This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft File: UjNwqBpuUUYYrnypeV_dEQs1Djc.mft (raw, json) Hash identifier: o8F/HtO20pehiIwZ1Bj9ivB5KW4uG3PW5X4YzpGbn9o= Subject key identifier: FE:18:F4:FF:33:AC:8B:30:B2:BF:E9:C4:71:48:76:92:07:8C:28:9A Authority key identifier: 52:33:70:A8:1A:6E:51:46:18:AE:7C:A9:79:5F:DD:11:0B:35:0E:37 Certificate issuer: /CN=A91C6CB6/serialNumber=523370A81A6E514618AE7CA9795FDD110B350E37 Certificate serial: 0CEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft Manifest number: 0CD5 Signing time: Thu 04 Dec 2025 17:39:23 +0000 Manifest this update: Thu 04 Dec 2025 17:39:22 +0000 Manifest next update: Thu 11 Dec 2025 17:39:22 +0000 Files and hashes: 1: UjNwqBpuUUYYrnypeV_dEQs1Djc.crl (hash: 0RL7ixGHvNJBoAAdfVzymVcO1BPiIc5mPwR2TIzy8UQ=) 2: 04E274DA27CB11EE8FA6F46CC4F9AE02.roa (hash: QC+kAoIXXpY6brDwehpJKK1cCBvEWnBsopkp3/fuZEY=) 3: E683FA78277E11EE9D54C13AC4F9AE02.roa (hash: w0i/ARt9lCVRkjFZbSD4igkj3UoeypjyUlDGFiTsJMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.crl rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3307 (0xceb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CB6, serialNumber=523370A81A6E514618AE7CA9795FDD110B350E37 Validity Not Before: Dec 4 17:39:22 2025 GMT Not After : Dec 11 17:39:22 2025 GMT Subject: CN=6931c74b-605b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:7b:e6:3c:a8:05:81:a1:72:99:f5:c1:25:ca: ee:38:e3:4a:75:c3:59:d6:cd:77:32:ad:e5:59:62: c9:00:a3:d9:df:6c:b3:a2:86:b6:91:74:06:97:4a: 47:af:25:d6:06:a1:31:8f:a5:be:89:a2:58:85:f1: 09:4f:ac:4d:4f:86:67:67:47:7d:c1:20:bc:bb:ca: 78:83:a1:5e:21:eb:18:67:a6:92:f4:63:d3:58:24: 44:5d:e1:b1:ec:98:52:1a:48:1a:75:1c:cf:6a:ee: 2b:3d:0f:9b:e8:ba:8f:6d:f1:db:4e:68:34:f9:b1: 16:2f:6c:8f:be:77:7f:1c:34:d3:4a:0e:e3:34:e7: 3f:48:82:94:32:9f:a1:0e:51:05:09:ff:ea:0c:eb: 30:ee:41:fe:54:0a:ef:07:25:73:92:a8:57:dc:05: 6a:27:82:00:ef:22:d9:84:2e:b0:4a:3b:ad:83:c6: 7d:76:f8:24:51:50:13:1a:58:9c:f3:4c:cb:40:2e: af:73:71:57:08:88:23:bf:87:5f:74:e4:b3:a6:a3: 6f:34:13:d9:43:da:2f:25:8a:17:fe:97:dd:21:c7: 65:97:66:5e:fc:a3:40:7d:a7:06:14:de:9b:bc:89: ac:53:62:fd:e7:1c:4f:9c:56:05:bd:24:81:53:42: 5f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:18:F4:FF:33:AC:8B:30:B2:BF:E9:C4:71:48:76:92:07:8C:28:9A X509v3 Authority Key Identifier: keyid:52:33:70:A8:1A:6E:51:46:18:AE:7C:A9:79:5F:DD:11:0B:35:0E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:f9:fa:ae:63:b5:8d:13:61:a1:d1:5a:ee:79:30:68:91:2e: 