This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft File: UjNwqBpuUUYYrnypeV_dEQs1Djc.mft (raw, json) Hash identifier: SOLFzi16RP6CTxAPNKiothZCv6ym1+3KM3VE5Zke+6o= Subject key identifier: 2E:BD:80:0C:AC:CF:B1:8A:DC:D1:8F:93:22:1B:B9:E7:FB:62:B5:C1 Authority key identifier: 52:33:70:A8:1A:6E:51:46:18:AE:7C:A9:79:5F:DD:11:0B:35:0E:37 Certificate issuer: /CN=A91C6CB6/serialNumber=523370A81A6E514618AE7CA9795FDD110B350E37 Certificate serial: 0CF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft Manifest number: 0CE3 Signing time: Wed 31 Dec 2025 17:52:43 +0000 Manifest this update: Wed 31 Dec 2025 17:52:43 +0000 Manifest next update: Wed 07 Jan 2026 17:52:43 +0000 Files and hashes: 1: UjNwqBpuUUYYrnypeV_dEQs1Djc.crl (hash: YlljSFY4cc0h9IxI4Dcp3LwnjKkWRJfpcXvh232CHOI=) 2: 04E274DA27CB11EE8FA6F46CC4F9AE02.roa (hash: QC+kAoIXXpY6brDwehpJKK1cCBvEWnBsopkp3/fuZEY=) 3: E683FA78277E11EE9D54C13AC4F9AE02.roa (hash: w0i/ARt9lCVRkjFZbSD4igkj3UoeypjyUlDGFiTsJMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.crl rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 17:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3321 (0xcf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CB6, serialNumber=523370A81A6E514618AE7CA9795FDD110B350E37 Validity Not Before: Dec 31 17:52:43 2025 GMT Not After : Jan 7 17:52:43 2026 GMT Subject: CN=695562eb-7fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:89:f2:fa:ed:03:0a:48:3c:70:f9:72:2e:cf: 6a:40:30:e9:48:ad:c2:9e:6b:4f:2f:f0:39:e5:e7: f5:f0:fa:21:9f:af:dd:47:fd:57:93:17:3f:2b:26: 22:66:da:42:e8:f2:2f:fa:56:fb:14:17:33:6e:8c: 3a:ae:0f:ab:fb:f1:47:6c:f1:68:14:13:47:ca:73: 70:3e:b7:0c:c5:4d:c4:f7:f6:b5:9a:1d:7f:a7:45: 1d:b4:7c:ec:8f:d5:1c:64:61:0c:60:12:2d:c4:72: bc:87:a3:1b:21:9e:90:8f:66:7b:05:ed:04:a4:06: 3e:50:e8:f3:5d:84:22:11:3e:0c:e9:2a:73:c3:3b: e8:33:ea:b1:21:21:67:a6:37:35:7f:dc:aa:38:fc: 2e:34:8b:86:0f:c9:37:37:5b:28:81:5a:63:c0:5e: 43:a0:24:3f:07:f9:7e:71:eb:23:2e:93:46:66:70: 48:74:6f:5a:9b:ce:09:3e:b2:69:6e:c4:d2:ae:d7: 59:5a:2d:6a:b1:6d:da:6d:f1:e6:7e:a8:b8:4f:06: e8:9a:0b:42:e6:12:01:00:93:a7:de:23:cf:85:5b: a7:28:b3:51:d5:af:7a:ea:21:c3:a7:da:66:0c:c8: c2:b6:51:9d:a2:87:8b:fe:d8:84:30:bc:7f:5e:32: ac:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BD:80:0C:AC:CF:B1:8A:DC:D1:8F:93:22:1B:B9:E7:FB:62:B5:C1 X509v3 Authority Key Identifier: