This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft
File: UtXW_72oj1ReUbr5n32s4ZPAblc.mft (raw, json)
Hash identifier: RSJbSZlM1OW5R5oLiUGxR/Cv/r+mqxG4cTZKUeJEwe8=
Subject key identifier: 47:E6:C8:47:A9:F4:D8:DD:01:36:29:37:78:F4:98:16:7F:05:05:18
Authority key identifier: 52:D5:D6:FF:BD:A8:8F:54:5E:51:BA:F9:9F:7D:AC:E1:93:C0:6E:57
Certificate issuer: /CN=A91F17F6/serialNumber=52D5D6FFBDA88F545E51BAF99F7DACE193C06E57
Certificate serial: 083F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft
Manifest number: 0838
Signing time: Sat 20 Dec 2025 20:12:15 +0000
Manifest this update: Sat 20 Dec 2025 20:12:14 +0000
Manifest next update: Sat 27 Dec 2025 20:12:14 +0000
Files and hashes: 1: UtXW_72oj1ReUbr5n32s4ZPAblc.crl (hash: 8vFmUhoi6nSlxgkc4J4oBhC7spS3+ZSfXi7tEeoeoRU=)
2: AF95E6D8F2B711EAA1C01744C4F9AE02.roa (hash: X3Zxmzy65RFAr4wRuSkQChvufHFA8zifcOkEqKI8dKg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.crl
rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 20:12:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2111 (0x83f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17F6, serialNumber=52D5D6FFBDA88F545E51BAF99F7DACE193C06E57
Validity
Not Before: Dec 20 20:12:14 2025 GMT
Not After : Dec 27 20:12:14 2025 GMT
Subject: CN=6947031e-474a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d0:f0:e0:b5:e4:de:74:ec:10:12:13:50:c0:
e5:90:13:fb:cc:9a:b7:81:2c:44:18:b9:cc:07:46:
8d:c2:ba:7a:23:da:73:81:58:64:fa:46:14:73:86:
23:55:a9:0e:c8:15:27:4a:0c:00:40:c3:36:35:58:
5a:e5:19:c9:3b:11:c3:c4:d7:e7:a8:2f:ce:ee:92:
39:4c:7e:43:13:a3:7b:a3:db:ee:d4:e5:fd:81:bb:
cf:34:d3:2d:0d:d8:6c:c5:6c:84:45:dd:d4:da:c7:
9b:06:9b:a3:77:f3:b7:42:04:00:81:1c:71:9e:18:
5f:76:1a:7e:fc:9d:e5:45:0f:ea:1e:f7:57:48:cf:
ff:4c:4b:4f:51:a8:82:66:6c:f7:18:a8:b0:7a:0f:
71:b0:3d:17:13:f8:85:fe:74:09:44:13:e8:08:1e:
b7:2a:de:cb:c2:45:81:93:41:b3:1a:f7:42:23:c4:
a9:de:04:24:bf:89:8f:03:e6:a1:7d:72:80:5f:d8:
89:84:75:66:26:f3:4b:cf:0f:ee:83:dd:77:ab:22:
bb:a7:f1:ac:6a:a6:f0:2e:24:4b:10:36:3f:a8:de:
83:00:a3:cb:92:11:e5:d4:69:ca:bd:81:fd:26:c5:
06:f8:d9:d7:27:1a:39:51:f1:0b:cb:36:49:fa:8a:
a8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E6:C8:47:A9:F4:D8:DD:01:36:29:37:78:F4:98:16:7F:05:05:18
X509v3 Authority Key Identifier:
keyid:52:D5:D6:FF:BD:A8:8F:54:5E:51:BA:F9:9F:7D:AC:E1:93:C0:6E:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:00:2a:d5:7b:4b:4a:e2:a6:5a:a2:4e:2e:6e:d1:9a:d0:8f:
73:b7:99:d3:a8:55:fa:4e:88:1b:a7:e5:a8:68:94:85:f5:6e:
12:3e:8b:9f:e3:d4:08:e8:77:a3:48:b0:81:0c:50:49:82:b9:
b8:46:8c:c0:ee:19:09:13:8c:26:f0:7c:c0:13:fd:9b:e9:b5:
2a:ff:c6:78:09:24:61:80:57:95:39:60:22:b2:bb:57:43:43:
2c:b6:4d:11:07:a5:cc:3d:f7:5c:3b:6b:d3:95:61:95:ee:e6:
72:68:d8:e5:2f:d2:39:94:1b:ec:e9:ea:6f:e8:b8:82:37:ce:
95:fc:54:69:f1:0e:02:4e:04:31:c1:8a:ba:1f:38:22:f9:fa:
f5:0a:33:bb:c3:cb:99:fd:5c:91:60:14:f0:34:c3:77:fb:c3:
f4:c6:fe:60:4b:99:80:ce:bd:e0:fb:1f:a4:ca:b6:bc:90:bb:
cc:41:54:62:c3:a1:61:58:dd:98:f9:c8:0d:ea:3b:15:c2:55:
2c:cb:45:d4:59:a5:ae:83:7a:4a:97:23:18:a0:c1:32:7f:7a:
19:2f:65:72:d4:10:34:d3:6a:9f:2c:cb:43:d2:0b:c8:47:94:
4a:e4:8d:77:7d:d3:b3:6d:88:40:d1:49:57:a9:c0:2f:65:7e:
9b:41:74:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 15:44:18 2025 by rpki-client