This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft File: Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft (raw, json) Hash identifier: kptpVoDrQPcm3L/wXCM2uW/ThLacHiTOmMFd8X5NNUw= Subject key identifier: 23:41:2B:51:E9:FA:A9:D3:2D:AF:ED:26:9A:D5:6F:B1:F3:91:A4:8F Authority key identifier: 52:8F:6E:CE:08:2B:EB:3D:D0:A6:6D:91:47:3F:CC:65:69:CD:5F:4E Certificate issuer: /CN=A913CDC4/serialNumber=528F6ECE082BEB3DD0A66D91473FCC6569CD5F4E Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft Manifest number: 0239 Signing time: Fri 19 Dec 2025 01:14:27 +0000 Manifest this update: Fri 19 Dec 2025 01:14:26 +0000 Manifest next update: Fri 26 Dec 2025 01:14:26 +0000 Files and hashes: 1: Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl (hash: jd6Wq4HY2vtPsGvHFzOkt661apB6L7VWdZGt7vVNyuM=) 2: 2F38972E672B11EEBA84E00CC4F9AE02.roa (hash: F2m4EZaWhb+L+raUozQ7KqaAu1awnSWg4wSyn9tXN5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CDC4, serialNumber=528F6ECE082BEB3DD0A66D91473FCC6569CD5F4E Validity Not Before: Dec 19 01:14:26 2025 GMT Not After : Dec 26 01:14:26 2025 GMT Subject: CN=6944a6f3-079e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b6:a7:cb:41:d1:4e:95:50:92:fd:c4:f5:1e: 1a:be:01:7f:14:f3:ed:9d:af:3c:f7:63:89:39:05: 0d:be:50:0c:ce:8e:39:60:75:0d:e4:20:39:42:03: 51:e5:dd:5d:3e:8f:bb:ff:37:47:ba:e6:6d:39:d9: 2a:87:67:a9:de:7a:4d:b6:61:a0:5c:b1:92:03:b7: a7:9f:e3:99:30:dc:88:8c:c4:88:37:02:39:bf:7c: fc:98:05:82:d7:dd:3d:a0:94:0f:1b:7d:5a:40:23: c4:75:df:33:79:fd:2f:c9:94:62:71:96:5d:61:da: 55:d1:45:1a:fe:c7:24:15:73:74:f2:7d:a3:a0:29: ed:4d:03:59:79:d1:1a:24:2f:e5:64:61:ad:4f:c9: 7b:6d:88:eb:bd:f7:92:22:2a:39:2e:7f:85:4e:5a: 3c:79:02:07:0c:f3:91:a2:1c:bc:17:8b:4b:ce:05: 45:fc:d1:90:ab:a4:c1:91:ce:98:5f:d2:b9:a1:10: f1:2b:13:05:70:1a:ee:52:db:a8:31:38:e2:6a:27: 39:e6:5a:5a:48:f9:d1:c3:f5:d7:2e:d5:f5:6b:d4: 3c:9f:c5:44:53:c7:e3:4f:2d:b4:da:af:ef:6c:da: 92:ca:d7:67:cc:cd:4a:73:62:f2:d6:98:1a:06:5f: a5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:41:2B:51:E9:FA:A9:D3:2D:AF:ED:26:9A:D5:6F:B1:F3:91:A4:8F X509v3 Authority Key Identifier: keyid:52:8F:6E:CE:08:2B:EB:3D:D0:A6:6D:91:47:3F:CC:65:69:CD:5F:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:e7:42:a2:c7:54:fb:36:1c:c7:ec:dd:1b:8f:24:d0:53:9c: 