This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft
File: UKsTEAVD9kbAxVN13vhQXRTzZrg.mft (raw, json)
Hash identifier: kgE5i/DHmkeQJ+pbouhyi+SoRKDAZ/y1Ce7+ThTJGFY=
Subject key identifier: 79:34:62:A8:16:2D:C5:97:A5:F0:CC:F6:28:27:8F:70:DD:9C:A3:EA
Authority key identifier: 50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8
Certificate issuer: /CN=A911270F/serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8
Certificate serial: 0B97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft
Manifest number: 0B91
Signing time: Thu 04 Dec 2025 18:22:34 +0000
Manifest this update: Thu 04 Dec 2025 18:22:33 +0000
Manifest next update: Thu 11 Dec 2025 18:22:33 +0000
Files and hashes: 1: UKsTEAVD9kbAxVN13vhQXRTzZrg.crl (hash: kP+uPoy+AuSpTM9xZLGTsHSkN64OP5+Jcw7/eVOqc7o=)
2: 74D2ABEE39F811EAA4343534C4F9AE02.roa (hash: WNF8DvI+W4AUYThET4ebOd4+s48ZJAgIRPErXZ/X2b4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl
rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 18:22:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2967 (0xb97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911270F, serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8
Validity
Not Before: Dec 4 18:22:33 2025 GMT
Not After : Dec 11 18:22:33 2025 GMT
Subject: CN=6931d16a-dbc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:14:ae:08:13:3d:aa:bd:37:77:57:7d:c6:98:
02:ef:6a:c4:91:bf:49:7c:04:d3:a4:e6:bd:0c:d3:
d0:88:3a:5f:ed:95:0a:db:45:7b:ce:86:4e:63:10:
a2:04:0f:b3:c5:72:49:64:c2:84:1e:c3:ac:30:09:
24:7f:30:94:21:91:56:c8:48:39:5b:24:dd:ea:40:
1e:36:82:bc:a9:6a:c5:d1:47:d7:92:17:d0:7a:80:
06:ac:47:96:01:8f:de:35:3a:5f:ca:cb:42:d8:73:
3f:67:ac:6d:e0:05:ef:eb:12:87:8c:6e:e7:a8:10:
4e:09:ff:a6:fe:98:be:37:6c:80:ca:40:96:48:eb:
43:72:a1:d9:3b:0a:21:5f:89:98:e1:97:d8:94:54:
14:55:7f:c7:3a:80:b0:1c:fe:d4:45:9e:c8:36:54:
df:c9:50:66:96:a0:63:53:c5:b5:59:62:e7:6c:c3:
be:78:c9:79:51:11:99:c5:2a:a1:8c:9f:c7:d7:66:
76:ec:c0:cd:7d:a6:7f:b5:9a:37:c9:ef:4e:03:3e:
c3:fc:80:c9:14:ba:38:fd:a3:87:e1:a2:82:3e:40:
53:98:3c:67:c6:06:ef:b7:48:83:d3:d7:32:36:c9:
d0:db:c9:dd:cd:57:97:12:5b:34:21:ac:b2:b6:9e:
7f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:34:62:A8:16:2D:C5:97:A5:F0:CC:F6:28:27:8F:70:DD:9C:A3:EA
X509v3 Authority Key Identifier:
keyid:50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:79:6b:ee:35:d7:42:99:17:49:d4:82:d4:81:12:32:e7:ec:
1b:6f:9f:ee:19:9d:db:eb:c9:c5:65:55:2b:e9:40:17:bc:b4:
4d:eb:e6:97:55:e5:06:9b:b2:b7:34:da:57:d0:b4:aa:ff:73:
50:01:86:f3:34:8f:87:df:bc:3b:d7:3f:e7:67:2e:bb:8e:cb:
ca:7f:82:e2:06:66:d5:d2:35:53:95:48:d3:8a:fe:de:6d:e6:
be:41:da:b0:aa:34:31:63:73:be:3c:6b:fd:fc:50:77:27:74:
88:8a:95:5c:a0:45:4d:80:cb:86:df:1c:59:d0:eb:24:b8:19:
e7:e4:b2:4b:01:05:45:8a:4d:af:e2:1b:83:9f:07:e4:66:68:
20:8b:f1:5b:78:3a:f5:65:9b:2c:74:af:87:ef:a8:64:ca:9c:
da:9d:70:1e:c0:f6:ec:ab:7c:d4:a3:69:b7:74:80:c4:10:fc:
0b:3a:9b:ec:39:e0:60:ac:87:77:73:7f:ab:45:52:94:a2:da:
1d:6f:14:eb:29:37:03:d5:5e:a5:a5:9c:2a:31:aa:6c:84:a4:
6e:62:c4:37:b6:54:24:f5:cd:cd:12:48:7d:5e:57:83:d6:40:
bd:84:31:ae:50:40:20:de:aa:ec:52:bb:93:bf:1a:04:7e:cc:
37:60:8b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:52:21 2025 by rpki-client