This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
File: uxh7m1B2e7e7wih3IL02wLjQaJY.mft (raw, json)
Hash identifier: 6OuRdoj+IohKJ2PrITrc6CdKzaJ7OsBgZzhJqrRqmwg=
Subject key identifier: 77:C9:29:BF:5B:21:C3:73:5C:CB:EE:53:A0:25:00:55:46:27:74:70
Authority key identifier: BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96
Certificate issuer: /CN=A9191E43/serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896
Certificate serial: 034E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
Manifest number: 034E
Signing time: Mon 22 Dec 2025 23:59:05 +0000
Manifest this update: Mon 22 Dec 2025 23:59:05 +0000
Manifest next update: Mon 29 Dec 2025 23:59:05 +0000
Files and hashes: 1: uxh7m1B2e7e7wih3IL02wLjQaJY.crl (hash: nIq8X2ixwkjn6+KDxngPaA51XllK3hpsVxxdBMPjgOY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl
rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 846 (0x34e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191E43, serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896
Validity
Not Before: Dec 22 23:59:05 2025 GMT
Not After : Dec 29 23:59:05 2025 GMT
Subject: CN=6949db49-22cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ee:f3:c7:30:4c:96:c0:19:9f:82:e1:68:fb:
dc:f7:01:75:12:18:2f:8d:9a:50:76:2a:6c:f6:a2:
1c:e4:4d:ee:8c:80:b5:44:f9:e3:67:53:70:c9:c9:
42:4f:a1:e0:0c:07:75:d9:28:f4:49:f5:39:55:e8:
dd:79:17:12:66:a8:71:5a:0b:b2:06:24:6e:0b:d2:
bb:b8:7b:ec:ea:8b:45:2b:d0:2e:ba:65:be:44:7e:
8e:af:1f:f9:89:00:ca:5d:8e:04:fc:44:1c:f5:66:
5d:9f:b7:a9:33:e8:6e:3d:c0:ee:40:5f:28:66:b9:
f5:eb:5f:34:7a:44:a7:68:5c:56:70:b8:74:28:fc:
dd:e0:91:75:84:87:f4:eb:66:aa:a3:92:93:50:76:
21:7f:0a:50:cf:fd:f1:e1:2b:cb:6e:1e:f0:1a:08:
14:3b:23:ad:53:1d:23:3e:9b:42:ec:6f:32:95:83:
cf:e1:37:1b:e7:cf:20:2c:ea:3b:8b:41:a5:84:79:
ff:a9:c5:bd:99:e4:4e:f7:de:6b:96:e6:0a:d1:bd:
bf:77:95:35:fa:fa:9a:ee:69:15:59:d4:70:9c:3b:
da:5c:34:6f:b5:62:6d:01:e6:b4:7f:bc:8f:71:37:
bf:1d:65:9e:5b:64:07:de:22:98:99:af:b8:b7:0c:
de:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C9:29:BF:5B:21:C3:73:5C:CB:EE:53:A0:25:00:55:46:27:74:70
X509v3 Authority Key Identifier:
keyid:BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:98:d8:b0:15:73:b6:37:b8:43:e6:84:27:ab:63:34:db:c3:
0a:35:0e:c0:b8:0b:62:c1:40:bc:67:f2:83:00:0e:d6:b4:ec:
7a:eb:bd:1e:fc:42:0a:53:a2:1c:fa:73:45:e2:af:03:1b:cb:
77:fa:26:37:ac:fb:b8:55:27:4b:ad:66:53:b6:a6:c4:42:87:
a4:df:18:05:a8:02:35:97:47:18:31:5a:d0:68:60:76:fd:99:
fa:27:c0:03:ce:63:7d:d9:8b:9e:2e:df:cf:b6:da:61:38:a6:
9a:6d:da:e9:f4:f1:50:b7:3f:90:7c:8a:65:48:f1:43:83:3e:
16:77:da:aa:e7:95:ee:40:94:8b:b4:5a:2b:dc:0e:2d:7d:84:
b7:14:cb:3e:2b:76:cd:7a:28:7f:91:23:14:ad:b5:a0:e4:e5:
7d:7f:79:ac:b3:40:77:2b:f0:6a:34:dd:22:65:3b:12:f6:44:
7d:60:8b:28:64:cb:1d:55:2d:9a:5a:30:ee:25:f7:9f:39:c8:
f8:82:a3:c7:67:24:3e:3f:9f:ae:40:aa:30:5a:01:3b:d2:90:
eb:a9:35:aa:ff:da:35:79:37:b5:40:98:55:84:81:26:cc:62:
02:d7:86:b1:c6:cf:ea:d1:8f:11:02:a4:7a:a0:18:6f:a0:8a:
87:50:d6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:55 2025 by rpki-client