This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
File: MfUEGe8ZsP2mG2Y5DBLur27L50E.mft (raw, json)
Hash identifier: ye/lpJC3XAwsAsSgEKy+pDZTt0+4ffIBxV0LVDWvPNI=
Subject key identifier: 55:68:C9:B2:D7:6C:0C:94:E9:9D:0A:BB:B8:A5:9C:2A:14:B1:76:58
Authority key identifier: 31:F5:04:19:EF:19:B0:FD:A6:1B:66:39:0C:12:EE:AF:6E:CB:E7:41
Certificate issuer: /CN=A9186584/serialNumber=31F50419EF19B0FDA61B66390C12EEAF6ECBE741
Certificate serial: 0889
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
Manifest number: 0881
Signing time: Mon 22 Dec 2025 19:55:07 +0000
Manifest this update: Mon 22 Dec 2025 19:55:07 +0000
Manifest next update: Mon 29 Dec 2025 19:55:07 +0000
Files and hashes: 1: MfUEGe8ZsP2mG2Y5DBLur27L50E.crl (hash: RF138Xw/+TDVSMpXFZkeVnBTzUIBl9i69W3trYgPD8w=)
2: 1F820766D66F11EAB2766134C4F9AE02.roa (hash: FxDMGItivgHcpDIQVI/wEfT2xKykaCPSfnkqAOljfEM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.crl
rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 19:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2185 (0x889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186584, serialNumber=31F50419EF19B0FDA61B66390C12EEAF6ECBE741
Validity
Not Before: Dec 22 19:55:07 2025 GMT
Not After : Dec 29 19:55:07 2025 GMT
Subject: CN=6949a21b-a449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4a:6c:0c:b0:ed:e3:d0:09:fb:d5:37:1c:8e:
fe:ec:64:8f:23:64:d2:f2:b6:93:f5:f0:40:fd:da:
55:6c:7e:3c:2b:ff:0e:58:fc:af:33:e4:d4:cd:60:
b2:8a:d1:4c:1e:75:45:ff:99:56:13:97:40:e0:55:
f1:23:cf:dd:b2:e0:45:92:fa:cc:00:55:9c:28:d9:
d5:d0:55:a1:1e:9a:84:80:91:07:a6:f9:a4:48:20:
b8:92:91:6c:23:ee:16:18:8d:5e:ad:2e:04:07:5d:
65:9a:c8:f4:5f:38:1f:cb:60:89:c6:1a:5a:26:76:
e2:34:52:33:8e:11:04:df:b8:8b:ba:5b:c8:2c:18:
55:a7:2b:3b:1e:64:6e:5c:d6:d3:6c:23:cb:88:69:
16:b0:01:b4:a1:42:c8:5c:3f:47:37:58:34:c7:f6:
4d:c6:03:00:a6:c8:1f:9a:96:a4:6a:87:93:32:d0:
f8:21:04:1b:37:19:10:8f:d4:b1:85:dd:f4:5b:14:
d5:4e:6e:c3:81:d8:2f:91:2d:23:fb:db:1a:12:8c:
4b:0a:95:2d:c3:6f:88:96:08:a9:bc:ad:d4:31:e4:
69:ef:24:2c:f5:9c:5a:4c:32:d9:12:43:b2:4b:28:
34:00:3b:9f:eb:0a:f3:1b:54:52:96:a4:27:44:26:
b3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:68:C9:B2:D7:6C:0C:94:E9:9D:0A:BB:B8:A5:9C:2A:14:B1:76:58
X509v3 Authority Key Identifier:
keyid:31:F5:04:19:EF:19:B0:FD:A6:1B:66:39:0C:12:EE:AF:6E:CB:E7:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:e0:23:d2:d4:77:d8:83:0f:1b:bf:e1:0a:ac:f0:04:fb:68:
db:88:4b:bc:b4:45:b2:f5:36:bd:6e:39:2a:16:d8:ca:80:86:
ed:ed:c7:73:17:63:e6:83:c1:6e:c9:a5:28:95:8a:ff:f0:8b:
6d:ec:54:1f:e4:80:1b:12:7e:74:e0:84:82:cd:51:e2:38:44:
e8:8a:c8:ff:5d:a3:76:17:2a:d4:e1:99:50:7a:ac:f4:76:0f:
cd:f1:fd:87:8f:cc:21:8d:27:f0:56:7f:24:6e:53:df:8b:da:
bf:c4:ab:8c:11:b7:20:96:09:8a:23:a8:4f:64:d9:18:af:af:
0b:3b:ae:8f:f5:d2:c1:28:78:60:6e:b6:3a:93:7c:8b:f1:d6:
bf:0b:6a:ed:08:d5:85:3f:38:a7:20:21:00:64:16:81:76:a6:
83:b6:7f:23:ee:af:ad:46:d5:3e:51:02:6e:11:e7:3c:8a:41:
2f:62:9c:f7:b1:b9:5c:70:b3:76:c5:91:84:fd:96:13:26:ed:
1a:fe:47:55:42:76:ee:20:37:76:4b:b4:28:a8:5f:39:b1:61:
3e:f6:7e:ff:5f:8c:c4:c5:3b:a5:9e:47:8d:ff:5d:65:0c:7f:
04:42:da:af:ff:a4:40:24:09:80:3e:4d:36:78:da:6e:10:a3:
62:e2:1b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:30 2025 by rpki-client