This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft File: uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft (raw, json) Hash identifier: p1M6h25gNQBPyXLZqWW+cmjUMFkR072Bjm4LyHZDIs0= Subject key identifier: C8:7E:EF:D4:06:3C:4B:E5:9D:8A:52:A8:4D:8D:66:07:67:11:09:AC Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9 Certificate issuer: /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9 Certificate serial: 0869 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft Manifest number: 084A Signing time: Mon 22 Dec 2025 20:08:40 +0000 Manifest this update: Mon 22 Dec 2025 20:08:40 +0000 Manifest next update: Mon 29 Dec 2025 20:08:40 +0000 Files and hashes: 1: uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl (hash: McgcKME6Yu1iQIBAx2SxlRE8htbWPk+XID+3uvYNv8o=) 2: 2DCC2988982711ED9D75C85AC4F9AE02.roa (hash: cXIuMnEWUiuT4kupzUNHJo4zj/W45Qb9cwkr7yvw0vc=) 3: 8BB3088E982F11ED9D647578C4F9AE02.roa (hash: A1w8tHzqGX+jD/ISNBe9aPcQuL2J3HJQzhH/YAzCdq0=) 4: F89E68D6982911ED90F8C877C4F9AE02.roa (hash: XTLM9Il3d4SVArTDp/CLgDo1h6RlBLONdep9WAa5H5I=) 5: 13EFC134D76A11F0B167783877D3641D.roa (hash: 6m2W98KoHiTOdv4UcnqE/I841GSpjKmEV5ZD01cOhGs=) 6: E68BF368DD9911EF85614A53C4F9AE02.roa (hash: RcdkSPfjnAmz3uVP4FBhLTQ0GFBSdezmu4kQPa/+yaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2153 (0x869) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E83B, serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9 Validity Not Before: Dec 22 20:08:40 2025 GMT Not After : Dec 29 20:08:40 2025 GMT Subject: CN=6949a548-cff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e5:ae:7d:b5:5a:28:3e:2a:a9:db:73:9b:d8: 32:d2:ba:04:02:42:4a:a5:9d:1d:dd:b0:47:6d:a1: 09:a7:67:df:57:0e:59:6c:3d:32:fa:00:0f:bf:f4: a2:60:12:88:62:38:e8:72:04:0e:a3:c8:22:fe:1a: 88:38:75:f9:e3:62:a6:5c:07:96:05:75:ae:9a:0b: 7b:c3:af:bd:62:7b:b7:2c:f8:a4:fb:b9:59:94:a2: 39:1d:a6:db:06:06:e2:5e:91:ed:c6:00:1e:37:3f: d5:e9:b8:26:c0:2f:f3:71:f2:88:81:3c:88:2f:5c: 38:25:c8:aa:24:b8:81:81:46:53:eb:b0:70:5b:af: ab:7d:ab:4b:72:32:a8:2a:f0:d1:12:16:61:d3:28: 82:7e:b4:d3:3e:8c:38:96:f6:c6:16:83:1f:b6:41: ca:e8:21:53:19:0e:f5:ef:e5:8c:c6:b2:47:7d:a3: 5f:fe:e0:f2:36:9f:47:bc:2d:0d:ea:aa:53:3e:7c: 3b:1d:45:6d:92:64:db:da:d8:40:af:73:83:ce:5e: 82:29:a3:46:36:f9:38:e3:71:86:53:bb:55:7a:65: f0:38:2d:c1:09:33:ce:64:1d:8d:7a:b5:88:68:7d: 57:7e:6d:8f:e2:ae:a0:a8:4f:5a:62:ac:b3:4e:58: f6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7E:EF:D4:06:3C:4B:E5:9D:8A:52:A8:4D:8D:66:07:67:11:09:AC