This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft File: ujgt6jovW4xMIgXskp9gG-NP538.mft (raw, json) Hash identifier: y8yoNa5UcJJW7F91npZlf46wBoidm3wDbkNTOJrvXqI= Subject key identifier: 05:01:27:E0:90:54:F2:A0:16:70:F3:E8:45:07:27:43:EF:89:20:CF Authority key identifier: BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F Certificate issuer: /CN=A91B7B34/serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F Certificate serial: 0CAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft Manifest number: 0CA4 Signing time: Thu 18 Dec 2025 18:06:42 +0000 Manifest this update: Thu 18 Dec 2025 18:06:42 +0000 Manifest next update: Thu 25 Dec 2025 18:06:42 +0000 Files and hashes: 1: ujgt6jovW4xMIgXskp9gG-NP538.crl (hash: 6QLXBw0tZFyQLzv5aUScmauV/yN5Fc/3MpqJVla8UCo=) 2: 52E56FA806C711EA84978821C4F9AE02.roa (hash: pC6YASmlOW3gbC5Njuzzo1yhASqi/WroinaiHpfVYXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3246 (0xcae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B34, serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F Validity Not Before: Dec 18 18:06:42 2025 GMT Not After : Dec 25 18:06:42 2025 GMT Subject: CN=694442b2-7fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6a:e9:cb:db:0a:f0:4a:5c:f5:28:48:d5:96: 08:05:5d:64:f3:bd:b3:b2:f3:1c:89:8f:30:1a:70: 45:4d:32:d9:9d:2f:21:17:57:33:f7:2d:42:fe:bc: 78:c5:05:3f:15:f0:fd:f0:85:c4:14:24:2f:4b:1d: b6:92:69:34:0e:2a:e3:8b:ec:78:58:00:76:6d:4e: 27:1c:e0:41:df:93:4b:8d:f8:d3:e7:42:85:41:ad: 5c:97:cb:81:aa:80:f0:2e:c1:5c:db:0b:05:82:e9: 24:3b:bb:bb:1a:b1:c6:16:b8:b5:31:af:e6:58:81: 8d:ca:94:e5:dc:ad:3e:fc:fa:94:5d:4f:c4:b0:4a: 2d:29:a7:38:20:3b:6f:56:5e:af:a4:e7:2c:9c:c2: 35:59:b5:25:ed:ec:1f:1c:9e:84:c3:91:0c:cf:b8: 8b:82:13:9f:82:40:ab:9d:66:e8:00:a0:12:9a:2b: 3a:b9:48:0c:c0:fd:d1:83:e9:d6:83:ed:1e:f5:1f: 74:95:83:47:e8:ea:60:8a:f7:cb:17:53:c2:fe:7a: a5:e8:eb:aa:fe:4c:11:4b:3e:7d:61:61:8c:68:9d: 7f:36:63:da:d0:d7:ba:ad:b3:2c:b4:e8:7a:78:03: d7:37:3a:ba:ed:3f:ce:6c:e4:90:d7:a1:e4:56:ae: 7d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:01:27:E0:90:54:F2:A0:16:70:F3:E8:45:07:27:43:EF:89:20:CF X509v3 Authority Key Identifier: keyid:BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:90:95:aa:4b:56:75:57:bb:61:e0:e2:13:9a:a8:bd:4e:71: 85:35:82:51:1d:78:6e:7f:93:48:51:ee:72:78:d1:06:99:20: 31:b6:d6:d0:64:fe:e9:f5:fa:74:5a:a0:8b:7e:43:23:ea:63: 42:d1:18:30:86:ea:c8:55:83:14:b3:51:40:25:1a:9d:ce:9d: 38:68:b5:b9:fa:ab:8e:48:21:84:67:da:9b:97:d3:b6:6f:c7: c3:ce:b3:33:3b:75:3e:a5:61:d1:2e:2b:11:de:6e:cd:05:6f: 0f:7d:c1:5b:d3:e8:da:22:40:3a:a7:de:ac:95:b4:da:15:03: 88:f2:c1:c0:2f:ab:ed:d4:dc:74:97:13:23:c4:de:dd:27:da: c5:81:e3:dd:67:39:a6:96:5b:d0:16:d0:ab:c7:bc:9e:b5:17: 3c:fc:ab:ef:55:f9:ef:47:1b:44:f1:a3:65:f4:af:e2:11:41: f6:f1:62:ea:e0:20:7d:87:03:68:80:e9:9a:d9:c7:6a:94:98: f4:cb:eb:44:17:81:b3:09:b3:e8:95:be:37:94:4a:a9:ba:2f: f2:14:47:60:bb:1a:d4:56:43:90:05:02:da:3b:cd:8f:bf:8b: 88:a1:37:bf:d4:a5:3f:dd:8c:67:0f:68:a3:33:ea:83:86:74: 0f:cc:27:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMzQxMTAvBgNVBAUTKEJBMzgyREVBM0EyRjVCOEM0QzIyMDVFQzkyOUY2MDFC RTM0RkU3N0YwHhcNMjUxMjE4MTgwNjQyWhcNMjUxMjI1MTgwNjQyWjAYMRYwFAYD VQQDDA02OTQ0NDJiMi03ZmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkWrpy9sK8Epc9ShI1ZYIBV1k872zsvMciY8wGnBFTTLZnS8hF1cz9y1C/rx4 xQU/FfD98IXEFCQvSx22kmk0Dirji+x4WAB2bU4nHOBB35NLjfjT50KFQa1cl8uB qoDwLsFc2wsFgukkO7u7GrHGFri1Ma/mWIGNypTl3K0+/PqUXU/EsEotKac4IDtv Vl6vpOcsnMI1WbUl7ewfHJ6Ew5EMz7iLghOfgkCrnWboAKASmis6uUgMwP3Rg+nW g+0e9R90lYNH6OpgivfLF1PC/nql6Ouq/kwRSz59YWGMaJ1/NmPa0Ne6rbMstOh6 eAPXNzq67T/ObOSQ16HkVq59EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUBJ+CQ VPKgFnDz6EUHJ0PviSDPMB8GA1UdIwQYMBaAFLo4Leo6L1uMTCIF7JKfYBvjT+d/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IzNC9ERUNFM0VCQTA2 QzYxMUVBQTUxQTYwMjFDNEY5QUUwMi91amd0Nmpvdlc0eE1JZ1hza3A5Z0ctTlA1 MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VqZ3Q2am92VzR4TUlnWHNrcDlnRy1OUDUzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0IzNC9ERUNFM0VCQTA2QzYxMUVBQTUxQTYwMjFDNEY5QUUwMi91amd0Nmpvdlc0 eE1JZ1hza3A5Z0ctTlA1MzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqkJWqS1Z1V7th4OITmqi9TnGFNYJRHXhuf5NIUe5yeNEGmSAxttbQ ZP7p9fp0WqCLfkMj6mNC0RgwhurIVYMUs1FAJRqdzp04aLW5+quOSCGEZ9qbl9O2 b8fDzrMzO3U+pWHRLisR3m7NBW8PfcFb0+jaIkA6p96slbTaFQOI8sHAL6vt1Nx0 lxMjxN7dJ9rFgePdZzmmllvQFtCrx7yetRc8/KvvVfnvRxtE8aNl9K/iEUH28WLq 4CB9hwNogOma2cdqlJj0y+tEF4GzCbPolb43lEqpui/yFEdguxrUVkOQBQLaO82P v4uIoTe/1KU/3YxnD2ijM+qDhnQPzCc6 -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:10 2025 by rpki-client