This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft File: UZO9WZSe-bfaEnIPfUbufEvKMOw.mft (raw, json) Hash identifier: /WqRLBPaf5eROfnGzsCmNILEeI3c/pqXnP42Q0YCUrg= Subject key identifier: 21:F1:BC:E6:A3:38:81:14:35:82:E5:AE:E8:C8:C2:78:AB:20:F5:27 Authority key identifier: 51:93:BD:59:94:9E:F9:B7:DA:12:72:0F:7D:46:EE:7C:4B:CA:30:EC Certificate issuer: /CN=A91A1D8C/serialNumber=5193BD59949EF9B7DA12720F7D46EE7C4BCA30EC Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft Manifest number: 0A Signing time: Fri 19 Dec 2025 06:58:26 +0000 Manifest this update: Fri 19 Dec 2025 06:58:25 +0000 Manifest next update: Fri 26 Dec 2025 06:58:25 +0000 Files and hashes: 1: UZO9WZSe-bfaEnIPfUbufEvKMOw.crl (hash: y1zFZKMpr4ZkLHYCh/oaHJNs4V4Uo1LNnbgAyAG8HtI=) 2: DF3F877ED01D11F09BB99C37C4F9AE02.roa (hash: qoXhCBWfjxGFnBTOb18uIzLQOhy+m8WFebelHqCpVmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.crl rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:58:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1D8C, serialNumber=5193BD59949EF9B7DA12720F7D46EE7C4BCA30EC Validity Not Before: Dec 19 06:58:25 2025 GMT Not After : Dec 26 06:58:25 2025 GMT Subject: CN=6944f791-2d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8a:1e:1c:80:3c:fb:f4:4d:a2:54:7d:be:a5: 5e:75:3e:90:f2:49:00:86:b0:a3:d3:63:cc:95:d9: 81:bd:0d:40:86:dd:1b:90:68:0c:c0:f4:86:f4:12: 91:27:79:97:bc:3f:83:4d:47:3b:0e:ce:6c:4b:db: 80:9d:f6:28:b7:6b:ca:5e:c9:56:d0:0b:27:46:81: 71:a3:5f:5f:a3:d9:a2:61:03:fb:2b:23:2c:c2:fb: 3d:20:2c:b8:c8:2e:20:33:98:d9:81:7d:09:06:26: 38:fc:c6:da:48:48:c7:36:c2:2d:43:11:9f:c6:00: d1:67:cc:21:2d:9d:cb:d8:8d:be:df:70:a9:1c:c4: 86:1e:ab:97:ff:be:31:dd:51:40:cc:cb:95:b9:81: e3:3d:f0:79:26:f2:49:1b:eb:b9:0a:e0:1a:89:79: e8:44:5b:1f:5b:df:78:03:9e:db:c2:da:4e:b1:ba: 0f:e6:97:aa:1a:63:7f:ef:3b:46:f9:32:3f:61:42: 6a:36:94:9f:13:69:88:b4:bf:d8:2a:bb:83:ed:4f: 52:63:cd:aa:0f:d9:54:3f:d8:64:65:1c:d0:08:17: bb:9e:ab:2f:43:63:3a:87:d9:82:6b:0d:da:a7:79: c1:0f:7e:fc:49:18:cf:87:78:6f:2e:59:92:e2:d6: d4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F1:BC:E6:A3:38:81:14:35:82:E5:AE:E8:C8:C2:78:AB:20:F5:27 X509v3 Authority Key Identifier: keyid:51:93:BD:59:94:9E:F9:B7:DA:12:72:0F:7D:46:EE:7C:4B:CA:30:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:2c:3e:cb:77:57:3d:7f:b9:1d:ef:82:6c:79:fe:3a:33:71: aa:76:18:2d:7a:d5:51:d3:84:ea:e4:56:26:f1:df:50:64:c4: 8f:59:37:82:b0:5c:2e:c1:5f:b3:fc:93:06:f1:38:ed:0e:ab: 7a:3b:cd:ac:4b:e2:13:7e:7d:2d:98:bb:f8:7f:50:29:ea:62: 30:8d:dd:94:00:5e:9b:16:ef:ed:5f:74:7b:b1:1a:a7:8f:eb: a5:f8:e8:68:e2:e0:73:df:5f:84:88:89:dd:2b:87:83:e7:8a: 2f:5f:32:41:3c:cd:27:3d:f2:98:a3:04:81:10:0f:38:3a:82: 0d:c3:f6:e8:9a:d8:fb:0d:c6:d0:8f:fd:d1:22:07:42:da:6e: 42:ca:ff:31:07:0a:cf:46:f4:65:3e:17:2b:99:00:29:e1:1f: b1:11:23:c2:1f:8a:93:ce:66:ff:aa:16:54:74:7d:77:66:66: f8:05:dd:a7:33:90:e2:cc:df:88:29:fd:54:ce:c7:47:87:20: f0:8f:03:35:1b:b2:81:83:46:84:62:05:e4:f8:d9:f8:17:df: b6:8f:e3:75:ee:3d:69:eb:07:26:01:9c:d9:b0:20:97:9b:48: ad:2a:09:fe:e5:76:1d:7a:d1:3c:5e:26:54:2a:f2:82:2f:0e: 21:27:7a:a2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MUQ4QzExMC8GA1UEBRMoNTE5M0JENTk5NDlFRjlCN0RBMTI3MjBGN0Q0NkVFN0M0 QkNBMzBFQzAeFw0yNTEyMTkwNjU4MjVaFw0yNTEyMjYwNjU4MjVaMBgxFjAUBgNV BAMMDTY5NDRmNzkxLTJkN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9ih4cgDz79E2iVH2+pV51PpDySQCGsKPTY8yV2YG9DUCG3RuQaAzA9Ib0EpEn eZe8P4NNRzsOzmxL24Cd9ii3a8peyVbQCydGgXGjX1+j2aJhA/srIyzC+z0gLLjI LiAzmNmBfQkGJjj8xtpISMc2wi1DEZ/GANFnzCEtncvYjb7fcKkcxIYeq5f/vjHd UUDMy5W5geM98Hkm8kkb67kK4BqJeehEWx9b33gDntvC2k6xug/ml6oaY3/vO0b5 Mj9hQmo2lJ8TaYi0v9gqu4PtT1JjzaoP2VQ/2GRlHNAIF7ueqy9DYzqH2YJrDdqn ecEPfvxJGM+HeG8uWZLi1tRdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIfG85qM4 gRQ1guWu6MjCeKsg9ScwHwYDVR0jBBgwFoAUUZO9WZSe+bfaEnIPfUbufEvKMOww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExRDhDL0EwODE5OTM0RDAx NjExRjBBRDQ5N0E3RUM0RjlBRTAyL1VaTzlXWlNlLWJmYUVuSVBmVWJ1ZkV2S01P dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVVpPOVdaU2UtYmZhRW5JUGZVYnVmRXZLTU93LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx RDhDL0EwODE5OTM0RDAxNjExRjBBRDQ5N0E3RUM0RjlBRTAyL1VaTzlXWlNlLWJm YUVuSVBmVWJ1ZkV2S01Pdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJEsPst3Vz1/uR3vgmx5/jozcap2GC161VHThOrkVibx31BkxI9ZN4Kw XC7BX7P8kwbxOO0Oq3o7zaxL4hN+fS2Yu/h/UCnqYjCN3ZQAXpsW7+1fdHuxGqeP 66X46Gji4HPfX4SIid0rh4Pnii9fMkE8zSc98pijBIEQDzg6gg3D9uia2PsNxtCP /dEiB0LabkLK/zEHCs9G9GU+FyuZACnhH7ERI8IfipPOZv+qFlR0fXdmZvgF3acz kOLM34gp/VTOx0eHIPCPAzUbsoGDRoRiBeT42fgX37aP43XuPWnrByYBnNmwIJeb SK0qCf7ldh160TxeJlQq8oIvDiEneqI= -----END CERTIFICATE-----Generated at Fri Dec 19 19:06:16 2025 by rpki-client