This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
File: UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft (raw, json)
Hash identifier: V3bs/6cKSgFCP6YOWxbTbmoXtSxdnHM/2iEX1NXiIFo=
Subject key identifier: 75:2E:FC:98:D3:B5:4B:C2:4D:2F:C0:08:A4:18:98:D5:77:76:1A:1C
Authority key identifier: 51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2
Certificate issuer: /CN=A9139A90/serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
Certificate serial: 0114
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
Manifest number: 0110
Signing time: Fri 05 Dec 2025 02:58:49 +0000
Manifest this update: Fri 05 Dec 2025 02:58:48 +0000
Manifest next update: Fri 12 Dec 2025 02:58:48 +0000
Files and hashes: 1: UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl (hash: SaGkgrnlrp5YYOUxkBTy3FO6QziKCIgxlD7ave89la0=)
2: 8B584EC2337D11EF9D71B72DC4F9AE02.roa (hash: yZ1LidZrlFrNTxapIhIsCTEZZK7lTYC0s/4RKHkPEsg=)
3: AE977DF8337E11EFB3CCD72FC4F9AE02.roa (hash: OJdZE6RjgM3Hz2T07Mg2BJv0nC0BL01Q/08oABlyEMA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl
rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:58:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276 (0x114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139A90, serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
Validity
Not Before: Dec 5 02:58:48 2025 GMT
Not After : Dec 12 02:58:48 2025 GMT
Subject: CN=69324a69-83f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:36:79:7d:29:16:46:82:c8:42:22:a9:66:48:
87:58:9a:91:88:95:6b:74:37:c1:70:af:97:34:ee:
33:41:39:89:f5:79:04:bc:a7:8c:ac:56:37:90:56:
73:85:e2:41:98:20:1a:8f:de:38:87:8a:af:f0:1b:
4c:f6:31:1b:24:6a:1e:28:93:8a:78:e9:67:b4:c7:
d1:d3:23:01:54:10:04:6f:78:a2:b7:fe:c7:97:eb:
dc:1e:25:4a:da:b6:44:bc:ed:2b:ff:3b:1d:b3:59:
fd:4f:71:3d:01:67:20:b1:30:13:bd:67:d5:c6:dd:
3c:c8:db:da:53:66:df:c5:10:d2:35:df:66:27:f6:
df:3c:0e:21:9b:c1:8f:59:53:a0:79:63:a4:e5:04:
7b:9c:34:3d:67:ae:18:ee:90:a0:f1:22:20:67:84:
55:8a:55:50:5c:d8:2d:66:e6:fe:52:07:18:2a:b6:
29:64:19:48:41:0e:3d:1b:38:7b:94:ed:7c:2e:62:
3b:6e:02:9f:73:41:2c:97:06:9e:38:b0:cb:84:e1:
e4:5f:d6:03:fc:af:43:67:eb:ca:e8:24:58:e0:78:
f3:cf:c7:5d:6b:6b:a7:78:ae:dc:69:8a:38:27:8a:
af:f1:c3:a0:7d:dd:ab:08:8a:53:b7:ff:0c:50:30:
4b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2E:FC:98:D3:B5:4B:C2:4D:2F:C0:08:A4:18:98:D5:77:76:1A:1C
X509v3 Authority Key Identifier:
keyid:51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:1a:76:fe:d6:1e:50:6d:07:ff:9d:b4:48:a2:e2:6f:1b:b4:
62:07:c4:e4:13:bf:40:32:83:fb:00:db:95:c8:7e:27:33:76:
57:11:fb:4e:fd:84:be:16:ba:d2:c1:a2:fe:b8:64:c5:db:da:
8c:b1:da:27:cb:2f:1d:75:e9:0a:c1:f2:fe:0e:28:cc:5d:4e:
1c:3a:0c:d2:b8:26:99:cd:aa:f7:33:90:7f:b8:75:8a:94:ca:
70:f9:f0:13:3d:e2:36:b5:45:88:4e:55:cf:11:55:04:72:16:
08:0e:60:c1:d6:88:26:34:9d:de:80:11:c3:fe:a1:1e:01:4b:
bf:7b:69:86:32:66:c5:bf:29:e9:8a:3a:35:7d:29:c6:19:2c:
7e:2f:98:2e:cd:fb:bf:8e:4c:d8:b6:f3:74:a7:99:17:c2:01:
75:28:55:03:52:2b:5c:d9:fe:fc:37:8b:a8:7f:79:37:e0:7d:
1b:a0:96:60:45:d4:df:b3:f4:af:6d:ac:13:e8:c3:dd:1a:76:
42:2a:f5:d5:c7:94:01:85:a9:d8:e0:84:7e:fe:ff:4d:a8:d9:
51:30:8a:06:ce:f6:63:24:8e:20:c7:90:6c:8b:04:e5:57:e0:
63:23:f2:2b:0a:48:5d:e2:3b:40:92:9a:98:51:fa:fc:4d:d9:
d8:3e:ac:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:25:53 2025 by rpki-client