This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
File: rUMyA4JywtsyFd2jrfsBU1QVaRM.mft (raw, json)
Hash identifier: Lju8UjNzkBgtcNzj7Hs2u7qBQUqAdgw9fCXuDLHNwY0=
Subject key identifier: 68:5A:8B:A9:D7:EB:CD:5A:A6:CC:EE:F1:34:3C:62:71:74:AF:09:F1
Authority key identifier: AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13
Certificate issuer: /CN=A91CF064/serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913
Certificate serial: 010B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
Manifest number: 0107
Signing time: Wed 03 Dec 2025 03:29:49 +0000
Manifest this update: Wed 03 Dec 2025 03:29:48 +0000
Manifest next update: Wed 10 Dec 2025 03:29:48 +0000
Files and hashes: 1: rUMyA4JywtsyFd2jrfsBU1QVaRM.crl (hash: r+ylJs/pUI5vmimt4tFmAZYRET8MUsWL0x9UvB4EE1o=)
2: F74324B0464511EFA4CCFA6DC4F9AE02.roa (hash: reDFQAq+wjuHSjSgpYxauoEHpUtogIXvvCLXEGX4Ni8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl
rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 03:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF064, serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913
Validity
Not Before: Dec 3 03:29:48 2025 GMT
Not After : Dec 10 03:29:48 2025 GMT
Subject: CN=692faead-7611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:6a:01:48:68:cc:ac:33:5c:fd:33:26:03:48:
d9:ec:db:d2:dd:87:06:de:9f:6b:ac:6e:8f:19:e3:
b2:8b:c9:cb:79:45:38:7b:f2:b1:26:7a:0b:c4:21:
b2:c4:6c:8f:7a:20:74:b0:83:2f:38:ba:e1:cd:df:
3e:2d:ef:b2:ce:4d:f6:31:54:a5:61:de:c0:8f:1e:
52:a7:d3:e2:ec:b1:13:e6:57:dc:83:e2:9d:00:44:
00:86:0c:4d:23:42:e0:62:5a:01:63:b9:ca:14:55:
fb:9a:28:f5:8f:ed:78:8e:84:e7:df:2a:97:ff:c0:
af:b6:4b:0d:e4:38:9e:20:f0:1e:cb:21:d5:43:9c:
fd:be:6a:bd:db:8a:7f:cb:0a:5d:48:53:c7:7e:7a:
be:da:2a:77:9e:5a:0d:17:96:8e:dd:b1:0b:12:30:
e0:8a:e1:74:ec:1d:b3:b9:e7:4e:19:ab:5f:6a:27:
7d:3c:fb:f2:80:50:56:61:79:94:c4:ab:ac:ab:c7:
5a:12:37:74:f3:c0:ec:44:a5:40:e2:67:d2:9b:2e:
c3:56:ef:b8:23:b9:88:26:58:d9:45:c3:37:af:4f:
98:cc:72:8c:20:2b:33:ca:c5:9d:1c:36:07:c0:19:
a5:02:80:de:e1:f0:da:dd:13:c0:1e:73:f1:1d:77:
6f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5A:8B:A9:D7:EB:CD:5A:A6:CC:EE:F1:34:3C:62:71:74:AF:09:F1
X509v3 Authority Key Identifier:
keyid:AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dd:6d:23:76:fa:98:7d:cc:25:77:5b:50:e6:8c:4e:b3:07:8e:
4d:32:a4:60:a7:ca:56:17:1e:c3:65:a2:fe:61:31:bc:95:32:
ab:c4:f7:9e:4a:2e:6c:59:c9:bf:34:5f:91:f6:1a:73:cd:dc:
6f:e5:13:e0:6f:ae:4d:4e:df:9a:e4:fa:ba:27:aa:8a:bd:dd:
8f:94:eb:99:e2:64:a9:3a:0d:f3:e3:6c:ed:fa:5d:39:41:bd:
a4:cd:67:d6:17:ed:ac:18:ec:e4:1d:e9:6c:0a:29:06:40:70:
4c:e3:3f:f0:46:25:44:b7:1e:d4:ce:63:88:cf:53:dd:20:37:
b6:c1:78:22:db:59:8d:ec:3e:93:af:7e:fc:45:77:28:16:93:
05:3d:0b:ce:de:49:16:10:af:b8:09:aa:96:c7:e3:f2:04:1b:
40:2c:5a:26:6c:ac:13:a1:e5:e2:dc:90:4b:1a:47:d5:8a:2e:
f8:ea:b9:4c:81:f4:e0:2f:9d:02:80:40:1d:8f:90:ac:0d:3b:
d6:07:78:b3:f3:0d:4c:a6:9b:1f:38:e0:5d:28:b3:b2:66:59:
c9:6d:39:d0:8e:36:7e:05:7f:18:05:59:36:1e:64:f2:d4:89:
89:1f:60:ac:e2:8f:d0:88:db:3a:23:0a:71:ba:8d:79:fb:8d:
ba:e7:17:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:56:47 2025 by rpki-client