This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft
File: u4lwRaiPyB_M_jjl92FYT9y6zoU.mft (raw, json)
Hash identifier: riLNudpZl82CsGzu0D9CfkHDvjLjFaWDwRKYYcNiH7w=
Subject key identifier: A4:2C:56:0E:DA:B9:C4:74:5E:6D:ED:30:86:F6:49:1F:84:E6:2B:03
Authority key identifier: BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85
Certificate issuer: /CN=A9128553/serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85
Certificate serial: 033F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft
Manifest number: 0337
Signing time: Thu 04 Dec 2025 23:26:01 +0000
Manifest this update: Thu 04 Dec 2025 23:26:01 +0000
Manifest next update: Thu 11 Dec 2025 23:26:01 +0000
Files and hashes: 1: u4lwRaiPyB_M_jjl92FYT9y6zoU.crl (hash: RoH9W1ouMMNpJ0WLd1xsT/Yy3r5BcD/vYl+EH8cP8bk=)
2: AB8BCCA8908011F0B114A05CC4F9AE02.roa (hash: 1T0eskndL4iFaUJFcifTZvjR+o1R27ZKYdF+XD5eXWc=)
3: 5B4371EC907B11F085A8B481C4F9AE02.roa (hash: KjJmL1gLMQuW3NghzJwADbK1HaHP/M/oXcXExJSaN+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl
rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 831 (0x33f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128553, serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85
Validity
Not Before: Dec 4 23:26:01 2025 GMT
Not After : Dec 11 23:26:01 2025 GMT
Subject: CN=69321889-bef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:58:74:52:b9:8a:5f:05:ae:89:1e:8b:bc:8a:
af:d2:8d:12:0a:d4:1c:d1:0f:8b:d7:1a:0e:54:65:
be:f6:86:cc:d4:f4:fd:49:67:dd:96:13:86:07:f6:
e7:70:73:65:fc:ee:b7:2c:57:26:91:b6:72:c8:4e:
62:69:87:f9:46:ac:4f:21:e7:e4:9c:ce:20:fc:ff:
8f:6a:5f:95:9f:7c:08:7f:fd:39:7e:53:6b:62:66:
47:a1:0c:fa:58:93:65:8d:86:fc:44:15:20:ed:b4:
61:d7:85:86:4b:e7:37:89:41:37:e3:24:be:45:64:
80:2a:7f:b4:d5:5e:07:c0:8f:25:ef:97:7e:b2:7c:
08:62:f8:c1:e8:6f:7d:30:04:27:9e:f1:40:1a:b1:
09:df:10:c2:aa:82:f2:5c:5c:79:be:a1:80:0f:57:
2f:b1:70:f1:e3:13:04:11:3d:5e:f1:03:da:98:fb:
0d:06:8e:35:d4:ee:71:30:b3:c8:ff:69:a6:6c:7c:
d9:a3:19:ba:26:21:46:cc:f4:6d:95:fa:8a:45:4f:
e0:c8:25:9a:54:42:a8:ae:68:47:78:f4:a5:7a:f6:
dc:9b:b5:81:8b:2e:ad:fa:c0:6b:0c:4c:ca:a1:c5:
c6:13:4c:df:2f:1f:f8:c8:9d:8a:59:b0:cf:4e:55:
3f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2C:56:0E:DA:B9:C4:74:5E:6D:ED:30:86:F6:49:1F:84:E6:2B:03
X509v3 Authority Key Identifier:
keyid:BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:08:8c:23:cd:8a:06:b1:88:3a:f6:26:f1:83:4f:8e:22:6f:
