This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft
File: uNk1BsinkdH5_6W2fDiBbdwD7ms.mft (raw, json)
Hash identifier: G/Rfu0kxNo4alHGdlDPFVIaUAZpvAaBmqgE4qLX300w=
Subject key identifier: E5:55:FC:82:73:44:7E:A2:31:E4:EC:B5:73:D8:4E:5E:17:17:0E:90
Authority key identifier: B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B
Certificate issuer: /CN=A9110DEC/serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B
Certificate serial: 0A9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft
Manifest number: 0A94
Signing time: Sat 06 Dec 2025 18:48:17 +0000
Manifest this update: Sat 06 Dec 2025 18:48:17 +0000
Manifest next update: Sat 13 Dec 2025 18:48:17 +0000
Files and hashes: 1: uNk1BsinkdH5_6W2fDiBbdwD7ms.crl (hash: bj/hkbWPk6A/nLpCP0YeJY5QE+OP1pQP1x9ZKUnA2pQ=)
2: C01674A86BF011EA87B33D25C4F9AE02.roa (hash: c9rYpxrekHk5Vx/e81a0t1Y6tqcx2DAB/IWGqPFZTW4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl
rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 18:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2715 (0xa9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110DEC, serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B
Validity
Not Before: Dec 6 18:48:17 2025 GMT
Not After : Dec 13 18:48:17 2025 GMT
Subject: CN=69347a71-22ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:99:e8:30:ed:c9:2d:ff:fb:50:c6:49:46:5a:
30:4e:45:1f:72:58:dc:39:8d:5c:b3:e2:53:46:11:
73:84:b9:c4:b1:fe:39:41:80:9d:3b:62:96:c9:f8:
04:2c:da:5a:27:48:8b:50:9c:e9:b2:7e:0b:93:e6:
58:7e:1b:64:fe:4a:1e:5d:69:cc:5f:2e:13:fc:9c:
25:79:e8:c0:c9:7e:5b:bd:b4:17:a2:cc:aa:04:03:
93:9c:6a:95:03:63:2b:83:9f:33:f1:d3:18:12:f8:
f0:0f:ff:0b:f0:96:3d:c9:31:f8:24:ca:e9:f2:6b:
c3:6a:7b:00:13:94:93:57:25:7f:e0:50:5b:4f:d8:
c6:b2:7a:59:a5:df:f1:d4:53:5f:74:db:a7:ba:fe:
4c:bd:b4:f0:1d:d7:bd:8c:0e:8e:8f:04:78:f9:db:
80:5f:35:d5:d8:ee:92:ca:7c:05:5d:cd:9f:fa:3e:
d6:15:73:1f:39:c1:43:a5:16:e5:cd:e4:b0:22:3a:
99:c7:6b:68:27:22:a8:62:7e:e1:ed:b7:66:dc:36:
9c:21:ab:55:8f:ef:cb:09:0e:58:d3:05:e3:65:fa:
00:65:e6:e7:57:8e:5e:39:05:11:4f:32:00:73:42:
95:71:74:47:57:18:b3:a5:2a:6e:3f:5a:bd:86:a8:
c8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:55:FC:82:73:44:7E:A2:31:E4:EC:B5:73:D8:4E:5E:17:17:0E:90
X509v3 Authority Key Identifier:
keyid:B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:6f:98:10:12:0f:47:52:56:03:12:26:44:a9:78:19:f8:33:
b4:33:ca:56:f6:f8:ed:6b:83:2f:36:6d:bc:bd:37:68:0b:c8:
c8:75:63:bc:4b:5c:a5:05:20:05:63:35:0c:b8:93:1a:4d:19:
26:d6:de:68:fe:e8:f8:6c:1b:e7:5b:bd:27:d1:2b:db:31:2b:
eb:b1:68:64:f5:0d:ac:12:18:6f:36:c4:5b:95:a4:36:f0:7e:
6e:34:04:78:5a:99:49:7c:cd:d1:50:86:e1:79:88:80:2e:0c:
fa:b8:df:a5:d0:99:00:05:60:22:df:81:53:92:34:9d:a0:c6:
fe:77:fd:4e:60:a3:39:a7:29:3b:07:5b:1d:0d:8e:26:48:2d:
d2:cc:06:4e:c5:51:f7:c2:9d:fc:3e:30:82:e5:0e:f0:4c:de:
89:a5:9a:01:85:96:c0:5a:36:d0:29:28:36:01:d2:d7:04:b1:
3e:ee:2e:00:d7:e8:a3:e3:4e:09:37:58:14:e2:25:3a:5f:1b:
8d:f6:02:f0:1b:a3:96:65:a0:3b:bb:fa:b2:5c:59:e4:45:81:
4a:e0:35:eb:59:48:10:45:1c:af:09:67:c0:38:78:7f:6e:e7:
ff:b3:18:65:40:1d:8e:8f:a7:aa:fe:1d:71:4a:50:2a:7e:5f:
56:0b:f3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:34:52 2025 by rpki-client