This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft File: u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft (raw, json) Hash identifier: h7zX7wI9oC9OR4+bkUTFPWJFKQfULb5xnfX0dm8Yagk= Subject key identifier: D1:84:59:0B:38:31:BB:46:16:84:64:02:CB:AC:73:4F:12:91:1D:D3 Authority key identifier: BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0 Certificate issuer: /CN=A91CEE85/serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0 Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft Manifest number: 010C Signing time: Fri 19 Dec 2025 04:07:29 +0000 Manifest this update: Fri 19 Dec 2025 04:07:29 +0000 Manifest next update: Fri 26 Dec 2025 04:07:29 +0000 Files and hashes: 1: u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl (hash: I3MfnHyXHqXLqNlPELe19d28Cp3CjSn8fl776RT1eBs=) 2: 4D189DD4728311EFA9CECE43C4F9AE02.roa (hash: Ge+55CQegGWCZISlkeWVyEDQbw8xhE1lFYLjXYnwl5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE85, serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0 Validity Not Before: Dec 19 04:07:29 2025 GMT Not After : Dec 26 04:07:29 2025 GMT Subject: CN=6944cf81-9123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c4:4f:2e:9e:c0:36:83:dc:2b:3e:b8:1a:06: 81:89:d7:89:06:2c:fd:5b:83:f8:08:db:1a:4f:f5: 6a:e5:eb:ef:42:9a:bc:c1:1a:f7:4d:82:a1:17:89: 72:b3:69:6f:bb:e1:f1:66:55:0e:e8:9c:5b:5e:8b: c8:a8:7d:96:cf:51:ce:48:6d:35:fa:48:09:fc:f0: da:7d:ba:8f:6e:e4:06:d6:62:b4:40:e9:34:e9:d5: 94:7b:46:a3:0e:5e:30:e4:b7:39:4e:68:8d:01:3e: d8:1a:a4:2e:c6:88:1c:8c:24:23:09:f3:7f:f0:fe: 1a:bf:70:fd:bb:2a:d2:da:6d:0e:4e:c9:34:d3:e9: f2:92:ef:c8:db:00:ec:48:cc:4c:6f:29:e6:46:54: 8b:03:bb:82:54:67:44:4c:10:29:28:88:c8:19:7d: 70:5f:4d:49:fd:11:f2:f0:88:25:af:10:5b:e8:56: b2:73:4f:06:aa:25:dd:0e:d9:15:e8:3a:df:a0:05: d0:82:23:c1:10:7e:dc:39:fe:b3:9e:b7:88:e2:a4: cb:b4:31:0d:fb:2a:80:45:8e:f7:17:c9:7a:d6:2a: 7b:b5:b9:6b:8a:a3:39:69:c2:a9:b3:77:ef:76:e1: 44:ce:bd:b3:68:28:27:40:08:b6:08:4a:8a:eb:31: d2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:84:59:0B:38:31:BB:46:16:84:64:02:CB:AC:73:4F:12:91:1D:D3 X509v3 Authority Key Identifier: keyid:BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:3b:3c:fa:28:63:2f:bb:53:af:c5:b1:bd:3e:7a:08:83:02: f7:81:a8:0a:fd:44:10:e8:3d:5a:26:91:fd:13:82:3f:75:d9: 16:20:a2:64:d1:4a:65:64:d2:2f:f6:5e:31:bc:76:1e:73:a9: ff:ae:24:b4:7f:b8:83:94:3c:16:c9:1b:39:d6:dd:93:a1:88: a6:10:eb:76:df:8b:58:b2:cf:d5:48:87:aa:75:12:b1:1b:ab: e3:41:3d:16:98:66:fc:33:fd:af:9b:9f:60:12:59:af:89:03: 9e:7b:3d:5c:ec:dc:7b:95:cc:50:31:c3:fa:7b:b9:d4:d3:f3: 2a:89:31:41:d3:1b:97:f1:7d:47:f9:58:88:8d:be:90:30:03: ca:3a:4b:c6:8e:a1:36:e9:54:05:ad:11:34:6d:57:fc:3b:a0: aa:ef:e7:02:fe:c2:03:b1:fc:a0:c9:ca:2f:e4:c7:0e:a8:25: 17:c1:e6:05:5d:39:65:9e:2c:fb:95:a2:c4:27:f0:8e:5e:a8: bc:7e:30:0a:09:ec:9f:ab:9f:a7:26:f0:20:db:8b:87:26:e7: a3:27:fc:a7:d9:d6:a5:9f:17:fd:53:2b:51:65:ab:44:f4:77: 95:41:a6:f1:fc:d5:99:68:9e:f9:a0:b0:d8:4c:64:9c:db:b1: 1f:ae:7b:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VFODUxMTAvBgNVBAUTKEJCRTgwM0ZCNzU3RTBDNDdEMzIwNDU0NTIxODdCNzRB RTI3MTExRjAwHhcNMjUxMjE5MDQwNzI5WhcNMjUxMjI2MDQwNzI5WjAYMRYwFAYD VQQDDA02OTQ0Y2Y4MS05MTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMRPLp7ANoPcKz64GgaBideJBiz9W4P4CNsaT/Vq5evvQpq8wRr3TYKhF4ly s2lvu+HxZlUO6JxbXovIqH2Wz1HOSG01+kgJ/PDafbqPbuQG1mK0QOk06dWUe0aj Dl4w5Lc5TmiNAT7YGqQuxogcjCQjCfN/8P4av3D9uyrS2m0OTsk00+nyku/I2wDs SMxMbynmRlSLA7uCVGdETBApKIjIGX1wX01J/RHy8IglrxBb6Fayc08GqiXdDtkV 6DrfoAXQgiPBEH7cOf6znreI4qTLtDEN+yqARY73F8l61ip7tblriqM5acKps3fv duFEzr2zaCgnQAi2CEqK6zHSxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGEWQs4 MbtGFoRkAsusc08SkR3TMB8GA1UdIwQYMBaAFLvoA/t1fgxH0yBFRSGHt0ricRHw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUU4NS8wNUE3Q0U2ODQ1 QUUxMUVGQjQzNUVCNkZDNEY5QUUwMi91LWdELTNWLURFZlRJRVZGSVllM1N1SnhF ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtZ0QtM1YtREVmVElFVkZJWWUzU3VKeEVmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUU4NS8wNUE3Q0U2ODQ1QUUxMUVGQjQzNUVCNkZDNEY5QUUwMi91LWdELTNWLURF ZlRJRVZGSVllM1N1SnhFZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHOzz6KGMvu1OvxbG9PnoIgwL3gagK/UQQ6D1aJpH9E4I/ddkWIKJk 0UplZNIv9l4xvHYec6n/riS0f7iDlDwWyRs51t2ToYimEOt234tYss/VSIeqdRKx G6vjQT0WmGb8M/2vm59gElmviQOeez1c7Nx7lcxQMcP6e7nU0/MqiTFB0xuX8X1H +ViIjb6QMAPKOkvGjqE26VQFrRE0bVf8O6Cq7+cC/sIDsfygycov5McOqCUXweYF XTllniz7laLEJ/COXqi8fjAKCeyfq5+nJvAg24uHJuejJ/yn2dalnxf9UytRZatE 9HeVQabx/NWZaJ75oLDYTGSc27EfrntD -----END CERTIFICATE-----Generated at Fri Dec 19 19:06:11 2025 by rpki-client