This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft File: uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft (raw, json) Hash identifier: Ekt7iq4rb9xf/Bmg8V3riYM2M65LENk4ZKO44M/foLA= Subject key identifier: 90:9C:92:53:67:E0:8C:3B:E4:1F:76:0A:BB:EB:C3:C9:2C:AD:34:55 Authority key identifier: B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB Certificate issuer: /CN=A91E5C49/serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB Certificate serial: 07CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft Manifest number: 0F9E Signing time: Thu 18 Dec 2025 20:44:26 +0000 Manifest this update: Thu 18 Dec 2025 20:44:26 +0000 Manifest next update: Thu 25 Dec 2025 20:44:26 +0000 Files and hashes: 1: uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl (hash: 9pN9WUZY+3kxfb7vnnzwRy7+SQRDIFplWcgWo6voaOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1999 (0x7cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5C49, serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB Validity Not Before: Dec 18 20:44:26 2025 GMT Not After : Dec 25 20:44:26 2025 GMT Subject: CN=694467aa-ed49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8b:1e:02:93:aa:9b:54:5a:a9:80:d9:81:b4: 40:68:3d:22:31:58:ba:33:e4:a8:c2:90:2d:de:ea: 64:16:4a:17:7c:31:5e:9d:50:ed:c0:eb:a2:ae:4b: 0a:fd:22:1f:b8:42:61:8e:e3:75:9f:a0:fa:29:1c: f6:67:6b:5a:d6:16:55:4b:73:90:c6:89:93:53:22: 9b:f6:a5:bc:bf:2c:de:d7:6e:cb:df:1c:8e:ce:97: cc:13:57:ba:b7:26:5a:e5:9f:10:3d:c5:f8:18:7d: 2f:f8:a6:e4:69:73:ff:b7:5e:44:ce:f0:4f:7e:d5: 56:64:42:64:b2:8f:0d:19:13:0b:47:c6:84:c1:a7: a4:04:55:fa:07:81:a9:94:c9:5e:f2:b2:51:d6:bf: 01:47:e0:f0:e0:40:5e:75:1a:78:33:0c:79:af:c5: 80:1d:ac:c2:46:72:ac:f8:72:8b:f2:0f:4c:bd:2b: 9b:dc:3a:f5:40:7b:21:dd:8a:c6:c9:d5:15:33:9e: 78:d9:24:29:e9:2a:a3:af:b8:39:45:08:48:40:a5: 57:12:fa:40:50:63:97:ac:7e:b1:4e:f1:ea:14:41: eb:da:c2:5f:74:a6:9b:07:78:59:37:5b:5a:00:75: 32:55:1c:29:a8:c1:86:09:89:68:60:d2:7c:1f:5b: 03:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9C:92:53:67:E0:8C:3B:E4:1F:76:0A:BB:EB:C3:C9:2C:AD:34:55 X509v3 Authority Key Identifier: keyid:B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a3:e4:65:de:6d:f5:f2:2f:77:a6:b4:10:f6:94:2b:be:38: dd:a8:ad:74:e8:a3:96:fb:a7:eb:ef:bc:a2:b4:55:8b:77:da: f1:7c:f3:84:83:93:10:66:1e:3a:be:82:47:8a:f0:4f:b3:34: de:6f:13:38:ea:74:12:f2:d0:38:af:e0:1c:3e:26:b4:6c:e4: 98:dd:f7:1d:04:8f:ed:11:fb:be:23:6d:3f:6d:a4:b9:1b:26: 83:35:d7:54:01:dd:95:05:fb:28:84:dc:70:b9:63:e2:6a:1c: 0d:48:27:b7:9e:ea:34:c2:c9:cb:3c:05:72:8e:c0:36:a8:9b: 8e:1b:65:2b:0d:d7:e1:37:3b:41:0c:a4:c7:1c:8e:93:c5:ec: 08:e7:e5:f3:ee:29:38:91:45:b1:68:11:4e:16:4f:98:77:bf: e7:dc:f4:3b:d4:72:fc:a6:4b:82:10:d9:4c:f5:2d:ce:15:0f: 02:31:54:2a:4b:f2:18:b4:22:2a:25:3f:0f:cc:42:66:ea:99: c2:8d:de:df:83:3c:28:98:c1:17:58:f2:a5:2f:65:c1:55:77: 86:1c:28:08:58:dd:ef:ce:6f:b9:f8:b9:48:b9:a4:ad:9f:a8: 2d:af:c9:83:6b:2a:1f:e7:dd:d2:ef:d1:13:2b:75:d8:7e:32: 29:9a:35:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVDNDkxMTAvBgNVBAUTKEI5N0Q4RjI1MzQ1NjgwOTQ0OUVERTVEQzVDQTI1NjlB ODRFNzgzREIwHhcNMjUxMjE4MjA0NDI2WhcNMjUxMjI1MjA0NDI2WjAYMRYwFAYD VQQDDA02OTQ0NjdhYS1lZDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4seApOqm1RaqYDZgbRAaD0iMVi6M+SowpAt3upkFkoXfDFenVDtwOuirksK /SIfuEJhjuN1n6D6KRz2Z2ta1hZVS3OQxomTUyKb9qW8vyze127L3xyOzpfME1e6 tyZa5Z8QPcX4GH0v+KbkaXP/t15EzvBPftVWZEJkso8NGRMLR8aEwaekBFX6B4Gp lMle8rJR1r8BR+Dw4EBedRp4Mwx5r8WAHazCRnKs+HKL8g9MvSub3Dr1QHsh3YrG ydUVM5542SQp6Sqjr7g5RQhIQKVXEvpAUGOXrH6xTvHqFEHr2sJfdKabB3hZN1ta AHUyVRwpqMGGCYloYNJ8H1sDswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCcklNn 4Iw75B92Crvrw8ksrTRVMB8GA1UdIwQYMBaAFLl9jyU0VoCUSe3l3FyiVpqE54Pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUM0OS84QTg3RUZDMjFB NDgxMUVCOEYxNDMyNDZDNEY5QUUwMi91WDJQSlRSV2dKUko3ZVhjWEtKV21vVG5n OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VYMlBKVFJXZ0pSSjdlWGNYS0pXbW9Ubmc5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUM0OS84QTg3RUZDMjFBNDgxMUVCOEYxNDMyNDZDNEY5QUUwMi91WDJQSlRSV2dK Uko3ZVhjWEtKV21vVG5nOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuo+Rl3m318i93prQQ9pQrvjjdqK106KOW+6fr77yitFWLd9rxfPOE g5MQZh46voJHivBPszTebxM46nQS8tA4r+AcPia0bOSY3fcdBI/tEfu+I20/baS5 GyaDNddUAd2VBfsohNxwuWPiahwNSCe3nuo0wsnLPAVyjsA2qJuOG2UrDdfhNztB DKTHHI6TxewI5+Xz7ik4kUWxaBFOFk+Yd7/n3PQ71HL8pkuCENlM9S3OFQ8CMVQq S/IYtCIqJT8PzEJm6pnCjd7fgzwomMEXWPKlL2XBVXeGHCgIWN3vzm+5+LlIuaSt n6gtr8mDayof593S79ETK3XYfjIpmjWi -----END CERTIFICATE-----Generated at Fri Dec 19 19:03:00 2025 by rpki-client