This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft File: uEHIC-gYxhquhBeUDKPmnMFB348.mft (raw, json) Hash identifier: YPbNQhtm+3dY+quy+PnXuutOuWFSiYQANEKpp/bc2OU= Subject key identifier: 93:48:27:8A:F7:90:B0:85:EB:8C:5C:BE:03:1A:77:0F:E6:42:B9:29 Authority key identifier: B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F Certificate issuer: /CN=A91859A3/serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F Certificate serial: 0FF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft Manifest number: 0FEA Signing time: Wed 31 Dec 2025 17:13:21 +0000 Manifest this update: Wed 31 Dec 2025 17:13:21 +0000 Manifest next update: Wed 07 Jan 2026 17:13:21 +0000 Files and hashes: 1: uEHIC-gYxhquhBeUDKPmnMFB348.crl (hash: ya7xZNmz9218TRvEOHek7wreKtVdxPC+5YUhDm5mYVQ=) 2: 65EADA381A8011ECAD1E4B30C4F9AE02.roa (hash: WDBmQN8GrovE0YfJl6NcfDbYlw4MdWA6w33AFuBSc4U=) 3: FB45F610638211E9A58B4C45C4F9AE02.roa (hash: IofhJ7EiHeyM1r1MV+JctpkNg1pbQMhCCkdpR4fk3JY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 17:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4088 (0xff8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91859A3, serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F Validity Not Before: Dec 31 17:13:21 2025 GMT Not After : Jan 7 17:13:21 2026 GMT Subject: CN=695559b1-cedf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e5:cd:f4:99:5d:a7:7c:5b:46:89:64:56:83: 92:d1:73:a0:2c:4c:36:dc:ff:2a:a7:3c:d8:93:a7: 26:98:f9:44:ce:5f:8d:70:34:9d:86:86:59:29:57: 1d:a8:10:60:ad:60:f3:5b:d6:16:62:e4:9f:85:d3: 1a:63:c4:2d:bc:ec:3c:f9:b3:eb:b9:b6:da:bb:c7: f8:af:52:ac:81:3f:b7:f1:3e:81:03:4e:70:97:5c: d8:8f:a2:6c:71:70:7e:e6:63:fb:57:40:6e:1e:6c: 28:33:ab:9b:00:de:11:92:65:17:ef:08:68:55:35: aa:81:1e:43:ec:7e:51:2a:ba:21:fc:24:a2:f6:4f: 94:dc:53:cc:98:9f:ec:59:6c:eb:d0:a9:10:31:bd: a1:e8:da:8c:d2:de:d1:cc:1b:63:89:2e:4e:db:cb: 0e:95:34:61:43:a2:d8:fe:7c:ed:f9:29:dd:63:e9: 8a:3e:15:af:49:3b:56:6e:7e:b1:55:c3:99:69:e5: 1b:1e:e3:20:9a:07:70:75:26:6f:1f:c1:3e:33:a3: b4:20:2b:36:04:fe:c9:8f:5f:5f:94:55:94:ad:5e: cc:bc:95:a3:63:25:0d:94:3e:98:ba:59:0e:39:2c: 3f:25:11:4a:be:58:6c:96:ba:c3:fe:ad:83:25:b3: d6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:48:27:8A:F7:90:B0:85:EB:8C:5C:BE:03:1A:77:0F:E6:42:B9:29 X509v3 Authority Key Identifier: keyid:B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:64:19:2a:de:67:d2:3e:51:8e:0c:26:f8:48:da:43:e3:4f: 2b:af:75:12:2f:84:f2:91:bd:a3:eb:83:1f:ef:ce:38:63:5f: 1e:23:50:f4:8f:20:3b:05:8f:2d:5a:a0:1c:36:f9:2d:a6:c3: e2:eb:d2:1c:36:6c:e8:95:d4:58:ce:38:0b:99:23:5d:ce:b5: 4a:50:a9:13:d0:23:0c:0f:57:3c:97:ef:fe:31:24:68:2a:04: 47:83:4e:27:55:75:eb:d6:94:76:70:5c:0c:6d:a7:cb:9e:b2: 6e:57:65:34:d9:d8:c7:09:b7:3b:7a:45:f6:fc:75:91:4a:c4: a8:78:12:f6:a0:fe:fd:10:02:56:75:a3:61:6f:f7:57:bb:0d: 0a:3e:83:f3:71:35:d0:b7:54:ca:de:73:48:6c:7a:3b:f1:1a: f0:96:78:84:96:24:43:87:6c:e0:68:e7:5c:39:e2:13:8a:1a: 83:b6:29:df:9c:32:ea:95:81:ed:3f:a0:ff:f0:e0:69:e8:ef: 42:82:f6:19:54:8e:ad:a7:eb:a5:ef:a6:e7:07:ca:cf:e2:88: 3e:c9:df:ec:33:94:ea:f7:1f:ea:45:57:82:64:ac:8f:dc:40: cf:64:c8:73:c5:59:7f:76:1b:10:58:6a:a7:d8:ed:f5:53:ec: 84:41:d1:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU5QTMxMTAvBgNVBAUTKEI4NDFDODBCRTgxOEM2MUFBRTg0MTc5NDBDQTNFNjlD QzE0MURGOEYwHhcNMjUxMjMxMTcxMzIxWhcNMjYwMTA3MTcxMzIxWjAYMRYwFAYD VQQDDA02OTU1NTliMS1jZWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOXN9Jldp3xbRolkVoOS0XOgLEw23P8qpzzYk6cmmPlEzl+NcDSdhoZZKVcd qBBgrWDzW9YWYuSfhdMaY8QtvOw8+bPrubbau8f4r1KsgT+38T6BA05wl1zYj6Js cXB+5mP7V0BuHmwoM6ubAN4RkmUX7whoVTWqgR5D7H5RKroh/CSi9k+U3FPMmJ/s WWzr0KkQMb2h6NqM0t7RzBtjiS5O28sOlTRhQ6LY/nzt+SndY+mKPhWvSTtWbn6x VcOZaeUbHuMgmgdwdSZvH8E+M6O0ICs2BP7Jj19flFWUrV7MvJWjYyUNlD6YulkO OSw/JRFKvlhslrrD/q2DJbPWyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNIJ4r3 kLCF64xcvgMadw/mQrkpMB8GA1UdIwQYMBaAFLhByAvoGMYaroQXlAyj5pzBQd+P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTlBMy83NjQzNUZFRTYz ODExMUU5OUE1MUE2NDJDNEY5QUUwMi91RUhJQy1nWXhocXVoQmVVREtQbW5NRkIz NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VFSElDLWdZeGhxdWhCZVVES1Btbk1GQjM0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTlBMy83NjQzNUZFRTYzODExMUU5OUE1MUE2NDJDNEY5QUUwMi91RUhJQy1nWXho cXVoQmVVREtQbW5NRkIzNDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFZBkq3mfSPlGODCb4SNpD408rr3USL4Tykb2j64Mf7844Y18eI1D0 jyA7BY8tWqAcNvktpsPi69IcNmzoldRYzjgLmSNdzrVKUKkT0CMMD1c8l+/+MSRo KgRHg04nVXXr1pR2cFwMbafLnrJuV2U02djHCbc7ekX2/HWRSsSoeBL2oP79EAJW daNhb/dXuw0KPoPzcTXQt1TK3nNIbHo78RrwlniEliRDh2zgaOdcOeITihqDtinf nDLqlYHtP6D/8OBp6O9CgvYZVI6tp+ul76bnB8rP4og+yd/sM5Tq9x/qRVeCZKyP 3EDPZMhzxVl/dhsQWGqn2O31U+yEQdFj -----END CERTIFICATE-----Generated at Thu Jan 1 17:31:20 2026 by rpki-client