This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft File: uOpx0E7INugYCHPJ6dQM0uNVNwE.mft (raw, json) Hash identifier: VB213y+PN1GuXpdwKBYfSDWyus/hJQvqZjX611wombs= Subject key identifier: 81:F8:55:DA:2B:DD:E6:6C:E2:6F:1B:56:0D:C7:F6:85:6D:08:31:E9 Authority key identifier: B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01 Certificate issuer: /CN=A91CCF10/serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701 Certificate serial: 025E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft Manifest number: 0248 Signing time: Fri 05 Dec 2025 00:10:39 +0000 Manifest this update: Fri 05 Dec 2025 00:10:38 +0000 Manifest next update: Fri 12 Dec 2025 00:10:38 +0000 Files and hashes: 1: uOpx0E7INugYCHPJ6dQM0uNVNwE.crl (hash: TgX2AiJu+XyHacOkhpuIbxR6CjxXKB8XOunFUFRsMug=) 2: CC74271E8A8711ED98572D26C4F9AE02.roa (hash: 0G60ULRR1aiCecrfg+BqeMhABE9xkF63RW5J89d3We8=) 3: 4D54B546616411F0B65D5F70C4F9AE02.roa (hash: g7NhMcIvAczmkYOaXYDkcEWAOqsD+kUhhcWaHDNMsU4=) 4: C9E35E848A8711ED98572D26C4F9AE02.roa (hash: yLDQTH1/xLkh+utXRnMQUyJMsGGbM5Z46ZKlMYrRcG0=) 5: 82B99B1C6B9F11F09CD3A334C4F9AE02.roa (hash: X7kxe5tASpLZd1QCRc9L8JdIwUW7kRfM+3Yt3hVMA6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 606 (0x25e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCF10, serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701 Validity Not Before: Dec 5 00:10:38 2025 GMT Not After : Dec 12 00:10:38 2025 GMT Subject: CN=693222fe-9525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:51:db:f4:c7:53:84:77:67:a0:13:9e:c1:14: f0:ee:32:ee:03:f1:d2:b5:b7:4c:0f:d1:e5:98:29: db:ce:c3:e7:17:48:f7:a2:79:14:9a:74:45:bc:6d: 52:9e:e9:96:af:50:e7:a8:f1:75:dc:67:d2:4d:77: d3:90:74:44:14:76:49:57:b6:b8:33:f7:00:81:1b: c0:8c:aa:84:0d:9e:37:a0:e6:da:ff:e6:c3:7a:4a: d7:d5:c4:49:83:23:8e:94:7b:33:c0:4b:32:ac:13: c8:09:8e:51:40:4f:d2:12:bf:11:15:18:3c:a0:69: f5:b8:e8:d1:d3:62:3c:ef:cd:63:25:05:2f:17:70: 8b:b6:5d:95:10:50:83:f6:a6:35:cb:0e:33:c6:18: 78:11:3e:96:53:df:2d:b9:82:59:43:15:83:b2:7f: 3a:2c:6d:48:64:63:76:3d:5f:db:a7:8c:d5:da:e3: 3f:aa:4d:9e:2a:6f:31:cc:c0:72:f5:9e:cf:7b:50: 77:50:42:25:c1:0c:91:83:7c:f3:03:a6:e5:11:cb: dc:48:be:55:9c:87:2f:c2:08:ab:cd:5a:b3:7f:9d: db:20:78:cc:dd:ce:a8:2a:91:27:e2:db:93:67:e9: 01:4e:f1:88:f8:0b:be:00:b5:74:a7:b4:62:9c:6d: f4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F8:55:DA:2B:DD:E6:6C:E2:6F:1B:56:0D:C7:F6:85:6D:08:31:E9 X509v3 Authority Key Identifier: