This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft File: uHLzTVUlH6dw7MOT0mcSED1VBzc.mft (raw, json) Hash identifier: JnaPfZ3IxK8wn7TvpXMc5JGNCJsfIGuQapoQP4A68LQ= Subject key identifier: F2:D9:7F:D1:24:11:E4:86:40:2D:AC:CE:AB:6C:3B:BB:DA:9E:06:D0 Authority key identifier: B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37 Certificate issuer: /CN=A917C606/serialNumber=B872F34D55251FA770ECC393D26712103D550737 Certificate serial: 0435 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft Manifest number: 0429 Signing time: Mon 22 Dec 2025 23:24:43 +0000 Manifest this update: Mon 22 Dec 2025 23:24:43 +0000 Manifest next update: Mon 29 Dec 2025 23:24:43 +0000 Files and hashes: 1: uHLzTVUlH6dw7MOT0mcSED1VBzc.crl (hash: jqP9y8d3vn9F0pzzYeh9+b+5EfzJMa57BREN0j7gG0I=) 2: 945375FAF69511EC90A47215C4F9AE02.roa (hash: ZvBKfJ1ADA7aCUjrmjndruwHDHPG/7Dn7tC/SJj/AFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1077 (0x435) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C606, serialNumber=B872F34D55251FA770ECC393D26712103D550737 Validity Not Before: Dec 22 23:24:43 2025 GMT Not After : Dec 29 23:24:43 2025 GMT Subject: CN=6949d33b-139c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c7:df:0b:63:f7:76:10:8a:0a:1d:4b:0f:e5: f0:c7:ef:a8:f6:30:06:96:71:4e:3c:dd:60:63:b3: 2e:33:c6:80:df:0b:1b:d7:7a:ba:92:4b:d7:d3:68: 7a:f6:fc:03:dd:93:16:4e:07:31:42:be:0f:94:3b: 96:69:e6:a8:fe:a9:44:8e:b6:40:05:bc:03:35:88: 2a:10:cc:0a:cc:65:75:5d:83:b8:6d:f7:3d:50:70: ed:81:ca:50:62:6b:0b:68:cb:b2:fa:03:a7:b3:7f: 2d:0b:c8:15:82:76:d5:2d:bd:6a:7e:18:a0:0a:07: e1:f2:be:a1:a4:68:24:4e:4c:de:4f:fa:e2:0c:e9: b1:73:72:48:79:92:1d:01:45:fe:5c:87:0f:bd:38: 49:c8:1a:b0:9a:d6:94:a8:7d:64:a9:96:64:af:13: 9e:63:c0:77:57:98:b2:7a:ed:7c:7d:50:05:80:7a: 15:2b:2b:03:0e:b2:34:0c:66:96:71:c4:c3:d8:f0: 2c:3d:79:da:5e:a0:04:46:bc:f9:10:0f:b0:20:ee: 69:8d:12:c1:be:22:26:5b:44:b1:ae:cd:4d:4f:91: e8:33:26:40:7d:41:0d:de:53:c4:94:ab:c4:93:89: 54:8b:ce:9f:1c:ff:58:97:20:51:9b:c7:e5:d9:8d: 45:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D9:7F:D1:24:11:E4:86:40:2D:AC:CE:AB:6C:3B:BB:DA:9E:06:D0 X509v3 Authority Key Identifier: keyid:B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:d7:23:2c:7b:a4:8e:cd:32:f9:4b:db:0a:ac:9f:17:fc:2c: 