This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft File: UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft (raw, json) Hash identifier: BWVrIAHyqI5RdjqiXwfKQkrpUOFmp/VTO4lpWeYzh0s= Subject key identifier: D7:08:E7:BB:A6:EE:0D:94:92:44:88:E7:BD:3B:69:7C:B0:FF:EF:01 Authority key identifier: 50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C Certificate issuer: /CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C Certificate serial: 04EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft Manifest number: 04BB Signing time: Thu 18 Dec 2025 23:19:59 +0000 Manifest this update: Thu 18 Dec 2025 23:19:58 +0000 Manifest next update: Thu 25 Dec 2025 23:19:58 +0000 Files and hashes: 1: UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl (hash: DJpPyKwSBW2sSoMlDdnorf2/NFL5B6ZBdw5NBAKKnL4=) 2: DEBDCECAC2CF11EFA805380FC4F9AE02.roa (hash: fbHNG5VnI5vBavVCzw8LniM5caV6eOPIQLCn1UeldBc=) 3: 0104D0BADB0D11EE88489759C4F9AE02.roa (hash: KdbVV+GEXY2BL9mYf6LHh/aKsgwvJc/K6FH7hj47FDo=) 4: 01CF36F2DB0D11EE88489759C4F9AE02.roa (hash: Bc41Sc+m7v/fikpnEXBGH8owwIIMKnoEIMrJsvVIo78=) 5: 71A1BB74759711EFA89BA96BC4F9AE02.roa (hash: OehIWzlmpLn+tHX2OGp9aRhBba8Lt99w8j7PUJDnUtU=) 6: 0294E1EADB0D11EE88489759C4F9AE02.roa (hash: LFGX/jVfbWAISfHlUtm9x1tFR24hTnDvuTIOnrEtJuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1262 (0x4ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE06, serialNumber=5073951E5C1582693A87072EE548C65485B05A2C Validity Not Before: Dec 18 23:19:58 2025 GMT Not After : Dec 25 23:19:58 2025 GMT Subject: CN=69448c1f-c16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:91:c8:f4:55:e0:44:7c:aa:03:15:7f:16:ac: 8b:fd:36:ef:52:63:25:2f:aa:81:fb:6b:9c:28:d3: d5:ba:b8:98:ea:3a:7f:d8:81:b7:44:a7:0e:67:46: 17:9c:02:df:fe:cd:59:0a:54:1e:59:95:5b:23:8d: 7f:cf:0f:43:0c:ce:6c:84:74:dd:85:85:48:16:83: 46:03:e3:02:e4:19:3a:32:09:5d:6d:9f:5f:09:43: d8:cb:0b:48:c6:a2:2b:32:e9:1f:e5:7c:b7:70:76: d3:32:67:a0:5c:f2:58:f1:a1:11:93:5a:94:a6:fc: 5c:f7:4d:29:13:a7:01:ff:41:8b:6d:34:38:f9:fe: 39:75:1b:c6:8c:c3:1b:c2:db:1d:ac:59:a4:85:71: 33:b3:eb:54:0e:7c:2a:e9:7e:f4:60:bb:4e:13:33: 7e:85:0a:a8:33:37:d4:3a:05:77:e5:69:f8:9e:db: 1f:73:30:48:aa:20:7e:26:c2:e1:7b:a4:10:67:5a: 4e:85:4c:11:2f:0e:cd:dc:28:4e:60:a4:e9:51:37: 3c:67:87:7a:c5:81:f8:35:bc:89:27:c7:bf:c7:1f: a5:67:50:f7:8c:b3:ed:e1:f3:af:66:3f:72:93:72: c2:0c:ce:38:cc:4e:13:34:dc:3f:d1:f7:1f:34:dd: f5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:08:E7:BB:A6:EE:0D:94:92:44:88:E7:BD:3B:69:7C:B0:FF:EF:01 