This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft
File: Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft (raw, json)
Hash identifier: 6vddP2d3Bs30gejh6O4N3pUDTErlYL0X77vzf4IqOuE=
Subject key identifier: AB:D7:E3:3B:A5:CF:F0:51:A2:F7:4E:F5:D6:78:91:02:1C:8A:2C:EE
Authority key identifier: 52:FD:1D:E2:4D:AF:8D:D5:FC:3A:A0:07:8B:07:73:2F:C2:74:78:94
Certificate issuer: /CN=A91AFA16/serialNumber=52FD1DE24DAF8DD5FC3AA0078B07732FC2747894
Certificate serial: 0BB9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft
Manifest number: 0BB1
Signing time: Sat 20 Dec 2025 18:31:11 +0000
Manifest this update: Sat 20 Dec 2025 18:31:10 +0000
Manifest next update: Sat 27 Dec 2025 18:31:10 +0000
Files and hashes: 1: Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl (hash: 20ImsAacEO6rbYYYbynbGZoC6BQ+NvKZ5PkdUKIN0GY=)
2: 11DB043CF61E11EEB39BD261C4F9AE02.roa (hash: e4wDPqjhV3r7vEA4MsvAFc5ifRump5FxJZTH+nviBcE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl
rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 18:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3001 (0xbb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFA16, serialNumber=52FD1DE24DAF8DD5FC3AA0078B07732FC2747894
Validity
Not Before: Dec 20 18:31:10 2025 GMT
Not After : Dec 27 18:31:10 2025 GMT
Subject: CN=6946eb6f-ba1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fc:0c:34:bc:65:7f:0b:e7:79:6d:a6:ad:eb:
de:c5:68:02:3f:a9:07:8c:89:a5:2d:1e:76:e1:b9:
40:de:4e:5b:55:20:5d:5a:f8:93:10:51:b7:fd:09:
03:0b:d5:41:04:55:e4:8c:ce:1c:42:7b:30:60:e9:
14:a6:d0:83:84:c7:82:a3:20:95:0e:3f:5a:96:3d:
c5:03:6a:eb:91:65:52:97:74:2b:75:d4:e4:9b:7e:
e4:83:e9:e6:2f:e4:2d:6a:88:67:01:c6:a7:95:1b:
8f:34:da:e6:7b:3f:38:be:1c:23:fb:f3:c7:7c:e4:
6d:48:ea:c6:c6:79:43:be:c6:f3:a3:9b:50:09:fe:
b9:6d:f2:f5:69:39:76:7f:82:a6:11:72:8b:27:1e:
3a:52:5f:a3:ee:3e:2f:11:92:e9:d8:55:1c:f5:f9:
a6:58:d9:23:0a:f9:da:6d:ae:b0:f6:66:7c:4c:36:
8b:ac:78:00:fa:db:31:d2:7e:81:a2:1f:25:5a:f9:
29:6e:f9:20:df:e9:c1:87:8b:61:d7:31:73:2f:18:
f6:9b:f5:f5:a4:a2:ed:c0:63:19:4e:8d:ff:d2:4a:
82:8d:da:cb:1e:45:49:2b:f7:dd:ba:8f:37:20:d0:
13:17:14:54:e9:59:97:64:69:89:20:af:1f:13:ea:
12:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D7:E3:3B:A5:CF:F0:51:A2:F7:4E:F5:D6:78:91:02:1C:8A:2C:EE
X509v3 Authority Key Identifier:
keyid:52:FD:1D:E2:4D:AF:8D:D5:FC:3A:A0:07:8B:07:73:2F:C2:74:78:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:90:cb:81:2f:97:07:0b:4c:c5:b5:57:82:02:51:1f:dc:4a:
ba:47:73:d9:a8:ed:d0:68:a2:4e:b5:2e:82:b2:64:ee:ba:0e:
32:73:ca:5d:71:f7:fc:b0:ce:14:bc:39:47:0c:c3:ae:c1:c8:
43:71:f0:00:1f:79:a7:fc:4f:36:4a:9d:aa:15:00:2e:23:ed:
50:4e:b0:54:37:26:34:9e:d7:cd:08:a2:49:5e:6f:7d:8c:26:
08:67:53:7c:d5:7c:3d:69:41:2c:6c:44:0b:0b:74:0d:b0:c5:
d3:82:9c:fb:be:2b:f7:78:fc:03:e4:df:bb:f1:6f:ae:b7:f0:
b7:35:d7:2b:63:0d:dd:7a:5d:26:93:a4:f0:7b:68:60:0a:b4:
97:a8:1c:31:c2:c6:f8:9b:d6:3e:44:5e:06:19:2e:fa:97:53:
63:d1:41:c0:e1:4e:24:1d:5c:f5:b3:4e:2f:98:f1:11:96:d8:
24:33:14:3e:cf:dd:d4:4a:f1:79:8a:48:76:67:cf:2b:9d:0b:
2a:73:8b:df:c8:fe:d5:7d:eb:81:00:b6:fc:9d:9e:79:2f:73:
5c:ae:68:c5:61:2f:7d:c8:16:91:a7:16:21:5e:15:fa:7e:33:
6b:71:3a:ba:4d:e8:c4:55:05:b9:d9:85:3a:29:bd:65:ff:53:
15:86:3b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:59:00 2025 by rpki-client