This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft File: U-fOlDUz-NPAVknylGgqJvgU8V8.mft (raw, json) Hash identifier: AeQcfUFISrd01gFfm7ssqtLuY044lyD1KDe/K+Klw5c= Subject key identifier: C7:AA:35:41:3C:F0:74:A8:E9:59:78:80:A6:53:BE:D5:2F:81:13:A1 Authority key identifier: 53:E7:CE:94:35:33:F8:D3:C0:56:49:F2:94:68:2A:26:F8:14:F1:5F Certificate issuer: /CN=A9144391/serialNumber=53E7CE943533F8D3C05649F294682A26F814F15F Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft Manifest number: F4 Signing time: Thu 25 Dec 2025 04:21:00 +0000 Manifest this update: Thu 25 Dec 2025 04:21:00 +0000 Manifest next update: Thu 01 Jan 2026 04:21:00 +0000 Files and hashes: 1: U-fOlDUz-NPAVknylGgqJvgU8V8.crl (hash: SzMLGJUEMPJhx35qwSjCBILGJvZgFK0JI4L9SfbCNvs=) 2: BC213E3C70AF11EF9C9B2C0EC4F9AE02.roa (hash: 3YeMlkcKDR/G7e8HpdLpzhvB3RsMdGgeM4Qv8rsxSYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.crl rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 04:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144391, serialNumber=53E7CE943533F8D3C05649F294682A26F814F15F Validity Not Before: Dec 25 04:21:00 2025 GMT Not After : Jan 1 04:21:00 2026 GMT Subject: CN=694cbbac-d120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e8:7c:92:52:6b:62:59:16:b1:2f:6c:44:12: 7f:13:f2:95:6b:a2:7b:5c:57:3a:c1:6c:65:7d:2c: 17:41:37:70:28:78:64:d1:d3:a8:4a:5b:cd:0b:9e: f3:93:2a:c0:83:5b:60:72:cf:5d:74:60:68:b1:9c: 09:b2:ab:0e:fc:d2:c1:20:db:0e:4f:50:20:02:3b: 62:ea:a2:a1:17:5e:aa:e2:78:19:7b:ae:ee:24:ed: 32:59:38:69:19:dd:cf:9e:d0:32:3a:98:5f:43:23: c8:a9:e5:b9:54:f3:f7:71:76:65:41:ef:33:d0:1e: 92:12:ec:74:9f:70:e1:84:b1:a0:d4:5b:24:fc:fa: 56:04:dc:4c:59:38:74:81:a4:d2:1e:6f:02:e0:68: fa:07:4d:80:1c:bd:ce:2c:41:c2:e4:d2:05:a8:9b: 9e:15:0b:73:de:04:4f:a4:42:d3:99:08:3b:45:95: f0:0c:b3:60:a5:2b:86:f5:d3:c0:7f:3f:f1:79:a1: 85:18:e5:bc:f9:91:ea:32:30:1a:c0:3b:c2:64:19: 25:57:18:f7:26:30:63:8c:fb:84:ca:83:5f:60:46: a1:2f:e1:00:eb:4c:73:66:9e:22:1a:c6:97:f8:2f: a8:fc:ea:24:b8:d4:32:3b:2f:67:60:95:ba:f9:96: c0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AA:35:41:3C:F0:74:A8:E9:59:78:80:A6:53:BE:D5:2F:81:13:A1 X509v3 Authority Key Identifier: keyid:53:E7:CE:94:35:33:F8:D3:C0:56:49:F2:94:68:2A:26:F8:14:F1:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:22:28:3e:e9:63:d5:e7:cc:4c:77:c1:05:36:7b:56:34:87: 