This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft File: UWKb64D735TtmmQ_14yB2nO2uho.mft (raw, json) Hash identifier: dnHEtyYqRzUA+/fkbvEA37nUjQWYb8zq+/Jlp3usgac= Subject key identifier: C6:C3:30:14:D3:BF:52:13:4F:DD:A3:62:7A:EE:D6:9E:C8:9C:DF:3F Authority key identifier: 51:62:9B:EB:80:FB:DF:94:ED:9A:64:3F:D7:8C:81:DA:73:B6:BA:1A Certificate issuer: /CN=A915EAD0/serialNumber=51629BEB80FBDF94ED9A643FD78C81DA73B6BA1A Certificate serial: 0AE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft Manifest number: 0AD9 Signing time: Wed 31 Dec 2025 19:08:17 +0000 Manifest this update: Wed 31 Dec 2025 19:08:17 +0000 Manifest next update: Wed 07 Jan 2026 19:08:17 +0000 Files and hashes: 1: UWKb64D735TtmmQ_14yB2nO2uho.crl (hash: DGK/ZPPaTlvm+pM+IsbDJNukVUOZDRyJVzZ9AAmzsfw=) 2: 803C622E9B9111EDBC921164C4F9AE02.roa (hash: JKSXjO226xcOScXDTLlLmKcqRbFLpyx8mcjgczPn3KQ=) 3: 7F1EA1189B9111EDBC921164C4F9AE02.roa (hash: +r3x7TjQH2xnW46hg1hPTiKOH9bzDtcSJAR+NZYlHHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.crl rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 19:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2793 (0xae9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EAD0, serialNumber=51629BEB80FBDF94ED9A643FD78C81DA73B6BA1A Validity Not Before: Dec 31 19:08:17 2025 GMT Not After : Jan 7 19:08:17 2026 GMT Subject: CN=695574a1-81c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d1:b3:d7:d1:c1:b7:f0:a2:63:5a:1d:1e:e8: b3:1e:80:8f:57:e2:a3:85:96:d1:8c:be:d1:a4:d3: 95:5b:c5:3a:7e:36:41:b5:bb:f3:a1:85:70:17:ba: 41:34:15:61:b4:d5:15:13:d7:3d:0d:6d:50:2d:87: e4:bf:6d:d9:4b:7c:41:ba:60:71:32:7f:e9:f7:0f: 47:fc:36:17:58:fb:1e:1d:2a:df:d6:ce:6f:13:b2: b2:cb:39:7f:ce:c1:01:44:f8:8c:6c:7c:b3:95:de: 60:dd:9e:85:7e:14:6b:2e:97:d7:62:c6:68:b1:ed: a1:c0:83:e2:01:c9:e2:22:27:35:5d:13:04:b6:99: 2a:2a:70:31:05:95:c4:76:6d:f3:64:ec:53:57:a6: e8:fa:d2:9d:90:cb:f1:75:35:19:98:dc:cd:01:cd: e9:87:43:80:ef:7e:90:ba:b0:31:46:3f:b6:cc:15: b6:95:99:0b:d0:4b:78:b5:3d:c1:90:52:4c:d2:5a: a3:ec:d8:c9:fe:a6:5d:d8:f5:20:b0:6c:06:93:a8: e7:85:0b:7c:bc:c9:75:22:d9:96:aa:eb:16:1b:07: cb:85:21:89:ba:3e:61:5c:13:99:97:34:5d:af:d9: b8:db:6b:6a:d3:f5:ab:36:33:06:e6:34:a7:ce:bb: ce:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C3:30:14:D3:BF:52:13:4F:DD:A3:62:7A:EE:D6:9E:C8:9C:DF:3F X509v3 Authority Key Identifier: keyid:51:62:9B:EB:80:FB:DF:94:ED:9A:64:3F:D7:8C:81:DA:73:B6:BA:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f8:a3:0f:5f:25:58:2a:84:cb:af:cb:a4:47:b0:b3:10:43: c8:3a:da:38:61:2c:c5:20:0c:43:fe:28:5d:9e:ab:72:0f:21: fd:38:df:18:ca:bd:69:e8:5f:ab:eb:e1:9e:cd:9b:4c:10:4c: 43:2a:da:5f:65:12:64:19:49:e3:b6:36:30:57:ea:9e:59:fb: d7:eb:77:35:2f:87:23:05:0a:17:9f:fa:e7:f8:b5:3f:b8:23: 53:25:ea:48:82:b6:e8:68:54:9c:0d:0f:71:f6:a4:02:8c:04: 00:d7:96:cf:b6:3e:78:ca:4d:55:18:e4:46:da:b6:8e:91:9a: 95:5d:ef:fa:a6:fd:07:a4:fd:d5:50:60:d7:55:bd:f5:c2:9f: ee:a5:55:53:a3:ff:1c:5d:41:17:fc:62:e3:4a:27:cb:a8:ba: d7:13:7e:ad:f9:45:c8:a4:9a:54:82:df:8a:09:61:b0:89:3e: 8a:cc:36:06:e3:37:f2:a2:2e:e7:b0:41:c7:32:a0:a4:3f:2e: 0c:b8:bf:47:80:ce:41:aa:01:e8:d8:67:20:73:b1:3e:35:cf: 49:77:b0:32:d1:37:bb:f2:f9:1e:94:a7:45:72:01:d5:69:b6: 32:8b:9c:da:b6:a9:9b:b2:fd:24:ae:2f:b5:5b:b4:e2:66:85: bd:ca:f0:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVBRDAxMTAvBgNVBAUTKDUxNjI5QkVCODBGQkRGOTRFRDlBNjQzRkQ3OEM4MURB NzNCNkJBMUEwHhcNMjUxMjMxMTkwODE3WhcNMjYwMTA3MTkwODE3WjAYMRYwFAYD VQQDDA02OTU1NzRhMS04MWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNGz19HBt/CiY1odHuizHoCPV+KjhZbRjL7RpNOVW8U6fjZBtbvzoYVwF7pB NBVhtNUVE9c9DW1QLYfkv23ZS3xBumBxMn/p9w9H/DYXWPseHSrf1s5vE7Kyyzl/ zsEBRPiMbHyzld5g3Z6FfhRrLpfXYsZose2hwIPiAcniIic1XRMEtpkqKnAxBZXE dm3zZOxTV6bo+tKdkMvxdTUZmNzNAc3ph0OA736QurAxRj+2zBW2lZkL0Et4tT3B kFJM0lqj7NjJ/qZd2PUgsGwGk6jnhQt8vMl1ItmWqusWGwfLhSGJuj5hXBOZlzRd r9m422tq0/WrNjMG5jSnzrvORQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbDMBTT v1ITT92jYnru1p7InN8/MB8GA1UdIwQYMBaAFFFim+uA+9+U7ZpkP9eMgdpztroa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUFEMC8yMUZBNUIwNjYx RUUxMUVBOTI1RDYyMjVDNEY5QUUwMi9VV0tiNjRENzM1VHRtbVFfMTR5QjJuTzJ1 aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VXS2I2NEQ3MzVUdG1tUV8xNHlCMm5PMnVoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUFEMC8yMUZBNUIwNjYxRUUxMUVBOTI1RDYyMjVDNEY5QUUwMi9VV0tiNjRENzM1 VHRtbVFfMTR5QjJuTzJ1aG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6+KMPXyVYKoTLr8ukR7CzEEPIOto4YSzFIAxD/ihdnqtyDyH9ON8Y yr1p6F+r6+GezZtMEExDKtpfZRJkGUnjtjYwV+qeWfvX63c1L4cjBQoXn/rn+LU/ uCNTJepIgrboaFScDQ9x9qQCjAQA15bPtj54yk1VGORG2raOkZqVXe/6pv0HpP3V UGDXVb31wp/upVVTo/8cXUEX/GLjSifLqLrXE36t+UXIpJpUgt+KCWGwiT6KzDYG 4zfyoi7nsEHHMqCkPy4MuL9HgM5BqgHo2Gcgc7E+Nc9Jd7Ay0Te78vkelKdFcgHV abYyi5zatqmbsv0kri+1W7TiZoW9yvD9 -----END CERTIFICATE-----Generated at Fri Jan 2 13:05:27 2026 by rpki-client