X509v3 Authority Key Identifier: keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:61:ea:13:a6:cc:58:f2:b4:7c:2b:88:34:30:26:e6:e0:69: ec:96:0c:67:c3:ee:d1:59:c6:66:2c:55:d3:5f:f6:7c:8d:d3: b8:01:ff:02:f2:65:f1:60:ca:cd:e3:c2:49:f1:12:6d:c5:b7: 48:9d:2c:4e:1f:d0:c6:11:61:dc:4b:b9:04:3c:fe:50:ae:16: 42:3b:d8:08:e8:e5:99:41:84:49:c6:ed:8a:22:da:bb:43:44: d8:5e:70:3f:81:2d:cd:2a:49:c6:a9:8a:b9:9f:6c:9b:b2:54: 96:ec:40:b9:39:fa:7a:00:6e:0d:d6:58:ef:4a:48:f4:41:c2: 7d:65:a9:e0:21:de:4f:be:b2:d4:f9:09:86:c0:08:00:7e:3d: ec:18:f2:e8:22:14:ab:97:6b:bb:b9:5b:83:0f:df:ae:45:1b: df:3c:cb:1a:c4:dd:4f:70:f0:58:c5:47:de:54:42:85:25:43: e1:e9:d0:80:5b:0a:ec:27:6c:fe:45:11:c0:73:d6:67:c9:b1: d0:a1:01:b0:4f:63:2d:41:e9:c3:61:b7:4e:32:89:45:46:b3: f6:2b:aa:06:ca:4a:9d:65:2c:ae:2b:90:34:7e:fe:67:cf:a6: 99:73:43:ba:97:8a:84:83:01:c8:36:90:ca:90:4c:d9:8e:94: 8c:38:f9:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUU4M0IxMTAvBgNVBAUTKEI4QTYyQ0YxREU4QjI2MkUxNDczN0Q5M0VFM0U2RjM2 QzNBMEUxQzkwHhcNMjUxMjIyMjAwODQwWhcNMjUxMjI5MjAwODQwWjAYMRYwFAYD VQQDDA02OTQ5YTU0OC1jZmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuWufbVaKD4qqdtzm9gy0roEAkJKpZ0d3bBHbaEJp2ffVw5ZbD0y+gAPv/Si YBKIYjjocgQOo8gi/hqIOHX542KmXAeWBXWumgt7w6+9Ynu3LPik+7lZlKI5Habb BgbiXpHtxgAeNz/V6bgmwC/zcfKIgTyIL1w4JciqJLiBgUZT67BwW6+rfatLcjKo KvDREhZh0yiCfrTTPow4lvbGFoMftkHK6CFTGQ717+WMxrJHfaNf/uDyNp9HvC0N 6qpTPnw7HUVtkmTb2thAr3ODzl6CKaNGNvk443GGU7tVemXwOC3BCTPOZB2NerWI aH1Xfm2P4q6gqE9aYqyzTlj2yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMh+79QG PEvlnYpSqE2NZgdnEQmsMB8GA1UdIwQYMBaAFLimLPHeiyYuFHN9k+4+bzbDoOHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTgzQi83OTJEMTQ4QUYy ODExMUVBOEE2RkM2NkRDNEY5QUUwMi91S1lzOGQ2TEppNFVjMzJUN2o1dk5zT2c0 Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VLWXM4ZDZMSmk0VWMzMlQ3ajV2TnNPZzRjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTgzQi83OTJEMTQ4QUYyODExMUVBOEE2RkM2NkRDNEY5QUUwMi91S1lzOGQ2TEpp NFVjMzJUN2o1dk5zT2c0Y2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoYeoTpsxY8rR8K4g0MCbm4Gnslgxnw+7RWcZmLFXTX/Z8jdO4Af8C 8mXxYMrN48JJ8RJtxbdInSxOH9DGEWHcS7kEPP5QrhZCO9gI6OWZQYRJxu2KItq7 Q0TYXnA/gS3NKknGqYq5n2ybslSW7EC5Ofp6AG4N1ljvSkj0QcJ9ZangId5PvrLU +QmGwAgAfj3sGPLoIhSrl2u7uVuDD9+uRRvfPMsaxN1PcPBYxUfeVEKFJUPh6dCA WwrsJ2z+RRHAc9ZnybHQoQGwT2MtQenDYbdOMolFRrP2K6oGykqdZSyuK5A0fv5n z6aZc0O6l4qEgwHINpDKkEzZjpSMOPki -----END CERTIFICATE-----Generated at Tue Dec 23 18:53:04 2025 by rpki-client