This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft
File: Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft (raw, json)
Hash identifier: speSSJf2NTL1e1+e2mSk7SQ9kKx689K+cFTmtbEb/vw=
Subject key identifier: 07:DC:FD:6F:B8:DC:59:C5:71:80:18:C9:E0:59:74:D4:E6:31:4F:F1
Authority key identifier: 53:2E:70:54:C4:71:BF:F2:ED:7A:6A:18:8E:D3:73:63:65:E4:60:8A
Certificate issuer: /CN=A9149ACD/serialNumber=532E7054C471BFF2ED7A6A188ED3736365E4608A
Certificate serial: 33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft
Manifest number: 32
Signing time: Fri 05 Dec 2025 05:23:53 +0000
Manifest this update: Fri 05 Dec 2025 05:23:53 +0000
Manifest next update: Fri 12 Dec 2025 05:23:53 +0000
Files and hashes: 1: Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl (hash: V6bEeTU9OkAZwzncg+an1Rv9rRa6FSdRGkwq9bcw8iw=)
2: 286C872684B011F08D2ED42CC4F9AE02.roa (hash: zLa9BDHDG7v+U27ctD90rRBbm+JhYqq8GC5uRJX34CA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl
rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:23:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149ACD, serialNumber=532E7054C471BFF2ED7A6A188ED3736365E4608A
Validity
Not Before: Dec 5 05:23:53 2025 GMT
Not After : Dec 12 05:23:53 2025 GMT
Subject: CN=69326c69-4663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:4b:cd:72:d7:20:f7:a5:08:5e:6d:98:34:
64:d2:d2:a8:c0:b1:1c:68:58:d8:eb:df:4e:80:5e:
94:49:8a:14:e6:ca:41:34:6c:40:8a:a6:99:b5:af:
af:2c:dc:17:aa:c0:1c:0f:27:79:b7:7a:eb:49:6f:
08:4a:15:53:8f:c9:60:fb:b1:ef:12:59:e5:97:a5:
92:d7:6d:be:80:b6:39:b4:b7:55:f0:84:b5:c3:50:
0e:be:a5:81:76:71:14:5a:30:9d:4e:23:93:85:c0:
e0:0c:9c:1a:43:b6:2e:26:e9:d4:02:67:c6:c1:5b:
50:2b:6e:34:81:b9:ec:db:fe:c7:e4:b4:85:72:fe:
ed:b7:48:66:24:1a:b4:94:e7:8c:e9:17:cf:58:d4:
fd:4e:8f:19:d7:d7:98:bb:64:6c:7f:46:60:33:a8:
6c:d6:45:08:d1:0e:ce:b4:45:1c:83:15:77:70:9b:
c3:2c:6d:50:f4:82:0d:3f:65:a5:67:4d:28:a5:a6:
ae:03:b8:7b:a6:94:00:5b:69:a5:05:86:75:4e:e4:
d6:25:c8:24:3d:7b:cc:91:e1:1d:09:80:21:94:03:
39:04:3e:85:f4:6b:eb:0e:d8:7f:dd:1a:56:32:63:
cb:d4:89:7b:b3:fe:5e:11:aa:1c:5a:72:51:12:80:
74:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DC:FD:6F:B8:DC:59:C5:71:80:18:C9:E0:59:74:D4:E6:31:4F:F1
X509v3 Authority Key Identifier:
keyid:53:2E:70:54:C4:71:BF:F2:ED:7A:6A:18:8E:D3:73:63:65:E4:60:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b7:51:51:d4:f2:e5:0a:89:e3:e3:07:15:f8:5b:a5:b3:c5:
be:db:b3:8c:e7:ae:d4:f5:0b:07:35:55:c3:9b:08:70:8d:e6:
4a:be:3f:6d:5c:5c:ea:74:08:8b:71:2c:2b:63:ee:58:21:fe:
12:82:4d:6d:61:ca:b3:95:9b:0e:fb:25:26:f1:5b:e9:aa:07:
fb:40:e1:93:ed:36:b9:ba:44:f5:12:31:6f:22:5f:36:38:aa:
84:d2:42:6f:b4:d8:a4:8a:7f:da:5f:a4:b1:c4:ff:b8:24:40:
ff:5e:fb:35:70:59:8c:d0:5d:57:d5:02:aa:91:41:a3:44:14:
ae:e7:42:fa:ac:41:0b:e2:d5:dd:9a:be:77:f3:60:7f:a5:78:
51:cc:e6:60:ea:7a:ad:b9:df:47:0a:a8:b0:3a:05:db:4b:42:
3d:86:f2:14:87:02:d2:96:d2:82:26:1a:1c:2b:c4:f9:aa:15:
53:64:8c:03:18:24:ba:f4:07:80:49:bb:76:b6:17:b9:d4:e9:
fb:bd:90:97:5f:61:1c:13:9a:f4:0a:85:b9:59:a4:17:5b:3d:
ec:17:5e:e0:79:7e:ff:d7:8b:fa:3c:df:10:8e:f2:3d:82:6c:
c8:3e:2d:c3:45:8b:de:e3:1b:28:43:d8:a1:da:8b:95:58:63:
f2:d5:03:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:42:09 2025 by rpki-client