This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft File: xUK94Lg0fDed4d4dgkOpLLlMh00.mft (raw, json) Hash identifier: CmPmpMDGXSqol2ZiLcP6MeOOg/l/R51L5IXDykdPE4E= Subject key identifier: 3B:00:32:C5:03:A1:B5:BE:6F:48:8B:09:58:69:B6:04:42:83:1C:5F Authority key identifier: C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D Certificate issuer: /CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft Manifest number: 016A Signing time: Fri 19 Dec 2025 03:07:56 +0000 Manifest this update: Fri 19 Dec 2025 03:07:55 +0000 Manifest next update: Fri 26 Dec 2025 03:07:55 +0000 Files and hashes: 1: xUK94Lg0fDed4d4dgkOpLLlMh00.crl (hash: eASRQ4KPGc91ZngtQeRVi26YoKXQEOzm7NV8CLZkYeY=) 2: FE9EA8D4B67A11EEB24FA643C4F9AE02.roa (hash: rlUj0HWvLYRWR8L5dccxDGpfDl0LUtE4Msb9H1/d8Ik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB297, serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D Validity Not Before: Dec 19 03:07:55 2025 GMT Not After : Dec 26 03:07:55 2025 GMT Subject: CN=6944c18b-2d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5a:7a:b9:6d:2d:c6:23:23:57:a7:00:1d:2d: 35:7c:35:31:e6:e4:26:50:da:3f:31:96:b4:09:6d: f6:74:46:b9:bc:53:5e:82:ce:18:8f:9d:81:71:b8: fc:6a:bf:5e:ac:9e:67:fc:8e:80:90:0e:4c:a8:3b: 2e:1d:4f:12:3b:63:85:9c:ac:22:ba:70:bb:fa:8c: 09:b0:c5:67:ca:7d:1d:19:71:90:b0:1b:a3:fb:a9: d3:90:60:ce:62:31:ff:63:08:74:e6:51:ad:d9:5f: 3a:88:0f:02:5a:ec:2b:f3:ca:55:c9:72:55:11:9f: a4:1c:5f:50:f3:e2:03:f4:66:d2:54:ad:d0:9c:35: 8d:82:a8:c7:65:f1:23:8e:93:fa:5d:d2:e3:66:27: 64:6d:83:5d:98:f4:96:33:8c:0a:73:44:ca:90:62: d7:61:fb:cb:e7:78:7d:90:27:d1:e4:fc:7d:59:52: ab:22:7f:ab:e6:df:36:0e:d0:25:0d:9f:31:2b:f0: 5c:03:62:db:da:50:cb:96:f2:98:0a:dc:e6:92:c5: 2f:b6:ac:87:da:de:1f:b3:2f:fc:ca:53:9b:63:76: 5d:c9:55:6a:02:65:73:da:d5:a7:38:60:b3:e5:f1: 5f:f7:d0:ec:b2:4b:95:1d:80:d3:d0:3d:1f:f7:62: 24:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:00:32:C5:03:A1:B5:BE:6F:48:8B:09:58:69:B6:04:42:83:1C:5F X509v3 Authority Key Identifier: keyid:C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:9c:88:7b:17:01:cc:24:88:33:d0:cc:48:16:47:e5:10:6d: 10:01:a1:e4:df:d3:7c:da:a8:61:09:e8:87:96:53:de:9d:87: b9:cb:e9:92:59:61:09:aa:e2:67:52:1f:ba:87:53:00:f9:1e: b1:ff:51:07:d1:86:3a:33:2a:b1:d3:a1:69:fa:13:47:a1:a9: 56:3d:32:fb:53:7f:e1:5d:43:ac:54:e0:8c:a5:5f:5e:32:3f: f1:17:7a:cf:8f:98:a3:8a:84:20:be:1d:eb:fb:56:44:80:f4: ce:37:be:2d:d5:29:73:29:62:73:8d:22:1a:08:cc:13:d4:d3: 63:bb:64:db:3c:e9:d6:1b:46:cb:2f:86:70:a9:01:cb:fa:9a: fa:de:76:89:40:84:86:b8:39:22:6c:d2:44:ce:d9:5c:e1:3b: d2:f3:5b:d5:f2:98:b0:0c:00:fa:37:17:17:c8:6f:e1:20:ee: c5:26:06:ef:ef:b3:67:fc:52:f0:e3:95:fb:f8:43:22:e9:7d: 27:5f:97:eb:da:63:ab:66:4e:61:45:7c:07:5d:42:90:88:84: 0f:a2:e4:36:fd:8b:57:30:90:a1:be:00:4e:96:4e:84:b7:41: 83:5f:5b:66:f2:b3:af:35:0c:f0:ca:a4:f3:c7:9e:a7:35:f4: 21:6d:ae:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIyOTcxMTAvBgNVBAUTKEM1NDJCREUwQjgzNDdDMzc5REUxREUxRDgyNDNBOTJD Qjk0Qzg3NEQwHhcNMjUxMjE5MDMwNzU1WhcNMjUxMjI2MDMwNzU1WjAYMRYwFAYD VQQDDA02OTQ0YzE4Yi0yZDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Fp6uW0txiMjV6cAHS01fDUx5uQmUNo/MZa0CW32dEa5vFNegs4Yj52Bcbj8 ar9erJ5n/I6AkA5MqDsuHU8SO2OFnKwiunC7+owJsMVnyn0dGXGQsBuj+6nTkGDO YjH/Ywh05lGt2V86iA8CWuwr88pVyXJVEZ+kHF9Q8+ID9GbSVK3QnDWNgqjHZfEj jpP6XdLjZidkbYNdmPSWM4wKc0TKkGLXYfvL53h9kCfR5Px9WVKrIn+r5t82DtAl DZ8xK/BcA2Lb2lDLlvKYCtzmksUvtqyH2t4fsy/8ylObY3ZdyVVqAmVz2tWnOGCz 5fFf99DsskuVHYDT0D0f92IkhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsAMsUD obW+b0iLCVhptgRCgxxfMB8GA1UdIwQYMBaAFMVCveC4NHw3neHeHYJDqSy5TIdN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjI5Ny85QTg5MEU2RUI1 RTExMUVFQTBBNjE3NkRDNEY5QUUwMi94VUs5NExnMGZEZWQ0ZDRkZ2tPcExMbE1o MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVSzk0TGcwZkRlZDRkNGRna09wTExsTWgwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjI5Ny85QTg5MEU2RUI1RTExMUVFQTBBNjE3NkRDNEY5QUUwMi94VUs5NExnMGZE ZWQ0ZDRkZ2tPcExMbE1oMDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPnIh7FwHMJIgz0MxIFkflEG0QAaHk39N82qhhCeiHllPenYe5y+mS WWEJquJnUh+6h1MA+R6x/1EH0YY6Myqx06Fp+hNHoalWPTL7U3/hXUOsVOCMpV9e Mj/xF3rPj5ijioQgvh3r+1ZEgPTON74t1SlzKWJzjSIaCMwT1NNju2TbPOnWG0bL L4ZwqQHL+pr63naJQISGuDkibNJEztlc4TvS81vV8piwDAD6NxcXyG/hIO7FJgbv 77Nn/FLw45X7+EMi6X0nX5fr2mOrZk5hRXwHXUKQiIQPouQ2/YtXMJChvgBOlk6E t0GDX1tm8rOvNQzwyqTzx56nNfQhba5n -----END CERTIFICATE-----Generated at Fri Dec 19 19:01:50 2025 by rpki-client