This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
File: UDJy2j7wq-3pU5x-JDobhoaxYfs.mft (raw, json)
Hash identifier: 2Amik2/07tCVkVbznqTUGDfa7YG7OmzPgYNP+8JGpRk=
Subject key identifier: C2:1E:8C:99:98:B8:E9:E5:30:46:14:EA:FB:3A:6B:63:8A:51:2C:73
Authority key identifier: 50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB
Certificate issuer: /CN=A9146906/serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
Certificate serial: 014F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
Manifest number: 0149
Signing time: Tue 23 Dec 2025 03:19:21 +0000
Manifest this update: Tue 23 Dec 2025 03:19:21 +0000
Manifest next update: Tue 30 Dec 2025 03:19:21 +0000
Files and hashes: 1: UDJy2j7wq-3pU5x-JDobhoaxYfs.crl (hash: yAhplVOuF9mpXvcv7Lr4md9EHHEfwhXo68ZSwn/6pAo=)
2: DADBB0C033A411EF8E99B625C4F9AE02.roa (hash: GE9if/qMDXWukB3XSTMftXVRzAVJimyZd4NP7/FslLk=)
3: C32999EE391F11EFBFAB6D66C4F9AE02.roa (hash: g8qMHMQ112lEc0CBX6z9UVtKL/qr3OF4595+543HHj8=)
4: C3A77BE8391F11EFBFAB6D66C4F9AE02.roa (hash: 7nB9PKLpginNAvHpyeXPNO88VYIsFeVoJ8sBAHLSABo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl
rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146906, serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
Validity
Not Before: Dec 23 03:19:21 2025 GMT
Not After : Dec 30 03:19:21 2025 GMT
Subject: CN=694a0a39-4b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4b:05:7d:24:2e:0c:65:ae:82:d6:02:ab:3c:
ac:c8:6d:c3:a7:70:53:39:fd:b0:5b:96:75:0c:9e:
a4:8c:01:d8:ad:95:5b:20:57:19:c5:c4:b4:85:07:
5c:30:2f:17:bd:ca:3c:05:51:55:a7:16:40:48:c1:
66:02:c5:50:68:4e:3d:5c:ab:c5:af:a0:79:da:ff:
74:6e:24:6c:59:19:ec:2b:f9:04:c8:10:62:aa:27:
1b:ac:1d:6f:5a:36:6b:2e:96:5f:09:b1:09:69:72:
21:ca:23:e2:6f:d5:d3:51:b3:fb:09:4a:c8:1d:17:
80:d2:5f:f6:a5:5c:5a:e8:13:9d:5f:ec:56:68:a6:
86:06:ba:39:3d:22:45:8e:8c:2d:95:dc:b4:b6:e3:
14:22:aa:75:cf:06:55:d2:9d:7b:54:48:71:90:a9:
9c:17:99:81:7b:2a:47:17:cd:dd:b5:7e:87:d5:58:
3a:20:0c:15:bd:ce:f5:bf:7b:6b:94:78:17:06:47:
4b:a5:7f:99:8f:07:04:fd:41:34:b8:be:5f:57:b0:
e9:70:5e:92:91:de:db:b0:82:f3:02:a5:b4:d1:a3:
07:55:e9:dc:ed:a4:93:df:19:08:fe:1d:a2:99:5a:
a0:f2:bb:43:33:47:45:1c:fb:98:76:f4:66:04:9d:
b9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1E:8C:99:98:B8:E9:E5:30:46:14:EA:FB:3A:6B:63:8A:51:2C:73
X509v3 Authority Key Identifier:
keyid:50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:85:37:df:8c:d5:23:a9:56:26:4e:7b:f3:08:1f:ef:c3:29:
4e:ac:51:dd:5e:8c:c6:5d:16:49:47:52:2b:1a:96:de:fb:23:
57:e2:1e:b5:64:4f:28:ba:5d:db:45:dd:19:29:7e:1f:ad:fa:
bc:55:6d:b8:c9:ad:85:2f:20:5a:4a:eb:9a:4a:d5:43:ea:63:
01:e3:a7:83:56:a2:d4:f4:82:ed:4f:75:c3:1c:5e:37:ec:5f:
f7:ef:ff:27:c1:7b:f5:4b:ef:a1:26:e8:bc:f1:92:1e:ed:bd:
85:70:da:01:37:e7:8f:ec:f8:9f:c7:d9:6f:7d:75:69:ca:2f:
26:9c:85:f0:6f:c7:fd:12:a3:b2:7a:13:e8:22:a2:70:51:e1:
87:c5:2d:13:13:b2:df:b7:c4:29:b9:de:d9:8f:11:7d:8e:07:
53:4c:73:1a:77:a8:1c:4d:f9:ca:16:9d:09:9a:e3:cb:ee:83:
a7:15:26:62:9b:e1:ef:a9:5a:ce:35:24:87:5a:05:a3:2e:b2:
49:93:ac:f4:c9:95:36:4d:a8:96:ef:6a:5f:83:42:1a:74:3e:
d9:20:41:1d:8f:8c:4b:98:dc:13:d0:95:8e:76:41:9a:bf:cd:
01:55:f1:8e:30:4d:bf:2f:e4:db:d6:17:96:9f:c3:18:ab:10:
ca:a1:de:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:37:43 2025 by rpki-client