This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
File: uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft (raw, json)
Hash identifier: ERUYR7qbZoPqs/UCCvAo1dHp0p51HhMSGAmcp8juLnE=
Subject key identifier: A0:45:F5:36:40:49:EE:F7:AC:BE:3A:8E:BC:84:53:80:0A:6C:C2:74
Authority key identifier: B9:A0:BE:FF:92:AF:7C:DE:19:00:85:05:2F:1F:4F:1F:92:BD:A4:F2
Certificate issuer: /CN=A9133E16/serialNumber=B9A0BEFF92AF7CDE190085052F1F4F1F92BDA4F2
Certificate serial: 0946
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
Manifest number: 0946
Signing time: Thu 04 Dec 2025 19:23:03 +0000
Manifest this update: Thu 04 Dec 2025 19:23:03 +0000
Manifest next update: Thu 11 Dec 2025 19:23:03 +0000
Files and hashes: 1: uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl (hash: k0aJlg8u2Usc2Yogw8DtHDRL+mekck0wIiZe7JGOLMg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl
rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2374 (0x946)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133E16, serialNumber=B9A0BEFF92AF7CDE190085052F1F4F1F92BDA4F2
Validity
Not Before: Dec 4 19:23:03 2025 GMT
Not After : Dec 11 19:23:03 2025 GMT
Subject: CN=6931df97-a1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:07:14:da:a3:d0:df:8e:a0:1b:9a:36:44:
17:0d:d6:3a:d3:ae:40:64:cb:d1:c7:68:38:2b:a0:
db:2d:10:f0:5c:7d:09:83:ae:08:0d:54:8e:a6:46:
ac:df:fa:9f:c5:3b:8a:13:9b:f3:a2:25:a0:04:08:
cc:5e:9c:0a:62:5f:91:5a:bf:42:f8:86:8d:6c:2d:
ef:72:cf:90:e1:bd:7d:cb:22:54:eb:70:fc:32:03:
99:17:33:f3:70:33:f0:6f:c9:f3:0d:b8:5c:ac:ee:
a7:88:f3:ac:05:41:c2:3e:df:0e:0b:db:e9:38:06:
cb:44:64:ad:43:13:1f:24:0d:f3:a2:1a:02:75:ca:
f5:a4:9c:57:b2:d3:7b:8b:d6:ff:29:bc:e7:6c:e0:
ff:dc:e5:4e:4f:aa:4a:dd:c5:37:a1:ce:c4:3a:db:
eb:01:de:f3:8b:36:6b:c4:d6:1f:2f:e1:84:be:a6:
57:6f:b1:ae:36:29:cd:73:e0:69:7c:f2:44:7e:4f:
5b:57:2e:12:3a:71:1d:71:03:5d:3e:15:62:01:64:
09:77:01:1d:9b:5b:04:e4:6d:df:aa:b7:7d:37:66:
71:c8:7b:14:8a:21:69:84:45:91:78:cb:1d:8e:9f:
24:a1:ee:3c:99:7c:28:05:6b:03:74:66:92:b9:2f:
55:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:45:F5:36:40:49:EE:F7:AC:BE:3A:8E:BC:84:53:80:0A:6C:C2:74
X509v3 Authority Key Identifier:
keyid:B9:A0:BE:FF:92:AF:7C:DE:19:00:85:05:2F:1F:4F:1F:92:BD:A4:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:a0:17:20:c1:40:b5:1a:b0:d6:98:84:a8:16:20:0d:6d:21:
6e:77:f0:1d:f5:fa:be:69:dd:03:96:0f:74:38:d9:df:a1:58:
e3:12:0c:ca:75:ac:a6:e5:2e:d7:9f:71:54:3f:30:b3:d7:5a:
08:6e:04:e5:2e:4c:46:8c:7d:f7:db:26:9b:6c:f1:c4:11:fe:
99:cf:52:22:a4:68:38:01:1b:72:7a:87:10:eb:0c:b8:0c:aa:
85:ea:97:e4:70:59:51:c3:47:75:ff:f4:95:d4:98:9c:20:f1:
ff:73:87:70:76:94:3d:84:66:15:12:49:a2:15:b1:dd:5b:a3:
30:56:ea:49:68:08:0a:ce:f9:a5:65:71:cb:e9:77:b3:b8:c2:
b1:44:71:d6:2f:5f:28:82:bf:55:80:71:5e:89:6a:01:1a:74:
00:f2:66:d6:79:f1:79:f4:be:7f:65:f0:d5:f0:d9:5c:3b:78:
8f:2a:25:14:11:20:4d:07:5a:66:06:12:11:ce:d9:82:8c:ad:
aa:ca:67:22:e5:21:36:aa:d6:58:f1:45:76:83:bb:5f:90:8d:
d2:3b:96:e9:d0:2f:03:93:d6:8b:1f:d9:2b:f5:9c:4c:c6:f2:
59:e9:50:0a:87:dc:f4:5d:bf:ac:1f:62:a6:fb:89:e7:83:69:
6a:fb:e1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:25:09 2025 by rpki-client