This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft
File: UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft (raw, json)
Hash identifier: uR+POFaqL33akw2codfBvJOYlTjURQRks/NPTxgOpaY=
Subject key identifier: 96:78:10:AC:3D:E3:AB:91:00:D3:3A:4F:AD:9E:AD:38:32:72:13:2E
Authority key identifier: 50:3B:92:41:46:4D:F9:7D:2A:00:99:96:3E:63:3E:10:87:EF:DD:C5
Certificate issuer: /CN=A91F65FA/serialNumber=503B9241464DF97D2A0099963E633E1087EFDDC5
Certificate serial: 02F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft
Manifest number: 02F3
Signing time: Tue 23 Dec 2025 00:13:41 +0000
Manifest this update: Tue 23 Dec 2025 00:13:40 +0000
Manifest next update: Tue 30 Dec 2025 00:13:40 +0000
Files and hashes: 1: UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl (hash: j01WSvEUE8iWyvRvj6IR+d0p5zkm9JLaefSVPL3GTbw=)
2: 84365644062E11EDA95B3143C4F9AE02.roa (hash: zA/5PEhgjN/BvDw/xl3w8dV/RMsq+gylEcRkytviDsc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl
rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 00:13:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 759 (0x2f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F65FA, serialNumber=503B9241464DF97D2A0099963E633E1087EFDDC5
Validity
Not Before: Dec 23 00:13:40 2025 GMT
Not After : Dec 30 00:13:40 2025 GMT
Subject: CN=6949deb5-f0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f0:9d:82:60:90:67:cb:b3:a1:b4:9f:70:6f:
e2:17:79:c4:a6:14:67:fe:8a:5c:a9:21:3d:b4:73:
e7:cf:64:4b:ad:9d:b0:96:ee:ff:b4:30:ee:b6:21:
03:59:88:ce:6e:28:29:e8:e4:3c:63:00:4c:9b:f7:
a8:c3:dc:17:31:46:df:f6:26:72:d9:1e:65:a8:05:
c6:36:12:fa:ca:4b:07:9d:17:0a:ec:a8:9a:5e:4d:
88:8c:bf:99:ba:ed:32:b3:ea:57:ef:c4:dd:85:cc:
a8:17:f8:c8:1c:b2:8c:52:d9:5e:55:7c:97:fd:b9:
07:aa:64:a9:4e:fd:35:81:c0:7a:ae:02:5c:51:4a:
bc:64:a7:fd:c6:04:98:12:ce:1b:76:85:01:57:b8:
53:76:70:56:a9:39:29:bd:4c:c2:3c:69:34:84:fa:
5d:7a:5a:60:0a:bf:f6:3f:fe:7b:4e:0a:78:82:2d:
17:66:72:ac:ef:da:f8:67:56:15:ed:6f:e6:f7:3b:
33:c1:b4:e8:e9:9d:88:5c:cb:6f:d7:e7:44:ff:35:
35:5c:d1:8b:85:39:48:52:2d:41:13:ec:04:f0:ad:
c6:c9:cc:c3:84:30:ab:20:83:f6:a8:96:c1:52:52:
db:66:d1:0a:58:ea:08:77:85:6d:e3:33:5b:8b:a4:
f3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:78:10:AC:3D:E3:AB:91:00:D3:3A:4F:AD:9E:AD:38:32:72:13:2E
X509v3 Authority Key Identifier:
