This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
File: UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft (raw, json)
Hash identifier: KaKM3QYk1iT85YmFcLsrnGHYpuEpTI5J7OY6ANeq9bA=
Subject key identifier: 34:BB:43:56:4C:35:8A:40:F9:9C:26:65:38:46:3A:45:EE:AD:B0:B2
Authority key identifier: 53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56
Certificate issuer: /CN=A911BAD6/serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656
Certificate serial: 0279
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
Manifest number: 026E
Signing time: Sun 07 Dec 2025 00:11:00 +0000
Manifest this update: Sun 07 Dec 2025 00:10:59 +0000
Manifest next update: Sun 14 Dec 2025 00:10:59 +0000
Files and hashes: 1: UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl (hash: 3jpaxHDu9spMBv/ZyRE5zeiiR6PnK1LLMhrWzd+MPQc=)
2: B288EC9C870811F0A371DD81C4F9AE02.roa (hash: B822H39ccq9AkgBM7KMLjKKRoyj+1eXb0PxHzSH94G0=)
3: 35CBA9EC70D311F08BF5B035C4F9AE02.roa (hash: vwYJIXjTo9ECl3lyEIwlgLb2E4b1+3qq0PZxG+xCgow=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl
rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 00:10:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 633 (0x279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BAD6, serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656
Validity
Not Before: Dec 7 00:10:59 2025 GMT
Not After : Dec 14 00:10:59 2025 GMT
Subject: CN=6934c613-37cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:88:cf:cb:55:4c:d7:68:d8:e0:35:2e:5c:cd:
b5:6c:e8:38:a9:50:49:99:84:c5:da:cc:8d:cc:5d:
91:60:0a:eb:1a:ae:38:47:1e:64:7c:14:37:f0:a6:
fd:35:25:e3:ac:99:81:2c:6a:20:02:8c:59:a5:12:
dd:bf:c7:81:75:40:72:11:f3:c0:2d:db:c7:62:e0:
ed:e5:95:8a:95:b4:77:4b:71:6d:b1:27:e9:ee:69:
6a:82:2e:f2:6d:00:37:f8:28:e2:f1:8c:ee:f9:7c:
0f:48:93:54:78:d8:14:0f:f3:ea:4e:50:87:06:bf:
62:25:4c:a0:a1:58:04:3d:6b:f8:a0:63:7a:a2:50:
ec:36:45:d0:f2:94:95:a0:ed:53:8b:72:e3:98:3b:
5a:e2:da:b3:5a:11:a4:52:c9:43:3e:1e:a8:c9:38:
05:75:ac:93:05:c4:a6:b3:21:b2:8f:63:69:59:9b:
bc:fb:77:18:b2:0f:19:b2:07:ab:ca:e0:cb:b9:4c:
6c:56:4f:47:53:e8:a0:2c:e5:24:3a:1d:bb:3f:a5:
eb:14:f8:50:99:9b:35:f8:0d:37:dc:ca:56:b6:c4:
77:4c:88:b6:56:b9:9a:8a:d0:60:dd:2e:3e:5b:1e:
d8:23:25:24:2a:e2:83:0a:23:5b:8b:b9:3a:b4:97:
10:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BB:43:56:4C:35:8A:40:F9:9C:26:65:38:46:3A:45:EE:AD:B0:B2
X509v3 Authority Key Identifier:
keyid:53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:00:7c:d3:35:36:33:86:da:c1:21:54:2e:68:ed:a5:41:0a:
ac:a0:c5:77:03:11:0c:81:f7:44:5c:13:e5:07:3a:56:55:4f:
d2:36:24:af:ee:91:8e:13:a8:02:5a:34:e5:28:6f:a1:53:fd:
a8:c9:c1:d5:a7:a9:7b:98:25:7b:67:23:d7:50:d5:64:12:1a:
6d:d3:3e:4c:30:91:72:f4:33:0f:12:80:b4:0e:41:2d:1e:8a:
94:f7:92:74:f8:be:04:65:bc:71:8d:eb:3a:43:3b:b0:4f:f0:
ac:3b:cf:b5:4b:59:2b:d4:26:e6:f9:8f:1f:73:d0:74:16:83:
14:84:50:32:26:39:b1:5b:b4:9a:ee:26:a7:f9:23:59:ea:93:
12:2d:ff:8c:a2:87:2e:ae:36:da:2c:89:5f:2e:1c:25:06:52:
7f:74:bd:6c:06:ea:06:a4:40:b7:4b:6a:14:f7:78:fe:6d:87:
4f:45:0c:b7:40:76:f8:5f:f8:f8:df:18:9a:4c:e2:63:cf:7b:
01:17:5b:78:4c:8b:14:35:64:fc:aa:5d:8b:01:77:67:16:45:
9a:67:5b:7c:cc:28:bc:9f:ca:2b:44:19:b9:04:30:e1:ee:d3:
f3:8e:2f:ed:8c:e8:69:58:17:dc:94:dc:bf:da:ee:97:1d:5f:
2c:41:9a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:59:38 2025 by rpki-client