This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft
File: uzvV1-GZJNhitqQb80x_27vpHG0.mft (raw, json)
Hash identifier: zmQHFRNN24kFuqvzVITEjb7HyRa4K3o+CNs1HV6LjMk=
Subject key identifier: BB:1D:C1:35:57:6D:9D:4F:65:4C:FA:C7:DB:D9:0C:EC:05:BD:4D:93
Authority key identifier: BB:3B:D5:D7:E1:99:24:D8:62:B6:A4:1B:F3:4C:7F:DB:BB:E9:1C:6D
Certificate issuer: /CN=A91CA735/serialNumber=BB3BD5D7E19924D862B6A41BF34C7FDBBBE91C6D
Certificate serial: 0100
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft
Manifest number: FD
Signing time: Tue 23 Dec 2025 04:11:39 +0000
Manifest this update: Tue 23 Dec 2025 04:11:39 +0000
Manifest next update: Tue 30 Dec 2025 04:11:39 +0000
Files and hashes: 1: uzvV1-GZJNhitqQb80x_27vpHG0.crl (hash: xikPxAqrMdhYtcM9exM+O6ALiFTLWKOLFhFQgKhQLxY=)
2: 385E3308639D11EFB668775FC4F9AE02.roa (hash: TCYXclRvYYtZUxQ5mRKUajDIcjauKFDG/zZisgUfCFk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.crl
rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 04:11:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA735, serialNumber=BB3BD5D7E19924D862B6A41BF34C7FDBBBE91C6D
Validity
Not Before: Dec 23 04:11:39 2025 GMT
Not After : Dec 30 04:11:39 2025 GMT
Subject: CN=694a167b-a2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d5:19:81:43:17:10:1c:1e:5c:4d:81:25:00:
b5:52:44:ce:b2:b2:45:45:1b:b8:44:7c:0b:57:9a:
5b:59:97:6e:fe:f9:9b:8e:a1:54:73:55:df:63:d8:
23:c6:2e:8f:59:90:d2:72:fe:c4:a3:d6:a4:98:bb:
b9:ec:fa:2a:b2:95:0a:e1:e9:e7:50:e1:05:a8:82:
00:c2:24:81:e2:c0:c2:1e:b0:09:ee:15:9b:9a:c3:
2b:ff:2b:78:f5:66:2b:ea:7d:6a:7c:df:76:7d:89:
52:21:ba:30:11:da:75:4e:77:cb:49:8a:c7:8f:d5:
a1:9f:cf:5c:b1:73:c8:75:7c:7a:0e:13:04:f5:32:
ea:f6:4f:38:be:f9:74:34:0e:79:ca:72:6c:7f:96:
69:52:93:4e:52:70:01:c7:7a:45:47:6a:fa:e9:67:
2a:5b:ef:ee:3c:89:a3:75:88:93:42:da:c2:9c:53:
ae:d8:5c:a6:34:26:57:ed:4f:e0:1d:17:f0:0f:32:
8d:6a:38:a0:1d:c4:bd:a6:55:d7:5f:8d:4d:6d:ed:
bb:eb:94:d4:94:3a:ce:b2:76:18:60:ef:7f:f9:12:
22:c0:2e:ff:71:de:3e:25:9a:c4:96:69:ab:4d:bd:
fb:e4:b3:2b:0b:3c:13:ff:a1:6d:b5:d5:44:8d:8e:
8d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1D:C1:35:57:6D:9D:4F:65:4C:FA:C7:DB:D9:0C:EC:05:BD:4D:93
X509v3 Authority Key Identifier:
keyid:BB:3B:D5:D7:E1:99:24:D8:62:B6:A4:1B:F3:4C:7F:DB:BB:E9:1C:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:93:74:c6:45:7c:d0:a4:59:5c:5c:c5:58:d8:1a:1a:fe:c9:
eb:7f:57:6d:5e:2b:3b:c2:2f:55:52:04:e8:fc:e3:64:e8:f9:
ea:d7:2d:53:23:eb:49:6f:99:df:bd:80:0a:a5:04:66:39:0d:
3d:06:33:5a:de:bc:3b:7b:13:a8:5b:72:04:0e:9f:78:fd:7c:
98:25:55:57:0e:12:9c:75:d4:45:2b:28:61:84:80:85:b9:77:
f7:50:34:ea:67:9e:23:68:97:cf:5e:09:f8:c7:1d:ca:a1:1c:
e0:d3:51:7f:09:aa:3d:bb:1a:90:23:52:5f:9e:78:79:1b:89:
c6:1c:1a:1f:1a:33:a7:cd:aa:69:6c:d8:eb:e4:d2:ee:31:c2:
91:cb:91:17:34:f0:51:2b:59:01:ec:cb:ad:e3:2b:b2:e6:ba:
93:3f:0b:1e:9e:b9:d3:c3:f2:ed:94:d9:01:37:f6:ce:b1:7e:
40:29:ad:74:78:13:f8:a2:8b:fe:12:3e:0b:a9:1d:22:48:81:
89:73:eb:e0:ba:ab:3e:07:cb:f1:e7:04:8f:18:e1:b2:13:76:
21:cb:3c:06:14:87:79:16:a5:07:1d:df:a3:ea:e9:cb:9a:f0:
03:8a:78:32:50:f7:59:df:76:c2:d9:7a:bc:b9:1b:92:02:9f:
1b:01:cc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 00:38:47 2025 by rpki-client