keyid:B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:23:c6:6e:d6:c7:6e:cc:c2:c6:b9:e2:15:e7:a1:b2:f5:4c: cd:9e:00:97:40:7a:c8:2a:68:cd:d0:f2:39:4a:ed:af:e8:3b: a5:49:09:15:75:37:72:88:a5:f0:61:08:ac:db:d8:39:af:eb: c7:41:31:c5:40:aa:b5:f8:70:5c:17:e7:b1:66:4c:25:83:74: 95:4b:41:cf:d6:28:e1:4c:e5:09:76:9f:6e:ec:b7:07:46:8c: dd:92:31:ab:76:83:ce:61:14:c0:ec:4e:0a:d6:5b:99:34:53: 3c:2a:91:0c:29:7e:f7:0e:40:a8:5c:7d:b9:09:3c:6b:5a:4f: 75:81:3f:2d:db:f1:2a:10:d7:7e:50:60:60:03:95:40:de:b1: 1a:b7:1c:53:eb:49:72:79:f2:e7:8a:b7:9e:b2:e8:cf:15:eb: 89:3c:74:61:10:4a:53:68:0c:5b:56:1c:68:37:ab:6b:93:fb: dc:f1:ac:5b:8c:d2:fe:dd:d7:c1:c7:aa:40:67:7e:e6:13:d4: c7:f3:5c:24:25:8e:a9:7f:56:35:09:a5:f8:34:0c:c0:86:ba: 6c:00:92:55:43:41:99:9d:ce:8d:9f:e0:a4:8e:d7:fb:f9:31: 38:24:36:bf:11:e1:5d:30:ad:f8:62:92:2f:30:b5:b6:9d:ac: a2:1b:3a:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NGMTAxMTAvBgNVBAUTKEI4RUE3MUQwNEVDODM2RTgxODA4NzNDOUU5RDQwQ0Qy RTM1NTM3MDEwHhcNMjUxMjA1MDAxMDM4WhcNMjUxMjEyMDAxMDM4WjAYMRYwFAYD VQQDEw02OTMyMjJmZS05NTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlHb9MdThHdnoBOewRTw7jLuA/HStbdMD9HlmCnbzsPnF0j3onkUmnRFvG1S numWr1DnqPF13GfSTXfTkHREFHZJV7a4M/cAgRvAjKqEDZ43oOba/+bDekrX1cRJ gyOOlHszwEsyrBPICY5RQE/SEr8RFRg8oGn1uOjR02I8781jJQUvF3CLtl2VEFCD 9qY1yw4zxhh4ET6WU98tuYJZQxWDsn86LG1IZGN2PV/bp4zV2uM/qk2eKm8xzMBy 9Z7Pe1B3UEIlwQyRg3zzA6blEcvcSL5VnIcvwgirzVqzf53bIHjM3c6oKpEn4tuT Z+kBTvGI+Au+ALV0p7RinG30fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIH4Vdor 3eZs4m8bVg3H9oVtCDHpMB8GA1UdIwQYMBaAFLjqcdBOyDboGAhzyenUDNLjVTcB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0YxMC9FQzY3MzMzRTYw OTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51Z1lDSFBKNmRRTTB1TlZO d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPcHgwRTdJTnVnWUNIUEo2ZFFNMHVOVk53RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0YxMC9FQzY3MzMzRTYwOTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51 Z1lDSFBKNmRRTTB1TlZOd0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOI8Zu1sduzMLGueIV56Gy9UzNngCXQHrIKmjN0PI5Su2v6DulSQkV dTdyiKXwYQis29g5r+vHQTHFQKq1+HBcF+exZkwlg3SVS0HP1ijhTOUJdp9u7LcH RozdkjGrdoPOYRTA7E4K1luZNFM8KpEMKX73DkCoXH25CTxrWk91gT8t2/EqENd+ UGBgA5VA3rEatxxT60lyefLnireesujPFeuJPHRhEEpTaAxbVhxoN6trk/vc8axb jNL+3dfBx6pAZ37mE9TH81wkJY6pf1Y1CaX4NAzAhrpsAJJVQ0GZnc6Nn+Ckjtf7 +TE4JDa/EeFdMK34YpIvMLW2nayiGzr4 -----END CERTIFICATE-----Generated at Sat Dec 6 11:40:32 2025 by rpki-client