This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
File: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft (raw, json)
Hash identifier: yEIhYbQuy80vEbiOBZf4KZUsWTWbTgQGX0JGi3KHmpo=
Subject key identifier: 35:D0:D3:CC:13:A9:AD:19:88:51:F3:CD:A3:01:6D:BD:9A:13:E0:5D
Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
Certificate issuer: /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Certificate serial: 03C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
Manifest number: 03B5
Signing time: Sun 14 Dec 2025 23:58:46 +0000
Manifest this update: Sun 14 Dec 2025 23:58:45 +0000
Manifest next update: Sun 21 Dec 2025 23:58:45 +0000
Files and hashes: 1: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl (hash: pEEfHeqNVnBcf9Ife/aIKXdvJeLRvUAv9GPWKKftKt0=)
2: F8400A20C80811ED9ADBA05EC4F9AE02.roa (hash: F6jPBh9YlNU7RVZYywXLeNlWgnFuc8x8f5OICDCdyXk=)
3: 9ABED502176711EFA0260C6DC4F9AE02.roa (hash: vsntEPAhq1q52SAuxi87DOT8T6ZFM5p3hlzlxYIzgx0=)
4: A6168350176711EFA13E2C6DC4F9AE02.roa (hash: 2CbWH78pD8qfhUqfDIT0bY8YAkS+SCmh9qliGFNOvyU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 23:58:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 964 (0x3c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4DC7, serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Validity
Not Before: Dec 14 23:58:45 2025 GMT
Not After : Dec 21 23:58:45 2025 GMT
Subject: CN=693f4f35-b804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:af:e0:74:bc:e9:2d:47:66:5f:dc:f4:49:
b4:60:ea:71:9c:33:5b:68:3d:0a:e1:22:b2:3e:68:
4f:72:56:23:7b:ab:04:59:18:32:22:eb:15:28:07:
d6:a9:f1:f8:a1:d8:f5:f8:8a:ff:0d:c3:62:7f:99:
09:12:29:1c:f9:d0:68:eb:88:2a:79:df:fd:12:39:
fd:a7:bf:51:2a:fe:ba:3d:3f:d0:fa:9a:74:6d:4f:
82:4b:9d:32:e4:9f:df:21:78:2f:54:68:ed:ce:c1:
0e:30:c3:db:80:3d:95:1e:73:8b:d4:1e:27:58:29:
6a:28:b4:7e:db:13:93:54:dd:33:55:7a:7f:6c:aa:
cb:21:75:8d:14:07:ae:2a:d5:65:73:83:89:a9:eb:
db:76:b3:9a:24:53:c3:cf:48:74:44:fa:02:c5:0e:
79:d1:9d:13:ac:e7:e4:1f:8a:94:91:95:68:3e:a7:
ba:b8:85:6f:9a:ba:aa:66:cf:ba:8c:a0:e3:d7:5a:
6e:a7:16:31:cf:f8:6b:84:7c:16:10:c6:a6:cd:3c:
e6:68:72:a7:ba:d1:6a:66:c8:3c:60:b0:8f:6b:ef:
a9:25:b7:42:2b:f0:e4:68:a2:39:e9:01:88:8e:b4:
0b:c1:0d:6f:b0:6e:c8:9d:e2:65:5f:70:ae:fd:c6:
d0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D0:D3:CC:13:A9:AD:19:88:51:F3:CD:A3:01:6D:BD:9A:13:E0:5D
X509v3 Authority Key Identifier:
keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:72:06:16:c7:f5:8b:77:f9:c8:27:27:44:65:8d:dc:dd:9a:
4a:09:7a:2c:bd:73:e9:34:b9:b3:ff:8a:c9:b3:9d:d7:49:e3:
1a:02:6f:75:9b:91:65:ff:7e:be:7b:11:26:99:2b:b9:a3:ec:
2e:20:ab:15:a1:57:65:3b:74:23:6a:89:9f:aa:c9:45:fc:b5:
bf:95:f4:42:85:fe:9b:b3:d3:cc:1b:b7:fe:35:e4:da:f6:d5:
a2:c2:c1:94:b8:86:16:2b:fc:85:be:d2:c2:f9:ab:e0:4f:80:
4f:e3:d2:e1:71:b6:61:44:40:5e:75:d9:a7:0b:49:a5:48:ed:
d6:4f:2b:43:d2:e9:8d:8a:64:86:eb:25:ef:e0:7b:cf:66:a3:
93:ae:08:9f:d3:f7:28:7a:18:92:0e:28:b2:3e:07:98:ae:af:
92:90:72:cb:c7:29:c5:18:39:59:10:e4:7c:44:7a:b2:31:25:
9a:14:8f:6e:b3:0a:d4:3c:80:de:19:07:bc:1a:9b:fd:ee:6a:
29:71:7d:af:f4:e2:6d:e3:48:5a:8a:ca:6b:86:f6:12:fb:6b:
0b:46:5b:f1:54:1b:ee:03:79:b4:b6:7e:8c:64:e3:80:48:be:
0c:c3:82:c3:1f:2f:83:bf:59:55:56:a0:77:12:d4:3e:af:16:
ae:df:db:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 00:06:10 2025 by rpki-client