This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
File: UlhBQeXpBP16_D4Noo2QCKGvkhI.mft (raw, json)
Hash identifier: rL9fQQ35XcnbdvqBPPt48vepiNUJwBm3GZidiG0uH10=
Subject key identifier: 1E:CE:9F:53:FC:E7:4C:11:5B:B3:4D:25:06:CF:F2:17:84:09:4C:00
Authority key identifier: 52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12
Certificate issuer: /CN=A91C2CCD/serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212
Certificate serial: 01C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
Manifest number: 01C3
Signing time: Tue 23 Dec 2025 01:58:10 +0000
Manifest this update: Tue 23 Dec 2025 01:58:09 +0000
Manifest next update: Tue 30 Dec 2025 01:58:09 +0000
Files and hashes: 1: UlhBQeXpBP16_D4Noo2QCKGvkhI.crl (hash: ppI/DjG9v+pcnyiIPYtEwiOdhjnuHqmMgggLj57H5q0=)
2: 41D133CC2B5911EE85AD762BC4F9AE02.roa (hash: 2h3iteWHWvj7eGZvRPLFqMA2o9nj7836hPNLX4DVTdU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.crl
rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 01:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454 (0x1c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CCD, serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212
Validity
Not Before: Dec 23 01:58:09 2025 GMT
Not After : Dec 30 01:58:09 2025 GMT
Subject: CN=6949f731-6a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:7d:da:10:aa:4f:b1:b6:4c:f9:3b:8f:ba:
d0:1a:b9:20:2b:8d:3f:68:0a:30:d3:45:90:98:6c:
09:d3:d6:43:d9:1e:9e:e7:23:52:79:bf:b9:4a:3d:
73:a7:b3:fa:b0:b1:12:4a:8e:69:68:27:81:b7:3e:
52:70:1f:25:de:7d:72:a3:7d:74:9d:8d:fc:94:73:
38:e3:a4:f8:d7:ad:c5:6b:f6:26:9f:cd:01:46:dc:
8d:49:83:50:9d:79:de:84:08:97:58:be:b9:05:e7:
fb:ee:d7:be:d9:68:dd:73:24:10:ac:f9:3a:e1:50:
4d:8c:a8:7c:3e:a2:b9:97:e8:3f:ea:ae:12:44:1f:
37:d7:25:ca:1b:de:51:1f:6a:3b:c5:f7:67:21:1d:
e7:06:b7:eb:24:95:3b:3e:1e:f0:0a:07:37:4c:a5:
0f:44:2e:6b:08:92:ad:86:eb:06:b3:f0:85:60:e5:
a5:d3:81:65:4f:af:72:e2:b6:67:fc:74:9f:bc:31:
eb:06:d1:a0:38:ae:70:e9:e3:ac:a7:77:43:6b:08:
22:7f:b1:b6:e1:26:f0:8b:9c:41:26:11:be:c0:63:
b7:de:cf:47:99:99:44:9a:8f:a0:67:1d:72:bb:b1:
7c:3d:e0:2e:82:d5:5e:12:46:cc:41:44:b1:38:48:
fd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CE:9F:53:FC:E7:4C:11:5B:B3:4D:25:06:CF:F2:17:84:09:4C:00
X509v3 Authority Key Identifier:
keyid:52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:ef:c4:3d:54:6e:8a:e3:3e:c9:01:02:bf:31:c2:57:c6:5d:
38:ba:dd:c1:04:9f:fa:a8:c6:6b:27:cd:02:c5:fa:57:d0:75:
f5:bf:da:78:a6:67:f8:6a:94:df:ce:99:fb:11:72:01:4a:6e:
a7:1e:dd:d8:2a:8a:25:9e:bc:ff:2e:43:65:84:6c:04:c8:76:
17:78:f2:9e:85:36:98:57:2a:61:31:9c:01:9e:38:89:d1:29:
de:b2:c5:10:d8:19:9a:e4:19:7b:29:1b:63:ae:12:ed:bb:6a:
7c:7d:90:38:f3:08:20:94:14:2d:17:a8:bd:e3:1b:b2:cb:7c:
1a:2d:f1:80:ad:ad:ac:dc:77:c4:8e:f6:fd:f4:db:56:d5:68:
2e:e4:01:c7:18:2a:59:d5:87:64:ed:31:64:1c:df:ef:b5:54:
28:5a:24:60:1f:de:53:14:e0:36:f9:00:55:af:95:87:1d:a8:
38:f7:b6:1a:e7:c6:63:21:48:be:e1:ae:53:21:e4:bb:69:cc:
d0:f6:ba:78:08:8f:15:45:df:9a:8c:e6:20:95:d3:cd:f5:c8:
7f:8e:e2:a8:ca:cb:15:68:b2:be:b4:e3:74:e4:ae:0f:c0:65:
e8:10:40:1c:7a:8f:c9:8a:d4:0c:d0:c2:97:f8:71:18:cd:fe:
a3:f8:97:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:02 2025 by rpki-client