This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft File: Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft (raw, json) Hash identifier: wKCz8vLrrlnooncFS9lJ3ldIWCmt/EOhLTLdvZBVrhw= Subject key identifier: 69:60:EF:F4:7F:D0:56:09:1D:FC:82:C8:95:5A:60:DF:37:3C:32:95 Authority key identifier: 53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82 Certificate issuer: /CN=A91F3AF8/serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682 Certificate serial: 081E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft Manifest number: 0812 Signing time: Sat 20 Dec 2025 20:21:13 +0000 Manifest this update: Sat 20 Dec 2025 20:21:12 +0000 Manifest next update: Sat 27 Dec 2025 20:21:12 +0000 Files and hashes: 1: Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl (hash: 1usjqOiYGJ8P0cg2BYzittpIaZtiHG1Hmd6ZFbQ7OvA=) 2: 3791632A030011EB909C3244C4F9AE02.roa (hash: dB3zmsBTd89CRpUWBbCoSsuPQSrK3XC84t7uk9x1cA8=) 3: CC08667A7A6011EB9BC9937BC4F9AE02.roa (hash: Z/3rZQtnqfOwNEnHVO1+ydXZ5JjAuPVHRMvibrG3oIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2078 (0x81e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3AF8, serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682 Validity Not Before: Dec 20 20:21:12 2025 GMT Not After : Dec 27 20:21:12 2025 GMT Subject: CN=69470538-9d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a5:c8:6b:dd:ca:65:3f:a6:5a:c9:97:60:4c: 72:fa:74:77:40:43:49:9e:68:6a:9a:1c:e2:1b:77: 08:36:fb:25:b2:bd:8a:05:bd:cf:b9:47:2a:33:03: 80:1a:e2:50:a6:f8:3c:c0:d3:04:a8:f8:8e:23:09: d8:68:8c:e0:f0:52:3f:ed:59:b1:df:81:de:85:14: 1a:1d:5c:9a:5d:05:cd:75:08:3b:b0:b6:48:96:e5: 66:da:0e:ac:0c:5b:dc:50:79:44:16:06:10:b2:8c: 11:0a:9f:72:42:9e:25:39:52:ca:fd:f7:18:5f:f6: 80:d8:7c:a2:d2:13:62:54:cb:cc:9a:f2:50:df:f2: 8d:3e:f3:a7:f2:7c:09:b8:42:2a:d0:e7:4e:42:69: 57:17:8e:d8:58:14:e0:0f:c4:39:18:d5:30:50:47: bd:45:e5:f9:48:35:f9:51:53:8f:bf:23:b8:a2:9a: 79:6b:c6:4f:96:1d:34:a7:57:ac:b4:69:65:a2:a7: 5a:7e:97:d9:92:dd:4c:49:6b:8e:99:e4:89:3e:bb: a7:b0:86:54:8c:e5:70:70:57:87:c0:b4:1f:2c:17: df:33:38:86:b2:f9:2f:31:2e:da:2f:d6:e0:7e:c1: 84:94:d7:65:fa:30:ed:25:46:78:83:a3:b2:af:5c: 46:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:60:EF:F4:7F:D0:56:09:1D:FC:82:C8:95:5A:60:DF:37:3C:32:95 X509v3 Authority Key Identifier: keyid:53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9c:77:d0:c2:7d:90:f0:6a:aa:53:f3:0f:08:65:53:04:c7: