This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft
File: uNk1BsinkdH5_6W2fDiBbdwD7ms.mft (raw, json)
Hash identifier: MCHhB67ra054WIxvlCCg1Lkx9FlBCr0NxTf/eMdviIo=
Subject key identifier: E5:0E:35:A2:B9:FA:6B:DC:9F:7D:E9:3A:AE:D3:3F:9B:BC:97:C6:F4
Authority key identifier: B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B
Certificate issuer: /CN=A9110DEC/serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B
Certificate serial: 0AA3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft
Manifest number: 0A9C
Signing time: Mon 22 Dec 2025 18:59:35 +0000
Manifest this update: Mon 22 Dec 2025 18:59:34 +0000
Manifest next update: Mon 29 Dec 2025 18:59:34 +0000
Files and hashes: 1: uNk1BsinkdH5_6W2fDiBbdwD7ms.crl (hash: f+QexitxNcdCHD/jXrXyQt4V2phpbjLvsEyZRkvPb34=)
2: C01674A86BF011EA87B33D25C4F9AE02.roa (hash: c9rYpxrekHk5Vx/e81a0t1Y6tqcx2DAB/IWGqPFZTW4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl
rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 18:59:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2723 (0xaa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110DEC, serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B
Validity
Not Before: Dec 22 18:59:34 2025 GMT
Not After : Dec 29 18:59:34 2025 GMT
Subject: CN=69499517-28b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:6d:9d:9f:ac:8e:0c:cb:b5:b3:be:be:6a:
33:f0:6b:da:45:97:31:8a:5c:fc:b9:42:0e:7c:0c:
b4:ed:39:57:a3:a3:70:29:14:cb:4a:52:24:6e:d5:
68:a6:ea:d7:dd:d0:58:4a:59:46:f9:29:b9:02:6b:
58:23:e7:81:19:4c:72:68:b0:dd:1c:fe:74:34:ca:
f7:34:ab:1a:54:c9:84:92:ab:a5:0b:9f:75:c1:a8:
7e:93:de:bd:2e:0f:e4:cd:ed:06:02:c8:65:f6:81:
0c:39:cd:02:a9:ae:14:63:85:56:4d:07:a3:e6:3d:
6d:e7:a4:88:bf:6c:b8:56:cc:6d:0f:77:b6:49:02:
30:4c:1c:f4:ca:ea:e0:be:f8:b7:9b:05:f6:d8:e1:
a7:a7:69:c9:76:a0:4a:48:aa:45:13:6b:79:ad:e4:
c9:40:e4:bd:d6:11:0d:55:2f:0b:77:82:d9:ff:f6:
a2:f3:b7:fe:3f:d2:1d:43:8e:b9:82:5f:32:9a:8d:
14:39:97:3d:64:27:ea:68:43:dc:45:dd:a0:97:cd:
1f:f3:4c:c7:a6:d6:f7:85:a7:b0:f4:7e:72:12:3e:
47:a9:8b:00:62:7b:90:20:d0:9f:f8:e7:49:ca:5d:
ab:00:b7:fa:b3:22:d0:9e:66:8b:c6:25:1a:2a:3f:
80:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0E:35:A2:B9:FA:6B:DC:9F:7D:E9:3A:AE:D3:3F:9B:BC:97:C6:F4
X509v3 Authority Key Identifier:
keyid:B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7f:1a:52:2e:f5:96:bc:dd:52:97:20:04:c1:cb:85:3b:37:
35:2a:f7:bd:ed:b2:82:52:fb:18:dc:ed:f6:82:44:c9:cf:94:
49:79:52:95:ff:c6:6b:32:35:70:f9:ac:83:76:af:30:25:a4:
59:b4:62:b3:59:cb:f6:c8:34:0b:90:6e:2e:da:cd:81:15:2b:
e8:68:bf:3c:d0:e9:e9:65:b9:f5:27:0c:6f:cb:e4:ad:0e:57:
1b:8d:23:e5:cb:93:49:91:c6:c5:bf:2d:14:e0:89:52:f6:9c:
13:94:8d:98:2e:da:84:cd:e1:e2:9d:8a:d8:60:0f:56:63:e4:
fb:ab:c8:54:1b:5c:3b:24:26:7c:2e:7e:15:84:aa:97:06:7e:
d3:eb:14:9b:44:8d:00:78:bc:85:ef:75:19:48:70:60:10:ac:
69:ad:38:c0:bd:c8:be:4d:75:89:c6:bd:e3:31:ab:54:c6:1a:
ae:3c:5e:32:ce:33:02:f3:0c:e4:6e:98:8f:48:95:de:dc:44:
92:14:e3:54:b9:ab:50:7c:30:cf:19:56:5c:eb:aa:b6:03:ba:
59:c3:a7:cc:12:fa:6d:46:10:27:9e:1c:8b:2f:5a:56:75:c7:
35:25:de:76:21:36:eb:ae:ad:79:2d:f1:cc:e7:70:78:ef:ab:
39:c0:a6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:23 2025 by rpki-client