X509v3 Authority Key Identifier: keyid:50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:01:21:53:2e:8b:1e:a1:1f:ed:5c:73:e8:4e:a2:a3:26:06: 64:42:b8:b2:cd:59:33:f6:f2:35:09:d0:68:51:a6:f1:be:d4: 40:ba:93:3d:96:53:0f:34:ee:34:20:71:79:28:23:da:35:b6: 15:79:07:d9:80:ed:7f:3b:cc:b4:f1:9d:34:62:41:25:27:93: 25:d8:8f:4e:eb:cb:c7:5b:33:39:ca:51:68:15:5d:51:d4:4a: 4b:c3:1c:13:b4:4b:9d:d0:e7:2f:22:20:f0:13:05:f1:c5:0f: 65:13:5f:6f:d7:2c:da:ce:cf:87:3c:66:76:93:85:82:d0:85: b9:a5:72:83:f2:8d:91:0d:22:55:49:6e:07:53:40:60:6e:72: aa:fc:92:e2:59:50:25:40:c2:29:07:79:43:1a:fa:61:5a:f6: 22:49:85:c8:f1:83:23:7c:bb:54:3e:e9:43:b8:c9:4b:9f:5f: 1c:3b:5f:a5:6b:47:ca:46:2b:17:41:b6:a3:61:34:23:9f:e5: 3d:7e:0f:bb:f6:e4:c5:df:03:e6:f2:5b:82:b7:ec:c8:af:eb: 45:e1:b4:a0:21:69:4e:ab:86:60:66:ca:38:9f:28:96:63:b4: 62:91:32:df:c9:d1:f8:4f:6b:51:fa:fa:ab:1e:7a:8c:8f:40: 61:e5:54:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFMDYxMTAvBgNVBAUTKDUwNzM5NTFFNUMxNTgyNjkzQTg3MDcyRUU1NDhDNjU0 ODVCMDVBMkMwHhcNMjUxMjE4MjMxOTU4WhcNMjUxMjI1MjMxOTU4WjAYMRYwFAYD VQQDDA02OTQ0OGMxZi1jMTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5HI9FXgRHyqAxV/FqyL/TbvUmMlL6qB+2ucKNPVuriY6jp/2IG3RKcOZ0YX nALf/s1ZClQeWZVbI41/zw9DDM5shHTdhYVIFoNGA+MC5Bk6MgldbZ9fCUPYywtI xqIrMukf5Xy3cHbTMmegXPJY8aERk1qUpvxc900pE6cB/0GLbTQ4+f45dRvGjMMb wtsdrFmkhXEzs+tUDnwq6X70YLtOEzN+hQqoMzfUOgV35Wn4ntsfczBIqiB+JsLh e6QQZ1pOhUwRLw7N3ChOYKTpUTc8Z4d6xYH4NbyJJ8e/xx+lZ1D3jLPt4fOvZj9y k3LCDM44zE4TNNw/0fcfNN318wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcI57um 7g2UkkSI5707aXyw/+8BMB8GA1UdIwQYMBaAFFBzlR5cFYJpOocHLuVIxlSFsFos MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUwNi8wNTU5RUVBRTVD QkUxMUVDQjI3M0RDN0NDNEY5QUUwMi9VSE9WSGx3VmdtazZod2N1NVVqR1ZJV3dX aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIT1ZIbHdWZ21rNmh3Y3U1VWpHVklXd1dpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUUwNi8wNTU5RUVBRTVDQkUxMUVDQjI3M0RDN0NDNEY5QUUwMi9VSE9WSGx3Vmdt azZod2N1NVVqR1ZJV3dXaXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSASFTLoseoR/tXHPoTqKjJgZkQriyzVkz9vI1CdBoUabxvtRAupM9 llMPNO40IHF5KCPaNbYVeQfZgO1/O8y08Z00YkElJ5Ml2I9O68vHWzM5ylFoFV1R 1EpLwxwTtEud0OcvIiDwEwXxxQ9lE19v1yzazs+HPGZ2k4WC0IW5pXKD8o2RDSJV SW4HU0BgbnKq/JLiWVAlQMIpB3lDGvphWvYiSYXI8YMjfLtUPulDuMlLn18cO1+l a0fKRisXQbajYTQjn+U9fg+79uTF3wPm8luCt+zIr+tF4bSgIWlOq4ZgZso4nyiW Y7RikTLfydH4T2tR+vqrHnqMj0Bh5VRW -----END CERTIFICATE-----Generated at Fri Dec 19 17:44:51 2025 by rpki-client