This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
File: UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft (raw, json)
Hash identifier: FjcU/Rp6jRX1ko4brO1hYc+wQJnTecYl6SV7m7McHRQ=
Subject key identifier: F6:21:33:EB:F9:77:2D:2E:3B:B8:53:2E:EC:F1:E1:F9:63:15:3C:4B
Authority key identifier: 50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30
Certificate issuer: /CN=A913318E/serialNumber=500F9200EB86DC5FD06DB786C0CEA452D0CE7230
Certificate serial: 014E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
Manifest number: 0149
Signing time: Tue 23 Dec 2025 03:21:09 +0000
Manifest this update: Tue 23 Dec 2025 03:21:09 +0000
Manifest next update: Tue 30 Dec 2025 03:21:09 +0000
Files and hashes: 1: UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl (hash: HKgJY4PtAYpDIoQhpW3acIZW54E5YiXDA8uHnG1BrY4=)
2: 6EAE50E8EBFA11EEA937307AC4F9AE02.roa (hash: J7aNLa3ERRvlZqfhEJCcY2ky3Snav79C7z3716SOcQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl
rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:21:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913318E, serialNumber=500F9200EB86DC5FD06DB786C0CEA452D0CE7230
Validity
Not Before: Dec 23 03:21:09 2025 GMT
Not After : Dec 30 03:21:09 2025 GMT
Subject: CN=694a0aa5-8948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:3e:09:8c:6f:59:b4:df:3f:99:03:17:65:
61:21:59:71:99:e0:28:01:de:39:83:23:24:e9:17:
75:61:55:ed:e2:19:f3:4d:af:ed:ef:d9:d0:1f:76:
11:ed:c2:ff:74:b5:6a:71:91:a3:8f:60:f2:c7:1a:
85:17:f7:36:55:46:4d:d1:f7:ca:83:4a:62:8a:55:
cf:47:e4:88:60:1b:0c:8a:43:64:ec:1b:69:47:25:
f8:89:7e:86:f6:73:3f:9a:8c:85:f3:26:8f:47:92:
6e:39:5e:83:08:f6:12:ce:8e:1f:9d:ba:28:10:e4:
03:56:b2:9b:9e:70:a4:4e:58:e5:fa:11:c6:17:58:
0e:d9:5e:fb:f6:bd:27:b1:21:30:b8:86:1b:d2:97:
d1:76:90:79:c9:7f:4d:95:00:44:71:3b:ff:3f:ac:
5d:9e:eb:87:5b:a4:28:47:38:5f:a7:04:1e:5c:77:
52:08:93:ea:ec:b2:f3:8f:2e:fd:3c:57:fb:4a:71:
35:a2:75:c4:f4:44:9c:9f:7f:a8:3b:15:21:fb:41:
fe:20:54:6c:28:f6:04:f6:f1:e7:f9:b9:c7:01:bc:
37:2a:43:a5:3b:45:55:6b:9a:fa:a9:18:a6:3f:b4:
32:54:86:2b:16:45:90:19:52:56:4a:84:da:5b:a4:
32:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:21:33:EB:F9:77:2D:2E:3B:B8:53:2E:EC:F1:E1:F9:63:15:3C:4B
X509v3 Authority Key Identifier:
keyid:50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:00:e4:fe:29:68:78:c9:07:2d:de:eb:2b:bc:97:8a:27:84:
be:02:65:f1:04:2a:70:0d:68:b7:1e:15:c5:9a:d1:ad:42:53:
80:1b:96:1a:16:98:38:a0:4b:00:a1:26:af:c0:b2:ac:ac:ca:
62:df:2d:1a:1a:7a:3c:29:72:33:5b:f3:bc:d3:1a:08:23:53:
87:f9:70:d7:5f:38:c6:2f:54:a2:50:72:9e:67:ea:fb:d3:63:
db:46:45:b4:bb:c1:0f:4c:1c:a9:f4:81:d6:b5:09:92:f7:1f:
18:68:dc:5c:bc:ef:c9:4b:c8:e4:62:5c:38:6c:bc:fa:76:a2:
ee:a6:76:5f:e1:3c:a6:9a:ef:3a:77:72:64:e6:4e:ec:1b:e3:
5d:7b:23:56:ca:c4:3e:2c:7b:8f:28:b7:07:c3:36:6f:69:89:
0c:e6:b3:02:96:d5:aa:b1:19:56:60:4d:c6:93:3d:25:e0:d8:
06:90:0b:66:ee:76:28:46:fc:3b:1e:1f:cb:c7:e1:8e:bf:8f:
d7:05:2c:4c:b3:ca:f1:67:cd:de:24:0d:78:b5:97:b5:dc:b1:
9e:f9:f9:cb:77:6f:33:b6:43:c3:2c:00:56:26:ff:7d:0c:1f:
7c:f3:ac:f3:e6:db:9c:d7:a4:73:05:77:6b:95:f4:ef:2e:a4:
a8:ae:3d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:47 2025 by rpki-client