This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft File: 0uwHkLxOvTQHyVB05rVrQAA4Eto.mft (raw, json) Hash identifier: Y0QDdqiRcYKImLVBwO4VTsOljNRYQnJotpaG4IvqRxM= Subject key identifier: B2:A5:97:E4:8F:1A:E4:91:53:55:FC:63:3C:F1:DB:A5:FE:2F:A6:22 Authority key identifier: D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA Certificate issuer: /CN=A91D87CF/serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA Certificate serial: 0B2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft Manifest number: 0B27 Signing time: Thu 04 Dec 2025 18:36:55 +0000 Manifest this update: Thu 04 Dec 2025 18:36:55 +0000 Manifest next update: Thu 11 Dec 2025 18:36:55 +0000 Files and hashes: 1: 0uwHkLxOvTQHyVB05rVrQAA4Eto.crl (hash: P8p4Wi/wta2JNIEhpwu60cjSitUpc7Rijl40M1Nc3qY=) 2: 5E2A4C584ED911EAA7F1A521C4F9AE02.roa (hash: QAE/MC+xtHDwjDC4We28f6uqNECigc7G6Vc7+DGOZ34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2863 (0xb2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D87CF, serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA Validity Not Before: Dec 4 18:36:55 2025 GMT Not After : Dec 11 18:36:55 2025 GMT Subject: CN=6931d4c7-be84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4b:f0:a6:ea:05:b5:0a:bb:9e:d2:bf:f9:03: 02:37:8d:dd:c7:3d:5e:9c:cf:59:7d:df:db:d8:e3: ca:17:9d:91:5c:8d:47:38:bf:ce:4e:90:55:eb:89: 7d:ba:94:a9:51:1c:cc:7c:1c:1b:dc:cb:ce:17:3f: 8e:f8:9b:3b:37:29:dd:42:22:09:bb:f2:a4:8a:2b: 9d:31:de:b0:80:bf:ab:d4:62:1b:26:88:c3:df:86: b8:0f:55:1c:ad:6e:e6:81:b7:58:9e:e5:74:e9:19: 48:6c:f9:88:0b:e1:01:ac:60:76:1d:a1:20:e5:4f: c0:6a:31:a5:00:26:3d:50:5a:03:de:4e:8a:de:9a: 13:2a:aa:b7:35:d5:65:7e:ff:d2:f5:3b:3f:22:44: d6:37:ba:5e:dd:12:19:a0:0b:c4:c8:64:75:ae:56: f3:74:99:8c:27:9d:c1:b8:3f:ab:2e:13:63:e1:7d: 3f:91:69:7e:56:ef:67:02:6f:8a:1c:45:fa:e7:9c: 79:42:39:46:b8:86:a0:09:ad:9d:fb:44:e9:50:33: fc:a4:e9:a1:3e:c2:a4:ba:07:54:d9:26:19:a3:65: 66:c1:f2:6b:25:a9:05:29:0c:a7:ee:5a:ed:e7:39: 09:ab:ed:1d:52:4e:3f:55:0a:b0:31:92:e1:39:82: 5d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A5:97:E4:8F:1A:E4:91:53:55:FC:63:3C:F1:DB:A5:FE:2F:A6:22 X509v3 Authority Key Identifier: keyid:D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:21:88:82:f2:90:e4:4e:5b:dd:59:a2:b6:78:2c:6e:37:46: b3:a1:4c:e7:d6:07:83:56:72:14:bf:f1:7d:65:3b:0c:1f:1b: 1f:35:0e:3c:93:d0:cd:9d:d1:d8:aa:3c:4e:e4:51:ae:85:d3: 09:ef:1a:fe:0c:ae:ba:c7:98:90:8a:cb:5a:a6:c7:b1:7d:a1: d1:bf:a3:f3:43:f4:30:c4:49:5d:ec:8a:3e:5c:92:ee:17:42: 14:3a:74:bd:1e:d7:a3:e2:b1:3d:52:d4:1a:ce:93:f1:e6:03: 00:6f:a0:fb:b4:6e:61:d4:62:ea:24:da:f9:90:01:b0:0f:ee: 3d:79:7b:f8:64:32:12:93:ca:ac:94:ca:d9:76:eb:e4:b7:91: 22:0a:67:bc:3e:71:f9:8e:1d:a2:bf:46:ba:c7:67:2e:8c:7d: 1e:89:0e:c3:9a:c8:3d:25:99:de:77:eb:96:ab:ba:11:b8:30: 28:f5:92:01:0d:71:1b:38:4c:a9:f8:16:98:49:ce:10:83:5a: c8:60:5e:37:55:48:ff:0c:4a:11:27:60:0e:d7:db:cf:d4:2f: 65:93:c4:fc:21:d3:4e:86:7e:a0:fa:d9:26:39:31:b1:aa:0e: 0e:d0:27:a4:04:96:66:9a:a0:4e:4c:68:a4:3f:24:af:b4:89: ce:f7:0f:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3Q0YxMTAvBgNVBAUTKEQyRUMwNzkwQkM0RUJEMzQwN0M5NTA3NEU2QjU2QjQw MDAzODEyREEwHhcNMjUxMjA0MTgzNjU1WhcNMjUxMjExMTgzNjU1WjAYMRYwFAYD VQQDEw02OTMxZDRjNy1iZTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEvwpuoFtQq7ntK/+QMCN43dxz1enM9Zfd/b2OPKF52RXI1HOL/OTpBV64l9 upSpURzMfBwb3MvOFz+O+Js7NyndQiIJu/KkiiudMd6wgL+r1GIbJojD34a4D1Uc rW7mgbdYnuV06RlIbPmIC+EBrGB2HaEg5U/AajGlACY9UFoD3k6K3poTKqq3NdVl fv/S9Ts/IkTWN7pe3RIZoAvEyGR1rlbzdJmMJ53BuD+rLhNj4X0/kWl+Vu9nAm+K HEX655x5QjlGuIagCa2d+0TpUDP8pOmhPsKkugdU2SYZo2VmwfJrJakFKQyn7lrt 5zkJq+0dUk4/VQqwMZLhOYJdMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKll+SP GuSRU1X8Yzzx26X+L6YiMB8GA1UdIwQYMBaAFNLsB5C8Tr00B8lQdOa1a0AAOBLa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODdDRi9FNjg1QjEyQTRF RDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZUUUh5VkIwNXJWclFBQTRF dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB1d0hrTHhPdlRRSHlWQjA1clZyUUFBNEV0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODdDRi9FNjg1QjEyQTRFRDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZU UUh5VkIwNXJWclFBQTRFdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5IYiC8pDkTlvdWaK2eCxuN0azoUzn1geDVnIUv/F9ZTsMHxsfNQ48 k9DNndHYqjxO5FGuhdMJ7xr+DK66x5iQistapsexfaHRv6PzQ/QwxEld7Io+XJLu F0IUOnS9Htej4rE9UtQazpPx5gMAb6D7tG5h1GLqJNr5kAGwD+49eXv4ZDISk8qs lMrZduvkt5EiCme8PnH5jh2iv0a6x2cujH0eiQ7Dmsg9JZned+uWq7oRuDAo9ZIB DXEbOEyp+BaYSc4Qg1rIYF43VUj/DEoRJ2AO19vP1C9lk8T8IdNOhn6g+tkmOTGx qg4O0CekBJZmmqBOTGikPySvtInO9w8i -----END CERTIFICATE-----Generated at Sat Dec 6 16:13:49 2025 by rpki-client