This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
File: UxLzmab36w3c1RwDn4P3t6R6Xwk.mft (raw, json)
Hash identifier: Til36vyophr0AogQMZjVzkLFAlIg3PTPB65JI7qrMjM=
Subject key identifier: 69:F6:6B:5E:AD:27:20:F0:C3:D2:7C:6A:C9:DF:73:08:25:42:43:6F
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial: 35C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
Manifest number: 3522
Signing time: Sat 06 Dec 2025 15:10:20 +0000
Manifest this update: Sat 06 Dec 2025 15:10:19 +0000
Manifest next update: Sat 13 Dec 2025 15:10:19 +0000
Files and hashes: 1: UxLzmab36w3c1RwDn4P3t6R6Xwk.crl (hash: x2kxu+s2Dpryl3hhyIwMam4z6SkLrE0uphACtzpTcsU=)
2: E48E2E94017211EBA18CC269C4F9AE02.roa (hash: RcPbYS2Mm16Dad2keSZ4cdbUI7gVUL7UCpOgtTmht7o=)
3: 95B5C59E2DCE11EEB652B16FC4F9AE02.roa (hash: 96SYU6m7SGiOTx98szkfXwpjHUBpGQY+sEJUou+Xksk=)
4: EB3FE1C61B6411ECAAB1D328C4F9AE02.roa (hash: nDdtc4fqfOTSbb5iCoB70ze8NVonJMIYgxedc+2CDmI=)
5: 7350B2AE2BB011EEBF8C0962C4F9AE02.roa (hash: psLOpD8C8pfqh2g1Ejy2VgUijKrebCOnSdSbyi1VBeo=)
6: 03C522BA8CF211ED8699F014C4F9AE02.roa (hash: SDoyG5rsMeQ6bXhagfaHksn0k7FTFIvh2Jsa/kFvAUY=)
7: E367308E8D8811EDB3C13D6CC4F9AE02.roa (hash: Yrlzkw+xW7vzxjAA+gYjWPy3w6+ulnZPM2vfj4PRtL4=)
8: E474AF108D8811EDB3C13D6CC4F9AE02.roa (hash: 9WFhbxgW1k8KC+Pm/htl49PyfwqFC/Q/qBICa75Yy/U=)
9: EF1D0466455311E98FA31F68C4F9AE02.roa (hash: bbr75VePBSQhbmm3KlmHsLYo/ATNizzMszRI6/9uPZ8=)
10: 8D6973CE77C311EE90D4BD46C4F9AE02.roa (hash: 9fLp3FpzRgG8gTpa9Wdwux4sENLbjSpORh9XzAGvous=)
11: 56C4FAF42D4511EAB70F247AC4F9AE02.roa (hash: lSnudi0sxwHRV/vi9lzYm6RYJUroM2G+k2V6NDU8F9s=)
12: C2F17AB22DCE11EEA2884670C4F9AE02.roa (hash: mblhIH5WhCJxyS9xk8iobqAI3hQpbzIkn//NqWLOlIU=)
13: 2F20ECAE554211EF82D40732C4F9AE02.roa (hash: r+ewS8jRefW6/Fs2vkW+LCfFdXLDWM6NtEIDinEYIFQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13764 (0x35c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Validity
Not Before: Dec 6 15:10:19 2025 GMT
Not After : Dec 13 15:10:19 2025 GMT
Subject: CN=6934475b-bff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:27:89:79:68:6d:5b:11:dd:fb:21:32:e8:
c1:01:46:89:0e:d9:d5:2c:c6:a2:3c:ef:77:ac:f2:
fc:f3:1b:0e:48:bc:c3:24:b4:e8:58:1b:83:c0:fe:
b3:7f:84:ee:1b:b7:d1:98:0a:3f:63:2e:aa:b7:a7:
08:50:60:ee:f4:a1:1c:ec:47:ed:36:96:d3:33:49:
bd:a6:06:a3:5c:97:b7:f1:9f:32:d2:95:af:30:f4:
2c:be:55:65:6e:14:42:86:96:cc:da:23:90:0c:1a:
cf:c9:77:2b:94:2e:55:b2:71:2e:0e:96:17:47:23:
2f:e5:c0:55:f0:99:2e:1b:09:b4:c9:ed:e7:bc:da:
85:ab:b3:88:12:48:b8:09:e2:34:05:05:3b:9b:85:
a9:42:10:64:23:7b:89:07:a1:d3:76:05:3c:bb:fc:
91:6c:ff:f5:07:22:49:5a:2d:e5:75:82:2d:b6:87:
57:8d:2e:4c:f0:17:10:b0:c0:44:5b:e6:e6:65:4e:
ef:88:62:fa:b4:78:eb:c7:a9:61:72:76:e8:c2:7b:
9c:f7:1c:1d:85:51:8a:73:fb:04:f1:d3:8d:3e:43:
08:30:0c:e5:d6:41:e8:f1:3b:a1:6b:d8:46:5c:45:
33:e3:03:ea:cb:06:5a:03:09:2c:e6:66:36:9b:fe:
fe:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F6:6B:5E:AD:27:20:F0:C3:D2:7C:6A:C9:DF:73:08:25:42:43:6F
X509v3 Authority Key Identifier:
keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ad:54:91:bc:3c:f1:d1:87:02:99:aa:31:35:70:0f:9f:ed:
1b:c7:af:b0:14:4e:a9:2f:f9:f4:d3:47:0e:a9:89:78:21:9a:
98:fe:18:c5:07:ff:64:f1:d7:d0:f5:dc:7e:bb:3f:a0:5f:de:
b9:93:f7:bb:5e:b8:a0:22:69:fb:e2:1e:9a:81:96:4e:33:5a:
f0:49:4d:88:ef:e5:de:94:12:75:c0:f8:c1:c8:fe:76:76:aa:
5d:ba:42:44:1b:b4:1d:3b:81:30:8b:78:d5:ad:f7:c9:88:39:
8a:c2:c1:78:e5:94:80:eb:45:01:27:d0:20:b6:55:df:3d:23:
16:eb:07:e1:ee:f6:cd:35:e2:00:3a:92:b8:e9:6a:7b:00:38:
c4:96:48:7d:c9:9d:23:cb:80:ba:32:02:7c:d9:e7:5f:c7:de:
83:4c:04:49:4b:88:df:af:34:70:97:2d:7a:ec:c5:7e:3e:36:
c3:9f:1f:45:7a:29:82:68:30:82:2a:9d:70:00:71:61:d9:7e:
d4:b8:d0:67:f4:9b:b0:43:2f:6c:cd:c1:6e:f4:26:88:13:32:
86:84:b2:41:15:cb:a8:10:36:18:1a:89:0e:ac:f3:70:44:ec:
d2:d8:1c:7f:0b:68:05:d2:c7:8f:8b:a9:24:6a:9b:bd:d1:c2:
59:c9:0d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:07:49 2025 by rpki-client