This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
File: uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft (raw, json)
Hash identifier: U3ar01zT/s3j7hjmqNwSxPiYvD1pWQEZQtpbxFBK+D0=
Subject key identifier: 62:37:CC:13:84:30:73:96:A1:36:39:FE:79:AD:09:7D:A6:71:B2:F2
Authority key identifier: B9:A0:BE:FF:92:AF:7C:DE:19:00:85:05:2F:1F:4F:1F:92:BD:A4:F2
Certificate issuer: /CN=A9133E16/serialNumber=B9A0BEFF92AF7CDE190085052F1F4F1F92BDA4F2
Certificate serial: 094D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
Manifest number: 094D
Signing time: Thu 18 Dec 2025 19:42:45 +0000
Manifest this update: Thu 18 Dec 2025 19:42:45 +0000
Manifest next update: Thu 25 Dec 2025 19:42:45 +0000
Files and hashes: 1: uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl (hash: K/wEqLN6KUmIaPBQrzvraYiSdjP68lA3kg/YPR0bNP4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl
rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 19:42:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2381 (0x94d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133E16, serialNumber=B9A0BEFF92AF7CDE190085052F1F4F1F92BDA4F2
Validity
Not Before: Dec 18 19:42:45 2025 GMT
Not After : Dec 25 19:42:45 2025 GMT
Subject: CN=69445935-eae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:2e:64:17:e6:80:fc:00:77:49:71:4e:4d:
78:07:35:b1:86:44:3d:81:b3:00:62:22:80:61:68:
97:48:6a:8b:f4:df:1b:e2:94:4a:c2:db:78:fa:b6:
11:21:ea:54:0f:be:80:24:87:b7:d8:86:bf:fe:3e:
85:03:1c:07:89:18:ad:cd:2e:e9:28:e0:dd:96:28:
d0:f7:fe:2e:82:72:63:ed:d0:2f:a2:8d:5b:75:e4:
53:03:87:37:ac:79:25:9a:0f:87:e8:8c:ff:b4:54:
bb:b7:01:a9:56:76:2d:08:18:70:c6:e9:fb:60:12:
9b:18:9c:a2:50:d3:42:9f:29:ec:3c:07:73:b9:da:
85:06:52:4f:b9:a2:48:b7:a0:aa:b8:64:dc:51:6a:
3a:c2:8e:27:09:a5:8c:d5:47:84:88:22:95:db:fa:
4a:22:71:6e:34:1b:28:be:97:17:47:9b:c0:31:62:
b1:1b:73:c5:5f:4e:c5:40:65:5d:06:2a:22:90:d1:
5e:e4:ce:ff:17:b0:71:a2:bd:03:d3:25:f0:e9:e6:
9d:c9:32:0c:4b:72:6c:e4:c2:ca:0f:0e:31:fc:2d:
26:0e:33:56:bb:9c:77:78:68:4f:5d:02:ea:85:0a:
c1:d2:cd:12:f3:fe:10:8b:fc:1f:f3:fe:19:49:d0:
41:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:37:CC:13:84:30:73:96:A1:36:39:FE:79:AD:09:7D:A6:71:B2:F2
X509v3 Authority Key Identifier:
keyid:B9:A0:BE:FF:92:AF:7C:DE:19:00:85:05:2F:1F:4F:1F:92:BD:A4:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:2e:f9:d5:18:73:be:33:90:40:f9:dd:b7:96:ee:f2:a0:53:
83:f1:8c:37:26:12:d7:c4:22:70:c7:87:6b:8e:cb:d1:8c:09:
b0:99:a9:36:88:7d:e5:d9:d2:23:7b:57:59:7b:a0:5d:86:7c:
79:27:96:a7:90:be:95:04:dd:37:67:b2:5e:be:89:bd:65:7b:
d4:42:76:c3:ea:a7:8f:74:8f:70:f9:46:34:bd:9c:5d:8f:37:
55:dc:70:06:0c:86:79:f4:cb:41:9b:e8:10:64:64:19:78:ea:
0a:f9:48:60:85:e8:e4:d9:3f:68:83:c2:bb:71:cb:88:de:21:
aa:6d:a8:4b:03:44:fc:0c:8b:4a:36:cc:dc:1b:e7:34:e7:70:
32:89:41:5d:be:2c:4e:5f:f6:13:31:04:53:9b:2e:45:16:ef:
81:1d:e2:de:f0:80:94:b8:46:bb:5c:03:be:98:f2:7a:01:cc:
19:32:9b:81:4f:81:ef:0b:ce:48:41:a2:b0:3c:77:7f:e5:27:
23:2d:22:65:e1:46:89:ef:a1:1b:e4:98:4e:d3:09:57:bf:c7:
50:7f:85:83:0c:c5:cd:0d:43:d3:67:b6:87:74:da:6b:2f:e5:
50:4c:ec:56:c6:e2:3c:e0:fd:1b:14:d1:22:8a:1f:b0:03:4d:
54:36:d9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 07:50:53 2025 by rpki-client