This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft File: UqAK42gJYToMmRW4LS7dewR_BBY.mft (raw, json) Hash identifier: utdmVBflQ6Ef/NuEBwziDl55xagRlFb06I4GOSejOBI= Subject key identifier: F3:E9:A4:25:AD:66:C6:EF:AF:35:7A:C0:03:C5:44:A0:69:1D:09:CC Authority key identifier: 52:A0:0A:E3:68:09:61:3A:0C:99:15:B8:2D:2E:DD:7B:04:7F:04:16 Certificate issuer: /CN=A91CC4A7/serialNumber=52A00AE36809613A0C9915B82D2EDD7B047F0416 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft Manifest number: 21 Signing time: Fri 19 Dec 2025 06:39:37 +0000 Manifest this update: Fri 19 Dec 2025 06:39:36 +0000 Manifest next update: Fri 26 Dec 2025 06:39:36 +0000 Files and hashes: 1: UqAK42gJYToMmRW4LS7dewR_BBY.crl (hash: gQarlRIsfsMiLfziXtmXh0IMr1U57Q0Jci6myqgB8kM=) 2: 94CEBFFEAB4511F09AA0C458C4F9AE02.roa (hash: 1k8O6Bsioa6ijWmD1KkKknB0AK/qAIm/Rz9ZwI76zuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.crl rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC4A7, serialNumber=52A00AE36809613A0C9915B82D2EDD7B047F0416 Validity Not Before: Dec 19 06:39:36 2025 GMT Not After : Dec 26 06:39:36 2025 GMT Subject: CN=6944f329-f52c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b6:58:fa:d5:cd:33:49:5d:90:f3:7c:93:03: 1c:94:f6:f1:b7:51:d1:ae:1b:42:fb:82:5f:dd:8a: 88:6c:ed:1a:d4:4e:a9:6d:57:79:e0:49:b3:32:ee: a7:e8:b6:8b:c1:49:77:cb:0b:2c:04:4c:f4:ac:f1: f7:6b:d9:b2:db:11:73:28:5d:1a:48:3b:e4:3e:e1: 30:21:3c:03:0b:1e:65:f6:79:7a:b2:c6:e5:9f:7a: cb:14:b1:80:36:da:7a:f8:c5:3e:8b:5b:23:87:7b: b0:8f:fd:b5:a3:55:c3:40:cf:07:0c:18:72:3e:78: 16:87:eb:04:57:7f:61:17:e2:f9:b9:79:d0:56:6f: 9b:f2:fd:cb:c4:35:0d:f4:4d:d9:be:9d:a0:85:98: 36:2a:f5:11:2d:e0:a4:58:0d:93:83:49:27:53:c4: 1b:ed:56:3a:83:80:83:a5:18:aa:3a:b9:7c:21:5f: d0:e7:17:3a:87:13:20:96:0f:22:36:d7:22:22:47: f2:d4:6b:bc:c9:f3:5a:91:f0:32:2a:3a:90:44:c6: 28:d3:64:0d:e4:8c:0c:ce:fe:5d:e6:79:be:9d:b1: e8:2c:64:1a:3a:7c:55:07:78:e2:a8:dd:60:6c:49: 0e:68:7a:f7:8f:f6:c2:5b:44:c8:41:7b:30:c9:b9: b4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E9:A4:25:AD:66:C6:EF:AF:35:7A:C0:03:C5:44:A0:69:1D:09:CC X509v3 Authority Key Identifier: keyid:52:A0:0A:E3:68:09:61:3A:0C:99:15:B8:2D:2E:DD:7B:04:7F:04:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:81:33:e3:4b:7c:4b:0f:63:8c:b3:c6:0c:d3:61:d1:11:b1: 