keyid:50:3B:92:41:46:4D:F9:7D:2A:00:99:96:3E:63:3E:10:87:EF:DD:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:37:2e:1c:4b:46:4c:e4:b1:dc:b3:a3:fe:78:58:4b:3f:bd:
de:80:8e:46:bb:e9:c6:9c:05:86:b8:be:ce:5b:d6:d1:51:e1:
fd:01:2e:ca:1e:42:89:5b:41:65:10:5c:1c:e0:4b:36:99:42:
1d:fa:f6:d8:3a:11:94:8f:72:bb:41:ac:43:fa:5c:06:50:1f:
83:89:3c:d1:db:7e:f7:f0:99:f0:8c:09:77:11:a0:80:bf:90:
53:25:e1:ce:48:8a:73:c3:c3:f0:78:66:b7:7c:fc:d8:9d:6d:
ef:6c:d3:39:a6:31:4a:b2:3d:d4:52:ac:e3:58:51:d8:8d:7b:
91:24:54:7e:44:ca:48:da:39:59:cf:25:92:dd:61:1e:06:b8:
c2:94:17:b9:ca:26:91:5a:67:6b:1a:80:9d:28:50:cd:c6:d8:
a5:e5:c3:fb:ff:98:85:9f:c6:3b:40:3d:e8:4a:eb:ca:78:7c:
50:5f:c8:1e:e4:be:dc:19:e9:ce:e6:0f:83:e6:cb:9d:cc:34:
5a:c2:e5:d2:73:c3:06:ef:58:68:67:25:0c:d0:89:b1:0b:f4:
80:e3:04:7c:b7:9f:17:b1:0f:a0:89:fd:d4:73:e8:ab:ba:fc:
22:40:6d:09:0f:64:10:58:32:38:13:cc:80:af:fc:ce:f0:cc:
02:3d:8a:f0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjY1RkExMTAvBgNVBAUTKDUwM0I5MjQxNDY0REY5N0QyQTAwOTk5NjNFNjMzRTEw
ODdFRkREQzUwHhcNMjUxMjIzMDAxMzQwWhcNMjUxMjMwMDAxMzQwWjAYMRYwFAYD
VQQDDA02OTQ5ZGViNS1mMGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjvCdgmCQZ8uzobSfcG/iF3nEphRn/opcqSE9tHPnz2RLrZ2wlu7/tDDutiED
WYjObigp6OQ8YwBMm/eow9wXMUbf9iZy2R5lqAXGNhL6yksHnRcK7KiaXk2IjL+Z
uu0ys+pX78TdhcyoF/jIHLKMUtleVXyX/bkHqmSpTv01gcB6rgJcUUq8ZKf9xgSY
Es4bdoUBV7hTdnBWqTkpvUzCPGk0hPpdelpgCr/2P/57Tgp4gi0XZnKs79r4Z1YV
7W/m9zszwbTo6Z2IXMtv1+dE/zU1XNGLhTlIUi1BE+wE8K3GyczDhDCrIIP2qJbB
UlLbZtEKWOoId4Vt4zNbi6TzvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZ4EKw9
46uRANM6T62erTgychMuMB8GA1UdIwQYMBaAFFA7kkFGTfl9KgCZlj5jPhCH793F
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVGQS85QTcwMjYyMjA2
MkIxMUVEQUExRUVDM0RDNEY5QUUwMi9VRHVTUVVaTi1YMHFBSm1XUG1NLUVJZnYz
Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VEdVNRVVpOLVgwcUFKbVdQbU0tRUlmdjNjVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NjVGQS85QTcwMjYyMjA2MkIxMUVEQUExRUVDM0RDNEY5QUUwMi9VRHVTUVVaTi1Y
MHFBSm1XUG1NLUVJZnYzY1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBUNy4cS0ZM5LHcs6P+eFhLP73egI5Gu+nGnAWGuL7OW9bRUeH9AS7K
HkKJW0FlEFwc4Es2mUId+vbYOhGUj3K7QaxD+lwGUB+DiTzR23738JnwjAl3EaCA
v5BTJeHOSIpzw8PweGa3fPzYnW3vbNM5pjFKsj3UUqzjWFHYjXuRJFR+RMpI2jlZ
zyWS3WEeBrjClBe5yiaRWmdrGoCdKFDNxtil5cP7/5iFn8Y7QD3oSuvKeHxQX8ge
5L7cGenO5g+D5sudzDRawuXSc8MG71hoZyUM0ImxC/SA4wR8t58XsQ+gif3Uc+ir
uvwiQG0JD2QQWDI4E8yAr/zO8MwCPYrw
-----END CERTIFICATE-----
Generated at Wed Dec 24 16:00:30 2025 by rpki-client