This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft File: UmRCqpPf8MUTmmF7DeZFtznmvs0.mft (raw, json) Hash identifier: 0zlPiF14JBPYHSKs/59eToSe9bB7DejbirNP9JFK/Fw= Subject key identifier: BB:88:BE:AC:66:ED:4F:D9:42:AE:B1:31:51:14:3C:9F:8A:AD:40:F7 Authority key identifier: 52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD Certificate issuer: /CN=A9140D7D/serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Certificate serial: 0A59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft Manifest number: 0A4F Signing time: Wed 31 Dec 2025 19:23:05 +0000 Manifest this update: Wed 31 Dec 2025 19:23:04 +0000 Manifest next update: Wed 07 Jan 2026 19:23:04 +0000 Files and hashes: 1: UmRCqpPf8MUTmmF7DeZFtznmvs0.crl (hash: KNJ3zl/FbWBptSgdFZvK/8rY4JZes7ol+w3we9dR5zk=) 2: 1C9AB3F67D6711EA90858415C4F9AE02.roa (hash: oi91Qfh6vx3udOQFWmZQlAlwWv2n7sWukG/Y5qWMZrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 19:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2649 (0xa59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D7D, serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Validity Not Before: Dec 31 19:23:04 2025 GMT Not After : Jan 7 19:23:04 2026 GMT Subject: CN=69557818-9bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d6:29:7b:df:0b:0b:8a:71:98:92:86:3b:a4: 5f:d1:4e:39:7c:f2:c7:d4:5b:35:c3:15:75:e0:53: dc:a3:f6:76:2b:30:ba:b0:a9:18:2f:8d:4f:66:5e: 8d:51:81:d8:21:3b:c6:75:85:c6:8f:f2:1c:bc:57: 88:38:12:79:7b:d3:f6:69:0b:ec:ad:79:0c:c5:cd: e5:3f:9b:d2:03:96:ec:00:df:6a:9f:ae:75:ad:a2: 3e:77:9e:e4:27:1d:f6:f2:71:ba:5d:21:6a:7b:b6: 6e:5f:ff:40:48:bf:c5:bd:88:20:f0:03:aa:cb:17: cf:7b:d1:bd:f5:d1:f7:59:7a:17:08:f6:ae:4e:56: 87:4e:59:36:00:f8:31:27:4d:59:c3:89:ef:eb:ef: 76:b7:c0:60:b5:d8:5e:1e:75:36:d4:d9:0a:c2:9d: 78:4f:03:5d:60:ae:c8:d9:ab:51:7a:27:df:ee:58: 1f:66:33:04:9f:f5:7d:f0:81:8b:e0:a3:3f:dc:04: 85:33:25:c7:9c:4a:55:67:02:cd:59:e9:53:f7:c7: 6e:0a:21:5c:0e:62:d6:46:45:4c:8c:76:b2:96:5e: 34:51:e8:f0:e7:a2:f3:c6:6d:de:de:a8:b0:bb:55: c8:84:59:fe:20:9b:c1:39:61:4b:62:65:44:50:0a: b9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:88:BE:AC:66:ED:4F:D9:42:AE:B1:31:51:14:3C:9F:8A:AD:40:F7 X509v3 Authority Key Identifier: keyid:52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:19:27:c0:b3:af:84:43:ea:b4:55:f5:52:9a:d8:a1:24:1d: 19:58:b0:65:96:02:76:a2:50:9d:0e:99:90:d5:97:e4:fb:5f: d6:23:2f:2c:0b:17:ec:6f:d4:b1:c0:9a:cd:b8:b7:3a:12:f3: e1:6b:a4:7f:75:df:ac:53:3b:c8:d1:cd:70:df:33:11:79:de: 2b:93:1a:eb:70:6a:5b:df:a9:5b:d0:fe:b4:ef:eb:1a:52:b4: 85:ed:93:41:e4:c2:79:5b:f9:d2:cb:d2:8d:a0:7d:9c:ee:a4: a1:5e:9d:e0:f2:75:27:c5:8a:32:c2:a0:c1:b6:a2:b6:57:b7: be:3d:68:e4:f6:d5:a5:3e:63:74:04:3d:92:3d:a5:9f:e4:2e: 47:ae:1e:98:7c:30:e5:3e:69:b0:4e:10:9c:ff:77:a8:8a:57: 54:7c:e0:34:bb:89:45:3a:c0:53:c1:a7:33:fc:7f:ea:93:7d: 39:a1:8e:19:aa:00:fd:8d:13:0b:e2:92:fd:36:17:4a:57:27: 04:58:b4:fc:24:98:dc:68:38:38:d5:19:02:1a:61:b1:5b:b8: 7b:25:2d:75:a5:e0:ec:c8:b5:86:79:f5:ef:ad:22:55:c3:55: f4:f9:04:75:7d:40:3b:f2:ad:4b:95:9f:49:56:7f:67:a9:5f: 14:e9:5c:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEN0QxMTAvBgNVBAUTKDUyNjQ0MkFBOTNERkYwQzUxMzlBNjE3QjBERTY0NUI3 MzlFNkJFQ0QwHhcNMjUxMjMxMTkyMzA0WhcNMjYwMTA3MTkyMzA0WjAYMRYwFAYD VQQDDA02OTU1NzgxOC05YmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjtYpe98LC4pxmJKGO6Rf0U45fPLH1Fs1wxV14FPco/Z2KzC6sKkYL41PZl6N UYHYITvGdYXGj/IcvFeIOBJ5e9P2aQvsrXkMxc3lP5vSA5bsAN9qn651raI+d57k Jx328nG6XSFqe7ZuX/9ASL/FvYgg8AOqyxfPe9G99dH3WXoXCPauTlaHTlk2APgx J01Zw4nv6+92t8BgtdheHnU21NkKwp14TwNdYK7I2atReiff7lgfZjMEn/V98IGL 4KM/3ASFMyXHnEpVZwLNWelT98duCiFcDmLWRkVMjHayll40Uejw56Lzxm3e3qiw u1XIhFn+IJvBOWFLYmVEUAq5bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLuIvqxm 7U/ZQq6xMVEUPJ+KrUD3MB8GA1UdIwQYMBaAFFJkQqqT3/DFE5phew3mRbc55r7N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ3RC83MTZEMkYzNjdE NjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhNVVRtbUY3RGVaRnR6bm12 czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VtUkNxcFBmOE1VVG1tRjdEZVpGdHpubXZzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQ3RC83MTZEMkYzNjdENjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhN VVRtbUY3RGVaRnR6bm12czAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6GSfAs6+EQ+q0VfVSmtihJB0ZWLBllgJ2olCdDpmQ1Zfk+1/WIy8s Cxfsb9SxwJrNuLc6EvPha6R/dd+sUzvI0c1w3zMRed4rkxrrcGpb36lb0P607+sa UrSF7ZNB5MJ5W/nSy9KNoH2c7qShXp3g8nUnxYoywqDBtqK2V7e+PWjk9tWlPmN0 BD2SPaWf5C5Hrh6YfDDlPmmwThCc/3eoildUfOA0u4lFOsBTwacz/H/qk305oY4Z qgD9jRML4pL9NhdKVycEWLT8JJjcaDg41RkCGmGxW7h7JS11peDsyLWGefXvrSJV w1X0+QR1fUA78q1LlZ9JVn9nqV8U6VxR -----END CERTIFICATE-----Generated at Thu Jan 1 02:36:43 2026 by rpki-client