This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft File: uFvtmb90CrrVo5nJ31_plipt6PE.mft (raw, json) Hash identifier: DOJ2P3Lb1BKQifzD2O4n133mly0uDETCAUNC2uGd/kA= Subject key identifier: 54:6B:1D:43:5E:E9:CD:7D:20:7B:41:BC:A6:71:7A:B7:8F:DF:DF:9E Authority key identifier: B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1 Certificate issuer: /CN=A9195DE5/serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1 Certificate serial: 084F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft Manifest number: 0837 Signing time: Sat 20 Dec 2025 20:13:23 +0000 Manifest this update: Sat 20 Dec 2025 20:13:23 +0000 Manifest next update: Sat 27 Dec 2025 20:13:23 +0000 Files and hashes: 1: uFvtmb90CrrVo5nJ31_plipt6PE.crl (hash: egTpTl0d/HkXZnLVWOz9c7AGdMY44JHKTj6wWjjFdYk=) 2: C7ADA138F4C011EAA7B25986C4F9AE02.roa (hash: G5UBtJsfZQZ4SV+yPTNK/ejUFIGmrip9sZG7FP0b4Cg=) 3: 709F917AF74111EF98C99938C4F9AE02.roa (hash: 1qf+iawoit0ys+iUAf7LEY7HtRnvUIOTI+MZhHCWuYU=) 4: 70017B5CF74111EF98C99938C4F9AE02.roa (hash: 2qfdADfdo36JxITYdf4pd34OcKO4BbP5IH9WNGohmvk=) 5: C6EDD52EF4C011EAA7B25986C4F9AE02.roa (hash: qyqw3i3GL6h/SgQPPtxyHJkhrm/uWWSr5nGAKt/Qapg=) 6: C8633DEAF4C011EAA7B25986C4F9AE02.roa (hash: ux6FaGhfWyv2H1NDOSXEk7LrVXGwR7MCaj2E49kXMHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2127 (0x84f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195DE5, serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1 Validity Not Before: Dec 20 20:13:23 2025 GMT Not After : Dec 27 20:13:23 2025 GMT Subject: CN=69470363-4f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3f:ca:cf:a1:56:b6:cb:60:c3:30:c1:10:fd: 22:41:e5:2d:c2:10:18:1a:cd:ca:2b:c4:82:d4:71: 3a:c1:b0:bd:06:af:72:80:01:1b:5e:c2:7d:38:5b: 7f:82:9d:1c:e5:f5:9c:8a:37:21:37:4f:83:75:0c: 0b:88:d4:17:dd:37:95:8f:04:e2:46:03:dc:e7:f7: c7:39:78:66:f7:29:56:dc:ce:5b:77:01:dd:d3:3c: cf:aa:fc:4f:95:ad:0a:09:9a:17:3a:ea:0d:a9:95: 04:0d:7a:45:8c:78:6e:1f:42:10:36:d5:56:d7:0d: b3:b5:8f:31:51:32:03:a9:47:df:1e:16:68:c1:20: c3:07:08:fe:82:4b:c5:d6:db:bd:62:23:e9:ca:39: bd:e3:6c:55:b8:4c:2f:6c:f9:ec:19:ac:20:f5:ba: b9:af:b1:11:93:13:32:87:ee:1f:c1:e2:49:5f:fe: df:d0:d2:78:5d:18:68:4f:61:bf:ad:48:9a:d5:9a: 87:88:51:14:ee:49:35:c8:36:f0:30:7d:d8:08:f7: 05:13:dd:1d:e4:98:d0:4e:6b:de:f0:5f:e3:1e:1e: 4c:b2:41:ca:51:34:55:4c:81:c1:6e:ec:02:bf:1f: c0:f3:59:95:ec:de:53:b6:cc:88:e8:e3:96:31:1b: 93:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:6B:1D:43:5E:E9:CD:7D:20:7B:41:BC:A6:71:7A:B7:8F:DF:DF:9E