This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
File: tUdigfNZTThknMz_UvWLtJtHXwk.mft (raw, json)
Hash identifier: KmQLCtz9lQyJIxOskJ/BhmdFvA+Q6mbK/IfgHIGbYLw=
Subject key identifier: FF:98:A9:D9:78:C1:39:A9:08:BC:A4:E0:9B:B2:06:C2:BB:7D:49:B2
Authority key identifier: B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09
Certificate issuer: /CN=A9169351/serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09
Certificate serial: 018F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
Manifest number: 0188
Signing time: Tue 23 Dec 2025 02:45:09 +0000
Manifest this update: Tue 23 Dec 2025 02:45:08 +0000
Manifest next update: Tue 30 Dec 2025 02:45:08 +0000
Files and hashes: 1: tUdigfNZTThknMz_UvWLtJtHXwk.crl (hash: gi4wlMt1Drcy/o140EIL39qc7oHJGnGB+7wSCawDIq4=)
2: 86080D8A940511EE8A83F00DC4F9AE02.roa (hash: bcxcsPekxix6Fyl8eqyL7H0ERqIMwK9GEhKTFmsvSAI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl
rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169351, serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09
Validity
Not Before: Dec 23 02:45:08 2025 GMT
Not After : Dec 30 02:45:08 2025 GMT
Subject: CN=694a0235-7d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:52:13:34:47:53:a5:b6:59:ce:dd:4f:74:
e3:0e:87:eb:f8:0d:f2:c4:29:f0:82:76:7b:f1:6c:
7d:d0:ea:53:5d:c6:1e:1e:3c:e2:4b:5a:d2:2a:ac:
31:a6:09:03:d5:db:73:2c:84:0b:80:e1:3a:66:12:
ea:b1:41:76:58:f7:aa:a2:1c:33:52:38:b5:64:85:
6e:bc:f0:f9:d6:36:cb:b5:36:64:bf:52:b7:c0:31:
fb:c4:87:d9:ef:c5:64:73:a6:bd:10:12:d1:9b:a8:
09:99:4b:46:d1:a9:b4:00:74:82:0e:ae:84:d4:7b:
27:7b:18:58:94:3b:34:d7:e9:44:5f:30:e5:71:32:
fa:c9:b0:3d:09:62:3a:a2:10:4c:e9:f2:a3:e1:96:
66:46:84:de:0d:5e:bc:26:7d:99:5a:48:e3:10:4d:
52:db:f2:cb:9b:b0:8f:40:8e:c1:e0:35:c7:59:d8:
dd:9a:a7:fc:e4:9b:27:3b:af:49:35:8a:ab:9c:32:
26:dc:09:a8:2b:04:d5:cd:70:9c:fe:04:fb:fc:de:
cd:a2:b9:df:6a:77:1d:83:22:a8:69:a7:17:1a:b8:
40:ef:13:23:ac:61:e1:d9:6d:03:22:43:c9:02:ff:
8a:63:ad:4d:1b:8f:35:16:3a:e3:e1:d1:38:bf:9f:
d0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:98:A9:D9:78:C1:39:A9:08:BC:A4:E0:9B:B2:06:C2:BB:7D:49:B2
X509v3 Authority Key Identifier:
keyid:B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:30:3b:1a:ba:e3:a1:67:50:73:9e:61:7b:a6:96:9c:fc:c5:
5b:01:ce:47:21:2c:78:1b:f3:ff:d4:77:1a:de:76:af:aa:bd:
31:20:37:8c:fa:91:d7:37:a2:47:47:4c:8c:83:89:1d:38:93:
57:e8:1a:a1:ec:aa:f4:fc:ea:c7:c4:de:41:d6:b0:4c:ff:c6:
68:9e:f2:9a:73:3a:f3:f9:7b:98:b6:68:e7:b5:91:4f:aa:a5:
b6:b2:82:92:ef:95:a9:d1:3c:67:2a:31:09:e5:1d:8f:cd:81:
e6:1f:4d:c5:0b:18:91:f8:10:ee:03:e0:1f:3a:61:fd:5f:e7:
e5:8d:f8:f1:9b:cb:13:28:31:29:43:bb:96:1e:03:d3:aa:47:
59:32:74:a9:18:68:f0:a2:ed:0e:73:02:ef:40:ce:8f:41:a6:
7e:bf:39:44:8a:d1:38:bf:13:dc:76:c9:3d:13:f6:de:e1:ed:
f0:f9:22:38:e4:93:e8:de:e1:47:fb:c4:48:15:d6:60:f8:54:
1e:b6:57:dd:e2:65:0b:e9:6b:cb:6f:c0:17:95:40:ea:cd:bb:
84:21:6e:fb:6b:15:2c:97:56:8a:5c:30:03:e7:33:a6:07:fc:
3f:72:9d:fc:ca:2f:3d:ad:75:e9:03:f6:00:ea:09:19:3d:2a:
8c:39:f1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:35 2025 by rpki-client