This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
File: kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft (raw, json)
Hash identifier: fIDIXmNfh1L/QqIiS4q6nYOX+FoIQ9GZi3L7oCaeaRE=
Subject key identifier: 51:C0:08:A0:14:C6:59:74:5E:A4:29:EF:3C:F8:4E:D7:D8:FE:42:81
Authority key identifier: 91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66
Certificate issuer: /CN=A9155806/serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
Manifest number: F0
Signing time: Sun 21 Dec 2025 04:28:12 +0000
Manifest this update: Sun 21 Dec 2025 04:28:11 +0000
Manifest next update: Sun 28 Dec 2025 04:28:11 +0000
Files and hashes: 1: kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl (hash: 47MaKcA5FMURW2Tvhy/x4d508AOb3PBqaE4mY7XSgFU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl
rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 04:28:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155806, serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066
Validity
Not Before: Dec 21 04:28:11 2025 GMT
Not After : Dec 28 04:28:11 2025 GMT
Subject: CN=6947775c-8c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ea:11:79:03:61:c0:31:a2:a2:46:48:7a:c0:
25:94:e9:3a:7d:4c:15:8c:a3:6e:81:33:14:ca:2a:
7b:c3:37:6d:b4:88:8c:b8:50:73:d7:9d:8e:6d:4f:
0a:59:58:3b:c1:3f:45:4c:a3:53:bd:c6:66:d3:96:
bf:27:41:c9:fe:a0:ce:1b:82:ac:7b:fb:33:de:f4:
6f:fc:17:b8:d4:e9:73:10:a8:fa:98:c7:94:74:98:
4e:52:13:b1:9d:68:31:cf:65:01:c5:a0:34:e7:0f:
4e:13:86:2c:17:ee:97:49:61:e9:7d:49:0f:87:73:
d0:b5:33:78:24:45:c0:86:0a:ce:50:ff:3a:77:a6:
ca:3b:b6:f2:11:19:72:4b:fd:bf:ae:07:99:73:80:
28:4b:6c:79:fd:77:e5:27:a6:e4:b1:d2:33:7b:fd:
90:c0:5a:90:06:f6:6a:ea:ec:ab:de:a1:33:c1:fa:
97:73:98:88:01:ba:b6:3a:87:69:20:1a:f5:c3:11:
98:b2:5e:d2:6e:c4:9e:2e:4c:68:0c:15:58:1b:5f:
a7:96:87:66:23:3e:5a:92:ec:0b:45:eb:16:da:88:
4e:b8:75:eb:4c:db:dd:28:5a:cd:bc:29:b6:d4:97:
0d:e1:66:55:7f:16:68:e7:3c:b4:60:25:97:8d:cd:
67:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C0:08:A0:14:C6:59:74:5E:A4:29:EF:3C:F8:4E:D7:D8:FE:42:81
X509v3 Authority Key Identifier:
keyid:91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:3d:0a:01:4c:48:e3:df:4d:97:9d:65:8f:4f:76:6d:8d:2a:
37:6d:c6:49:70:83:b6:11:f9:e4:86:52:8a:11:59:35:14:a9:
05:5a:02:81:08:9e:cd:d9:2d:cb:2d:96:3b:50:7a:4a:19:16:
05:35:e0:a7:59:ee:f7:7a:56:f9:7b:68:f0:fc:8a:fb:c0:b8:
b5:06:17:fc:41:43:7d:59:3e:0e:1a:58:4f:49:9f:5e:c8:ee:
17:00:51:7a:43:67:5e:50:c9:06:4a:ce:71:0f:0e:4e:11:bf:
a2:95:de:44:15:1c:1c:76:e7:05:bc:a8:21:48:b4:38:a7:06:
a0:a5:bd:09:1d:21:bc:d6:fb:82:dd:01:44:3c:c5:09:c4:28:
64:55:d3:e9:f7:d2:b6:75:d2:c0:17:1e:68:e6:b0:85:35:6c:
e0:0f:cb:fc:1c:2a:99:ce:fa:2c:d9:ed:d2:49:fe:44:dd:3c:
c7:69:ef:cb:48:9f:6b:cb:56:d5:7d:45:26:c6:7f:8a:00:30:
5f:e8:14:41:fa:2f:80:9e:1a:6f:1f:76:3c:c8:4b:e4:f1:4c:
e6:e0:6a:8f:37:5a:b7:dd:2e:36:49:2a:2b:e0:a1:88:8b:7b:
f8:91:56:13:4d:d7:6a:ed:50:02:02:9c:1f:f8:c5:35:1e:26:
c5:50:37:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 05:19:14 2025 by rpki-client