71:02:c6:2b:2c:2b:1c:74:6e:78:99:4c:63:18:7b:87:82:1d: 5e:ae:d3:06:d9:14:ad:e8:b9:ce:2d:68:4e:07:11:5d:a6:ed: 67:d7:37:8c:fb:90:cf:23:01:dd:f4:93:5d:49:57:f3:cd:a2: 1b:66:64:1a:8c:0e:33:20:07:2d:be:5a:3c:a0:d3:e1:28:9b: da:25:03:d2:24:bc:c6:53:05:35:d0:11:13:7f:6c:23:17:fe: a8:d2:44:27:64:d0:4b:c9:5c:75:83:df:ac:5e:b5:c6:7f:89: fd:46:31:32:83:2d:c9:1d:8a:16:b1:86:d2:90:51:fe:95:88: 1a:9e:ad:32:d7:54:19:84:b6:89:1c:cf:d6:b4:66:68:b1:f4: 27:bd:dc:d2:7b:d0:e5:c6:8f:59:9b:51:d6:d4:03:f6:b0:2b: 60:53:4a:04:54:cb:2e:c0:1b:8c:a3:52:1d:f5:13:f4:63:a8: 32:88:1d:05:af:9f:3b:04:da:d5:f7:aa:d2:60:45:2f:f3:58: 44:0a:15:b5:91:cf:40:d3:07:79:98:69:22:22:a1:17:da:c7: d5:cf:e9:f2:a1:58:e5:db:d4:b3:99:27:22:27:67:77:66:6f: e4:cf:d2:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzOTExMTAvBgNVBAUTKDUzRTdDRTk0MzUzM0Y4RDNDMDU2NDlGMjk0NjgyQTI2 RjgxNEYxNUYwHhcNMjUxMjI1MDQyMTAwWhcNMjYwMTAxMDQyMTAwWjAYMRYwFAYD VQQDDA02OTRjYmJhYy1kMTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeh8klJrYlkWsS9sRBJ/E/KVa6J7XFc6wWxlfSwXQTdwKHhk0dOoSlvNC57z kyrAg1tgcs9ddGBosZwJsqsO/NLBINsOT1AgAjti6qKhF16q4ngZe67uJO0yWThp Gd3PntAyOphfQyPIqeW5VPP3cXZlQe8z0B6SEux0n3DhhLGg1Fsk/PpWBNxMWTh0 gaTSHm8C4Gj6B02AHL3OLEHC5NIFqJueFQtz3gRPpELTmQg7RZXwDLNgpSuG9dPA fz/xeaGFGOW8+ZHqMjAawDvCZBklVxj3JjBjjPuEyoNfYEahL+EA60xzZp4iGsaX +C+o/OokuNQyOy9nYJW6+ZbACQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMeqNUE8 8HSo6Vl4gKZTvtUvgROhMB8GA1UdIwQYMBaAFFPnzpQ1M/jTwFZJ8pRoKib4FPFf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDM5MS8wMTlGRjE0RTcw QUUxMUVGQTg0OEIwNjhDNEY5QUUwMi9VLWZPbERVei1OUEFWa255bEdncUp2Z1U4 VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UtZk9sRFV6LU5QQVZrbnlsR2dxSnZnVThWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDM5MS8wMTlGRjE0RTcwQUUxMUVGQTg0OEIwNjhDNEY5QUUwMi9VLWZPbERVei1O UEFWa255bEdncUp2Z1U4VjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXIig+6WPV58xMd8EFNntWNIdxAsYrLCscdG54mUxjGHuHgh1ertMG 2RSt6LnOLWhOBxFdpu1n1zeM+5DPIwHd9JNdSVfzzaIbZmQajA4zIActvlo8oNPh KJvaJQPSJLzGUwU10BETf2wjF/6o0kQnZNBLyVx1g9+sXrXGf4n9RjEygy3JHYoW sYbSkFH+lYganq0y11QZhLaJHM/WtGZosfQnvdzSe9Dlxo9Zm1HW1AP2sCtgU0oE VMsuwBuMo1Id9RP0Y6gyiB0Fr587BNrV96rSYEUv81hEChW1kc9A0wd5mGkiIqEX 2sfVz+nyoVjl29SzmSciJ2d3Zm/kz9LJ -----END CERTIFICATE-----Generated at Thu Dec 25 23:25:16 2025 by rpki-client