This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft File: uG8rXtaXoSH08p1YIDcs8UBVEgs.mft (raw, json) Hash identifier: HW/c8Lr1yF0uUAqrAQLQ18hdIWyCJeOTTUeZ1W7Ol1U= Subject key identifier: 58:32:83:0C:63:7D:E7:E7:39:79:9F:5C:2F:ED:11:BF:C1:E7:F6:87 Authority key identifier: B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B Certificate issuer: /CN=A91AF0C6/serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft Manifest number: 01B7 Signing time: Fri 19 Dec 2025 02:17:41 +0000 Manifest this update: Fri 19 Dec 2025 02:17:41 +0000 Manifest next update: Fri 26 Dec 2025 02:17:41 +0000 Files and hashes: 1: uG8rXtaXoSH08p1YIDcs8UBVEgs.crl (hash: yZITYNAS8Hc3nWfEPANPsANeKdpgq3S8cHU7IFw1W2M=) 2: A915A3543FEC11EE99AC0F43C4F9AE02.roa (hash: GStxXDpLNAyrWojxGnePR9AnSIRyNnzZz6qC/jLrshI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0C6, serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B Validity Not Before: Dec 19 02:17:41 2025 GMT Not After : Dec 26 02:17:41 2025 GMT Subject: CN=6944b5c5-0039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7e:05:7f:85:a6:e8:1e:42:c3:7a:0b:e9:3b: 30:ab:a6:a0:2f:1a:e6:89:38:44:b3:e0:df:21:d5: 60:22:1e:36:b1:7d:60:a1:75:d9:f6:5c:ca:ed:27: fe:c5:5f:17:61:42:b6:e7:15:ad:d1:49:65:a9:9a: 1a:e1:67:47:94:11:b3:5e:bd:4a:4c:8a:6e:6e:b0: 88:ee:42:31:75:6f:1f:af:9f:c8:74:31:39:fd:46: da:d8:59:64:a7:dc:61:db:0e:3c:17:5c:35:00:eb: f7:5f:0d:04:b9:e1:4d:ac:c0:58:23:04:0e:83:b6: c8:52:cd:d0:a8:33:c8:08:37:34:f6:31:e7:75:6d: 88:60:79:a0:d3:1f:eb:03:cd:dd:6a:43:79:22:4f: 65:eb:c0:55:30:00:e5:17:7b:0c:b5:17:ac:d7:e5: cb:04:cd:11:a5:72:01:7e:29:06:cd:2e:71:fe:55: ca:f2:58:8c:df:9c:92:ff:dc:b3:9e:04:e5:09:7d: 2e:38:df:12:8e:83:6e:ef:05:c6:e4:6a:47:55:6b: 2b:18:77:31:fd:e9:fa:68:cc:8b:ac:d4:17:f9:b2: 85:74:62:20:8a:58:35:34:43:0d:81:7c:ca:0d:cf: 73:0c:9e:28:45:91:1f:6d:14:fc:62:3c:2a:17:44: e0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:32:83:0C:63:7D:E7:E7:39:79:9F:5C:2F:ED:11:BF:C1:E7:F6:87 X509v3 Authority Key Identifier: keyid:B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:dd:e3:ae:22:eb:35:93:8c:83:5f:fa:91:4a:ec:49:5f:1a: 57:4d:86:06:de:c1:59:d4:b7:73:b5:cc:b8:f5:8d:ca:6c:cf: 32:17:31:19:28:cb:dd:4f:71:99:22:82:b4:c1:cd:b8:ad:ac: 03:a0:17:da:b1:60:b9:e8:d8:cc:27:3d:69:99:1a:aa:1e:72: 41:f2:c6:7f:76:db:da:40:ef:c8:5c:7b:d3:48:a7:7c:b4:81: 3c:6e:02:57:ee:35:99:ff:e0:7b:c2:9d:ea:16:33:43:fe:20: 77:94:1d:b0:3e:00:55:32:0d:01:65:88:4b:11:1a:3b:5a:f8: 66:02:8a:18:52:b1:d3:d8:71:95:17:e7:19:2f:e9:dd:69:de: f2:39:e4:03:28:71:4f:fc:d5:0c:5f:a1:83:ee:ac:e3:ef:e4: 9d:3f:fc:61:82:02:cb:4a:59:34:be:30:96:22:42:e1:05:ed: 25:54:61:1d:98:83:45:7d:38:68:87:e7:66:31:0d:9a:fd:4c: 2f:8f:e5:44:71:82:c4:ac:71:4b:49:5b:64:42:34:8b:17:ff: fc:6a:b3:90:c7:b0:ab:5d:1e:23:b0:aa:45:f1:58:b5:9a:7a: 0e:4a:d6:76:bf:bf:9f:e1:21:ba:4a:8f:36:be:4e:a7:d9:65: 4b:c3:9f:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwQzYxMTAvBgNVBAUTKEI4NkYyQjVFRDY5N0ExMjFGNEYyOUQ1ODIwMzcyQ0Yx NDA1NTEyMEIwHhcNMjUxMjE5MDIxNzQxWhcNMjUxMjI2MDIxNzQxWjAYMRYwFAYD VQQDDA02OTQ0YjVjNS0wMDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1H4Ff4Wm6B5Cw3oL6Tswq6agLxrmiThEs+DfIdVgIh42sX1goXXZ9lzK7Sf+ xV8XYUK25xWt0UllqZoa4WdHlBGzXr1KTIpubrCI7kIxdW8fr5/IdDE5/Uba2Flk p9xh2w48F1w1AOv3Xw0EueFNrMBYIwQOg7bIUs3QqDPICDc09jHndW2IYHmg0x/r A83dakN5Ik9l68BVMADlF3sMtRes1+XLBM0RpXIBfikGzS5x/lXK8liM35yS/9yz ngTlCX0uON8SjoNu7wXG5GpHVWsrGHcx/en6aMyLrNQX+bKFdGIgilg1NEMNgXzK Dc9zDJ4oRZEfbRT8YjwqF0TgrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgygwxj fefnOXmfXC/tEb/B5/aHMB8GA1UdIwQYMBaAFLhvK17Wl6Eh9PKdWCA3LPFAVRIL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBDNi8zRkNFQkQyMjNG RUMxMUVFQURGNUQzMzhDNEY5QUUwMi91RzhyWHRhWG9TSDA4cDFZSURjczhVQlZF Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VHOHJYdGFYb1NIMDhwMVlJRGNzOFVCVkVncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBDNi8zRkNFQkQyMjNGRUMxMUVFQURGNUQzMzhDNEY5QUUwMi91RzhyWHRhWG9T SDA4cDFZSURjczhVQlZFZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh3eOuIus1k4yDX/qRSuxJXxpXTYYG3sFZ1Ldztcy49Y3KbM8yFzEZ KMvdT3GZIoK0wc24rawDoBfasWC56NjMJz1pmRqqHnJB8sZ/dtvaQO/IXHvTSKd8 tIE8bgJX7jWZ/+B7wp3qFjND/iB3lB2wPgBVMg0BZYhLERo7WvhmAooYUrHT2HGV F+cZL+ndad7yOeQDKHFP/NUMX6GD7qzj7+SdP/xhggLLSlk0vjCWIkLhBe0lVGEd mINFfThoh+dmMQ2a/Uwvj+VEcYLErHFLSVtkQjSLF//8arOQx7CrXR4jsKpF8Vi1 mnoOStZ2v7+f4SG6So82vk6n2WVLw5+2 -----END CERTIFICATE-----Generated at Fri Dec 19 19:05:59 2025 by rpki-client