This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft File: uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft (raw, json) Hash identifier: 3eLSKa10xfvg9mkH7Y3lFqGfwsLD+O40d307tT81Jd4= Subject key identifier: 45:98:27:A2:84:8F:B0:07:3D:8C:D4:9D:AF:8F:6B:43:59:0F:FE:95 Authority key identifier: B8:AD:8D:91:6C:D9:48:2B:6D:A5:5D:30:7C:E9:5C:07:A9:5B:2F:74 Certificate issuer: /CN=A91103CF/serialNumber=B8AD8D916CD9482B6DA55D307CE95C07A95B2F74 Certificate serial: 03FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft Manifest number: 03F1 Signing time: Sat 20 Dec 2025 23:48:21 +0000 Manifest this update: Sat 20 Dec 2025 23:48:21 +0000 Manifest next update: Sat 27 Dec 2025 23:48:21 +0000 Files and hashes: 1: uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl (hash: /BruM07qyCBbJj+GVg2NZy0Kw+z4o4uyNVxPUUGsK+o=) 2: 931A51C07F5811EE82ECE456C4F9AE02.roa (hash: WWLeH3632fyjkdTa5V1Kbc7nqGm176NLqMwGAoiNN0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1018 (0x3fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91103CF, serialNumber=B8AD8D916CD9482B6DA55D307CE95C07A95B2F74 Validity Not Before: Dec 20 23:48:21 2025 GMT Not After : Dec 27 23:48:21 2025 GMT Subject: CN=694735c5-bb43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:54:65:71:ed:39:47:49:0f:f3:f9:8e:39:65: 71:ce:d8:4e:38:56:a8:53:16:4b:a9:f8:ec:94:2f: 12:69:6c:2d:ad:c8:36:43:61:b9:14:e1:65:2d:72: ab:47:d4:a0:f7:1a:04:ca:c5:de:4c:dc:79:3b:79: 22:df:d2:4e:6b:7a:79:53:5f:a8:bc:84:38:0c:16: 3e:69:da:8b:38:f8:e9:1f:51:2e:92:96:6c:6e:9f: e0:c4:25:16:81:02:b0:4b:d2:a4:2b:66:9f:48:e8: b2:51:6e:dd:e1:c2:60:03:d7:28:51:3a:1a:94:46: e0:54:5b:d5:95:bf:cd:29:37:03:09:fd:f1:f8:cf: ff:60:f8:0f:04:87:8d:4d:06:0b:29:e9:f1:a9:7c: 0d:9f:b4:7c:69:2b:ec:c5:b1:8e:13:00:70:9d:65: 6b:57:da:35:35:e1:c2:6e:f7:f5:bb:8e:9a:2d:f7: 74:2d:af:7f:c5:48:64:42:d9:3e:f3:24:cc:7a:04: 38:84:df:a6:8a:52:04:7f:07:06:4b:5e:24:ce:5b: 33:32:25:0b:96:63:61:0b:7e:1a:b7:30:c2:1f:a0: ed:bd:04:a5:62:81:4a:7b:af:14:42:3d:53:46:43: d0:80:ef:fa:f3:8f:11:b5:ae:a0:32:b1:e3:b2:27: 25:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:98:27:A2:84:8F:B0:07:3D:8C:D4:9D:AF:8F:6B:43:59:0F:FE:95 X509v3 Authority Key Identifier: keyid:B8:AD:8D:91:6C:D9:48:2B:6D:A5:5D:30:7C:E9:5C:07:A9:5B:2F:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:d6:99:79:ae:0a:40:4d:10:18:55:9d:05:41:02:df:e3:d6: 