This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft File: UkWN1qz9QNreWs3IL01ZLaUp58c.mft (raw, json) Hash identifier: qZtejCYPn7HwMtOfEhyteTiFSInQdBLVSEwVU+b2FNM= Subject key identifier: A5:FF:A7:BD:AA:B3:F0:9A:B4:08:33:B5:64:C7:41:62:A3:10:25:59 Authority key identifier: 52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7 Certificate issuer: /CN=A91DDDA7/serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7 Certificate serial: 096D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft Manifest number: 096D Signing time: Thu 04 Dec 2025 19:18:57 +0000 Manifest this update: Thu 04 Dec 2025 19:18:57 +0000 Manifest next update: Thu 11 Dec 2025 19:18:57 +0000 Files and hashes: 1: UkWN1qz9QNreWs3IL01ZLaUp58c.crl (hash: VXVVwasBBKgVKZRN4UI2poNO0AzHhM1eRlgtWxDUDGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2413 (0x96d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDDA7, serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7 Validity Not Before: Dec 4 19:18:57 2025 GMT Not After : Dec 11 19:18:57 2025 GMT Subject: CN=6931dea1-34af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f4:68:15:eb:21:d2:3f:e4:07:72:58:75:c9: db:a9:f7:16:99:4c:a6:75:47:c9:bd:49:04:49:74: 8b:f8:0b:d4:44:21:b3:47:7d:6e:d3:ce:10:96:2b: 18:bb:c6:74:3a:0b:94:2a:d9:e6:3d:80:7b:33:6b: 2b:22:8d:23:1a:5c:be:53:b6:2b:3a:8f:09:54:23: 7b:cd:04:50:68:06:09:14:05:1b:bb:ca:2d:2f:04: dc:0e:4f:82:2e:e1:ef:a8:77:55:35:63:d6:53:2f: d8:ba:b7:65:08:0a:18:83:34:d3:03:49:dc:87:88: f0:f7:f8:26:13:01:0d:1c:b2:3d:62:a9:f0:ba:6d: 26:e7:6e:45:9f:5a:a9:c0:4e:19:44:a0:ca:76:c5: a3:33:89:9d:a8:e3:52:bd:1b:88:24:c6:61:f7:3d: 3b:99:fa:59:30:8c:c3:29:42:96:4e:61:37:9e:8e: 1d:13:c6:8f:f2:1a:d2:d3:44:c1:4f:4b:ec:50:9b: 81:f9:3b:dd:59:0f:02:2f:e7:f6:56:a7:d1:28:93: 2d:db:cb:05:36:dc:b5:af:f7:2b:4e:78:31:a1:f6: 10:cc:68:1f:73:0a:d5:c5:d1:6b:e6:2f:04:5d:f6: 52:b4:57:ea:7d:a2:58:e1:ce:c7:70:3a:f6:63:a8: bd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FF:A7:BD:AA:B3:F0:9A:B4:08:33:B5:64:C7:41:62:A3:10:25:59 X509v3 Authority Key Identifier: keyid:52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:4e:c7:66:34:18:64:cc:a6:e7:2b:f7:8e:40:fd:02:b1:80: 47:6f:b4:91:b6:b4:95:d1:d7:a7:83:19:82:c0:e9:f6:43:1f: 22:6e:36:f7:71:05:ad:82:a9:ae:e4:90:49:c6:91:1c:61:6b: b2:75:bf:af:14:92:a4:43:0a:91:8b:9d:46:3c:77:f3:9d:59: 70:4f:fc:f2:a7:56:5f:79:eb:48:69:53:52:84:68:29:6a:3b: 0c:bc:de:db:63:16:44:9b:e6:23:1f:a3:98:cf:da:6b:39:b7: 6b:d2:f5:75:34:47:07:23:60:96:05:ab:45:37:73:f0:b7:2c: ef:4a:e2:71:c2:42:ab:c5:b9:e0:ee:bf:8b:70:7e:aa:10:de: 3c:79:28:3d:1f:98:5d:8e:d0:9a:43:92:4f:ba:d8:a3:12:7b: 74:29:03:8e:43:91:f0:bf:10:dc:ba:dd:9e:95:5f:8c:4b:42: 19:81:ca:d9:e7:03:55:40:00:bf:52:7f:ae:30:25:a0:d4:1d: 3c:9f:e5:2a:21:aa:69:4e:57:53:d5:2f:a8:be:5b:da:70:5d: 14:60:cb:84:af:cf:2d:60:fe:87:60:85:f2:e1:7f:19:51:3d: 49:f3:c5:1a:ce:ac:a6:93:8c:3f:c1:c7:b5:b8:c1:21:e6:09: 96:c3:b9:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREQTcxMTAvBgNVBAUTKDUyNDU4REQ2QUNGRDQwREFERTVBQ0RDODJGNEQ1OTJE QTUyOUU3QzcwHhcNMjUxMjA0MTkxODU3WhcNMjUxMjExMTkxODU3WjAYMRYwFAYD VQQDEw02OTMxZGVhMS0zNGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvRoFesh0j/kB3JYdcnbqfcWmUymdUfJvUkESXSL+AvURCGzR31u084QlisY u8Z0OguUKtnmPYB7M2srIo0jGly+U7YrOo8JVCN7zQRQaAYJFAUbu8otLwTcDk+C LuHvqHdVNWPWUy/YurdlCAoYgzTTA0nch4jw9/gmEwENHLI9Yqnwum0m525Fn1qp wE4ZRKDKdsWjM4mdqONSvRuIJMZh9z07mfpZMIzDKUKWTmE3no4dE8aP8hrS00TB T0vsUJuB+TvdWQ8CL+f2VqfRKJMt28sFNty1r/crTngxofYQzGgfcwrVxdFr5i8E XfZStFfqfaJY4c7HcDr2Y6i99wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKX/p72q s/CatAgztWTHQWKjECVZMB8GA1UdIwQYMBaAFFJFjdas/UDa3lrNyC9NWS2lKefH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERBNy8xQ0JGRTY0NEE1 MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFOcmVXczNJTDAxWkxhVXA1 OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VrV04xcXo5UU5yZVdzM0lMMDFaTGFVcDU4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RERBNy8xQ0JGRTY0NEE1MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFO cmVXczNJTDAxWkxhVXA1OGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNTsdmNBhkzKbnK/eOQP0CsYBHb7SRtrSV0dengxmCwOn2Qx8ibjb3 cQWtgqmu5JBJxpEcYWuydb+vFJKkQwqRi51GPHfznVlwT/zyp1ZfeetIaVNShGgp ajsMvN7bYxZEm+YjH6OYz9prObdr0vV1NEcHI2CWBatFN3PwtyzvSuJxwkKrxbng 7r+LcH6qEN48eSg9H5hdjtCaQ5JPutijEnt0KQOOQ5HwvxDcut2elV+MS0IZgcrZ 5wNVQAC/Un+uMCWg1B08n+UqIappTldT1S+ovlvacF0UYMuEr88tYP6HYIXy4X8Z UT1J88Uazqymk4w/wce1uMEh5gmWw7ku -----END CERTIFICATE-----Generated at Sat Dec 6 19:50:33 2025 by rpki-client