This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft File: uokBTrxJS2f9iz-C6LOO9vbFck0.mft (raw, json) Hash identifier: sCCDV9/OiYBHEQdGL1RMxBPoxmUQh3tFMnFrtY0Dm1w= Subject key identifier: EB:A7:12:1D:AD:14:C6:87:79:99:2A:8B:F7:F0:46:6E:54:48:F6:54 Authority key identifier: BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D Certificate issuer: /CN=A91C4EC7/serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft Manifest number: 0169 Signing time: Wed 17 Dec 2025 03:33:44 +0000 Manifest this update: Wed 17 Dec 2025 03:33:44 +0000 Manifest next update: Wed 24 Dec 2025 03:33:44 +0000 Files and hashes: 1: uokBTrxJS2f9iz-C6LOO9vbFck0.crl (hash: 6STqCQgE+TCkL0ZG9zVrTLKl+svVCK7IWuTXp4TCKUM=) 2: 7FC61EDC2E1D11EF933E9981C4F9AE02.roa (hash: /jY4R6nSwlRv/XQPnouyDv7l31bs7KH0Yf7nwaSNSbI=) 3: ED352AAEBFE511EEBB3B4D25C4F9AE02.roa (hash: f5h7pWtzzun3k/S2BGtGnUW7FrbyQ881r1XD1MN/1kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 03:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4EC7, serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Validity Not Before: Dec 17 03:33:44 2025 GMT Not After : Dec 24 03:33:44 2025 GMT Subject: CN=69422498-b338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1c:10:ee:2a:b5:5e:1d:44:a0:cf:78:1b:92: 7e:65:67:66:63:fe:f7:9c:48:b1:db:61:10:7e:7f: 05:c3:87:95:10:bd:52:d4:47:1f:98:3a:a8:f2:74: b1:3a:9b:d9:d5:a4:47:d6:6a:c5:8d:e1:8d:2a:bd: 4a:df:f0:42:c5:da:2c:59:58:ca:3b:b4:90:7c:91: f3:b3:7f:24:ae:37:50:25:9f:9e:3a:f3:4c:63:8b: b7:47:6d:15:0b:24:49:d0:9d:16:fa:56:16:fb:3c: 39:8f:c0:2b:fd:6b:b8:d3:7e:45:14:9f:4a:8e:2c: 9f:75:09:70:a5:f2:a2:fe:15:82:0e:cf:a0:7d:69: 6b:78:bd:92:12:9b:2b:35:d6:90:aa:46:6a:4a:17: 9e:08:af:1b:63:b9:f3:ca:10:64:95:4b:3a:d9:89: 5e:33:97:36:65:58:ee:be:0e:30:68:94:cc:fc:cc: af:42:a6:5b:9d:c8:e7:19:16:6b:85:51:38:2c:ee: d2:1b:75:7a:54:78:f0:bc:19:54:df:96:d7:0d:5e: 5b:fa:14:28:93:1d:d4:3e:e3:9e:dd:35:79:ba:d5: cb:26:6c:15:86:c0:27:97:f9:f2:c7:70:10:83:f6: cd:6c:ba:8b:81:b4:28:59:7b:02:0b:df:a2:b8:8f: e0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A7:12:1D:AD:14:C6:87:79:99:2A:8B:F7:F0:46:6E:54:48:F6:54 X509v3 Authority Key Identifier: keyid:BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:0e:7a:ed:cc:0f:41:f1:ac:7e:38:a4:28:2c:f0:62:cb:84: fc:d6:9d:3c:44:ab:a7:db:89:b5:79:04:62:e2:fc:09:f8:7a: 51:49:ba:24:eb:dc:03:90:f7:81:7d:b6:0a:9d:9a:a1:da:38: 18:76:39:0b:c7:ca:c1:c7:c7:fc:cc:bc:5a:e5:05:31:d4:2f: de:98:e1:d3:14:68:dc:f6:e3:1c:df:40:d6:4f:fe:b5:29:76: 26:ed:0c:3c:7b:a1:62:3d:d4:33:6e:78:f0:1b:5b:3c:be:d9: f2:a9:a6:8f:2b:c4:5d:43:8f:85:56:d5:7d:67:61:36:b4:9a: 26:88:8b:d4:e3:4b:17:9d:d1:44:c8:90:ca:d9:0b:26:ea:ec: e7:0a:ce:32:7f:dc:33:49:21:0a:41:08:69:6e:2a:e8:b5:78: 91:c8:10:15:a9:f0:71:68:a8:47:47:c1:2d:1f:ba:1d:6a:2c: 53:39:7d:3b:30:2f:5d:d2:a7:01:e0:6b:3a:3d:a6:d2:24:e7: dc:9a:11:c4:fb:5b:b0:b2:7b:3c:44:a8:b3:f0:a9:fd:6d:e9: f0:fb:f6:b2:56:ed:22:18:bb:10:4e:0a:8e:fc:3a:38:a2:d9: 01:99:fa:b0:16:11:80:3a:f4:f7:2e:59:10:70:7b:1d:c3:5e: 8c:fb:de:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFQzcxMTAvBgNVBAUTKEJBODkwMTRFQkM0OTRCNjdGRDhCM0Y4MkU4QjM4RUY2 RjZDNTcyNEQwHhcNMjUxMjE3MDMzMzQ0WhcNMjUxMjI0MDMzMzQ0WjAYMRYwFAYD VQQDDA02OTQyMjQ5OC1iMzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhwQ7iq1Xh1EoM94G5J+ZWdmY/73nEix22EQfn8Fw4eVEL1S1EcfmDqo8nSx OpvZ1aRH1mrFjeGNKr1K3/BCxdosWVjKO7SQfJHzs38krjdQJZ+eOvNMY4u3R20V CyRJ0J0W+lYW+zw5j8Ar/Wu4035FFJ9KjiyfdQlwpfKi/hWCDs+gfWlreL2SEpsr NdaQqkZqSheeCK8bY7nzyhBklUs62YleM5c2ZVjuvg4waJTM/MyvQqZbncjnGRZr hVE4LO7SG3V6VHjwvBlU35bXDV5b+hQokx3UPuOe3TV5utXLJmwVhsAnl/nyx3AQ g/bNbLqLgbQoWXsCC9+iuI/gKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOunEh2t FMaHeZkqi/fwRm5USPZUMB8GA1UdIwQYMBaAFLqJAU68SUtn/Ys/guizjvb2xXJN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEVDNy83NTc1Nzg3MEJG RTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMyZjlpei1DNkxPTzl2YkZj azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vva0JUcnhKUzJmOWl6LUM2TE9POXZiRmNrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEVDNy83NTc1Nzg3MEJGRTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMy Zjlpei1DNkxPTzl2YkZjazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfDnrtzA9B8ax+OKQoLPBiy4T81p08RKun24m1eQRi4vwJ+HpRSbok 69wDkPeBfbYKnZqh2jgYdjkLx8rBx8f8zLxa5QUx1C/emOHTFGjc9uMc30DWT/61 KXYm7Qw8e6FiPdQzbnjwG1s8vtnyqaaPK8RdQ4+FVtV9Z2E2tJomiIvU40sXndFE yJDK2Qsm6uznCs4yf9wzSSEKQQhpbirotXiRyBAVqfBxaKhHR8EtH7odaixTOX07 MC9d0qcB4Gs6PabSJOfcmhHE+1uwsns8RKiz8Kn9benw+/ayVu0iGLsQTgqO/Do4 otkBmfqwFhGAOvT3LlkQcHsdw16M+96r -----END CERTIFICATE-----Generated at Thu Dec 18 05:47:41 2025 by rpki-client