keyid:52:33:70:A8:1A:6E:51:46:18:AE:7C:A9:79:5F:DD:11:0B:35:0E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:1e:6c:ef:b3:a2:b4:ec:19:bf:f2:66:54:c2:83:ca:0c:37: 39:a5:78:c8:ec:18:7e:c9:b7:9e:ab:ca:eb:24:71:72:99:f6: 95:1f:59:e0:39:50:48:5e:9e:93:50:48:12:1c:6d:48:8b:1f: 1e:f7:cd:06:61:de:e5:05:e5:3b:43:13:fa:c7:46:5d:b5:6e: 87:75:44:ca:4a:ed:3b:00:0d:95:fb:60:d7:60:26:0b:c4:b9: 0d:70:f9:cb:e0:57:2d:17:d8:ce:a6:b6:b9:30:82:a1:50:6f: 2d:91:01:e1:49:fe:f3:60:c9:3f:ea:d2:4e:6e:a6:b5:34:5c: 12:7a:3b:a2:2a:50:36:14:dd:c9:4d:f2:c8:2d:99:5d:5f:b0: 05:93:61:02:3c:a1:f7:68:ee:98:5f:e5:16:90:dd:98:e6:0c: e1:18:96:c1:e6:ab:8e:23:c3:3d:36:c3:f9:78:48:53:7a:02: de:59:35:12:bf:70:2d:da:ed:70:65:85:15:c7:43:d7:a1:bb: 60:50:ef:47:53:9b:9e:45:68:56:ac:cf:70:45:90:f7:0c:11: 4b:1c:ee:2d:23:30:9e:2f:5a:ca:ab:e5:e5:6f:7a:c2:c1:c9: 19:7b:b8:2e:41:4d:5f:15:7b:14:e8:54:20:d0:46:47:ed:0e: e0:bf:71:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQjYxMTAvBgNVBAUTKDUyMzM3MEE4MUE2RTUxNDYxOEFFN0NBOTc5NUZERDEx MEIzNTBFMzcwHhcNMjUxMjMxMTc1MjQzWhcNMjYwMTA3MTc1MjQzWjAYMRYwFAYD VQQDDA02OTU1NjJlYi03ZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmYny+u0DCkg8cPlyLs9qQDDpSK3CnmtPL/A55ef18Pohn6/dR/1Xkxc/KyYi ZtpC6PIv+lb7FBczbow6rg+r+/FHbPFoFBNHynNwPrcMxU3E9/a1mh1/p0UdtHzs j9UcZGEMYBItxHK8h6MbIZ6Qj2Z7Be0EpAY+UOjzXYQiET4M6SpzwzvoM+qxISFn pjc1f9yqOPwuNIuGD8k3N1sogVpjwF5DoCQ/B/l+cesjLpNGZnBIdG9am84JPrJp bsTSrtdZWi1qsW3abfHmfqi4TwbomgtC5hIBAJOn3iPPhVunKLNR1a966iHDp9pm DMjCtlGdooeL/tiEMLx/XjKszwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC69gAys z7GK3NGPkyIbuef7YrXBMB8GA1UdIwQYMBaAFFIzcKgablFGGK58qXlf3RELNQ43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNCNi8yQTRGNTc1RUZF MTQxMUU5ODFDMjY1NTlDNEY5QUUwMi9Vak53cUJwdVVVWVlybnlwZVZfZEVRczFE amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VqTndxQnB1VVVZWXJueXBlVl9kRVFzMURqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNCNi8yQTRGNTc1RUZFMTQxMUU5ODFDMjY1NTlDNEY5QUUwMi9Vak53cUJwdVVV WVlybnlwZVZfZEVRczFEamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSHmzvs6K07Bm/8mZUwoPKDDc5pXjI7Bh+ybeeq8rrJHFymfaVH1ng OVBIXp6TUEgSHG1Iix8e980GYd7lBeU7QxP6x0ZdtW6HdUTKSu07AA2V+2DXYCYL xLkNcPnL4FctF9jOpra5MIKhUG8tkQHhSf7zYMk/6tJObqa1NFwSejuiKlA2FN3J TfLILZldX7AFk2ECPKH3aO6YX+UWkN2Y5gzhGJbB5quOI8M9NsP5eEhTegLeWTUS v3At2u1wZYUVx0PXobtgUO9HU5ueRWhWrM9wRZD3DBFLHO4tIzCeL1rKq+Xlb3rC wckZe7guQU1fFXsU6FQg0EZH7Q7gv3Eg -----END CERTIFICATE-----Generated at Thu Jan 1 15:38:47 2026 by rpki-client