This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft File: UK5xbz02ub7q4n8QBo-eNqIzq5E.mft (raw, json) Hash identifier: jT6VXxxh5eea9rC3eQQURRF9elhlhx5gh8cbSKJCRlM= Subject key identifier: 31:3A:74:B8:B4:92:37:03:45:F0:C4:AA:42:BE:72:DE:EF:A9:A0:70 Authority key identifier: 50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91 Certificate issuer: /CN=A91CB4E9/serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft Manifest number: 60 Signing time: Fri 05 Dec 2025 04:58:19 +0000 Manifest this update: Fri 05 Dec 2025 04:58:18 +0000 Manifest next update: Fri 12 Dec 2025 04:58:18 +0000 Files and hashes: 1: UK5xbz02ub7q4n8QBo-eNqIzq5E.crl (hash: GfPXjnzbtfDDKRRi7f8qjDUwQWJq2b/qiisjjEYY+Ko=) 2: 539EAC9440EF11F08CFAFB1CC4F9AE02.roa (hash: WcSNu1HK0gGCU7aORSHhSulUdwLctmKgMDS1dq0RYbQ=) 3: BA23C0E440EF11F099D6761DC4F9AE02.roa (hash: pgsw/lIIAC86SHOBUAFVHyyezuLYZcEiwQh3Fbl1fpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB4E9, serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91 Validity Not Before: Dec 5 04:58:18 2025 GMT Not After : Dec 12 04:58:18 2025 GMT Subject: CN=6932666a-8b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:42:f9:de:f1:d1:8f:85:b1:ba:44:cf:7a:3a: 48:33:29:60:d7:ac:cf:fe:5e:0a:29:49:32:1c:25: 01:83:5a:06:0a:ce:b5:8d:29:c5:82:89:f3:8a:56: 5f:98:c4:9a:f4:c3:90:25:20:44:92:be:ef:1d:fe: d7:8e:ec:5e:35:26:93:50:32:70:74:ee:37:ca:6b: 3c:ef:26:c9:ef:b0:44:17:ba:27:dd:b6:80:7c:46: cb:73:62:54:5b:dc:b9:af:07:4a:ab:79:6c:e6:d3: dc:78:e1:f0:55:af:7a:4f:3a:63:a0:89:ee:75:7f: e2:c5:f2:ed:af:12:9c:1a:bb:84:be:15:43:56:5e: a6:0c:ae:3e:87:e1:10:d6:2c:2a:95:ce:dd:89:2c: c7:91:ac:c6:55:89:c1:6b:03:30:5e:af:16:fd:4b: ae:45:54:12:67:82:bd:d4:fc:02:a2:de:d6:1a:de: 1c:bb:55:50:db:53:e1:1a:5e:a5:93:9f:cb:22:f0: d7:4e:81:a4:17:13:87:b1:b0:c2:74:be:50:d2:8e: d5:3e:4e:ee:53:26:4b:ef:08:08:b8:ba:74:2b:b3: 57:e7:a8:cb:e8:c2:f1:f3:64:8f:a7:8d:2e:3e:bc: f6:50:1e:ab:82:29:af:f3:63:80:c7:8b:73:76:c3: dc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3A:74:B8:B4:92:37:03:45:F0:C4:AA:42:BE:72:DE:EF:A9:A0:70 X509v3 Authority Key Identifier: keyid:50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:41:a9:92:1d:d1:af:84:e8:6b:e9:dd:2c:a3:d8:2c:ee:ad: c5:cb:03:59:d2:3d:c0:5e:68:97:28:f5:e2:f2:35:47:81:bf: 