63:cb:ca:a6:03:10:87:54:a8:e5:a5:2f:7d:13:c8:a2:58:37: b1:f4:8c:b0:6b:0a:90:23:cd:79:69:7c:9e:66:74:c5:cf:aa: ca:04:71:d8:9f:e5:29:3c:d6:da:f5:a7:e7:b2:82:11:5b:36: b3:f5:57:bc:91:49:8c:4a:bb:bd:e1:c1:ab:55:e8:88:5b:f4: 96:a6:7e:4b:20:06:dd:1a:c0:aa:57:a6:38:c0:99:1c:b3:49: 9b:90:d5:40:09:d7:d5:d9:55:06:a0:62:18:f2:86:a8:74:85: 28:9c:49:7f:2e:49:dd:3a:c9:cc:94:d3:75:19:1b:8b:f0:6f: 58:77:04:5c:5d:03:30:e6:03:c2:dd:5e:ab:f5:c1:f4:ec:9d: 07:55:c0:a4:4a:c3:45:60:f1:6f:01:ed:f8:fe:d2:a5:ae:a0: 85:3b:94:61:1b:ce:97:73:e3:ae:91:cd:ca:b3:b5:b1:8d:1a: b0:de:37:3f:d7:85:97:c1:f9:6a:0d:29:9b:da:bf:7f:55:fe: 72:f7:3c:a8:2f:12:4e:6c:8c:d9:e4:89:ce:e0:76:b4:5e:0d: 61:65:6b:a5:e7:db:2b:75:5d:b6:9c:21:49:77:5f:ac:e0:7f: ec:c2:98:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAzQ0YxMTAvBgNVBAUTKEI4QUQ4RDkxNkNEOTQ4MkI2REE1NUQzMDdDRTk1QzA3 QTk1QjJGNzQwHhcNMjUxMjIwMjM0ODIxWhcNMjUxMjI3MjM0ODIxWjAYMRYwFAYD VQQDDA02OTQ3MzVjNS1iYjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFRlce05R0kP8/mOOWVxzthOOFaoUxZLqfjslC8SaWwtrcg2Q2G5FOFlLXKr R9Sg9xoEysXeTNx5O3ki39JOa3p5U1+ovIQ4DBY+adqLOPjpH1EukpZsbp/gxCUW gQKwS9KkK2afSOiyUW7d4cJgA9coUToalEbgVFvVlb/NKTcDCf3x+M//YPgPBIeN TQYLKenxqXwNn7R8aSvsxbGOEwBwnWVrV9o1NeHCbvf1u46aLfd0La9/xUhkQtk+ 8yTMegQ4hN+milIEfwcGS14kzlszMiULlmNhC34atzDCH6DtvQSlYoFKe68UQj1T RkPQgO/6848Rta6gMrHjsiclSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWYJ6KE j7AHPYzUna+Pa0NZD/6VMB8GA1UdIwQYMBaAFLitjZFs2UgrbaVdMHzpXAepWy90 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDNDRi8xN0Q2RTRDMkE2 OEExMUVDQTlBNjM1NTFDNEY5QUUwMi91SzJOa1d6WlNDdHRwVjB3Zk9sY0I2bGJM M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VLMk5rV3paU0N0dHBWMHdmT2xjQjZsYkwzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDNDRi8xN0Q2RTRDMkE2OEExMUVDQTlBNjM1NTFDNEY5QUUwMi91SzJOa1d6WlND dHRwVjB3Zk9sY0I2bGJMM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU1pl5rgpATRAYVZ0FQQLf49Zjy8qmAxCHVKjlpS99E8iiWDex9Iyw awqQI815aXyeZnTFz6rKBHHYn+UpPNba9afnsoIRWzaz9Ve8kUmMSru94cGrVeiI W/SWpn5LIAbdGsCqV6Y4wJkcs0mbkNVACdfV2VUGoGIY8oaodIUonEl/LkndOsnM lNN1GRuL8G9YdwRcXQMw5gPC3V6r9cH07J0HVcCkSsNFYPFvAe34/tKlrqCFO5Rh G86Xc+Oukc3Ks7WxjRqw3jc/14WXwflqDSmb2r9/Vf5y9zyoLxJObIzZ5InO4Ha0 Xg1hZWul59srdV22nCFJd1+s4H/swpiB -----END CERTIFICATE-----Generated at Mon Dec 22 10:05:45 2025 by rpki-client