This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
File: Co-Ufpyg_6RUeOxip-utknsEGTA.mft (raw, json)
Hash identifier: ABV5t4tZrrCSS7U+p9gjJ6aGICssN1BFm9iM7sE0d5Y=
Subject key identifier: 66:92:5E:35:80:9C:7E:12:A0:18:41:F7:B5:93:05:DF:9C:30:77:FC
Authority key identifier: 0A:8F:94:7E:9C:A0:FF:A4:54:78:EC:62:A7:EB:AD:92:7B:04:19:30
Certificate issuer: /CN=A91160E4/serialNumber=0A8F947E9CA0FFA45478EC62A7EBAD927B041930
Certificate serial: 0509
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
Manifest number: 0500
Signing time: Mon 22 Dec 2025 22:47:40 +0000
Manifest this update: Mon 22 Dec 2025 22:47:40 +0000
Manifest next update: Mon 29 Dec 2025 22:47:40 +0000
Files and hashes: 1: Co-Ufpyg_6RUeOxip-utknsEGTA.crl (hash: eNtVqO05ndpQ9zs5Ulgh8ZA1+mXNOFvpWKpPkBzX9n8=)
2: 836F1D0AE0FB11EEB861CD40C4F9AE02.roa (hash: TZrK0Feld/Y4/iPkyFu+uGFDuJj1OCyyDAt+MgPwxHk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.crl
rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 22:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1289 (0x509)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91160E4, serialNumber=0A8F947E9CA0FFA45478EC62A7EBAD927B041930
Validity
Not Before: Dec 22 22:47:40 2025 GMT
Not After : Dec 29 22:47:40 2025 GMT
Subject: CN=6949ca8c-1002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:85:1b:d4:0f:ee:8b:9f:74:7f:18:8a:5a:
fd:16:6c:9e:cf:51:53:f1:37:d5:37:37:2e:35:6c:
cb:cf:2f:fe:a7:5d:17:6d:cb:19:f2:86:10:f0:83:
a9:53:88:2a:b7:21:d9:da:21:3d:0a:20:09:80:f5:
7b:a4:8d:86:62:cc:67:a1:9e:26:f0:72:cb:ec:a0:
98:e2:05:48:2e:fb:cb:fe:1b:a2:80:72:28:34:ce:
45:c6:e0:fe:bd:00:da:f7:f8:40:7b:07:89:24:af:
c0:cb:e0:55:7c:13:4b:e8:d7:99:0e:ad:00:c4:8c:
f6:da:d0:71:5d:e5:29:5a:87:34:6e:7f:89:3c:97:
46:8b:48:9b:ef:85:40:39:ac:93:d0:ce:28:21:af:
90:6a:f3:72:b5:d4:45:ff:3a:a4:90:5f:7b:d9:a5:
48:b2:d1:f4:30:c1:80:78:f4:37:d1:0e:f8:32:52:
3c:bf:04:48:7a:4e:a2:4e:30:1b:96:99:a4:59:2e:
72:04:91:8a:94:68:75:a6:5b:5a:de:a5:ac:27:a5:
f8:ff:30:55:f6:ad:58:28:c7:c8:08:a3:76:69:49:
f6:1e:da:8d:67:d4:d4:94:67:8f:27:aa:9e:cb:49:
c7:d8:f7:1f:46:85:f9:08:6e:73:28:7b:10:30:7c:
50:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:92:5E:35:80:9C:7E:12:A0:18:41:F7:B5:93:05:DF:9C:30:77:FC
X509v3 Authority Key Identifier:
keyid:0A:8F:94:7E:9C:A0:FF:A4:54:78:EC:62:A7:EB:AD:92:7B:04:19:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:97:5b:f2:56:33:f5:6e:93:aa:d7:8a:bf:5d:b7:80:5b:07:
22:96:95:fb:e6:5c:18:b0:43:1a:ae:a1:31:ec:51:de:99:9e:
18:e5:7d:48:29:fa:18:87:02:ee:46:19:1d:3a:cc:c6:4e:9f:
25:13:37:99:1b:15:68:74:6f:6e:56:8b:4b:88:91:2a:cb:19:
6b:26:ef:fb:8a:88:7d:d8:39:59:71:a7:9c:e5:65:8b:01:37:
66:4a:d1:64:36:43:f6:5d:f4:40:ca:59:e9:d9:bc:e1:61:45:
75:a1:c2:71:86:9b:c9:a9:c4:22:f9:02:3c:28:a7:bf:14:f8:
47:8a:7b:89:09:49:f5:23:81:ef:01:96:df:d7:a8:29:97:32:
d2:39:1c:48:4e:a4:45:bb:73:0e:58:f4:aa:d1:d3:bc:7c:39:
47:0e:d0:94:27:86:21:22:f0:cc:67:18:17:ee:da:0c:8b:c2:
a4:dd:bc:94:e5:8e:09:d0:09:3b:05:92:78:a5:e4:8f:b7:b7:
9a:33:6a:7a:69:7c:87:4e:f8:96:a2:ff:cc:b7:4b:e4:52:1c:
41:a3:c0:a4:b6:a4:16:75:24:1d:e3:da:b4:65:f6:f5:a4:aa:
79:0e:87:8f:d3:36:42:68:45:4e:6b:29:5b:3a:24:dd:f3:e6:
7d:be:38:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:53 2025 by rpki-client