This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft File: ULpjuT-CkSle5HAxuWtFzaXCSw0.mft (raw, json) Hash identifier: 7hrXWmagk/9s4CJxUfgniwh0JACOgsA2ne3ec3Dfcz8= Subject key identifier: BB:DD:FD:4F:09:D4:9C:62:44:7B:39:38:BE:41:F0:1D:32:47:B0:A3 Authority key identifier: 50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D Certificate issuer: /CN=A9199CFF/serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft Manifest number: AB Signing time: Fri 19 Dec 2025 05:17:20 +0000 Manifest this update: Fri 19 Dec 2025 05:17:20 +0000 Manifest next update: Fri 26 Dec 2025 05:17:20 +0000 Files and hashes: 1: ULpjuT-CkSle5HAxuWtFzaXCSw0.crl (hash: L09aiO+lJumOo8nmYgD6VUfV2BRlNQPxhmoTEpw4bGE=) 2: 42D62828962711F0B74FEE0CC4F9AE02.roa (hash: 0z7LOagwkk6qGA8xhyY/PPVphtP1S0sI7WQf0daRuRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CFF, serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D Validity Not Before: Dec 19 05:17:20 2025 GMT Not After : Dec 26 05:17:20 2025 GMT Subject: CN=6944dfe0-9f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e5:a1:a1:11:98:08:47:1f:83:ac:82:ce:0f: 4c:e3:e0:d5:5d:11:00:7b:ff:a2:43:59:ab:14:8a: b0:3a:e3:9c:75:b0:22:90:d9:5c:c4:77:bb:e1:e7: 81:21:6b:98:4d:0a:ff:c4:96:c5:d9:14:20:4f:fc: c8:44:5c:72:ba:a8:d9:62:b1:05:2b:35:b4:b7:48: 5c:a5:c3:49:81:18:cf:0b:80:06:a4:45:45:5e:fc: 23:14:e7:a8:0c:61:0b:0a:e1:d1:fb:c3:24:9f:10: 78:bc:4f:b8:a0:f6:7d:da:06:86:e0:8d:51:da:83: e4:20:e8:bc:e0:78:f9:72:37:6c:08:73:a9:f2:a3: 7d:79:3e:d5:e4:b9:24:c0:1d:1b:17:ec:48:80:98: 32:ad:60:4a:61:7b:e4:68:5a:a4:f6:ac:2a:2a:4c: 6e:78:89:37:1d:fc:7b:6d:0f:ad:81:2b:47:aa:61: 6d:b7:f1:11:48:17:81:5c:13:a1:8b:e2:f3:c4:b7: 07:a2:bf:2e:be:4d:b2:2a:a2:92:99:2b:e7:0e:13: d1:a1:02:1e:82:aa:82:11:6c:f9:f6:f3:a2:92:47: b1:06:31:f7:e2:cf:f5:c1:b1:b4:dc:31:7a:5e:fe: e6:26:0d:ee:cb:f9:f2:d8:71:73:39:4c:a1:90:a8: 81:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DD:FD:4F:09:D4:9C:62:44:7B:39:38:BE:41:F0:1D:32:47:B0:A3 X509v3 Authority Key Identifier: keyid:50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:cc:80:1c:04:e8:af:35:1a:8a:b7:e9:01:0d:90:58:ee:d6: 58:f6:96:d9:fd:21:6b:90:58:89:1d:67:13:8a:2f:84:f2:25: 1a:00:d1:68:85:dd:28:cb:f5:11:40:35:42:13:fa:b5:0c:45: 1a:a4:c3:63:a4:2f:78:3f:a8:58:ca:30:cb:db:e3:e4:57:6f: 92:fe:68:81:55:4e:25:92:ef:ce:61:27:b1:c0:2d:db:ae:5e: 2f:31:9f:e0:38:ce:9c:18:84:d7:13:31:8b:bb:47:c4:eb:cc: de:9b:b1:e4:27:50:5b:81:21:31:63:4f:14:d1:07:e4:36:34: a8:9a:4d:c4:58:b8:69:ce:be:a7:8c:e4:46:e6:c2:0e:96:62: 08:3b:4f:42:96:5a:c4:a0:9f:12:01:95:64:6d:f1:94:2a:ca: 4a:e0:f9:c3:79:7c:6c:fd:4c:3f:b5:aa:78:47:f1:33:69:f2: 91:ca:e2:41:f6:9e:cc:a6:7a:17:0a:6e:28:3f:4b:d4:39:f8: 53:9b:46:99:e4:e3:97:58:a3:b3:4c:11:45:c4:80:84:02:6b: cc:a3:cc:0f:58:77:ed:d7:df:c1:1e:21:13:e9:11:af:11:19: fe:8c:29:e4:6e:24:2a:96:1e:13:31:34:d7:0d:fa:41:8a:7a: 98:58:ce:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlDRkYxMTAvBgNVBAUTKDUwQkE2M0I5M0Y4MjkxMjk1RUU0NzAzMUI5NkI0NUNE QTVDMjRCMEQwHhcNMjUxMjE5MDUxNzIwWhcNMjUxMjI2MDUxNzIwWjAYMRYwFAYD VQQDDA02OTQ0ZGZlMC05ZjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uWhoRGYCEcfg6yCzg9M4+DVXREAe/+iQ1mrFIqwOuOcdbAikNlcxHe74eeB IWuYTQr/xJbF2RQgT/zIRFxyuqjZYrEFKzW0t0hcpcNJgRjPC4AGpEVFXvwjFOeo DGELCuHR+8MknxB4vE+4oPZ92gaG4I1R2oPkIOi84Hj5cjdsCHOp8qN9eT7V5Lkk wB0bF+xIgJgyrWBKYXvkaFqk9qwqKkxueIk3Hfx7bQ+tgStHqmFtt/ERSBeBXBOh i+LzxLcHor8uvk2yKqKSmSvnDhPRoQIegqqCEWz59vOikkexBjH34s/1wbG03DF6 Xv7mJg3uy/ny2HFzOUyhkKiBpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvd/U8J 1JxiRHs5OL5B8B0yR7CjMB8GA1UdIwQYMBaAFFC6Y7k/gpEpXuRwMblrRc2lwksN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUNGRi8yQUUxNkE1OEQ3 RTAxMUVGOEIxNzNEMkZDNEY5QUUwMi9VTHBqdVQtQ2tTbGU1SEF4dVd0RnphWENT dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VMcGp1VC1Da1NsZTVIQXh1V3RGemFYQ1N3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUNGRi8yQUUxNkE1OEQ3RTAxMUVGOEIxNzNEMkZDNEY5QUUwMi9VTHBqdVQtQ2tT bGU1SEF4dVd0RnphWENTdzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVzIAcBOivNRqKt+kBDZBY7tZY9pbZ/SFrkFiJHWcTii+E8iUaANFo hd0oy/URQDVCE/q1DEUapMNjpC94P6hYyjDL2+PkV2+S/miBVU4lku/OYSexwC3b rl4vMZ/gOM6cGITXEzGLu0fE68zem7HkJ1BbgSExY08U0QfkNjSomk3EWLhpzr6n jORG5sIOlmIIO09CllrEoJ8SAZVkbfGUKspK4PnDeXxs/Uw/tap4R/EzafKRyuJB 9p7MpnoXCm4oP0vUOfhTm0aZ5OOXWKOzTBFFxICEAmvMo8wPWHft19/BHiET6RGv ERn+jCnkbiQqlh4TMTTXDfpBinqYWM6X -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:00 2025 by rpki-client