80:2b:3b:11:03:59:53:eb:c7:a3:30:e4:99:fc:83:2d:43:3e:
4c:de:37:9b:8d:c9:b9:94:b9:df:27:c1:bf:b8:29:85:fe:0b:
fb:81:cc:35:45:6e:3e:07:ab:87:13:2b:fc:21:a3:93:c3:41:
50:e9:0b:af:d7:4b:65:2a:da:78:f0:4d:00:af:1f:92:42:ee:
c4:5e:8c:c5:32:d5:b2:62:f3:0f:f9:c1:36:32:9f:87:c5:31:
61:67:41:20:1e:65:33:de:76:ba:74:e8:b8:b2:2c:46:ca:69:
dc:eb:09:49:4b:f3:d1:58:ee:d2:1e:b5:43:bc:dd:95:d5:2f:
ba:17:be:35:da:f0:fe:f8:f3:fe:b4:3c:77:ea:7c:55:4c:5b:
d3:82:0a:e8:43:69:df:5f:45:3d:12:c9:fb:a9:ad:e4:ec:c0:
3c:21:6f:91:18:2e:45:19:d1:b7:5a:e3:f0:67:84:de:40:85:
78:9b:71:9b:1b:7f:4f:09:fb:e4:97:02:89:0d:c9:b3:d8:7c:
6e:52:46:f6:0b:6c:b0:9e:d9:02:da:f7:3b:20:7e:80:ad:ba:
bc:cb:39:a0:b3:d1:0a:25:87:7d:04:d1:9c:cf:9d:93:da:31:
23:52:c6:ea
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjg1NTMxMTAvBgNVBAUTKEJCODk3MDQ1QTg4RkM4MUZDQ0ZFMzhFNUY3NjE1ODRG
RENCQUNFODUwHhcNMjUxMjA0MjMyNjAxWhcNMjUxMjExMjMyNjAxWjAYMRYwFAYD
VQQDEw02OTMyMTg4OS1iZWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvVh0UrmKXwWuiR6LvIqv0o0SCtQc0Q+L1xoOVGW+9obM1PT9SWfdlhOGB/bn
cHNl/O63LFcmkbZyyE5iaYf5RqxPIefknM4g/P+Pal+Vn3wIf/05flNrYmZHoQz6
WJNljYb8RBUg7bRh14WGS+c3iUE34yS+RWSAKn+01V4HwI8l75d+snwIYvjB6G99
MAQnnvFAGrEJ3xDCqoLyXFx5vqGAD1cvsXDx4xMEET1e8QPamPsNBo411O5xMLPI
/2mmbHzZoxm6JiFGzPRtlfqKRU/gyCWaVEKormhHePSlevbcm7WBiy6t+sBrDEzK
ocXGE0zfLx/4yJ2KWbDPTlU/3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQsVg7a
ucR0Xm3tMIb2SR+E5isDMB8GA1UdIwQYMBaAFLuJcEWoj8gfzP445fdhWE/cus6F
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU1My8xNjRBQkVDNEVC
MEIxMUVDODVFM0RCMkNDNEY5QUUwMi91NGx3UmFpUHlCX01fampsOTJGWVQ5eTZ6
b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3U0bHdSYWlQeUJfTV9qamw5MkZZVDl5NnpvVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODU1My8xNjRBQkVDNEVCMEIxMUVDODVFM0RCMkNDNEY5QUUwMi91NGx3UmFpUHlC
X01fampsOTJGWVQ5eTZ6b1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDACIwjzYoGsYg69ibxg0+OIm+AKzsRA1lT68ejMOSZ/IMtQz5M3jeb
jcm5lLnfJ8G/uCmF/gv7gcw1RW4+B6uHEyv8IaOTw0FQ6Quv10tlKtp48E0Arx+S
Qu7EXozFMtWyYvMP+cE2Mp+HxTFhZ0EgHmUz3na6dOi4sixGymnc6wlJS/PRWO7S
HrVDvN2V1S+6F7412vD++PP+tDx36nxVTFvTggroQ2nfX0U9Esn7qa3k7MA8IW+R
GC5FGdG3WuPwZ4TeQIV4m3GbG39PCfvklwKJDcmz2HxuUkb2C2ywntkC2vc7IH6A
rbq8yzmgs9EKJYd9BNGcz52T2jEjUsbq
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:33:08 2025 by rpki-client