This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
File: uMMvxNeTGtQkFAcwaguZasjJn-s.mft (raw, json)
Hash identifier: SPQ0OhK3XIX+Gij0eTK1h3SE7Ld9NBP2kOJPnNf5Trg=
Subject key identifier: BE:B2:2A:42:E5:F1:4F:5E:05:0E:90:54:16:99:69:A7:A7:F7:87:B7
Authority key identifier: B8:C3:2F:C4:D7:93:1A:D4:24:14:07:30:6A:0B:99:6A:C8:C9:9F:EB
Certificate issuer: /CN=A9140467/serialNumber=B8C32FC4D7931AD4241407306A0B996AC8C99FEB
Certificate serial: 0851
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
Manifest number: 0844
Signing time: Mon 22 Dec 2025 20:08:01 +0000
Manifest this update: Mon 22 Dec 2025 20:08:01 +0000
Manifest next update: Mon 29 Dec 2025 20:08:01 +0000
Files and hashes: 1: uMMvxNeTGtQkFAcwaguZasjJn-s.crl (hash: 9xjyzLEw2q6Jb9a45ysCIT93F1sGKmJ0Hi5ywkT1h2Q=)
2: 02E60C72F1E211EAA2361B34C4F9AE02.roa (hash: af5uMeHzt9MTz6ZREM+PIjD4gLSqGSG2u3tqcHLex6c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.crl
rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 20:08:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2129 (0x851)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140467, serialNumber=B8C32FC4D7931AD4241407306A0B996AC8C99FEB
Validity
Not Before: Dec 22 20:08:01 2025 GMT
Not After : Dec 29 20:08:01 2025 GMT
Subject: CN=6949a521-a1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:b5:fd:b3:8e:0e:b9:57:31:cc:c7:37:5d:
35:f6:ae:f8:86:d6:3e:f3:94:db:69:80:a2:48:23:
7a:c7:30:fc:c5:24:f6:e7:2b:c1:6c:fb:b1:86:3b:
3f:cf:95:4e:e6:71:38:3c:78:03:37:a4:56:b8:ea:
58:a3:ae:3e:1c:91:47:90:ea:47:8a:54:8f:2b:7a:
77:f1:a8:54:8b:73:16:ed:20:e7:af:43:12:54:59:
e2:1f:62:16:22:3c:c6:88:c5:49:c4:10:45:1e:bd:
f4:ea:f0:fc:ac:19:11:cd:59:fa:38:9c:d1:12:d6:
2f:32:92:85:76:17:4c:dc:b8:93:75:6c:f5:5a:ba:
1b:3c:92:22:67:41:14:21:14:47:c9:a8:84:c8:3c:
f6:ea:08:07:94:2f:75:11:e3:de:da:38:a0:a0:30:
8c:c8:fc:fa:7d:e2:91:22:d8:da:b9:cb:31:0b:42:
1e:62:b0:c0:b9:b5:9c:70:4c:b1:26:af:93:64:db:
5a:03:24:f2:ee:96:b5:f8:e5:76:e9:69:55:b0:39:
fb:0d:e4:bc:43:b9:a6:ec:af:48:46:1a:57:cf:f4:
4b:c8:44:f3:81:6e:f4:1e:50:84:4a:49:6f:fe:76:
e3:f3:ed:6f:f7:9c:c9:8b:9f:5d:8f:d0:2f:c2:58:
f7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B2:2A:42:E5:F1:4F:5E:05:0E:90:54:16:99:69:A7:A7:F7:87:B7
X509v3 Authority Key Identifier:
keyid:B8:C3:2F:C4:D7:93:1A:D4:24:14:07:30:6A:0B:99:6A:C8:C9:9F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:3b:98:af:80:c5:b8:9b:3d:11:f4:b7:ab:a5:31:19:b1:a2:
2e:a8:c4:b2:fd:a6:66:10:e8:76:10:4e:a6:98:0e:ea:15:62:
cf:e4:81:0b:b0:eb:98:b6:c6:0b:62:d4:d6:ff:0e:b6:43:bb:
7f:3f:87:33:35:92:7e:d5:7a:33:30:41:50:78:52:1d:fd:aa:
67:34:a9:0f:67:f0:c5:9f:b5:15:bd:51:9b:ba:d0:c0:2c:19:
7e:9c:7f:1e:2e:2e:9b:d6:03:41:2f:b9:a5:87:6b:bf:96:49:
dd:f3:f5:b2:ce:c9:c3:d9:13:8e:6b:fe:8c:64:4d:01:c8:f6:
1b:96:ee:83:29:19:1c:b7:b8:dc:cb:6c:59:0e:62:d8:1a:3a:
9d:39:a4:41:b1:89:33:94:ac:05:c7:ad:99:9a:a6:c8:34:62:
e2:a1:0c:2b:e2:b6:1b:61:b6:d6:d4:a7:7b:00:7c:ea:08:e1:
66:f2:04:04:39:91:2f:ea:9c:35:0b:8e:16:30:30:c4:2e:ec:
fe:8b:c4:bb:e4:f9:94:96:6a:10:c3:09:4d:b8:85:23:35:d8:
ab:e0:30:b1:c7:9a:84:7d:3a:bd:c4:77:05:74:61:1d:c3:64:
cd:21:c1:bb:02:46:e0:1c:09:e8:79:ff:df:d0:e4:8e:20:ca:
c9:78:c0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 09:18:28 2025 by rpki-client