This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C068/B353B03E8CB811F082C92E63C4F9AE02/uwkZbg9n4YLXixffG0JXXCWC_70.mft
File: uwkZbg9n4YLXixffG0JXXCWC_70.mft (raw, json)
Hash identifier: vbTYJb/DbJhrKGCwniYUcbiGhR9mmEGU4tVee7cu4hE=
Subject key identifier: DE:AE:F1:C7:1F:25:EF:B0:4A:E8:A1:26:F6:DE:AC:FD:B5:69:4F:28
Authority key identifier: BB:09:19:6E:0F:67:E1:82:D7:8B:17:DF:1B:42:57:5C:25:82:FF:BD
Certificate issuer: /CN=A919C068/serialNumber=BB09196E0F67E182D78B17DF1B42575C2582FFBD
Certificate serial: 36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwkZbg9n4YLXixffG0JXXCWC_70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C068/B353B03E8CB811F082C92E63C4F9AE02/uwkZbg9n4YLXixffG0JXXCWC_70.mft
Manifest number: 36
Signing time: Tue 23 Dec 2025 06:21:53 +0000
Manifest this update: Tue 23 Dec 2025 06:21:52 +0000
Manifest next update: Tue 30 Dec 2025 06:21:52 +0000
Files and hashes: 1: uwkZbg9n4YLXixffG0JXXCWC_70.crl (hash: WTDR/G5XfLSIBKYbEm05qJeHlMn2KwgEmEBVK513Wj8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C068/B353B03E8CB811F082C92E63C4F9AE02/uwkZbg9n4YLXixffG0JXXCWC_70.crl
rsync://rpki.apnic.net/member_repository/A919C068/B353B03E8CB811F082C92E63C4F9AE02/uwkZbg9n4YLXixffG0JXXCWC_70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwkZbg9n4YLXixffG0JXXCWC_70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 06:21:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C068, serialNumber=BB09196E0F67E182D78B17DF1B42575C2582FFBD
Validity
Not Before: Dec 23 06:21:52 2025 GMT
Not After : Dec 30 06:21:52 2025 GMT
Subject: CN=694a3501-79ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:15:6d:19:eb:4b:c7:75:b0:a2:c8:e6:1f:
0c:33:b2:f1:05:9c:ce:ec:89:10:26:40:97:db:b3:
04:ea:84:d4:d1:2d:90:f8:ac:9a:5b:8f:a5:09:09:
ec:f2:cd:af:a9:27:8b:ef:f8:81:19:13:b6:58:31:
47:f8:45:c0:4c:7d:f4:ab:b3:58:e3:39:f1:37:44:
e9:f9:06:72:0b:47:09:84:13:83:dd:e2:66:69:a2:
62:be:ea:84:2f:38:cd:70:de:e0:5d:b3:e1:c0:74:
83:17:e3:fe:29:f5:4f:6a:e7:a2:89:d4:22:f8:99:
60:0f:9f:94:9c:75:78:e7:2a:0b:03:0e:b7:f4:53:
d2:78:dc:09:0b:a8:bd:b5:cf:0b:1d:6f:bf:69:94:
a1:5d:87:71:74:4d:30:4b:88:57:03:2f:b7:13:3a:
b3:07:cb:0c:5c:0e:4e:95:c5:35:b0:1c:9c:0f:0e:
85:a0:a5:83:6f:b3:65:48:20:a0:0c:10:0a:79:da:
fa:4e:63:8e:c5:c4:c6:50:0e:6f:e8:25:da:36:2b:
72:46:73:3d:b6:cd:42:c9:cb:9c:d3:5d:c1:ce:76:
bd:08:51:54:ca:70:16:1d:92:32:51:8f:57:80:e7:
e2:ef:b8:73:0a:f1:06:0f:1e:87:e1:14:09:a1:45:
c8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AE:F1:C7:1F:25:EF:B0:4A:E8:A1:26:F6:DE:AC:FD:B5:69:4F:28
X509v3 Authority Key Identifier:
keyid:BB:09:19:6E:0F:67:E1:82:D7:8B:17:DF:1B:42:57:5C:25:82:FF:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C068/B353B03E8CB811F082C92E63C4F9AE02/uwkZbg9n4YLXixffG0JXXCWC_70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwkZbg9n4YLXixffG0JXXCWC_70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C068/B353B03E8CB811F082C92E63C4F9AE02/uwkZbg9n4YLXixffG0JXXCWC_70.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:37:c2:b3:92:d3:0e:6c:17:05:a7:bf:e6:ca:86:6d:19:a2:
df:fd:3c:32:d6:98:2a:03:07:62:fa:95:81:c0:db:09:3e:42:
98:44:12:da:e2:44:2f:36:bf:4f:45:38:0c:64:d6:da:00:1a:
53:8c:5f:a7:54:0f:27:bf:d3:d8:54:51:dc:18:2a:42:fd:70:
d1:e9:f5:82:98:e8:ca:7f:0f:91:16:c8:47:e7:e4:90:4f:cd:
4f:c7:7a:c9:c9:d9:10:cb:ed:73:db:e5:9f:39:29:99:42:83:
3d:3a:9b:b8:f3:0c:a0:70:c8:1a:a6:77:36:1c:6c:8b:58:9a:
c9:eb:f8:cd:5a:0c:f0:62:85:9e:af:b2:82:9e:bb:2e:f1:7e:
89:43:c9:26:49:ff:eb:4d:9d:ee:eb:8c:21:27:e6:82:34:2b:
34:77:26:49:22:52:50:8b:e7:fd:5f:da:be:a7:b4:a9:d7:ab:
0d:cd:fe:2f:53:d1:26:93:08:cb:0f:6c:f4:b7:d6:b9:a9:a9:
a3:c7:f1:6b:e1:34:3e:ce:8b:d6:58:64:ba:a2:c4:c7:6f:f5:
1e:7c:01:e1:fd:8d:3d:e1:05:52:63:88:37:0b:36:bf:88:ba:
ac:ea:09:a5:62:c7:72:c6:bd:89:c6:30:39:72:bd:4c:5c:07:
d4:4d:37:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:07:05 2025 by rpki-client