This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft File: UkWN1qz9QNreWs3IL01ZLaUp58c.mft (raw, json) Hash identifier: SVyGQ4Qju+AIT2GdLs5ufxDF6U5vlnRTE2VlaXNf0M8= Subject key identifier: BD:67:F4:48:27:3C:1A:81:BF:61:74:7E:8B:78:F4:2F:A0:4C:FA:74 Authority key identifier: 52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7 Certificate issuer: /CN=A91DDDA7/serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7 Certificate serial: 0978 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft Manifest number: 0978 Signing time: Fri 26 Dec 2025 19:27:50 +0000 Manifest this update: Fri 26 Dec 2025 19:27:50 +0000 Manifest next update: Fri 02 Jan 2026 19:27:50 +0000 Files and hashes: 1: UkWN1qz9QNreWs3IL01ZLaUp58c.crl (hash: ZKY104AMdZ9NrbN9bC8lIzv0wxPjXmOvmNpJK0wrLKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 19:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2424 (0x978) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDDA7, serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7 Validity Not Before: Dec 26 19:27:50 2025 GMT Not After : Jan 2 19:27:50 2026 GMT Subject: CN=694ee1b6-b196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:32:f2:63:b5:a8:aa:45:84:cc:67:1b:23:b0: a9:18:4f:1d:fa:a1:30:00:df:bc:6b:85:24:c3:fe: c6:56:1f:db:dc:cb:39:a9:73:95:a8:99:a3:92:74: 05:7e:03:d5:20:39:fa:d5:a8:7d:4a:31:8b:9a:81: 0c:74:b3:8b:ae:64:e4:5b:11:a0:e1:1b:c4:37:ff: 00:87:57:6b:d5:6f:b1:68:a9:15:b7:f9:32:80:bd: 7a:18:40:10:55:b3:4c:26:67:0b:d3:cb:2e:1a:1e: 8f:d7:ec:f7:9c:59:aa:c3:71:ba:85:f0:51:d1:93: ed:a8:d6:54:f6:35:6f:a5:88:8c:16:e9:b6:36:20: 1c:30:dc:3e:60:ad:8d:54:f9:98:15:de:51:80:97: d2:45:64:b4:4f:41:6b:d2:50:38:69:a9:b5:35:5d: 46:1c:bc:1a:12:19:3b:b8:5b:9d:af:ea:6f:73:80: 82:01:09:9f:f8:26:0c:d5:ba:fe:e3:79:07:8d:1a: b3:4d:6f:0e:51:b3:a5:c3:db:de:85:61:f1:24:e8: 87:73:aa:f6:8e:45:7a:c3:a4:fe:71:c7:e4:16:1a: 65:b5:79:8b:b5:1a:53:c7:4d:8e:2e:a2:ef:2c:01: 2b:c1:10:fc:c8:23:da:ff:67:13:9e:e2:eb:99:bd: 5e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:67:F4:48:27:3C:1A:81:BF:61:74:7E:8B:78:F4:2F:A0:4C:FA:74 X509v3 Authority Key Identifier: keyid:52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:20:12:4f:85:44:c0:10:73:59:a4:c9:88:ef:0c:3b:be:18: 30:68:1c:44:29:52:df:1a:82:d3:dc:97:53:95:2b:f4:58:da: 64:66:03:66:6d:42:7a:e7:36:e7:98:cd:5e:c2:3e:97:1b:9d: c2:e5:17:61:06:39:6c:2a:5c:aa:ac:98:55:dd:4b:a7:f4:0e: ab:cd:c8:b5:05:53:1b:4f:84:b2:8a:a2:4c:6f:67:44:e8:c7: c7:b0:12:43:bf:6b:b4:30:34:e9:7d:64:b5:8a:4d:93:48:e8: 4f:e2:53:79:92:20:fc:96:1f:4c:8f:dd:9f:af:4a:25:4f:29: 1b:ce:db:13:58:ab:e9:41:df:f0:99:6f:2b:eb:4f:57:d1:ce: c0:f5:c4:ea:81:cf:22:7f:ee:46:28:2a:32:55:a1:3d:cc:47: f0:dc:76:b4:44:6c:86:bd:97:cd:cd:fd:c0:de:61:28:6d:21: bb:5c:7e:b0:7c:86:e0:4d:bc:4d:b8:41:7c:c8:39:68:f0:79: c1:7c:ac:1c:cf:d3:b2:82:18:27:32:e0:72:47:07:d6:d4:ee: 2a:e5:32:c5:89:c0:43:c5:ea:c1:a8:d1:eb:d7:22:55:1e:43: 85:43:a2:d4:9c:af:59:2a:f1:33:ad:1d:73:d5:c7:88:a5:bc: 1f:4f:72:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREQTcxMTAvBgNVBAUTKDUyNDU4REQ2QUNGRDQwREFERTVBQ0RDODJGNEQ1OTJE QTUyOUU3QzcwHhcNMjUxMjI2MTkyNzUwWhcNMjYwMTAyMTkyNzUwWjAYMRYwFAYD VQQDDA02OTRlZTFiNi1iMTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TLyY7WoqkWEzGcbI7CpGE8d+qEwAN+8a4Ukw/7GVh/b3Ms5qXOVqJmjknQF fgPVIDn61ah9SjGLmoEMdLOLrmTkWxGg4RvEN/8Ah1dr1W+xaKkVt/kygL16GEAQ VbNMJmcL08suGh6P1+z3nFmqw3G6hfBR0ZPtqNZU9jVvpYiMFum2NiAcMNw+YK2N VPmYFd5RgJfSRWS0T0Fr0lA4aam1NV1GHLwaEhk7uFudr+pvc4CCAQmf+CYM1br+ 43kHjRqzTW8OUbOlw9vehWHxJOiHc6r2jkV6w6T+ccfkFhpltXmLtRpTx02OLqLv LAErwRD8yCPa/2cTnuLrmb1eDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1n9Egn PBqBv2F0fot49C+gTPp0MB8GA1UdIwQYMBaAFFJFjdas/UDa3lrNyC9NWS2lKefH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERBNy8xQ0JGRTY0NEE1 MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFOcmVXczNJTDAxWkxhVXA1 OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VrV04xcXo5UU5yZVdzM0lMMDFaTGFVcDU4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RERBNy8xQ0JGRTY0NEE1MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFO cmVXczNJTDAxWkxhVXA1OGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNIBJPhUTAEHNZpMmI7ww7vhgwaBxEKVLfGoLT3JdTlSv0WNpkZgNm bUJ65zbnmM1ewj6XG53C5RdhBjlsKlyqrJhV3Uun9A6rzci1BVMbT4SyiqJMb2dE 6MfHsBJDv2u0MDTpfWS1ik2TSOhP4lN5kiD8lh9Mj92fr0olTykbztsTWKvpQd/w mW8r609X0c7A9cTqgc8if+5GKCoyVaE9zEfw3Ha0RGyGvZfNzf3A3mEobSG7XH6w fIbgTbxNuEF8yDlo8HnBfKwcz9OyghgnMuByRwfW1O4q5TLFicBDxerBqNHr1yJV HkOFQ6LUnK9ZKvEzrR1z1ceIpbwfT3Im -----END CERTIFICATE-----Generated at Sat Dec 27 00:42:57 2025 by rpki-client