This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft File: xUK94Lg0fDed4d4dgkOpLLlMh00.mft (raw, json) Hash identifier: kPXObosj6gCuhpsCVm5vBeBHJu5btFfnamKLYO35uSE= Subject key identifier: 18:B7:C5:0D:CD:93:19:C5:C2:B3:1D:B3:E0:22:4E:CF:6F:C5:86:41 Authority key identifier: C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D Certificate issuer: /CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft Manifest number: 0160 Signing time: Fri 05 Dec 2025 02:11:45 +0000 Manifest this update: Fri 05 Dec 2025 02:11:44 +0000 Manifest next update: Fri 12 Dec 2025 02:11:44 +0000 Files and hashes: 1: xUK94Lg0fDed4d4dgkOpLLlMh00.crl (hash: umoPHCF90K2j3WtF/+eRGQ/ryOR0mINZldZIrm7HSyk=) 2: FE9EA8D4B67A11EEB24FA643C4F9AE02.roa (hash: +xX3fyh3F9druR4nFxovnFPsJhxpAOsF0rFF0c+Rr5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB297, serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D Validity Not Before: Dec 5 02:11:44 2025 GMT Not After : Dec 12 02:11:44 2025 GMT Subject: CN=69323f61-bd21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d1:0e:13:a1:72:6e:cc:21:da:d1:6a:7b:53: 77:f3:7e:70:df:26:44:7e:1d:6d:06:d9:13:ed:ce: 66:d6:5b:c0:a9:0b:f7:92:79:cb:4e:ad:e2:9a:74: 7d:52:6e:a9:65:ce:a5:7c:cd:ed:cf:04:70:cd:f7: 2a:72:6e:fd:dc:15:0f:7f:06:73:94:45:4f:18:e5: 5a:7e:08:8b:8f:49:fa:8a:6c:a4:6c:e9:66:a0:43: a4:ef:3d:ae:4f:00:31:9b:5a:8a:0d:6a:45:76:c2: 05:9e:84:fb:13:9d:4e:cb:de:5f:6f:f7:33:90:c7: d8:9f:a8:7a:d7:d4:b9:e2:98:00:bd:a7:0b:9e:39: 05:d1:4a:b8:6c:ce:7a:11:6e:51:07:32:18:0e:27: 59:6d:e1:79:c3:47:af:8c:dc:e2:f4:ea:e0:2e:3b: 99:21:e3:e5:10:8a:60:80:64:60:17:34:0a:2f:1f: 61:0b:33:90:67:3d:2d:28:88:af:d1:0c:32:f1:da: 17:82:ec:aa:72:5a:f1:f2:6f:67:05:f1:db:29:dd: ee:94:33:44:8a:f7:2d:5a:d6:72:5e:d8:79:d2:16: 43:5f:ef:03:c3:6e:f0:5a:57:95:02:20:f4:c7:07: 17:69:4d:59:27:8b:0a:74:ef:37:fc:16:6e:20:73: 95:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B7:C5:0D:CD:93:19:C5:C2:B3:1D:B3:E0:22:4E:CF:6F:C5:86:41 X509v3 Authority Key Identifier: keyid:C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:fe:f2:35:70:78:54:5f:91:7f:61:2b:60:a1:4d:ef:52:97: 59:40:6b:59:51:e1:c4:b1:25:ee:49:18:25:47:29:b8:ad:78: 8d:c3:16:07:1b:6f:f6:3f:f7:59:31:4c:c6:ee:33:ed:fd:67: ab:d5:a3:64:97:70:78:4e:e7:cd:59:a2:d9:97:0d:37:8e:97: 3a:7b:a1:10:76:d2:5d:fa:57:d2:a1:3f:ab:90:b8:a8:98:23: 1c:71:5a:9d:ce:75:96:7e:35:24:00:07:39:c8:b2:5e:68:29: 19:54:c6:8d:a1:88:5a:52:57:95:ed:6b:26:d6:ea:fd:c7:1c: 6d:b2:5f:3f:49:e7:2d:e5:aa:f5:5f:85:ea:ed:ed:cf:69:dd: ff:16:00:30:4b:f2:cc:44:53:74:c8:14:85:68:71:e7:b6:e8: 94:48:09:a4:e6:76:49:12:6f:7d:78:67:2c:bd:70:ee:16:f6: 7e:e7:b3:23:f7:bf:1a:1e:40:77:d4:25:44:f9:f3:4b:4c:9b: f4:f4:e4:72:4f:83:26:42:96:26:ae:f4:af:cf:4f:a2:88:11: 3e:88:21:e7:18:04:ca:db:78:ca:9b:e4:0a:cc:72:a1:cd:60: f1:d0:be:28:b0:36:56:24:f3:71:ba:74:ee:8c:c9:eb:e3:6b: c4:28:c8:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIyOTcxMTAvBgNVBAUTKEM1NDJCREUwQjgzNDdDMzc5REUxREUxRDgyNDNBOTJD Qjk0Qzg3NEQwHhcNMjUxMjA1MDIxMTQ0WhcNMjUxMjEyMDIxMTQ0WjAYMRYwFAYD VQQDEw02OTMyM2Y2MS1iZDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdEOE6Fybswh2tFqe1N3835w3yZEfh1tBtkT7c5m1lvAqQv3knnLTq3imnR9 Um6pZc6lfM3tzwRwzfcqcm793BUPfwZzlEVPGOVafgiLj0n6imykbOlmoEOk7z2u TwAxm1qKDWpFdsIFnoT7E51Oy95fb/czkMfYn6h619S54pgAvacLnjkF0Uq4bM56 EW5RBzIYDidZbeF5w0evjNzi9OrgLjuZIePlEIpggGRgFzQKLx9hCzOQZz0tKIiv 0Qwy8doXguyqclrx8m9nBfHbKd3ulDNEivctWtZyXth50hZDX+8Dw27wWleVAiD0 xwcXaU1ZJ4sKdO83/BZuIHOVcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBi3xQ3N kxnFwrMds+AiTs9vxYZBMB8GA1UdIwQYMBaAFMVCveC4NHw3neHeHYJDqSy5TIdN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjI5Ny85QTg5MEU2RUI1 RTExMUVFQTBBNjE3NkRDNEY5QUUwMi94VUs5NExnMGZEZWQ0ZDRkZ2tPcExMbE1o MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVSzk0TGcwZkRlZDRkNGRna09wTExsTWgwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjI5Ny85QTg5MEU2RUI1RTExMUVFQTBBNjE3NkRDNEY5QUUwMi94VUs5NExnMGZE ZWQ0ZDRkZ2tPcExMbE1oMDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN/vI1cHhUX5F/YStgoU3vUpdZQGtZUeHEsSXuSRglRym4rXiNwxYH G2/2P/dZMUzG7jPt/Wer1aNkl3B4TufNWaLZlw03jpc6e6EQdtJd+lfSoT+rkLio mCMccVqdznWWfjUkAAc5yLJeaCkZVMaNoYhaUleV7Wsm1ur9xxxtsl8/Sect5ar1 X4Xq7e3Pad3/FgAwS/LMRFN0yBSFaHHntuiUSAmk5nZJEm99eGcsvXDuFvZ+57Mj 978aHkB31CVE+fNLTJv09ORyT4MmQpYmrvSvz0+iiBE+iCHnGATK23jKm+QKzHKh zWDx0L4osDZWJPNxunTujMnr42vEKMhb -----END CERTIFICATE-----Generated at Sat Dec 6 14:43:39 2025 by rpki-client