This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft File: 9UFCkkKfU9qxhrQuVkFJWagL6gg.mft (raw, json) Hash identifier: U2lLD7A/SpIMIpq6qOxtgmpgCzAesYRNh7JuHrYWx4Q= Subject key identifier: 30:18:5F:7A:CC:A1:CE:75:54:C0:14:00:2D:DA:AC:78:F3:47:94:F3 Authority key identifier: F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08 Certificate issuer: /CN=A91FB92B/serialNumber=F5414292429F53DAB186B42E56414959A80BEA08 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft Manifest number: 01A8 Signing time: Sun 21 Dec 2025 02:29:49 +0000 Manifest this update: Sun 21 Dec 2025 02:29:48 +0000 Manifest next update: Sun 28 Dec 2025 02:29:48 +0000 Files and hashes: 1: 9UFCkkKfU9qxhrQuVkFJWagL6gg.crl (hash: xakJWqToEqx1LeH+dxxUhy7cEtjZ9SQSV49zcGh2efo=) 2: 25B9F9C454BE11EE810E4C27C4F9AE02.roa (hash: vLaYuuYnarn+LGPGR9ZLrnHgOaNMvO/0VgOiG0azlng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB92B, serialNumber=F5414292429F53DAB186B42E56414959A80BEA08 Validity Not Before: Dec 21 02:29:48 2025 GMT Not After : Dec 28 02:29:48 2025 GMT Subject: CN=69475b9c-a4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ec:a0:d9:37:41:48:bd:73:2b:01:9a:cb:60: bd:b8:21:5a:c4:91:53:30:84:e8:20:5c:58:58:08: 98:87:1e:6b:6b:cc:6c:c8:91:7f:f0:3a:31:cd:b0: 39:cb:22:20:6c:50:5d:0d:32:ff:97:d6:0e:93:1d: 8d:65:e2:1a:7e:9f:07:68:a3:a1:e7:87:65:68:7c: a0:89:1d:2c:40:9b:7c:22:30:01:fa:17:a9:26:10: e7:57:b4:58:f6:13:36:6b:61:9f:ea:d6:ba:b2:c7: 93:9b:18:cd:b3:c5:68:e3:0d:c6:75:e8:af:ca:45: 83:09:ee:c9:27:5e:4c:f2:f4:97:13:31:84:c9:bf: 8d:8b:84:88:23:1a:d4:df:df:14:50:94:13:21:c5: 30:d6:90:f4:9c:c6:ea:d6:7e:b4:f9:e8:5d:01:60: 8c:b8:53:31:74:4c:75:d2:e0:0e:a0:88:e9:86:4b: 05:f4:5b:be:01:a0:a6:95:0c:4a:af:86:34:1a:38: ab:c6:f6:bf:fd:2f:e7:14:16:c5:06:0b:53:f4:6f: 10:3f:38:3e:46:90:5e:1a:be:63:a6:18:90:4f:0a: ab:41:4b:1d:11:65:95:76:b6:33:c7:59:ba:e6:95: 0d:ec:1a:db:17:4d:b1:c2:ed:8b:15:00:f0:fa:05: 2a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:18:5F:7A:CC:A1:CE:75:54:C0:14:00:2D:DA:AC:78:F3:47:94:F3 X509v3 Authority Key Identifier: keyid:F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:7f:8b:29:f5:9f:94:54:5d:b1:67:bc:9f:c9:86:3a:f4:a1: af:4c:4b:c5:8f:5d:3f:12:c1:5c:f3:ca:8e:e6:2a:eb:27:86: d4:01:ab:fa:57:21:dd:18:cc:fe:49:40:a8:cc:e0:a3:74:27: 9c:30:e9:aa:c9:82:b9:24:f3:4f:08:e1:69:7f:73:8a:f2:78: 77:82:2f:61:97:55:91:d8:b6:f9:01:4a:0a:9a:d5:86:ad:00: ed:25:51:c2:e8:a4:9b:7f:df:25:3e:28:ef:5d:c7:94:06:e2: 58:ba:78:48:bb:6e:41:82:33:df:bc:ce:1a:0d:60:35:25:0c: 5f:d5:8b:fd:f9:60:4b:2d:6d:ab:2c:98:67:67:12:96:49:fc: c2:4d:61:d4:76:5d:83:e5:37:bb:ba:fb:ba:84:5e:b7:ef:03: d2:5c:41:2b:18:6f:6c:a3:99:d4:3d:7b:4a:42:69:96:a8:0c: ef:05:17:23:dd:cd:fe:65:73:29:fe:00:b4:9f:1a:07:f1:8b: 5d:14:dc:cd:db:98:e0:0b:18:e2:02:eb:56:4a:cf:1b:b4:88: 37:fc:54:4c:f2:39:63:14:fb:16:dc:7d:4f:8c:d5:7a:b0:d2: cd:14:91:7b:55:f2:6c:1a:f3:a6:43:39:1c:2d:1e:35:ed:ce: e9:8d:00:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI5MkIxMTAvBgNVBAUTKEY1NDE0MjkyNDI5RjUzREFCMTg2QjQyRTU2NDE0OTU5 QTgwQkVBMDgwHhcNMjUxMjIxMDIyOTQ4WhcNMjUxMjI4MDIyOTQ4WjAYMRYwFAYD VQQDDA02OTQ3NWI5Yy1hNGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuyg2TdBSL1zKwGay2C9uCFaxJFTMIToIFxYWAiYhx5ra8xsyJF/8DoxzbA5 yyIgbFBdDTL/l9YOkx2NZeIafp8HaKOh54dlaHygiR0sQJt8IjAB+hepJhDnV7RY 9hM2a2Gf6ta6sseTmxjNs8Vo4w3GdeivykWDCe7JJ15M8vSXEzGEyb+Ni4SIIxrU 398UUJQTIcUw1pD0nMbq1n60+ehdAWCMuFMxdEx10uAOoIjphksF9Fu+AaCmlQxK r4Y0Gjirxva//S/nFBbFBgtT9G8QPzg+RpBeGr5jphiQTwqrQUsdEWWVdrYzx1m6 5pUN7BrbF02xwu2LFQDw+gUqzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAYX3rM oc51VMAUAC3arHjzR5TzMB8GA1UdIwQYMBaAFPVBQpJCn1PasYa0LlZBSVmoC+oI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjkyQi9DNDYwODFGMjU0 QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5cXhoclF1VmtGSldhZ0w2 Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVRkNra0tmVTlxeGhyUXVWa0ZKV2FnTDZnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjkyQi9DNDYwODFGMjU0QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5 cXhoclF1VmtGSldhZ0w2Z2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhf4sp9Z+UVF2xZ7yfyYY69KGvTEvFj10/EsFc88qO5irrJ4bUAav6 VyHdGMz+SUCozOCjdCecMOmqyYK5JPNPCOFpf3OK8nh3gi9hl1WR2Lb5AUoKmtWG rQDtJVHC6KSbf98lPijvXceUBuJYunhIu25BgjPfvM4aDWA1JQxf1Yv9+WBLLW2r LJhnZxKWSfzCTWHUdl2D5Te7uvu6hF637wPSXEErGG9so5nUPXtKQmmWqAzvBRcj 3c3+ZXMp/gC0nxoH8YtdFNzN25jgCxjiAutWSs8btIg3/FRM8jljFPsW3H1PjNV6 sNLNFJF7VfJsGvOmQzkcLR417c7pjQAz -----END CERTIFICATE-----Generated at Sun Dec 21 12:00:02 2025 by rpki-client