This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft File: UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft (raw, json) Hash identifier: J6fivMo9vx5fJStogPY4DcDTx8BuT8DSC4ss1jx7myU= Subject key identifier: E3:F9:14:0E:9B:12:8A:0F:BD:54:67:E6:FB:12:C4:0C:B5:00:60:96 Authority key identifier: 51:A6:8E:DD:2D:F2:B7:BF:F6:7A:66:10:9B:D7:39:CA:9B:B2:38:C4 Certificate issuer: /CN=A9160DDD/serialNumber=51A68EDD2DF2B7BFF67A66109BD739CA9BB238C4 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft Manifest number: 21 Signing time: Tue 23 Dec 2025 06:36:34 +0000 Manifest this update: Tue 23 Dec 2025 06:36:34 +0000 Manifest next update: Tue 30 Dec 2025 06:36:34 +0000 Files and hashes: 1: UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl (hash: qUw/J4bqL8QZZU93NnT7dHQB2/yFEFLBJ2o5Dmh/RNs=) 2: D94518DAD42C11F0972DF142C4F9AE02.roa (hash: uXWvFP9Z94HEljAssthanqLQgApJdRhaBIpVH4TEE/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DDD, serialNumber=51A68EDD2DF2B7BFF67A66109BD739CA9BB238C4 Validity Not Before: Dec 23 06:36:34 2025 GMT Not After : Dec 30 06:36:34 2025 GMT Subject: CN=694a3872-452d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e4:88:84:90:99:6b:ec:9a:82:92:57:d4:9e: 86:f4:21:98:8b:95:5b:af:58:7d:0e:c5:dd:14:f5: 8e:ec:c6:42:40:37:29:e8:c9:42:57:8b:29:1b:81: 63:84:f2:47:c4:45:98:9e:19:2d:92:33:f0:cb:ee: 2d:85:e8:2d:6d:e6:8e:29:96:ce:c2:9a:ab:27:27: 1c:69:33:ad:36:76:ed:96:ff:b9:bd:7e:45:50:60: a0:54:f4:ba:47:c7:8e:8f:d5:58:35:82:75:11:af: eb:ea:bb:5c:62:5f:85:97:f7:3a:c1:73:b2:7c:a9: ed:54:1c:57:1a:46:37:26:ee:7d:70:23:6d:fd:1b: a8:ab:59:a9:65:01:3a:86:9f:e5:bf:3f:69:c9:19: 59:ab:c2:7e:2b:32:24:f8:ac:0e:26:29:b6:2b:d3: 2b:35:6d:17:d0:49:44:a2:67:7a:e8:dd:8e:da:ba: 89:b0:15:bd:b9:52:d8:57:48:4d:11:6d:be:0e:6f: 06:22:7b:98:2b:7b:62:35:53:4c:fa:a7:39:55:57: e4:8e:24:92:1e:86:5c:8a:f1:3f:16:a5:26:af:82: 91:89:1c:8e:d5:74:71:1b:62:5e:79:4d:3a:08:40: f9:e8:67:ba:6a:ea:75:14:bc:25:f2:2a:e5:a3:6a: 60:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F9:14:0E:9B:12:8A:0F:BD:54:67:E6:FB:12:C4:0C:B5:00:60:96 X509v3 Authority Key Identifier: keyid:51:A6:8E:DD:2D:F2:B7:BF:F6:7A:66:10:9B:D7:39:CA:9B:B2:38:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:76:51:b5:93:b5:ac:e5:e9:73:32:1c:80:f3:2f:6c:78:b9: c6:b3:81:ea:e0:99:5d:66:14:19:64:be:4f:b8:b1:4c:aa:25: 58:16:e9:d1:bd:a4:2b:55:8a:d6:42:46:56:b6:46:c8:06:b1: a9:99:50:aa:b1:f3:04:34:69:0c:5c:fe:d3:73:1a:68:11:ed: 49:63:f4:fc:a9:42:0d:c8:f4:77:c9:7a:21:3f:c8:60:69:02: 7a:3c:03:69:b0:f3:6e:02:84:f9:0a:57:30:29:b2:ed:8c:ac: e9:71:c8:08:ae:09:53:93:ac:6b:90:47:48:88:60:b8:8d:75: 5a:c0:13:f8:d7:fe:3d:5b:d6:ad:40:7c:9d:26:bf:e6:65:63: 96:bc:de:f8:75:8c:ab:48:8e:5c:58:ca:02:71:7c:3b:13:5e: 01:d1:1b:37:8d:95:d0:41:72:10:c1:35:9a:66:53:da:e7:1b: d2:03:bc:8e:5d:51:a1:37:ab:09:f0:5c:26:88:d3:b2:c9:34: e3:14:dc:b2:7b:55:df:d3:ec:44:1f:37:96:57:1f:ef:7f:86: ac:d8:1b:07:0e:47:8a:50:b2:0b:f9:14:af:29:dd:65:df:86: 09:97:45:a3:7a:fc:66:1b:4e:87:44:14:5e:3d:01:6d:5b:4f: b1:56:43:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MERERDExMC8GA1UEBRMoNTFBNjhFREQyREYyQjdCRkY2N0E2NjEwOUJENzM5Q0E5 QkIyMzhDNDAeFw0yNTEyMjMwNjM2MzRaFw0yNTEyMzAwNjM2MzRaMBgxFjAUBgNV BAMMDTY5NGEzODcyLTQ1MmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCg5IiEkJlr7JqCklfUnob0IZiLlVuvWH0Oxd0U9Y7sxkJANynoyUJXiykbgWOE 8kfERZieGS2SM/DL7i2F6C1t5o4pls7CmqsnJxxpM602du2W/7m9fkVQYKBU9LpH x46P1Vg1gnURr+vqu1xiX4WX9zrBc7J8qe1UHFcaRjcm7n1wI239G6irWallATqG n+W/P2nJGVmrwn4rMiT4rA4mKbYr0ys1bRfQSUSiZ3ro3Y7auomwFb25UthXSE0R bb4ObwYie5gre2I1U0z6pzlVV+SOJJIehlyK8T8WpSavgpGJHI7VdHEbYl55TToI QPnoZ7pq6nUUvCXyKuWjamBbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4/kUDpsS ig+9VGfm+xLEDLUAYJYwHwYDVR0jBBgwFoAUUaaO3S3yt7/2emYQm9c5ypuyOMQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwRERELzM0ODI0QjlFQjMz QzExRjBCOTVENDA1NEM0RjlBRTAyL1VhYU8zUzN5dDdfMmVtWVFtOWM1eXB1eU9N US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVWFhTzNTM3l0N18yZW1ZUW05YzV5cHV5T01RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw RERELzM0ODI0QjlFQjMzQzExRjBCOTVENDA1NEM0RjlBRTAyL1VhYU8zUzN5dDdf MmVtWVFtOWM1eXB1eU9NUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGB2UbWTtazl6XMyHIDzL2x4ucazgergmV1mFBlkvk+4sUyqJVgW6dG9 pCtVitZCRla2RsgGsamZUKqx8wQ0aQxc/tNzGmgR7Ulj9PypQg3I9HfJeiE/yGBp Ano8A2mw824ChPkKVzApsu2MrOlxyAiuCVOTrGuQR0iIYLiNdVrAE/jX/j1b1q1A fJ0mv+ZlY5a83vh1jKtIjlxYygJxfDsTXgHRGzeNldBBchDBNZpmU9rnG9IDvI5d UaE3qwnwXCaI07LJNOMU3LJ7Vd/T7EQfN5ZXH+9/hqzYGwcOR4pQsgv5FK8p3WXf hgmXRaN6/GYbTodEFF49AW1bT7FWQ+g= -----END CERTIFICATE-----Generated at Wed Dec 24 03:47:16 2025 by rpki-client