7d:60:13:2c:c7:7c:2a:f6:ca:93:4e:15:37:8a:2b:9e:cf:34: 20:f4:ba:0d:d1:ba:6c:1f:e5:97:1e:3f:5b:07:97:7d:21:2a: 50:97:08:7d:60:6a:a0:f4:4e:07:38:25:fd:bf:b4:c0:b2:76: 88:0f:e8:92:59:6b:dc:aa:9d:81:54:83:a1:33:9c:c8:5b:4e: df:92:06:5a:74:be:00:2f:f1:1c:aa:26:73:af:13:06:68:bc: b7:fd:00:ca:dc:f5:d9:a1:f4:4b:43:eb:0e:60:12:d7:f9:67: c2:e3:ce:8d:be:4f:f2:ab:cb:c4:14:71:2e:41:61:2b:7e:f8: 56:cf:d2:52:94:a8:5c:f1:4c:a7:95:bd:ae:23:14:49:24:52: c8:43:5b:41:fe:d0:23:1c:c9:70:99:59:bc:eb:54:d1:13:51: 9c:45:e2:58:43:08:48:3f:0c:fc:24:9b:56:0d:e5:2b:be:47: dd:29:f0:c0:b7:06:20:ac:16:d1:f0:a6:87:ef:77:b6:73:ff: 4f:11:cb:3e:fc:84:cd:30:09:36:14:96:0f:10:3b:47:74:5e: 30:8e:47:fd:4c:a7:81:be:58:f3:a4:55:25:04:2d:84:ef:63: 5b:e2:0e:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQjYxMTAvBgNVBAUTKDUyMzM3MEE4MUE2RTUxNDYxOEFFN0NBOTc5NUZERDEx MEIzNTBFMzcwHhcNMjUxMjA0MTczOTIyWhcNMjUxMjExMTczOTIyWjAYMRYwFAYD VQQDEw02OTMxYzc0Yi02MDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+XvmPKgFgaFymfXBJcruOONKdcNZ1s13Mq3lWWLJAKPZ32yzooa2kXQGl0pH ryXWBqExj6W+iaJYhfEJT6xNT4ZnZ0d9wSC8u8p4g6FeIesYZ6aS9GPTWCREXeGx 7JhSGkgadRzPau4rPQ+b6LqPbfHbTmg0+bEWL2yPvnd/HDTTSg7jNOc/SIKUMp+h DlEFCf/qDOsw7kH+VArvByVzkqhX3AVqJ4IA7yLZhC6wSjutg8Z9dvgkUVATGlic 80zLQC6vc3FXCIgjv4dfdOSzpqNvNBPZQ9ovJYoX/pfdIcdll2Ze/KNAfacGFN6b vImsU2L95xxPnFYFvSSBU0JfpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4Y9P8z rIswsr/pxHFIdpIHjCiaMB8GA1UdIwQYMBaAFFIzcKgablFGGK58qXlf3RELNQ43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNCNi8yQTRGNTc1RUZF MTQxMUU5ODFDMjY1NTlDNEY5QUUwMi9Vak53cUJwdVVVWVlybnlwZVZfZEVRczFE amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VqTndxQnB1VVVZWXJueXBlVl9kRVFzMURqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNCNi8yQTRGNTc1RUZFMTQxMUU5ODFDMjY1NTlDNEY5QUUwMi9Vak53cUJwdVVV WVlybnlwZVZfZEVRczFEamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq+fquY7WNE2Gh0VrueTBokS59YBMsx3wq9sqTThU3iiuezzQg9LoN 0bpsH+WXHj9bB5d9ISpQlwh9YGqg9E4HOCX9v7TAsnaID+iSWWvcqp2BVIOhM5zI W07fkgZadL4AL/EcqiZzrxMGaLy3/QDK3PXZofRLQ+sOYBLX+WfC486Nvk/yq8vE FHEuQWErfvhWz9JSlKhc8Uynlb2uIxRJJFLIQ1tB/tAjHMlwmVm861TRE1GcReJY QwhIPwz8JJtWDeUrvkfdKfDAtwYgrBbR8KaH73e2c/9PEcs+/ITNMAk2FJYPEDtH dF4wjkf9TKeBvljzpFUlBC2E72Nb4g43 -----END CERTIFICATE-----Generated at Sat Dec 6 12:25:03 2025 by rpki-client