60:3b:6f:56:fd:95:c4:f9:47:49:42:bc:a4:03:b8:9b:bd:38: 51:8f:b9:84:a1:cf:03:85:75:5a:24:ed:83:a4:3d:00:a3:6a: 55:48:83:ca:8e:e4:ec:34:80:1e:3a:8d:a5:b9:6f:11:18:2c: 8b:a8:6d:94:3a:57:6a:53:72:04:27:de:3a:91:4e:83:93:12: aa:e2:68:ea:df:05:f0:d4:d6:91:97:b3:ae:b3:22:5d:c5:b6: 4b:a0:94:1d:54:48:7e:cf:9b:61:5d:b8:74:c6:2b:3e:98:d2: 96:cd:f1:4f:bb:d1:96:14:45:80:a2:82:f3:29:65:b6:45:c9: 1f:a3:0e:88:c2:0c:5b:d4:c7:e7:8f:b5:df:b8:5d:cd:e5:03: b7:08:37:28:d3:03:79:36:9d:8a:0b:07:bc:51:97:eb:e2:28: b5:6e:3f:62:5d:27:ac:30:8c:06:99:30:70:e2:89:bd:fd:a6: b9:be:79:f7:51:6e:4d:c6:32:51:cf:5c:11:99:f9:22:f0:d3: b1:80:78:eb:bd:f2:06:54:d2:8f:71:4e:5b:ba:6b:55:36:60: dd:f1:60:1b:78:66:a9:bc:5a:36:e5:9d:07:2f:65:fb:25:54: 86:ec:ee:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NEQzQxMTAvBgNVBAUTKDUyOEY2RUNFMDgyQkVCM0REMEE2NkQ5MTQ3M0ZDQzY1 NjlDRDVGNEUwHhcNMjUxMjE5MDExNDI2WhcNMjUxMjI2MDExNDI2WjAYMRYwFAYD VQQDDA02OTQ0YTZmMy0wNzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprany0HRTpVQkv3E9R4avgF/FPPtna8892OJOQUNvlAMzo45YHUN5CA5QgNR 5d1dPo+7/zdHuuZtOdkqh2ep3npNtmGgXLGSA7enn+OZMNyIjMSINwI5v3z8mAWC 1909oJQPG31aQCPEdd8zef0vyZRicZZdYdpV0UUa/sckFXN08n2joCntTQNZedEa JC/lZGGtT8l7bYjrvfeSIio5Ln+FTlo8eQIHDPORohy8F4tLzgVF/NGQq6TBkc6Y X9K5oRDxKxMFcBruUtuoMTjiaic55lpaSPnRw/XXLtX1a9Q8n8VEU8fjTy202q/v bNqSytdnzM1Kc2Ly1pgaBl+lPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNBK1Hp +qnTLa/tJprVb7HzkaSPMB8GA1UdIwQYMBaAFFKPbs4IK+s90KZtkUc/zGVpzV9O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0RDNC9GODQ4NUY2Njgw Q0ExMUVEODVEQTkxM0RDNEY5QUUwMi9Vbzl1emdncjZ6M1FwbTJSUnpfTVpXbk5Y MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvOXV6Z2dyNnozUXBtMlJSel9NWlduTlgwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0RDNC9GODQ4NUY2NjgwQ0ExMUVEODVEQTkxM0RDNEY5QUUwMi9Vbzl1emdncjZ6 M1FwbTJSUnpfTVpXbk5YMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP50Kix1T7NhzH7N0bjyTQU5xgO29W/ZXE+UdJQrykA7ibvThRj7mE oc8DhXVaJO2DpD0Ao2pVSIPKjuTsNIAeOo2luW8RGCyLqG2UOldqU3IEJ946kU6D kxKq4mjq3wXw1NaRl7OusyJdxbZLoJQdVEh+z5thXbh0xis+mNKWzfFPu9GWFEWA ooLzKWW2Rckfow6Iwgxb1Mfnj7XfuF3N5QO3CDco0wN5Np2KCwe8UZfr4ii1bj9i XSesMIwGmTBw4om9/aa5vnn3UW5NxjJRz1wRmfki8NOxgHjrvfIGVNKPcU5bumtV NmDd8WAbeGapvFo25Z0HL2X7JVSG7O5l -----END CERTIFICATE-----Generated at Fri Dec 19 17:44:48 2025 by rpki-client