a2:5e:c4:86:62:e0:1d:32:61:fe:01:f0:dd:f5:ef:55:cc:ad: 2e:04:fb:da:72:2c:cb:dc:17:22:b8:f3:2c:42:c7:6e:83:e2: 8f:ca:df:35:51:03:6a:40:00:cc:5f:f3:1b:59:ee:7a:3f:cc: a8:86:a2:de:11:c5:a2:e9:89:58:fb:3b:c8:65:25:2e:92:83: a7:d0:b4:5e:2d:d2:96:57:a5:37:44:b6:44:e4:6c:b6:77:66: 86:ac:bf:8f:cb:0d:28:53:10:c8:cb:2c:b6:ef:38:bd:fb:45: dd:dc:f1:f1:b0:70:39:a5:cc:95:63:7b:9e:e3:97:f4:43:0a: 3e:9e:f1:f3:d8:16:c4:c6:46:14:2f:0f:f0:aa:4b:dc:5c:3b: 3d:55:96:7c:f2:cf:60:94:53:d9:6d:8e:5b:29:9b:9f:ea:fa: 15:d2:0a:47:2e:58:04:ee:50:a7:73:a9:21:8b:1f:00:26:60: ef:99:c2:5f:42:d8:4b:b1:08:ca:5a:11:a7:9d:a5:58:1e:8d: 1f:f0:83:90:ee:42:a7:28:4b:f5:f9:ff:5d:f1:3c:85:c9:54: c7:c5:6e:a3:56:07:c5:ab:da:c9:0a:9b:85:2a:1f:0e:3c:05: c4:b2:c1:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNBRjgxMTAvBgNVBAUTKDUzMEQyOUFEQzBGQjFDRjI4MzdEMzlCQjg2MzQzNDg2 QzFDNzE2ODIwHhcNMjUxMjIwMjAyMTEyWhcNMjUxMjI3MjAyMTEyWjAYMRYwFAYD VQQDDA02OTQ3MDUzOC05ZDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkKXIa93KZT+mWsmXYExy+nR3QENJnmhqmhziG3cINvslsr2KBb3PuUcqMwOA GuJQpvg8wNMEqPiOIwnYaIzg8FI/7Vmx34HehRQaHVyaXQXNdQg7sLZIluVm2g6s DFvcUHlEFgYQsowRCp9yQp4lOVLK/fcYX/aA2Hyi0hNiVMvMmvJQ3/KNPvOn8nwJ uEIq0OdOQmlXF47YWBTgD8Q5GNUwUEe9ReX5SDX5UVOPvyO4opp5a8ZPlh00p1es tGlloqdafpfZkt1MSWuOmeSJPrunsIZUjOVwcFeHwLQfLBffMziGsvkvMS7aL9bg fsGElNdl+jDtJUZ4g6Oyr1xGkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlg7/R/ 0FYJHfyCyJVaYN83PDKVMB8GA1UdIwQYMBaAFFMNKa3A+xzyg305u4Y0NIbBxxaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0FGOC80ODI5N0ZFRTAy RkUxMUVCQjcwNjY0M0VDNEY5QUUwMi9VdzBwcmNEN0hQS0RmVG03aGpRMGhzSEhG b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V3MHByY0Q3SFBLRGZUbTdoalEwaHNISEZvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0FGOC80ODI5N0ZFRTAyRkUxMUVCQjcwNjY0M0VDNEY5QUUwMi9VdzBwcmNEN0hQ S0RmVG03aGpRMGhzSEhGb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAanHfQwn2Q8GqqU/MPCGVTBMeiXsSGYuAdMmH+AfDd9e9VzK0uBPva cizL3BciuPMsQsdug+KPyt81UQNqQADMX/MbWe56P8yohqLeEcWi6YlY+zvIZSUu koOn0LReLdKWV6U3RLZE5Gy2d2aGrL+Pyw0oUxDIyyy27zi9+0Xd3PHxsHA5pcyV Y3ue45f0Qwo+nvHz2BbExkYULw/wqkvcXDs9VZZ88s9glFPZbY5bKZuf6voV0gpH LlgE7lCnc6khix8AJmDvmcJfQthLsQjKWhGnnaVYHo0f8IOQ7kKnKEv1+f9d8TyF yVTHxW6jVgfFq9rJCpuFKh8OPAXEssEr -----END CERTIFICATE-----Generated at Sun Dec 21 12:06:22 2025 by rpki-client