7b:41:2a:3c:5a:a6:35:be:05:9e:66:b9:8b:e5:70:14:5c:1a: 5b:03:f7:eb:01:5c:39:e3:e4:6d:21:a7:00:d4:fe:d3:e5:7c: 3e:43:c0:53:40:2e:e0:a4:af:12:40:8e:f6:4f:49:38:36:a1: 22:65:8a:83:61:61:bf:cd:e2:83:fd:47:98:09:74:d2:9b:46: 20:53:05:62:14:d2:85:66:73:42:4b:7d:72:6f:66:90:05:e1: bc:3c:d3:41:92:7d:86:03:ae:13:f0:2b:4b:a8:84:35:e7:82: ac:c4:90:9f:df:24:16:27:32:30:11:b1:b0:a3:32:b4:4b:32: c2:95:75:ea:49:2f:8d:d8:06:b4:7c:cf:f1:f0:5d:b9:3e:eb: 04:68:cf:b5:34:b5:be:28:77:88:42:d9:1d:97:50:81:63:ef: 93:65:92:46:a3:5f:b4:29:6f:ad:90:64:bd:c0:0f:ae:b7:ed: 52:bd:28:6d:18:97:f2:72:0e:ff:0e:d0:d6:18:25:e8:f1:01: 88:d2:cc:67:83:ba:0e:93:11:2d:5c:b7:c0:3c:23:f4:1a:16: 6a:9f:7c:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjRFOTExMC8GA1UEBRMoNTBBRTcxNkYzRDM2QjlCRUVBRTI3RjEwMDY4RjlFMzZB MjMzQUI5MTAeFw0yNTEyMDUwNDU4MThaFw0yNTEyMTIwNDU4MThaMBgxFjAUBgNV BAMTDTY5MzI2NjZhLThiMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOQvne8dGPhbG6RM96OkgzKWDXrM/+XgopSTIcJQGDWgYKzrWNKcWCifOKVl+Y xJr0w5AlIESSvu8d/teO7F41JpNQMnB07jfKazzvJsnvsEQXuifdtoB8RstzYlRb 3LmvB0qreWzm09x44fBVr3pPOmOgie51f+LF8u2vEpwau4S+FUNWXqYMrj6H4RDW LCqVzt2JLMeRrMZVicFrAzBerxb9S65FVBJngr3U/AKi3tYa3hy7VVDbU+EaXqWT n8si8NdOgaQXE4exsMJ0vlDSjtU+Tu5TJkvvCAi4unQrs1fnqMvowvHzZI+njS4+ vPZQHquCKa/zY4DHi3N2w9zhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMTp0uLSS NwNF8MSqQr5y3u+poHAwHwYDVR0jBBgwFoAUUK5xbz02ub7q4n8QBo+eNqIzq5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCNEU5L0QzODYxMzQ0NDBF RTExRjA5RTkzMzUxQ0M0RjlBRTAyL1VLNXhiejAydWI3cTRuOFFCby1lTnFJenE1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVUs1eGJ6MDJ1YjdxNG44UUJvLWVOcUl6cTVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC NEU5L0QzODYxMzQ0NDBFRTExRjA5RTkzMzUxQ0M0RjlBRTAyL1VLNXhiejAydWI3 cTRuOFFCby1lTnFJenE1RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADlBqZId0a+E6Gvp3Syj2CzurcXLA1nSPcBeaJco9eLyNUeBv3tBKjxa pjW+BZ5muYvlcBRcGlsD9+sBXDnj5G0hpwDU/tPlfD5DwFNALuCkrxJAjvZPSTg2 oSJlioNhYb/N4oP9R5gJdNKbRiBTBWIU0oVmc0JLfXJvZpAF4bw800GSfYYDrhPw K0uohDXngqzEkJ/fJBYnMjARsbCjMrRLMsKVdepJL43YBrR8z/HwXbk+6wRoz7U0 tb4od4hC2R2XUIFj75NlkkajX7Qpb62QZL3AD6637VK9KG0Yl/JyDv8O0NYYJejx AYjSzGeDug6TES1ct8A8I/QaFmqffKg= -----END CERTIFICATE-----Generated at Sun Dec 7 01:54:41 2025 by rpki-client