This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
File: UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft (raw, json)
Hash identifier: gkAdDeniefIVBSAWCSkmLU4F1nfXtxBC+x9r1deEbbI=
Subject key identifier: AC:59:90:C2:2C:C5:CA:13:ED:6E:B4:D5:FA:B4:75:69:14:42:2D:7C
Authority key identifier: 50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
Certificate issuer: /CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
Certificate serial: 04E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
Manifest number: 04B5
Signing time: Sat 06 Dec 2025 22:42:37 +0000
Manifest this update: Sat 06 Dec 2025 22:42:37 +0000
Manifest next update: Sat 13 Dec 2025 22:42:37 +0000
Files and hashes: 1: UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl (hash: tq6SYG8cqZS7eguqQJMw3iJQIrjc+qtJyyw2l8S2M/w=)
2: DEBDCECAC2CF11EFA805380FC4F9AE02.roa (hash: fbHNG5VnI5vBavVCzw8LniM5caV6eOPIQLCn1UeldBc=)
3: 0294E1EADB0D11EE88489759C4F9AE02.roa (hash: LFGX/jVfbWAISfHlUtm9x1tFR24hTnDvuTIOnrEtJuY=)
4: 01CF36F2DB0D11EE88489759C4F9AE02.roa (hash: Bc41Sc+m7v/fikpnEXBGH8owwIIMKnoEIMrJsvVIo78=)
5: 0104D0BADB0D11EE88489759C4F9AE02.roa (hash: KdbVV+GEXY2BL9mYf6LHh/aKsgwvJc/K6FH7hj47FDo=)
6: 71A1BB74759711EFA89BA96BC4F9AE02.roa (hash: OehIWzlmpLn+tHX2OGp9aRhBba8Lt99w8j7PUJDnUtU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl
rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 22:42:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1256 (0x4e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEE06, serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
Validity
Not Before: Dec 6 22:42:37 2025 GMT
Not After : Dec 13 22:42:37 2025 GMT
Subject: CN=6934b15d-9dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:55:dd:ad:b4:9d:74:42:ee:ee:90:dd:f6:
58:d1:7a:7b:e1:a2:1c:50:b4:0c:bd:9e:ad:da:cc:
cd:0e:72:51:46:14:00:13:0c:d7:20:ef:8a:fd:92:
e1:a1:ed:8e:ae:42:e9:e3:fc:c2:90:05:32:5e:a8:
e1:87:55:20:29:7e:65:67:49:5b:28:37:a7:8f:56:
9e:ce:f2:ad:b3:ba:c9:ec:ba:f5:8d:4a:3d:ca:2a:
78:97:37:20:a9:fc:fa:50:46:39:08:a4:71:fe:09:
86:a4:e5:f3:cd:3f:58:e3:59:f7:8f:b8:91:a2:c2:
7e:af:d2:aa:ad:e4:4a:ec:c8:c8:96:f7:dd:6e:36:
60:cb:cb:5d:d5:9a:50:5c:41:54:e1:b1:29:4d:1c:
84:5e:cb:02:52:23:0c:bb:31:44:73:93:ee:40:a6:
e5:b8:65:07:00:d0:18:eb:cd:dc:be:75:b6:92:47:
32:ac:63:ed:0f:9a:2e:95:65:ec:88:48:b0:2d:2f:
7b:94:85:3d:e3:0a:dd:8b:c0:a1:04:8a:fc:a4:06:
ba:03:55:7f:ef:06:73:74:33:21:11:5c:a4:e0:51:
f9:df:ff:af:f3:a7:71:86:53:5c:99:d7:72:16:0c:
4a:fc:6c:43:9a:32:30:56:b5:83:76:7b:cf:3c:c2:
b2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:59:90:C2:2C:C5:CA:13:ED:6E:B4:D5:FA:B4:75:69:14:42:2D:7C
X509v3 Authority Key Identifier:
keyid:50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:3b:8b:5c:75:07:63:ec:be:1a:b2:b4:66:7e:d2:52:c6:c3:
df:3b:b6:a1:9b:bb:72:dd:75:05:c1:a3:a6:d1:38:f0:63:6a:
1f:c3:d2:37:3a:60:f7:19:55:8c:44:6f:df:aa:f1:1b:69:e3:
52:30:64:c9:de:38:b7:fd:72:58:39:a6:58:18:54:47:1d:6e:
3d:b4:08:57:94:aa:36:0f:b3:fe:2c:f8:d8:fd:2e:98:37:5b:
6c:31:a6:d9:dc:52:74:8f:87:eb:f3:ab:68:13:68:be:6e:bb:
da:b3:86:a6:98:bd:19:1e:29:22:8b:d2:f9:92:85:49:d8:a2:
49:ee:3f:0a:d5:26:c2:9d:b7:ec:87:24:4e:e7:62:f9:09:08:
af:3e:13:00:95:e2:c0:a0:b9:5a:f6:88:62:cf:86:1f:98:7d:
ec:2a:86:7c:a4:25:50:f8:58:c1:f8:40:9e:fc:90:d7:aa:e2:
02:f2:ea:2c:df:70:b6:11:ff:f0:56:74:41:8e:f0:69:67:84:
84:f4:b9:f1:65:7e:c5:76:9e:08:92:76:63:33:28:2e:f7:cb:
dd:c7:cb:84:f0:dd:d9:2c:b6:c5:e7:db:9b:3b:32:eb:73:46:
90:d4:79:0e:ff:7c:4d:45:0b:19:7f:d9:e6:10:c0:a7:5b:9f:
0a:22:31:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:12:02 2025 by rpki-client