This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft File: UxdJCV5En9gqodtQ2oNAFyML3RM.mft (raw, json) Hash identifier: WVvb5g0RzuMBgfsS4u7R5Y16wobpCFjzalfKlvUs80I= Subject key identifier: 43:67:3C:D1:A3:E0:AB:75:E1:A5:D6:BD:FD:6F:C6:69:C7:81:C0:B2 Authority key identifier: 53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 Certificate issuer: /CN=A9117754/serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Certificate serial: 0BE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft Manifest number: 0BDF Signing time: Thu 18 Dec 2025 18:34:28 +0000 Manifest this update: Thu 18 Dec 2025 18:34:28 +0000 Manifest next update: Thu 25 Dec 2025 18:34:28 +0000 Files and hashes: 1: UxdJCV5En9gqodtQ2oNAFyML3RM.crl (hash: vCdv837ocsRHG4YK0wHTCtggbGzBgBZhuuoxjx0YOto=) 2: B5761C3E2C8E11EA83DAB436C4F9AE02.roa (hash: VE/5lNULYXEEuWID4sAqexSIpx9InEaDo4uE/0apCfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3047 (0xbe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117754, serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Validity Not Before: Dec 18 18:34:28 2025 GMT Not After : Dec 25 18:34:28 2025 GMT Subject: CN=69444934-50e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:97:1a:24:70:66:7b:e7:fd:d4:25:e3:f7:41: 02:91:d7:e1:b6:23:43:f5:30:ef:af:fe:28:31:d1: 15:25:15:4b:81:06:e9:33:6e:ff:d0:52:cc:84:4c: 2a:60:49:f2:5b:42:e2:9f:63:e0:1c:1a:68:89:2d: e9:0d:a4:99:77:52:bc:6d:0c:28:27:79:43:14:0e: 49:6f:ac:6a:fc:ef:0c:e2:72:ce:01:cc:92:4b:96: 75:9d:74:59:76:ae:b1:c7:36:29:67:e9:fb:a7:69: d5:a9:0c:33:73:55:70:ec:ad:c1:9f:21:6c:3c:e8: 24:51:bc:f1:58:c7:00:c4:a5:e3:28:5f:90:db:64: b8:34:3b:f1:38:d9:48:62:ac:28:ee:70:fb:a5:7b: ba:f0:26:5d:24:59:70:30:36:6e:4a:39:f3:ef:ad: 95:11:86:25:b1:fe:c0:23:89:f5:f2:af:97:f2:b4: b8:75:bb:d2:ff:c1:3a:ae:5c:d0:26:09:7b:1a:d4: b1:6c:0f:96:7a:74:a7:ab:63:26:87:7c:b1:2a:ee: 93:33:fe:a8:90:fb:93:31:c0:b2:22:00:38:5d:d7: 43:b6:f0:2f:a7:db:e6:fa:7b:cf:69:da:a3:01:61: 58:89:64:3c:d6:e4:d0:3b:48:b0:55:54:fa:bf:3c: 94:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:67:3C:D1:A3:E0:AB:75:E1:A5:D6:BD:FD:6F:C6:69:C7:81:C0:B2 X509v3 Authority Key Identifier: keyid:53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:6e:40:51:2f:85:16:8e:f4:8f:55:35:88:5c:d4:37:34:40: 2e:c6:54:62:d1:0c:de:db:01:7b:10:6f:79:2d:be:11:a6:7c: 6b:df:2b:e0:8a:35:e9:88:6a:c5:9f:2f:09:8b:f9:b6:27:63: 61:20:45:30:d5:03:ae:d2:8f:bc:0a:a3:07:58:13:87:e0:96: a3:f1:4b:cb:00:87:49:8f:d9:b7:06:71:64:6d:79:3f:2b:b6: 96:cf:e2:f1:3f:95:77:bf:61:6f:48:40:8a:94:aa:55:d2:aa: 9b:54:53:ae:79:8b:2b:e5:f3:c7:1a:07:45:03:5b:39:00:f7: 4c:25:f3:e1:06:80:cb:75:be:f1:e2:0e:66:ed:28:42:36:ff: 45:f7:95:25:40:88:00:8b:77:2f:eb:e4:f9:c1:b0:85:f0:a8: 19:a5:1b:e9:b2:f7:68:3c:08:f0:58:46:2d:62:ef:ce:94:b6: f7:ed:a5:45:f1:0d:c4:54:2f:dd:2a:93:fb:80:ac:9c:7f:64: 3a:4e:d7:a7:0e:b7:48:4f:64:e6:6a:df:09:77:6e:78:38:42: 28:cb:bd:87:fd:9c:5e:c4:0b:84:7f:0e:1c:ba:a2:bf:15:18: e7:86:94:5f:59:03:6d:c0:6a:0c:00:37:9c:f3:15:3e:25:b6: 41:e8:be:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3NTQxMTAvBgNVBAUTKDUzMTc0OTA5NUU0NDlGRDgyQUExREI1MERBODM0MDE3 MjMwQkREMTMwHhcNMjUxMjE4MTgzNDI4WhcNMjUxMjI1MTgzNDI4WjAYMRYwFAYD VQQDDA02OTQ0NDkzNC01MGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15caJHBme+f91CXj90ECkdfhtiND9TDvr/4oMdEVJRVLgQbpM27/0FLMhEwq YEnyW0Lin2PgHBpoiS3pDaSZd1K8bQwoJ3lDFA5Jb6xq/O8M4nLOAcySS5Z1nXRZ dq6xxzYpZ+n7p2nVqQwzc1Vw7K3BnyFsPOgkUbzxWMcAxKXjKF+Q22S4NDvxONlI Yqwo7nD7pXu68CZdJFlwMDZuSjnz762VEYYlsf7AI4n18q+X8rS4dbvS/8E6rlzQ Jgl7GtSxbA+WenSnq2Mmh3yxKu6TM/6okPuTMcCyIgA4XddDtvAvp9vm+nvPadqj AWFYiWQ81uTQO0iwVVT6vzyUAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENnPNGj 4Kt14aXWvf1vxmnHgcCyMB8GA1UdIwQYMBaAFFMXSQleRJ/YKqHbUNqDQBcjC90T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzc1NC84QjMxNDVBRTJD OEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45Z3FvZHRRMm9OQUZ5TUwz Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4ZEpDVjVFbjlncW9kdFEyb05BRnlNTDNSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Nzc1NC84QjMxNDVBRTJDOEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45 Z3FvZHRRMm9OQUZ5TUwzUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJbkBRL4UWjvSPVTWIXNQ3NEAuxlRi0Qze2wF7EG95Lb4Rpnxr3yvg ijXpiGrFny8Ji/m2J2NhIEUw1QOu0o+8CqMHWBOH4Jaj8UvLAIdJj9m3BnFkbXk/ K7aWz+LxP5V3v2FvSECKlKpV0qqbVFOueYsr5fPHGgdFA1s5APdMJfPhBoDLdb7x 4g5m7ShCNv9F95UlQIgAi3cv6+T5wbCF8KgZpRvpsvdoPAjwWEYtYu/OlLb37aVF 8Q3EVC/dKpP7gKycf2Q6TtenDrdIT2Tmat8Jd254OEIoy72H/ZxexAuEfw4cuqK/ FRjnhpRfWQNtwGoMADec8xU+JbZB6L6X -----END CERTIFICATE-----Generated at Fri Dec 19 23:59:32 2025 by rpki-client