X509v3 Authority Key Identifier: keyid:B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:b9:58:a5:d7:a8:5f:04:07:20:c4:01:f8:13:3e:e9:ef:a1: ab:a0:e6:3f:55:12:d1:fc:20:8d:03:a9:47:32:a2:8f:8b:4e: 42:0f:86:9f:64:68:06:4b:9b:88:5a:c2:f7:af:9a:b9:31:a3: 31:35:08:c1:c0:32:da:36:39:63:28:3f:9c:2b:97:05:ed:ba: 1a:e5:1c:7e:a4:6a:af:ef:db:92:0d:27:af:9e:b7:56:c1:2e: 7d:dc:30:e2:ec:89:81:f2:e8:d6:50:d7:67:3e:f8:e9:06:5e: d4:72:69:7f:2e:00:ce:2b:66:02:7d:f3:17:39:a7:c9:84:26: a0:19:7f:bf:b4:e5:aa:15:6b:21:37:61:4b:74:0e:da:ff:63: fb:19:9a:cd:dc:47:2b:80:c8:ac:13:60:c8:76:f2:72:87:44: 93:4d:12:4e:08:4a:12:ce:3f:8c:0f:64:e9:b8:3f:ff:fc:40: 0e:c9:e3:93:c6:35:bc:c6:1a:d7:90:54:21:45:35:29:d1:a2: 6f:fa:4f:1f:45:d5:40:ab:3a:60:f4:ce:6e:81:59:87:77:54: bd:f4:7e:a5:8c:b1:e2:bf:d2:99:af:7e:27:d2:01:4b:ce:72: 49:fc:9c:72:c6:12:79:9b:eb:01:cc:89:43:45:df:ff:90:c3: 05:f0:1f:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVERTUxMTAvBgNVBAUTKEI4NUJFRDk5QkY3NDBBQkFENUEzOTlDOURGNUZFOTk2 MkE2REU4RjEwHhcNMjUxMjIwMjAxMzIzWhcNMjUxMjI3MjAxMzIzWjAYMRYwFAYD VQQDDA02OTQ3MDM2My00Zjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1D/Kz6FWtstgwzDBEP0iQeUtwhAYGs3KK8SC1HE6wbC9Bq9ygAEbXsJ9OFt/ gp0c5fWcijchN0+DdQwLiNQX3TeVjwTiRgPc5/fHOXhm9ylW3M5bdwHd0zzPqvxP la0KCZoXOuoNqZUEDXpFjHhuH0IQNtVW1w2ztY8xUTIDqUffHhZowSDDBwj+gkvF 1tu9YiPpyjm942xVuEwvbPnsGawg9bq5r7ERkxMyh+4fweJJX/7f0NJ4XRhoT2G/ rUia1ZqHiFEU7kk1yDbwMH3YCPcFE90d5JjQTmve8F/jHh5MskHKUTRVTIHBbuwC vx/A81mV7N5TtsyI6OOWMRuTZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRrHUNe 6c19IHtBvKZxereP39+eMB8GA1UdIwQYMBaAFLhb7Zm/dAq61aOZyd9f6ZYqbejx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NURFNS9FM0VENjVEOEY0 QkUxMUVBOUMzNUZFNkFDNEY5QUUwMi91RnZ0bWI5MENyclZvNW5KMzFfcGxpcHQ2 UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VGdnRtYjkwQ3JyVm81bkozMV9wbGlwdDZQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NURFNS9FM0VENjVEOEY0QkUxMUVBOUMzNUZFNkFDNEY5QUUwMi91RnZ0bWI5MENy clZvNW5KMzFfcGxpcHQ2UEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUuVil16hfBAcgxAH4Ez7p76GroOY/VRLR/CCNA6lHMqKPi05CD4af ZGgGS5uIWsL3r5q5MaMxNQjBwDLaNjljKD+cK5cF7boa5Rx+pGqv79uSDSevnrdW wS593DDi7ImB8ujWUNdnPvjpBl7Ucml/LgDOK2YCffMXOafJhCagGX+/tOWqFWsh N2FLdA7a/2P7GZrN3EcrgMisE2DIdvJyh0STTRJOCEoSzj+MD2TpuD///EAOyeOT xjW8xhrXkFQhRTUp0aJv+k8fRdVAqzpg9M5ugVmHd1S99H6ljLHiv9KZr34n0gFL znJJ/JxyxhJ5m+sBzIlDRd//kMMF8B+b -----END CERTIFICATE-----Generated at Sun Dec 21 06:32:53 2025 by rpki-client