This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft File: S-UGizexYyUw_1Ijhue3-wGI6eo.mft (raw, json) Hash identifier: sBEsqsF9j4AD+uYI3hBJo5n1U+/CcbhoAJttZduEO2k= Subject key identifier: 90:58:4F:64:41:D0:59:0C:22:70:27:5A:DA:D1:34:70:B2:84:68:C3 Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA Certificate issuer: /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Certificate serial: 017A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft Manifest number: 0170 Signing time: Fri 19 Dec 2025 03:06:10 +0000 Manifest this update: Fri 19 Dec 2025 03:06:10 +0000 Manifest next update: Fri 26 Dec 2025 03:06:10 +0000 Files and hashes: 1: S-UGizexYyUw_1Ijhue3-wGI6eo.crl (hash: 6CiGICx17nX5BPUCs59gpJiGNYQuFwTfyKLDxNvlUUg=) 2: 2DAB7B74BE4211EE970F4140C4F9AE02.roa (hash: s22fNuehfcR8cdi3cFR8Z1yPLk8LwMQLolDpdzgZgc0=) 3: B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa (hash: PrkTvOXkxIIDm1NyNDWg8hQLP2IiT8tO2SVVH/dIBvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:06:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Validity Not Before: Dec 19 03:06:10 2025 GMT Not After : Dec 26 03:06:10 2025 GMT Subject: CN=6944c122-aa7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:11:8b:c2:c6:34:19:62:dd:8f:03:44:59:6d: cd:67:31:4f:f2:f0:1a:ad:11:15:3c:07:8f:21:c3: d1:d5:0d:26:c9:b5:16:4d:82:8b:35:4a:1e:2f:50: 85:9a:21:f6:24:46:a7:a7:8e:1e:f8:91:b4:d7:ba: b7:37:65:d6:97:9b:ec:96:0b:ea:60:d3:97:4b:e9: 0b:9b:ed:45:b3:af:a3:36:7c:98:27:78:1f:83:0f: 7b:0d:ba:47:7e:f8:88:d2:e6:56:3a:a0:2d:a0:fb: 30:01:c0:21:cb:5a:18:c0:18:be:5e:4b:5f:d4:11: db:38:03:19:9f:fc:b4:ef:3f:95:9f:ee:b6:0e:ad: 7a:91:e1:8b:0d:a0:ec:cb:24:2b:90:bf:50:93:7f: 96:bd:f7:86:54:5b:c5:58:75:46:fe:df:26:ce:bb: f0:f0:1e:05:74:c4:5c:35:42:b4:17:5b:7a:83:8d: 13:a6:9e:b3:28:23:22:f1:a5:07:31:65:bf:76:a6: 20:f3:4b:69:78:9f:54:54:97:dd:74:3c:43:34:cc: 18:0e:18:d1:60:4d:1c:d6:32:16:c2:98:d8:a7:82: b6:8d:f8:61:3b:a4:80:e3:3d:24:80:c4:b9:b7:8b: 9d:79:fd:2d:fe:9f:e9:ae:82:7a:e8:43:11:9d:16: 6d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:58:4F:64:41:D0:59:0C:22:70:27:5A:DA:D1:34:70:B2:84:68:C3 X509v3 Authority Key Identifier: keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:23:1d:af:8a:4e:b6:84:f6:50:95:52:78:74:5f:fe:43:2c: bc:01:63:f8:4d:3a:f2:7e:bc:45:45:30:6d:82:cc:e7:fa:d6: ee:94:b4:b0:28:26:ce:3d:1f:22:1f:5b:a8:f4:49:fb:fe:69: 60:08:93:1c:f6:d0:cf:75:61:f0:33:cf:06:5a:c4:29:28:a2: 97:ee:50:cf:7e:20:8c:b5:ea:b8:3e:d3:b5:ae:76:f8:a6:ba: 83:4c:67:bd:f7:c7:8b:1a:d7:94:2c:f6:9d:a5:85:e5:bc:22: 3d:3e:a0:ea:f9:29:91:1c:fa:0e:6b:63:a5:de:35:15:d7:4f: 92:71:88:48:83:11:53:fa:f0:9b:27:57:2d:3f:e3:eb:b5:17: d5:eb:04:09:0d:f7:a6:ff:a8:e1:e7:9f:6f:8d:69:5e:8a:be: 14:bd:0f:62:d6:d6:ec:87:cc:af:e7:6c:93:28:2a:39:4a:fa: bc:9e:5e:fa:aa:94:43:1a:f5:15:0f:6e:ad:d0:e5:5d:09:f1: d1:6e:79:3f:b7:ea:0f:48:52:dc:bb:9a:53:8d:7c:c9:99:dc: 64:4f:e5:2b:92:55:b1:ad:66:ed:d0:0c:11:1a:79:f7:1e:fc: 1d:1b:0f:1e:47:fe:e1:40:45:99:29:c2:16:2b:75:a3:f4:81: ee:f9:31:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDRCRTUwNjhCMzdCMTYzMjUzMEZGNTIyMzg2RTdCN0ZC MDE4OEU5RUEwHhcNMjUxMjE5MDMwNjEwWhcNMjUxMjI2MDMwNjEwWjAYMRYwFAYD VQQDDA02OTQ0YzEyMi1hYTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBGLwsY0GWLdjwNEWW3NZzFP8vAarREVPAePIcPR1Q0mybUWTYKLNUoeL1CF miH2JEanp44e+JG017q3N2XWl5vslgvqYNOXS+kLm+1Fs6+jNnyYJ3gfgw97DbpH fviI0uZWOqAtoPswAcAhy1oYwBi+Xktf1BHbOAMZn/y07z+Vn+62Dq16keGLDaDs yyQrkL9Qk3+WvfeGVFvFWHVG/t8mzrvw8B4FdMRcNUK0F1t6g40Tpp6zKCMi8aUH MWW/dqYg80tpeJ9UVJfddDxDNMwYDhjRYE0c1jIWwpjYp4K2jfhhO6SA4z0kgMS5 t4udef0t/p/proJ66EMRnRZtDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBYT2RB 0FkMInAnWtrRNHCyhGjDMB8GA1UdIwQYMBaAFEvlBos3sWMlMP9SI4bnt/sBiOnq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy9FODBGMTM3Q0I5 OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5VXdfMUlqaHVlMy13R0k2 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1MtVUdpemV4WXlVd18xSWpodWUzLXdHSTZlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy9FODBGMTM3Q0I5OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5 VXdfMUlqaHVlMy13R0k2ZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiIx2vik62hPZQlVJ4dF/+Qyy8AWP4TTryfrxFRTBtgszn+tbulLSw KCbOPR8iH1uo9En7/mlgCJMc9tDPdWHwM88GWsQpKKKX7lDPfiCMteq4PtO1rnb4 prqDTGe998eLGteULPadpYXlvCI9PqDq+SmRHPoOa2Ol3jUV10+ScYhIgxFT+vCb J1ctP+PrtRfV6wQJDfem/6jh559vjWleir4UvQ9i1tbsh8yv52yTKCo5Svq8nl76 qpRDGvUVD26t0OVdCfHRbnk/t+oPSFLcu5pTjXzJmdxkT+UrklWxrWbt0AwRGnn3 HvwdGw8eR/7hQEWZKcIWK3Wj9IHu+TFx -----END CERTIFICATE-----Generated at Sat Dec 20 20:04:13 2025 by rpki-client