This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft
File: UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft (raw, json)
Hash identifier: hla8sX1cgaesthWHvEWZDfgz9oALDoe7C5AgHERnrL8=
Subject key identifier: 56:55:86:E1:60:8F:D1:B4:A0:2B:DE:72:A1:B7:79:54:21:12:A8:41
Authority key identifier: 50:3D:1B:F5:6B:22:29:B5:2A:A3:FF:68:53:46:99:F0:6F:D2:50:23
Certificate issuer: /CN=A91FBDDF/serialNumber=503D1BF56B2229B52AA3FF68534699F06FD25023
Certificate serial: 0193
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft
Manifest number: 0193
Signing time: Tue 23 Dec 2025 02:27:40 +0000
Manifest this update: Tue 23 Dec 2025 02:27:39 +0000
Manifest next update: Tue 30 Dec 2025 02:27:39 +0000
Files and hashes: 1: UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl (hash: 7kwzmirNGEYBeEs7s6GO9UDKfXMMsPouW9P6IkPtVeI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl
rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:27:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBDDF, serialNumber=503D1BF56B2229B52AA3FF68534699F06FD25023
Validity
Not Before: Dec 23 02:27:39 2025 GMT
Not After : Dec 30 02:27:39 2025 GMT
Subject: CN=6949fe1c-57a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:90:99:bc:2e:13:7d:5f:e7:0d:74:0e:3d:d4:
3c:ec:ab:31:00:0d:76:fc:ca:2e:ae:bb:35:5e:03:
1d:fd:50:54:0a:fe:b5:50:e8:0e:b1:43:32:a8:61:
8c:6b:25:ac:d8:9d:f2:66:7d:e7:e3:08:be:e5:f7:
68:ad:34:a6:eb:a7:40:f9:08:9f:99:90:39:a3:5b:
fd:90:eb:93:9a:e6:72:23:1f:c6:88:b1:b9:53:90:
94:02:e2:de:a5:20:54:f2:c6:b8:19:57:33:b4:be:
31:34:f4:8a:50:5b:bd:c4:67:fe:03:42:80:03:10:
39:c9:39:f8:81:03:98:88:ee:c0:2c:a0:bc:d2:9e:
02:09:50:90:cb:d8:9c:92:4d:99:82:78:22:d2:85:
1d:81:54:f9:1b:be:ff:2e:d0:43:33:d6:23:25:de:
39:fb:00:1e:0a:b1:51:51:9f:f7:bc:84:9c:57:ae:
b5:8e:a6:d0:a0:fd:ac:1c:4d:de:a4:24:fa:f4:31:
01:de:e9:a0:8b:60:13:cc:af:ad:51:f7:68:00:c6:
be:c6:25:16:fa:d9:9c:4b:71:92:39:44:0e:2b:62:
cf:0b:10:3f:a9:6e:b8:70:b5:c8:5b:65:81:b2:74:
77:15:b4:81:b5:c7:7e:ed:04:43:9a:47:91:00:5d:
ca:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:55:86:E1:60:8F:D1:B4:A0:2B:DE:72:A1:B7:79:54:21:12:A8:41
X509v3 Authority Key Identifier:
keyid:50:3D:1B:F5:6B:22:29:B5:2A:A3:FF:68:53:46:99:F0:6F:D2:50:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:56:ea:0b:37:ce:3c:3d:a6:9c:69:9d:74:2b:11:5f:82:16:
5b:db:c7:c7:9e:6b:6f:2b:f9:ba:4a:ff:66:01:da:c0:2d:b1:
2f:33:9b:b0:1c:d9:fe:b5:ce:59:96:7a:ff:7a:c9:9b:4e:c0:
5c:6e:cf:ab:a5:51:33:34:fc:0d:dc:73:85:fc:9a:11:21:98:
83:dd:48:bc:2f:a5:e6:99:3c:24:40:df:bf:1a:1c:3f:99:f2:
eb:7c:3b:57:07:b0:ee:bb:78:44:8a:2e:4c:68:44:5f:7d:25:
68:59:65:fd:d9:33:8f:2a:39:88:41:55:5b:03:d3:9b:ff:c3:
1b:0a:cc:83:11:f5:c3:47:20:ce:cd:55:ca:ee:6c:a5:d1:29:
2d:52:e7:f2:86:fd:92:ac:e8:e5:bd:25:b1:0d:9f:33:06:ca:
af:37:e4:f4:0a:17:ae:f7:56:08:b6:d6:6a:4a:61:7a:25:d6:
13:d4:75:c1:93:fe:d3:4b:1a:8f:ec:46:fb:69:68:32:88:07:
5f:59:67:7f:48:67:3a:1b:73:ea:75:63:b0:c4:8d:0c:15:3a:
d0:c6:93:43:f0:4e:81:a6:ba:48:38:40:4e:26:21:f3:76:ae:
89:46:91:40:ff:51:54:ab:d0:75:e9:20:11:fa:b9:99:2e:55:
49:77:e2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:40:20 2025 by rpki-client