This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
File: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft (raw, json)
Hash identifier: Vnny6EvKnFGZCQxvWOhrnI6sEEFRAgYg/J/UjLMXIlg=
Subject key identifier: 5F:DC:35:0B:A0:DF:28:27:8D:97:1A:D0:A5:03:9E:15:39:5A:FB:A1
Authority key identifier: B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68
Certificate issuer: /CN=A91FA851/serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968
Certificate serial: 0168
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
Manifest number: 0165
Signing time: Wed 17 Dec 2025 03:30:33 +0000
Manifest this update: Wed 17 Dec 2025 03:30:32 +0000
Manifest next update: Wed 24 Dec 2025 03:30:32 +0000
Files and hashes: 1: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl (hash: 3HvZQdeKb/tiL0E3l88BDy5Mv+C+5PhTpMbKtP6u7iM=)
2: 8FD49B16BAE411EE9198A471C4F9AE02.roa (hash: L0qfyKxG6EHzysnGwaUqdqXIinzIkFTO2ksscDrrvZ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl
rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 03:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360 (0x168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA851, serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968
Validity
Not Before: Dec 17 03:30:32 2025 GMT
Not After : Dec 24 03:30:32 2025 GMT
Subject: CN=694223d8-79c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:4e:0f:21:cd:4d:dd:b9:92:6f:02:fa:3b:
e2:1e:1e:cd:2f:c7:54:b1:69:6a:72:2f:ac:a8:28:
ef:5a:00:1a:91:78:d8:38:80:34:e7:69:f4:bc:ce:
03:44:dc:08:05:f4:db:bf:7c:c5:09:11:b8:13:45:
c8:9a:58:81:1f:bb:97:73:1d:56:01:e7:4c:40:8c:
34:72:fd:c2:42:cd:3e:3e:30:d4:e3:58:a0:d5:d3:
18:5a:1b:21:59:ee:aa:0e:84:66:0b:c9:a4:ee:25:
43:d5:ba:7d:ad:61:e4:74:34:ec:68:99:28:a6:31:
dd:67:ad:2b:1a:26:f4:4f:d7:64:66:45:1b:e7:95:
d5:9c:39:82:55:c9:82:6c:64:c8:fb:d2:f0:e7:90:
ad:d8:f8:70:85:5a:7c:46:e8:d8:78:a3:58:39:11:
94:0f:68:24:d5:ba:b5:c9:97:69:6b:5d:df:08:21:
50:ec:bf:c3:be:36:69:56:fd:a7:b8:34:fe:69:3e:
00:f8:79:2b:5c:de:02:af:66:3c:05:36:2a:ed:1d:
93:b5:b4:0c:88:6a:fe:26:65:f2:bd:d8:2a:0b:47:
e4:7b:83:5a:74:d3:34:05:30:e4:02:1e:3b:37:20:
54:3e:2b:85:8e:a3:09:31:8d:82:39:87:27:30:7c:
57:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DC:35:0B:A0:DF:28:27:8D:97:1A:D0:A5:03:9E:15:39:5A:FB:A1
X509v3 Authority Key Identifier:
keyid:B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:59:be:b9:af:1b:96:ca:ae:d8:99:7d:ea:e2:a3:b5:7c:bf:
80:18:55:30:09:2d:66:c9:70:05:02:8c:43:9a:b7:fc:f1:d1:
a6:e7:bb:dc:58:83:4e:b7:2c:b5:21:b6:01:94:08:fa:e2:4e:
75:ec:3b:b5:95:b5:60:f2:ff:ce:9d:65:1f:36:9d:8a:3e:99:
f1:d9:43:3e:ca:3b:2e:94:a8:8f:14:a1:51:32:8a:8b:9c:9c:
ec:98:45:a2:2a:70:2e:37:e5:e0:ee:2f:af:a8:ee:c6:a6:86:
b2:11:cc:23:df:53:3f:0b:3a:a1:9d:18:34:09:87:7d:19:1f:
5c:7c:46:54:3c:0a:b0:61:ed:a6:a5:91:c7:fe:da:89:e2:58:
84:0b:e1:17:58:80:63:da:8e:54:67:e0:70:1b:45:c1:62:95:
d9:bc:4f:a1:bf:a1:82:5e:8f:02:86:a9:1c:0a:03:a5:73:4c:
c7:09:70:71:78:61:06:65:a1:96:b7:b9:7a:d7:39:63:2a:d6:
f4:f4:03:2b:27:31:3a:b7:f3:cf:ad:42:1c:08:91:54:d4:b7:
f2:5f:c7:1c:52:ac:a7:4d:31:05:17:e6:2f:7b:f0:56:8d:7b:
6b:0a:2b:ec:ba:18:c6:8a:23:25:f7:bf:02:d0:c3:21:84:87:
be:23:a9:18
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkE4NTExMTAvBgNVBAUTKEI5MjUwRkRFM0ZBQkQ1OUZBNTYwODIzMEZFQTdBMjND
NEI0Qzg5NjgwHhcNMjUxMjE3MDMzMDMyWhcNMjUxMjI0MDMzMDMyWjAYMRYwFAYD
VQQDDA02OTQyMjNkOC03OWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuRtODyHNTd25km8C+jviHh7NL8dUsWlqci+sqCjvWgAakXjYOIA052n0vM4D
RNwIBfTbv3zFCRG4E0XImliBH7uXcx1WAedMQIw0cv3CQs0+PjDU41ig1dMYWhsh
We6qDoRmC8mk7iVD1bp9rWHkdDTsaJkopjHdZ60rGib0T9dkZkUb55XVnDmCVcmC
bGTI+9Lw55Ct2PhwhVp8RujYeKNYORGUD2gk1bq1yZdpa13fCCFQ7L/DvjZpVv2n
uDT+aT4A+HkrXN4Cr2Y8BTYq7R2TtbQMiGr+JmXyvdgqC0fke4NadNM0BTDkAh47
NyBUPiuFjqMJMY2COYcnMHxXqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/cNQug
3ygnjZca0KUDnhU5WvuhMB8GA1UdIwQYMBaAFLklD94/q9WfpWCCMP6nojxLTIlo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTg1MS85NUE2MTE5Q0I5
REYxMUVFOTRCNDI0MkFDNEY5QUUwMi91U1VQM2otcjFaLWxZSUl3X3FlaVBFdE1p
V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VTVVAzai1yMVotbFlJSXdfcWVpUEV0TWlXZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QTg1MS85NUE2MTE5Q0I5REYxMUVFOTRCNDI0MkFDNEY5QUUwMi91U1VQM2otcjFa
LWxZSUl3X3FlaVBFdE1pV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC1Wb65rxuWyq7YmX3q4qO1fL+AGFUwCS1myXAFAoxDmrf88dGm57vc
WINOtyy1IbYBlAj64k517Du1lbVg8v/OnWUfNp2KPpnx2UM+yjsulKiPFKFRMoqL
nJzsmEWiKnAuN+Xg7i+vqO7GpoayEcwj31M/CzqhnRg0CYd9GR9cfEZUPAqwYe2m
pZHH/tqJ4liEC+EXWIBj2o5UZ+BwG0XBYpXZvE+hv6GCXo8ChqkcCgOlc0zHCXBx
eGEGZaGWt7l61zljKtb09AMrJzE6t/PPrUIcCJFU1LfyX8ccUqynTTEFF+Yve/BW
jXtrCivsuhjGiiMl978C0MMhhIe+I6kY
-----END CERTIFICATE-----
Generated at Thu Dec 18 22:16:45 2025 by rpki-client