This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
File: UqHEINgnwWzqoEKD3Si2QKMVY00.mft (raw, json)
Hash identifier: U1f1zyxkEyT5f3XHuCHSjya/9byJGO6t8EmsBYznj4I=
Subject key identifier: 86:CA:8D:DA:A7:05:F5:5E:6A:92:03:61:43:25:96:18:AA:81:76:7A
Authority key identifier: 52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D
Certificate issuer: /CN=A91B13FE/serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D
Certificate serial: 64
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
Manifest number: 5C
Signing time: Wed 03 Dec 2025 05:26:45 +0000
Manifest this update: Wed 03 Dec 2025 05:26:44 +0000
Manifest next update: Wed 10 Dec 2025 05:26:44 +0000
Files and hashes: 1: UqHEINgnwWzqoEKD3Si2QKMVY00.crl (hash: yO7SJj+iu44ZpZ11D0mwQaNYVOt6D2z/y2Zxi6vjW1A=)
2: DDDE222CAFBC11F093F1F45DC4F9AE02.roa (hash: gkyZkv6joIA/6cOHnVZYXkGT6FHLqe46MEB12tcCUDE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl
rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 05:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B13FE, serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D
Validity
Not Before: Dec 3 05:26:44 2025 GMT
Not After : Dec 10 05:26:44 2025 GMT
Subject: CN=692fca14-1485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a9:7d:af:67:85:05:09:92:dc:2d:f8:16:38:
00:c0:e1:39:fb:9f:d1:6a:f1:56:f4:55:5b:3b:a0:
63:40:8c:cf:fc:d1:88:34:e5:27:29:5e:7f:17:15:
e1:66:72:e1:6b:1e:b0:1b:95:21:ca:c2:be:96:24:
72:61:a4:48:5b:83:12:4d:2e:53:6e:b8:7f:e5:78:
e7:c9:01:55:d1:53:1f:be:b5:99:1a:a3:f1:9f:9f:
43:fd:fd:50:4a:25:ae:85:a6:91:e1:1b:21:81:6d:
24:e1:72:a4:e6:87:03:28:02:b6:fa:ee:1c:ef:a7:
f4:86:13:72:4c:e8:1c:f2:e1:ac:a2:63:9c:16:46:
5a:bc:f4:f0:dd:6a:81:c0:83:a0:98:b3:fe:9c:a5:
2a:64:27:33:3c:1b:b1:34:f9:57:b9:a0:da:97:cc:
1b:51:6e:cd:b3:87:c7:97:c3:3e:3b:31:b8:73:35:
48:04:91:fb:5b:4a:41:4d:ac:0c:3e:09:89:9f:5f:
0c:6a:ca:5c:11:10:e4:c0:f3:2f:c6:47:cf:2f:68:
71:4c:d3:db:57:2e:b3:68:a2:15:45:e0:3b:55:03:
b1:28:a0:f8:6a:ab:ad:16:3a:c2:2a:48:2e:7c:9d:
a7:a7:67:c5:a7:5f:51:0e:f9:d9:a4:cb:aa:e1:68:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CA:8D:DA:A7:05:F5:5E:6A:92:03:61:43:25:96:18:AA:81:76:7A
X509v3 Authority Key Identifier:
keyid:52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:96:96:68:c0:a5:14:b7:fa:e1:31:1f:3a:a2:6e:9a:1a:f6:
5a:3c:d5:45:bd:c7:1a:cd:7e:e1:b4:f6:c4:2f:51:63:e3:8d:
bf:f0:56:21:99:b2:20:5c:08:aa:ee:35:db:d5:d1:f0:3b:0e:
e3:95:80:54:d7:be:cf:68:cc:14:bb:e5:a2:70:9f:50:4f:b0:
d6:64:52:39:1d:a1:dd:b4:32:1a:36:78:27:28:45:c4:74:8b:
47:dd:0b:06:6a:0e:cf:54:fe:17:77:62:4f:31:1d:44:6a:4a:
5b:4c:4a:ce:e1:15:8a:77:f7:ca:2d:c5:93:d1:e2:c9:a3:c9:
36:25:ad:b4:22:2c:bb:d2:79:ee:45:9e:00:9b:e2:1d:26:30:
99:d4:dc:27:ec:ca:83:42:99:4c:61:82:c6:64:ad:47:c4:69:
c7:7c:e8:8a:5d:01:f7:74:46:59:46:e3:1b:c1:29:fc:14:e3:
4c:03:ef:7a:7e:01:f4:59:62:61:ad:ca:b2:5c:85:5d:a5:c6:
9f:72:ae:f8:4e:e2:3b:68:71:23:c7:82:53:57:de:a3:26:0c:
98:61:41:be:bf:bc:31:9b:ec:df:b8:cc:7d:08:4b:e2:6b:04:
a7:a5:49:04:2a:24:84:ed:86:cb:d3:22:f1:46:cf:e7:bd:3a:
b4:36:b4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:56:45 2025 by rpki-client