This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
File: u-Sfy0H1Amo1v2yTuR_f88iMc24.mft (raw, json)
Hash identifier: UWy9I85BmAVWDloK8+crKHDSqOWgng1c72DJWS50yyw=
Subject key identifier: 25:CB:74:CA:1C:0D:AA:84:EA:FF:1A:CF:CA:39:82:79:68:A1:7E:6E
Authority key identifier: BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
Certificate issuer: /CN=A91DEA56/serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Certificate serial: 0904
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
Manifest number: 08F0
Signing time: Mon 22 Dec 2025 19:43:24 +0000
Manifest this update: Mon 22 Dec 2025 19:43:24 +0000
Manifest next update: Mon 29 Dec 2025 19:43:24 +0000
Files and hashes: 1: u-Sfy0H1Amo1v2yTuR_f88iMc24.crl (hash: lJ0WIitayHRmFA/uNl7wdRyhiLg+B3G6MXmJ4EFNzXM=)
2: 660823EABF3C11EAAF328582C4F9AE02.roa (hash: McY2AJFANrzWmI75qEuoRVmbI5bYcHMLwYH623aHbh0=)
3: 65877060BF3C11EAAF328582C4F9AE02.roa (hash: 8Ve/Cl0hRolwdHsLuG0VDkNM1FdRmkmQ9YowmP0sm+M=)
4: 65051AB6BF3C11EAAF328582C4F9AE02.roa (hash: 4sHi+d6qz1n7lwCxnRDnO0jNP13ZRhYE6FAGlfuub+c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 19:43:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2308 (0x904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEA56, serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Validity
Not Before: Dec 22 19:43:24 2025 GMT
Not After : Dec 29 19:43:24 2025 GMT
Subject: CN=69499f5c-533b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:23:ef:81:3d:2f:b9:56:99:01:80:97:07:0a:
43:ee:eb:76:53:b4:f6:6c:67:fe:85:e2:4f:63:a7:
77:2c:86:f3:b7:58:0d:75:59:81:7f:ba:c4:9c:4b:
12:b6:e2:7f:78:a8:98:d4:b5:f1:38:57:4d:ca:f0:
38:6d:7b:0c:04:b2:c7:c4:0b:db:2d:1d:2b:d7:48:
a8:f9:f7:76:c1:96:85:fe:53:cc:84:69:73:6a:bd:
99:45:52:d4:de:60:9e:8b:b1:39:63:9d:d2:0c:a2:
0a:33:2a:1e:f8:93:1a:91:5f:42:76:9b:9f:95:6c:
a2:82:1d:41:cc:f9:bb:63:9c:32:2a:a5:d5:58:d8:
6f:ae:2c:65:da:65:5f:d3:30:32:c3:84:84:3d:1e:
60:69:cd:fa:12:77:70:08:13:32:44:fd:29:dd:da:
35:0d:cd:85:0d:21:d3:49:da:ab:7a:7d:ba:ef:a8:
b5:4f:a2:51:61:62:1d:8f:8a:a2:a0:cc:a6:08:b0:
25:00:18:3d:d3:c2:37:1b:62:51:db:b1:80:ab:45:
1b:cd:cf:0b:7c:8d:4e:15:1a:47:59:60:3d:d4:e5:
be:d9:42:35:bc:eb:17:d4:03:d9:b2:96:85:40:c3:
ca:a8:33:51:3d:fd:dd:0d:07:23:7e:ab:68:99:6a:
80:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CB:74:CA:1C:0D:AA:84:EA:FF:1A:CF:CA:39:82:79:68:A1:7E:6E
X509v3 Authority Key Identifier:
keyid:BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:c6:30:30:8a:83:10:5c:1a:92:12:27:22:68:67:e5:19:36:
27:89:f0:ee:ca:ef:9f:df:21:0c:43:1e:10:6b:2b:93:3e:cf:
ff:46:56:51:ec:fe:e3:47:c4:2d:8a:16:89:8a:c7:96:3b:c7:
ec:c4:82:2c:3a:c4:e8:c9:1d:e2:53:c9:8a:98:fe:f3:2d:b4:
67:b7:bd:9f:d6:bc:29:d8:24:64:76:07:11:bc:f2:17:d1:82:
94:a9:30:c5:c5:85:6f:97:f6:f3:b6:a4:24:fb:b6:d6:8f:a1:
5e:a5:96:88:42:21:da:27:62:fb:f9:c7:ed:d5:64:e8:ce:bc:
f1:26:d9:87:22:e2:1b:a2:2b:15:40:33:66:ad:38:8b:62:64:
2b:05:67:69:66:97:e7:03:f5:b0:cc:6f:90:c0:d5:c8:81:9b:
b6:d6:06:52:62:3a:33:9a:0e:52:a3:76:40:12:e5:6d:90:60:
9f:99:d0:32:d4:4f:52:7a:ef:3d:23:19:71:e9:c6:8b:29:80:
4a:31:ef:06:ea:17:14:da:cb:a0:5d:72:1d:35:ee:22:17:f1:
c2:2f:9c:be:af:96:6c:08:f7:2f:33:91:20:a2:fa:19:ae:52:
89:f2:6c:99:14:97:97:44:e6:ff:de:50:fa:d5:6c:aa:73:1e:
dc:3b:e6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 11:21:34 2025 by rpki-client