest number: 0C9E Signing time: Sat 06 Dec 2025 17:44:23 +0000 Manifest this update: Sat 06 Dec 2025 17:44:23 +0000 Manifest next update: Sat 13 Dec 2025 17:44:23 +0000 Files and hashes: 1: ujgt6jovW4xMIgXskp9gG-NP538.crl (hash: NLeOz+zZ+kd2gcdNF79y7flVkuoiStOx3SNqALMYTqo=) 2: 52E56FA806C711EA84978821C4F9AE02.roa (hash: pC6YASmlOW3gbC5Njuzzo1yhASqi/WroinaiHpfVYXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3240 (0xca8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B34, serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F Validity Not Before: Dec 6 17:44:23 2025 GMT Not After : Dec 13 17:44:23 2025 GMT Subject: CN=69346b77-0cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:48:2f:6f:7e:73:42:a6:3b:64:e0:75:00:95: 52:3f:dc:8b:ab:d6:04:99:ca:05:3d:1c:3d:20:62: 6d:f6:5e:9a:a7:7f:64:ca:4c:28:47:4c:e8:35:b7: 08:eb:7c:0f:17:ac:25:6c:58:ab:74:64:b2:f4:1f: eb:42:d9:9b:20:a9:ef:f4:1a:5d:f6:ca:e0:22:1b: ac:38:b7:4c:d5:e2:20:a3:22:22:a7:74:81:2f:ee: 55:f5:1c:b1:ae:06:33:89:67:5c:40:d4:a9:f5:eb: cc:59:50:23:f6:68:47:e5:2f:62:75:f6:ed:79:32: 28:c9:bf:15:79:58:34:4a:e1:b9:89:e5:29:df:10: 0b:83:4d:32:48:af:fa:78:71:f8:b8:19:ec:c3:4f: 32:73:f7:84:6e:64:b0:33:ec:fa:c7:21:4f:11:61: 66:80:82:d1:76:77:b6:49:df:65:0a:5c:50:5a:ff: 85:65:5c:3d:9c:04:99:87:67:20:07:ac:92:54:b5: f4:23:fe:0e:f9:bd:9c:36:9c:29:5e:e5:9e:13:88: e5:44:76:2f:31:1f:11:ca:03:b5:6a:36:0e:c1:39: 83:b4:55:48:86:5e:de:23:96:21:ed:b9:09:df:ee: 23:55:a6:51:35:50:90:af:48:e2:38:71:43:ba:0b: 35:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:59:A6:55:1A:98:E6:BF:34:A5:96:FE:77:08:DE:CB:9E:F2:9A:08 X509v3 Authority Key Identifier: keyid:BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:fd:e9:97:a2:f9:bf:36:9d:0d:67:dd:4f:97:5e:6f:5f:fb: 97:f8:a4:6f:ed:a4:87:5e:d5:82:83:c6:af:cf:81:a3:5b:9e: d7:d5:64:67:fe:82:de:12:19:1e:7f:d9:33:7f:5b:6b:89:88: fb:dd:d6:16:dd:09:37:e1:7a:8f:22:bd:f0:61:a7:74:47:30: 12:73:21:96:18:26:ae:fc:10:cd:21:4a:1e:63:44:94:77:44: ef:f3:78:3a:dc:bc:c9:7a:20:76:07:28:73:24:1a:4f:5f:db: 66:c6:99:9e:27:b1:84:3a:a7:c3:f4:6f:53:8f:61:50:7f:09: 76:f2:56:23:f5:91:c3:bb:ae:8a:8b:3a:5b:f4:22:6f:57:a3: 46:41:75:a2:36:03:5a:71:de:fe:e1:b4:16:d7:4f:dd:10:6d: 87:e0:c4:91:a9:9b:e3:b3:17:13:5d:16:54:e7:2c:84:8f:04: 6e:b6:6f:b1:87:b4:6d:a6:18:99:7b:85:62:4a:d9:de:20:c5: fe:6c:a5:32:9d:de:9f:41:75:cd:f3:02:99:d2:a6:53:5d:4b: fe:63:d8:d6:d2:2e:e1:58:83:d8:d1:5a:0d:fb:f3:b1:38:b0: e6:45:be:9e:6c:4f:fc:63:ce:d1:0e:11:34:3e:e8:57:76:30: 55:f0:0c:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMzQxMTAvBgNVBAUTKEJBMzgyREVBM0EyRjVCOEM0QzIyMDVFQzkyOUY2MDFC RTM0RkU3N0YwHhcNMjUxMjA2MTc0NDIzWhcNMjUxMjEzMTc0NDIzWjAYMRYwFAYD VQQDEw02OTM0NmI3Ny0wY2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA60gvb35zQqY7ZOB1AJVSP9yLq9YEmcoFPRw9IGJt9l6ap39kykwoR0zoNbcI 63wPF6wlbFirdGSy9B/rQtmbIKnv9Bpd9srgIhusOLdM1eIgoyIip3SBL+5V9Ryx rgYziWdcQNSp9evMWVAj9mhH5S9idfbteTIoyb8VeVg0SuG5ieUp3xALg00ySK/6 eHH4uBnsw08yc/eEbmSwM+z6xyFPEWFmgILRdne2Sd9lClxQWv+FZVw9nASZh2cg B6ySVLX0I/4O+b2cNpwpXuWeE4jlRHYvMR8RygO1ajYOwTmDtFVIhl7eI5Yh7bkJ 3+4jVaZRNVCQr0jiOHFDugs1/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdZplUa mOa/NKWW/ncI3sue8poIMB8GA1UdIwQYMBaAFLo4Leo6L1uMTCIF7JKfYBvjT+d/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IzNC9ERUNFM0VCQTA2 QzYxMUVBQTUxQTYwMjFDNEY5QUUwMi91amd0Nmpvdlc0eE1JZ1hza3A5Z0ctTlA1 MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VqZ3Q2am92VzR4TUlnWHNrcDlnRy1OUDUzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0IzNC9ERUNFM0VCQTA2QzYxMUVBQTUxQTYwMjFDNEY5QUUwMi91amd0Nmpvdlc0 eE1JZ1hza3A5Z0ctTlA1MzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB/emXovm/Np0NZ91Pl15vX/uX+KRv7aSHXtWCg8avz4GjW57X1WRn /oLeEhkef9kzf1triYj73dYW3Qk34XqPIr3wYad0RzAScyGWGCau/BDNIUoeY0SU d0Tv83g63LzJeiB2ByhzJBpPX9tmxpmeJ7GEOqfD9G9Tj2FQfwl28lYj9ZHDu66K izpb9CJvV6NGQXWiNgNacd7+4bQW10/dEG2H4MSRqZvjsxcTXRZU5yyEjwRutm+x h7RtphiZe4ViStneIMX+bKUynd6fQXXN8wKZ0qZTXUv+Y9jW0i7hWIPY0VoN+/Ox OLDmRb6ebE/8Y87RDhE0PuhXdjBV8AxN -----END CERTIFICATE-----Generated at Sat Dec 6 23:43:41 2025 by rpki-client