This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft
File: umDC9ghXfO5rvRSTcht6rsoodis.mft (raw, json)
Hash identifier: noZshRV+6KAzgupK22uNzAxVTvC26Aypx+2lBRRVp3o=
Subject key identifier: 4D:08:68:72:DA:28:E4:15:1A:B4:89:C3:A8:E0:83:41:A8:3C:0F:97
Authority key identifier: BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B
Certificate issuer: /CN=A91326FF/serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B
Certificate serial: FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft
Manifest number: FB
Signing time: Sun 21 Dec 2025 04:20:49 +0000
Manifest this update: Sun 21 Dec 2025 04:20:49 +0000
Manifest next update: Sun 28 Dec 2025 04:20:49 +0000
Files and hashes: 1: umDC9ghXfO5rvRSTcht6rsoodis.crl (hash: FCjBrfJ5Y4ucPk5Nf8PdEymMnmOjm9Qf7h/yPS1IRXo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl
rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 04:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91326FF, serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B
Validity
Not Before: Dec 21 04:20:49 2025 GMT
Not After : Dec 28 04:20:49 2025 GMT
Subject: CN=694775a1-4fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3c:cb:6a:28:ec:9f:b4:c3:16:e2:74:84:ef:
0c:b0:6e:af:f9:37:8d:0e:2b:42:e5:7a:50:ff:7e:
f1:97:11:a8:ab:2d:69:56:79:e1:48:78:a2:6d:b8:
61:cc:0d:c2:d6:6d:4d:a4:91:74:cd:43:8c:b3:ba:
96:b6:f0:77:77:9a:5b:90:ca:21:73:5a:08:62:ef:
c3:6a:c1:8b:c4:29:ca:67:2e:0d:3c:2a:ea:bb:fa:
ce:dc:22:bf:06:d4:50:e2:87:bb:67:f7:fb:e8:65:
a1:04:72:d0:22:f0:84:b1:a5:84:f9:64:ac:12:92:
59:1b:89:f9:65:14:d9:95:d2:9e:b6:12:08:f0:9c:
02:76:0d:5e:29:ae:a3:0d:62:77:ec:55:e7:be:8f:
17:4d:d9:88:67:80:4b:55:0c:24:a8:65:9c:12:0f:
66:b8:b9:6f:ca:8d:a5:c3:2e:da:dc:91:30:13:60:
19:2f:19:a9:1e:36:bc:3b:a9:58:79:f5:c0:8d:5a:
cb:70:8e:a7:b8:de:59:f2:4e:57:43:0e:09:fd:5f:
45:9d:17:57:33:d8:cd:31:dd:4a:26:c7:1e:1b:7c:
e3:a4:f9:87:59:a5:35:42:57:e5:e5:b3:85:13:bf:
6c:de:68:e8:95:81:5b:18:43:e2:6f:ad:8b:ba:45:
4a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:08:68:72:DA:28:E4:15:1A:B4:89:C3:A8:E0:83:41:A8:3C:0F:97
X509v3 Authority Key Identifier:
keyid:BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:16:9f:e4:de:fb:37:06:17:b1:6a:f5:d4:fd:25:ad:58:5a:
f0:f0:0a:db:a3:88:e4:bd:55:68:13:39:4b:06:3f:d7:0d:ce:
4f:d9:c2:b4:fb:2d:c9:87:b4:7f:1a:7d:25:c9:9c:d5:8a:e1:
22:4b:6a:2a:a0:5b:43:48:cf:5e:78:de:cd:7a:0f:80:94:fd:
22:f2:44:7d:a9:86:c3:4a:9f:c8:73:39:f3:0e:f5:98:b0:f5:
0f:f8:e3:f6:90:79:5a:c6:b9:9b:cb:99:f2:2c:e1:a1:4b:6f:
ac:54:6b:e9:50:b0:e9:a6:df:92:27:6a:86:ea:0e:85:e3:8e:
9b:43:81:13:1b:72:a3:78:a2:2f:d2:3f:4a:c5:0d:03:84:1a:
12:4b:c9:30:ea:df:ff:54:67:25:fa:69:60:d6:ee:90:79:bc:
cf:e1:31:d5:3c:d6:1d:36:3f:89:b8:77:9a:f0:5d:78:1e:a2:
65:39:62:6c:9f:9b:71:81:85:7a:b6:e6:37:d0:cf:98:bd:3f:
67:1a:a4:d0:34:c8:77:f9:3b:7b:0e:76:18:2e:c4:77:da:c6:
b6:da:f1:d5:6b:6e:a4:6c:8f:1b:af:5c:21:d5:6e:24:f9:36:
95:d4:aa:60:f6:4c:21:0b:41:cd:10:8a:78:75:cd:c3:b9:21:
8a:6a:19:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 23:02:12 2025 by rpki-client