2c:82:e0:9f:aa:92:56:d0:dd:47:db:b4:26:8c:a3:55:5f:4c: 97:94:bf:5d:b2:6f:d0:03:fb:1c:84:85:86:33:4a:b7:d8:de: 37:36:38:29:f2:fc:13:9a:3c:a4:1a:0a:5e:d1:02:ff:b4:be: 4e:a6:61:a0:88:48:7d:22:32:d8:bf:00:41:13:cb:7d:88:4e: 0b:40:ac:5b:8a:d2:96:5f:00:4f:5c:37:de:65:96:cc:5c:2b: 06:70:bd:fb:7b:06:af:e1:10:ce:13:3c:29:54:2a:30:b9:74: 03:e0:40:52:e8:98:53:6b:08:89:42:5c:6f:25:32:2b:0e:1c: 05:e5:27:d0:83:39:ca:0e:90:ca:83:ac:8b:f5:b0:d6:16:1c: fb:d5:67:8a:e9:97:eb:1c:dc:09:30:ce:f9:de:05:f7:72:1d: 54:d1:a9:9c:09:77:58:b9:2c:ba:23:05:0b:2a:cb:8b:80:0f: f3:ce:3b:79:bd:24:26:2d:0e:fc:0c:77:ff:c8:6a:b6:e7:8a: be:3f:d3:86:b7:2a:91:e0:3f:15:a2:d7:50:ee:c3:e0:fe:29: 63:74:1c:92:c1:70:12:09:16:ad:55:f2:97:15:fd:b5:3f:24: f5:17:2d:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M2MDYxMTAvBgNVBAUTKEI4NzJGMzRENTUyNTFGQTc3MEVDQzM5M0QyNjcxMjEw M0Q1NTA3MzcwHhcNMjUxMjIyMjMyNDQzWhcNMjUxMjI5MjMyNDQzWjAYMRYwFAYD VQQDDA02OTQ5ZDMzYi0xMzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18ffC2P3dhCKCh1LD+Xwx++o9jAGlnFOPN1gY7MuM8aA3wsb13q6kkvX02h6 9vwD3ZMWTgcxQr4PlDuWaeao/qlEjrZABbwDNYgqEMwKzGV1XYO4bfc9UHDtgcpQ YmsLaMuy+gOns38tC8gVgnbVLb1qfhigCgfh8r6hpGgkTkzeT/riDOmxc3JIeZId AUX+XIcPvThJyBqwmtaUqH1kqZZkrxOeY8B3V5iyeu18fVAFgHoVKysDDrI0DGaW ccTD2PAsPXnaXqAERrz5EA+wIO5pjRLBviImW0Sxrs1NT5HoMyZAfUEN3lPElKvE k4lUi86fHP9YlyBRm8fl2Y1FywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLZf9Ek EeSGQC2szqtsO7vangbQMB8GA1UdIwQYMBaAFLhy801VJR+ncOzDk9JnEhA9VQc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzYwNi83QzhCMTM3QThG QzkxMUVDODE1NURCNjFDNEY5QUUwMi91SEx6VFZVbEg2ZHc3TU9UMG1jU0VEMVZC emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VITHpUVlVsSDZkdzdNT1QwbWNTRUQxVkJ6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzYwNi83QzhCMTM3QThGQzkxMUVDODE1NURCNjFDNEY5QUUwMi91SEx6VFZVbEg2 ZHc3TU9UMG1jU0VEMVZCemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX1yMse6SOzTL5S9sKrJ8X/CwsguCfqpJW0N1H27QmjKNVX0yXlL9d sm/QA/schIWGM0q32N43Njgp8vwTmjykGgpe0QL/tL5OpmGgiEh9IjLYvwBBE8t9 iE4LQKxbitKWXwBPXDfeZZbMXCsGcL37ewav4RDOEzwpVCowuXQD4EBS6JhTawiJ QlxvJTIrDhwF5SfQgznKDpDKg6yL9bDWFhz71WeK6ZfrHNwJMM753gX3ch1U0amc CXdYuSy6IwULKsuLgA/zzjt5vSQmLQ78DHf/yGq254q+P9OGtyqR4D8VotdQ7sPg /iljdBySwXASCRatVfKXFf21PyT1Fy02 -----END CERTIFICATE-----Generated at Wed Dec 24 19:32:58 2025 by rpki-client