02:07:84:08:14:1c:6b:ed:fe:d8:c7:b2:22:bb:c9:02:67:40: c4:ab:ad:61:2c:b8:2f:7e:95:c6:35:fc:2c:40:92:9e:fc:c7: cb:c1:24:ff:4a:15:40:72:aa:5e:04:0f:75:d5:ac:1c:16:9e: 1c:87:d7:62:42:28:d3:33:e7:ef:86:d7:fe:6d:ab:e2:25:65: 9e:1a:d9:c9:62:d9:ef:a6:5c:3d:9b:f2:d0:ba:96:f4:24:c7: 92:52:a8:3e:20:28:8c:82:6b:3d:94:53:46:b0:50:c3:06:e2: 63:b3:4b:50:5e:a5:21:2d:9b:a5:cf:b9:5b:28:e2:22:1c:95: b4:bf:71:2c:a9:39:fd:d3:24:f3:9b:c9:27:79:78:62:01:82: 5b:6c:ed:92:f1:8a:ee:8a:46:b8:1d:52:a2:1c:40:36:6d:aa: f8:08:5b:0a:f5:44:10:6a:a6:2a:f8:00:29:1f:0b:fe:57:a1: 11:ed:6e:88:c4:60:88:59:a1:8a:82:9f:75:c5:1f:26:87:ad: 78:93:a8:7f:45:a6:a6:88:b9:f6:72:83:6f:7f:95:1e:99:20: 74:76:74:35:67:0f:c6:0f:16:0e:75:e6:3d:b3:26:b6:ec:17: 9d:0b:97:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzRBNzExMC8GA1UEBRMoNTJBMDBBRTM2ODA5NjEzQTBDOTkxNUI4MkQyRUREN0Iw NDdGMDQxNjAeFw0yNTEyMTkwNjM5MzZaFw0yNTEyMjYwNjM5MzZaMBgxFjAUBgNV BAMMDTY5NDRmMzI5LWY1MmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3tlj61c0zSV2Q83yTAxyU9vG3UdGuG0L7gl/diohs7RrUTqltV3ngSbMy7qfo tovBSXfLCywETPSs8fdr2bLbEXMoXRpIO+Q+4TAhPAMLHmX2eXqyxuWfessUsYA2 2nr4xT6LWyOHe7CP/bWjVcNAzwcMGHI+eBaH6wRXf2EX4vm5edBWb5vy/cvENQ30 Tdm+naCFmDYq9REt4KRYDZODSSdTxBvtVjqDgIOlGKo6uXwhX9DnFzqHEyCWDyI2 1yIiR/LUa7zJ81qR8DIqOpBExijTZA3kjAzO/l3meb6dsegsZBo6fFUHeOKo3WBs SQ5oeveP9sJbRMhBezDJubSxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8+mkJa1m xu+vNXrAA8VEoGkdCcwwHwYDVR0jBBgwFoAUUqAK42gJYToMmRW4LS7dewR/BBYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDNEE3LzA1OERENkFFQUI0 NTExRjA4NDNEMDY1N0M0RjlBRTAyL1VxQUs0MmdKWVRvTW1SVzRMUzdkZXdSX0JC WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVXFBSzQyZ0pZVG9NbVJXNExTN2Rld1JfQkJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND NEE3LzA1OERENkFFQUI0NTExRjA4NDNEMDY1N0M0RjlBRTAyL1VxQUs0MmdKWVRv TW1SVzRMUzdkZXdSX0JCWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAISBM+NLfEsPY4yzxgzTYdERsQIHhAgUHGvt/tjHsiK7yQJnQMSrrWEs uC9+lcY1/CxAkp78x8vBJP9KFUByql4ED3XVrBwWnhyH12JCKNMz5++G1/5tq+Il ZZ4a2cli2e+mXD2b8tC6lvQkx5JSqD4gKIyCaz2UU0awUMMG4mOzS1BepSEtm6XP uVso4iIclbS/cSypOf3TJPObySd5eGIBglts7ZLxiu6KRrgdUqIcQDZtqvgIWwr1 RBBqpir4ACkfC/5XoRHtbojEYIhZoYqCn3XFHyaHrXiTqH9FpqaIufZyg29/lR6Z IHR2dDVnD8YPFg515j2zJrbsF50Ll58= -----END CERTIFICATE-----Generated at Sat Dec 20 21:07:44 2025 by rpki-client