This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft File: UHztrU5Y_M0K4JOTmGWG21g_B6I.mft (raw, json) Hash identifier: 9Zbhf8ON+onZ9L9QiEJuu7wvLRewcpCwiORvC2Z4mRc= Subject key identifier: 6F:73:D9:63:86:4D:88:26:18:06:19:B7:E5:55:61:B5:26:00:2B:A8 Authority key identifier: 50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2 Certificate issuer: /CN=A912C8FD/serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2 Certificate serial: 0C10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft Manifest number: 0C10 Signing time: Thu 18 Dec 2025 18:29:18 +0000 Manifest this update: Thu 18 Dec 2025 18:29:18 +0000 Manifest next update: Thu 25 Dec 2025 18:29:18 +0000 Files and hashes: 1: UHztrU5Y_M0K4JOTmGWG21g_B6I.crl (hash: NcEByrPSRKRfBuX9zWak5Cjb6NNxpxI3LKdMWuUQSEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3088 (0xc10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8FD, serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2 Validity Not Before: Dec 18 18:29:18 2025 GMT Not After : Dec 25 18:29:18 2025 GMT Subject: CN=694447fe-7d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a1:a0:d7:79:e1:37:7d:0e:fa:5d:ab:cb:71: f2:a5:68:f4:7f:00:aa:92:25:08:c8:f0:87:16:eb: 2d:c6:13:00:a2:40:05:9f:15:16:be:54:a7:55:f6: e7:13:32:81:f7:dd:78:9e:a7:da:b2:25:5e:e5:71: ca:6a:c1:cc:bf:ac:85:f4:c1:df:4c:3e:e5:13:e9: e2:bf:ab:c2:51:01:60:b8:76:8c:8c:89:9b:a5:e8: ea:4c:4e:0a:6b:f1:ca:93:07:87:a0:ba:f3:2e:e5: b5:81:7e:41:63:91:38:b0:cd:c5:ea:a4:09:0e:57: b3:cc:64:f5:2f:cc:b0:ce:db:68:8f:73:2b:ef:a0: 40:9b:8d:e5:86:08:64:da:fa:c8:42:1b:80:55:6d: 37:4b:6e:b1:4b:35:2e:3d:e8:0d:ed:b3:53:9e:10: 5b:95:9d:10:70:f7:48:de:c3:7b:6a:48:64:83:26: 48:cc:9d:ca:73:b5:5f:97:2e:b9:b6:b9:6a:db:c7: 81:4d:81:f9:cd:b4:d0:e0:0b:a6:64:a2:86:34:2a: 9e:8f:09:92:9f:d7:b5:a0:ae:77:60:da:28:0c:1f: c4:28:1d:af:db:6c:bc:12:5b:1d:03:ad:0b:9a:6e: b1:17:ff:e6:4a:bf:58:65:9a:a7:36:af:e7:6e:9e: f8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:73:D9:63:86:4D:88:26:18:06:19:B7:E5:55:61:B5:26:00:2B:A8 X509v3 Authority Key Identifier: keyid:50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f1:95:a9:8e:52:52:de:35:af:ec:8e:38:2f:03:bc:4a:e8: b5:ba:7e:83:a6:22:f3:7b:b1:57:79:a7:b0:51:bc:4c:f9:8a: 9d:69:f8:2d:69:54:1f:7a:51:04:9d:92:3d:70:b0:3e:71:74: 4a:16:51:05:f8:31:80:10:e5:aa:0d:29:5e:52:57:8e:61:c2: 23:96:85:a7:99:4a:cc:d3:e6:f3:bb:7e:b6:37:93:df:24:3c: 9d:a4:52:e1:f7:d4:d1:d4:17:c0:fe:0c:a9:ee:bb:9b:16:ed: ad:32:4c:54:8b:be:23:22:15:f8:04:2f:fa:6a:d3:8b:f1:87: f7:00:16:c6:f9:09:97:8b:af:db:13:ec:81:a2:29:67:85:29: af:e4:d6:5d:35:34:ca:97:c3:61:20:f6:84:17:13:ca:97:a6: 2d:36:f9:ce:4a:f8:eb:74:2d:31:cb:01:f3:cc:bd:58:cb:89: 34:86:c0:4b:1e:06:bb:fe:df:60:83:f0:46:05:2e:f2:ae:58: 91:9d:5b:2c:4e:e6:c1:2c:58:0c:a1:22:fe:81:24:ee:d1:72: d8:b5:5c:39:8f:6b:0e:db:11:f7:85:2b:8b:57:c3:a1:13:df: 1a:ed:df:36:9b:d2:80:6d:d2:c3:c7:50:3e:9c:cc:6f:78:a8: 9e:fb:0b:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4RkQxMTAvBgNVBAUTKDUwN0NFREFENEU1OEZDQ0QwQUUwOTM5Mzk4NjU4NkRC NTgzRjA3QTIwHhcNMjUxMjE4MTgyOTE4WhcNMjUxMjI1MTgyOTE4WjAYMRYwFAYD VQQDDA02OTQ0NDdmZS03ZDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46Gg13nhN30O+l2ry3HypWj0fwCqkiUIyPCHFustxhMAokAFnxUWvlSnVfbn EzKB9914nqfasiVe5XHKasHMv6yF9MHfTD7lE+niv6vCUQFguHaMjImbpejqTE4K a/HKkweHoLrzLuW1gX5BY5E4sM3F6qQJDlezzGT1L8ywzttoj3Mr76BAm43lhghk 2vrIQhuAVW03S26xSzUuPegN7bNTnhBblZ0QcPdI3sN7akhkgyZIzJ3Kc7Vfly65 trlq28eBTYH5zbTQ4AumZKKGNCqejwmSn9e1oK53YNooDB/EKB2v22y8ElsdA60L mm6xF//mSr9YZZqnNq/nbp74LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9z2WOG TYgmGAYZt+VVYbUmACuoMB8GA1UdIwQYMBaAFFB87a1OWPzNCuCTk5hlhttYPwei MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhGRC82NzRDRTJGMDIx NjExMUVBODM0OTNENEZDNEY5QUUwMi9VSHp0clU1WV9NMEs0Sk9UbUdXRzIxZ19C NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIenRyVTVZX00wSzRKT1RtR1dHMjFnX0I2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhGRC82NzRDRTJGMDIxNjExMUVBODM0OTNENEZDNEY5QUUwMi9VSHp0clU1WV9N MEs0Sk9UbUdXRzIxZ19CNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK8ZWpjlJS3jWv7I44LwO8Sui1un6DpiLze7FXeaewUbxM+Yqdafgt aVQfelEEnZI9cLA+cXRKFlEF+DGAEOWqDSleUleOYcIjloWnmUrM0+bzu362N5Pf JDydpFLh99TR1BfA/gyp7rubFu2tMkxUi74jIhX4BC/6atOL8Yf3ABbG+QmXi6/b E+yBoilnhSmv5NZdNTTKl8NhIPaEFxPKl6YtNvnOSvjrdC0xywHzzL1Yy4k0hsBL Hga7/t9gg/BGBS7yrliRnVssTubBLFgMoSL+gSTu0XLYtVw5j2sO2xH3hSuLV8Oh E98a7d82m9KAbdLDx1A+nMxveKie+wvr -----END CERTIFICATE-----Generated at Fri Dec 19 17:44:51 2025 by rpki-client