This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft File: uN9D7us1RpuyzAulIS0b_yaKe24.mft (raw, json) Hash identifier: jSmFWL2dmOcpBuX3LoJkRuYmDMtbLTrsNEQXFoyk3TE= Subject key identifier: C5:25:DD:95:32:1E:9D:2A:29:A2:C3:2F:90:9A:DC:09:5A:13:91:73 Authority key identifier: B8:DF:43:EE:EB:35:46:9B:B2:CC:0B:A5:21:2D:1B:FF:26:8A:7B:6E Certificate issuer: /CN=A91F134A/serialNumber=B8DF43EEEB35469BB2CC0BA5212D1BFF268A7B6E Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft Manifest number: 0238 Signing time: Sun 07 Dec 2025 00:30:01 +0000 Manifest this update: Sun 07 Dec 2025 00:30:00 +0000 Manifest next update: Sun 14 Dec 2025 00:30:00 +0000 Files and hashes: 1: uN9D7us1RpuyzAulIS0b_yaKe24.crl (hash: iW5PbYT3aNv461H6ydYcD5avpMpLWqe6pqp77IYKNsw=) 2: 90269D3A716611ED9D80F448C4F9AE02.roa (hash: 5f74h8n3N2lPubEJTNiK66D1BQc1WtrIYebG81I+9UM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.crl rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F134A, serialNumber=B8DF43EEEB35469BB2CC0BA5212D1BFF268A7B6E Validity Not Before: Dec 7 00:30:00 2025 GMT Not After : Dec 14 00:30:00 2025 GMT Subject: CN=6934ca89-ca12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:11:b6:5f:a0:58:b0:f4:3a:26:d9:62:d8:23: 16:a3:71:5c:b1:aa:e1:d3:92:32:72:21:c7:bc:d7: cb:de:83:84:dc:ee:23:c4:f2:b2:7b:e7:f4:52:e1: 24:52:c9:a6:a2:c4:c8:02:71:fa:71:84:14:c1:91: aa:45:2b:30:a0:63:ab:cd:e1:b2:74:20:6d:d0:f6: 26:ec:26:65:dc:49:d8:ca:8c:8e:6f:23:b7:76:e9: f1:86:93:d9:dd:5d:e5:84:9d:1a:dd:55:25:a1:c7: 2e:fa:5a:7e:4d:58:c2:82:26:2e:f3:c1:e3:21:a5: 21:be:b9:e9:b6:47:1e:cc:4e:81:40:6a:32:e5:27: 0e:1d:ce:21:bf:b0:07:f1:28:56:b5:74:7e:64:9a: 9e:f4:80:ff:f3:ec:65:cb:54:5f:59:85:33:7c:ec: 85:61:77:bd:13:57:3e:6b:38:a2:c2:37:ee:2a:c0: d3:af:49:4f:cc:32:24:e3:1f:41:ce:92:0f:5e:62: 24:f9:1d:cf:e1:e7:74:8f:9f:d3:9c:17:51:9b:1a: 1c:82:88:4c:6a:ef:bc:eb:a4:2f:f2:0c:66:07:9d: 52:28:73:d0:15:0a:5c:15:0c:ec:8f:e4:e5:55:86: 73:87:6f:68:f4:d9:f6:08:14:95:b9:da:16:8d:aa: da:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:25:DD:95:32:1E:9D:2A:29:A2:C3:2F:90:9A:DC:09:5A:13:91:73 X509v3 Authority Key Identifier: keyid:B8:DF:43:EE:EB:35:46:9B:B2:CC:0B:A5:21:2D:1B:FF:26:8A:7B:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:34:96:88:cb:cb:d2:fc:b0:d2:d5:5b:a4:6b:a0:e9:a0:d7: cf:23:80:f5:ec:71:dd:2b:df:95:36:35:f8:b1:7f:e9:0a:7b: 0c:25:bd:49:de:f1:ae:e9:f9:0c:f1:db:95:f2:83:f1:04:93: 25:58:46:53:6f:8c:6b:cc:4f:48:6c:83:12:4b:c1:ca:3d:ed: 20:09:d0:01:d7:b0:6d:aa:0f:e9:e0:67:d2:50:8b:0f:7b:14: 04:83:4e:30:1c:9a:27:f0:09:6b:2d:a5:f5:8f:b1:ea:ad:e5: c9:8a:f1:1a:28:15:dc:fe:9c:58:8e:56:be:6f:c6:86:81:bd: 0e:68:f6:ac:d0:fd:60:4f:2b:60:d7:3c:de:f3:17:b6:60:54: bc:7a:0b:b5:1f:71:8c:11:0e:4e:9d:f0:36:e7:da:d8:f0:21: c4:d8:26:fc:52:cf:6f:05:d5:9f:e5:3f:9f:e1:c0:a9:6d:d1: dd:bc:1c:b1:8b:83:99:2d:8e:9e:49:16:8f:e2:95:63:cb:ef: 17:47:d7:e9:c8:bf:4d:1f:40:8c:f0:78:b7:f7:22:fc:23:d4: 10:8e:34:82:1e:f2:e2:dc:cc:f3:31:d0:e0:1b:62:b0:6b:51: 4c:6d:03:65:c5:ed:d4:56:38:b2:68:cb:88:b6:0a:56:e8:1b: 05:32:cb:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEzNEExMTAvBgNVBAUTKEI4REY0M0VFRUIzNTQ2OUJCMkNDMEJBNTIxMkQxQkZG MjY4QTdCNkUwHhcNMjUxMjA3MDAzMDAwWhcNMjUxMjE0MDAzMDAwWjAYMRYwFAYD VQQDEw02OTM0Y2E4OS1jYTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4hG2X6BYsPQ6Jtli2CMWo3Fcsarh05IyciHHvNfL3oOE3O4jxPKye+f0UuEk UsmmosTIAnH6cYQUwZGqRSswoGOrzeGydCBt0PYm7CZl3EnYyoyObyO3dunxhpPZ 3V3lhJ0a3VUloccu+lp+TVjCgiYu88HjIaUhvrnptkcezE6BQGoy5ScOHc4hv7AH 8ShWtXR+ZJqe9ID/8+xly1RfWYUzfOyFYXe9E1c+aziiwjfuKsDTr0lPzDIk4x9B zpIPXmIk+R3P4ed0j5/TnBdRmxocgohMau+866Qv8gxmB51SKHPQFQpcFQzsj+Tl VYZzh29o9Nn2CBSVudoWjarakQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUl3ZUy Hp0qKaLDL5Ca3AlaE5FzMB8GA1UdIwQYMBaAFLjfQ+7rNUabsswLpSEtG/8mintu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTM0QS9GOTc2QkZEQTcx NjIxMUVEODg5MzEzMzFDNEY5QUUwMi91TjlEN3VzMVJwdXl6QXVsSVMwYl95YUtl MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VOOUQ3dXMxUnB1eXpBdWxJUzBiX3lhS2UyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTM0QS9GOTc2QkZEQTcxNjIxMUVEODg5MzEzMzFDNEY5QUUwMi91TjlEN3VzMVJw dXl6QXVsSVMwYl95YUtlMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBONJaIy8vS/LDS1Vuka6DpoNfPI4D17HHdK9+VNjX4sX/pCnsMJb1J 3vGu6fkM8duV8oPxBJMlWEZTb4xrzE9IbIMSS8HKPe0gCdAB17Btqg/p4GfSUIsP exQEg04wHJon8AlrLaX1j7HqreXJivEaKBXc/pxYjla+b8aGgb0OaPas0P1gTytg 1zze8xe2YFS8egu1H3GMEQ5OnfA259rY8CHE2Cb8Us9vBdWf5T+f4cCpbdHdvByx i4OZLY6eSRaP4pVjy+8XR9fpyL9NH0CM8Hi39yL8I9QQjjSCHvLi3MzzMdDgG2Kw a1FMbQNlxe3UVjiyaMuItgpW6BsFMstC -----END CERTIFICATE-----Generated at Mon Dec 8 09:12:52 2025 by rpki-client