This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
File: kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft (raw, json)
Hash identifier: n9M8lJxB39HeUaJtam/KIi99H9os7IzNy1Oo2xIucI8=
Subject key identifier: 66:1F:3A:75:9A:C5:75:94:D3:01:3C:CD:BA:10:1D:2C:7C:F5:12:00
Authority key identifier: 91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66
Certificate issuer: /CN=A9155806/serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
Manifest number: E8
Signing time: Fri 05 Dec 2025 03:26:13 +0000
Manifest this update: Fri 05 Dec 2025 03:26:12 +0000
Manifest next update: Fri 12 Dec 2025 03:26:12 +0000
Files and hashes: 1: kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl (hash: vcPSEYtmkIs69ArTtJm2FjOP7PdpcMAEtHaETD56Dvg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl
rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:26:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155806, serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066
Validity
Not Before: Dec 5 03:26:12 2025 GMT
Not After : Dec 12 03:26:12 2025 GMT
Subject: CN=693250d5-2cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d3:a5:42:c6:da:fe:ee:2a:78:75:92:fa:6f:
b4:53:02:0d:58:bd:02:08:70:4a:4f:4a:88:f5:a9:
23:23:93:06:89:18:b4:15:74:7b:09:12:d4:0b:ac:
13:63:01:be:d0:6f:91:dd:fa:3c:97:6b:20:9a:34:
55:76:00:1f:88:65:15:bc:ad:77:8c:a2:46:d3:8d:
ab:47:43:95:e3:ae:fe:04:b8:e9:e7:47:4a:6c:5b:
50:0a:3d:f8:36:a3:60:34:49:f5:78:df:e6:af:77:
c1:a2:1e:f5:d7:85:ed:21:b7:6e:a3:0b:c8:e4:31:
d2:30:21:8b:1c:63:a9:61:3d:54:01:28:21:0c:9d:
c8:99:0b:a7:2f:c5:7c:5f:72:34:29:1c:93:65:1e:
6b:b9:6c:fe:df:28:3a:a4:1d:da:d5:93:b7:bc:d1:
56:4b:03:df:fa:b7:6d:cc:e8:cd:d3:93:f3:58:74:
e1:50:36:72:00:68:fe:8c:14:a1:43:63:f8:43:22:
e0:44:1d:8e:48:6b:41:e3:f7:fe:b6:e8:1e:6d:fd:
a0:4b:49:c4:05:c0:a5:63:74:b5:25:ee:c4:46:56:
9c:74:b8:fa:07:91:27:c1:28:fe:7d:be:4d:68:71:
55:ca:7d:5a:67:d9:0f:84:13:ea:f0:a7:83:40:a1:
85:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1F:3A:75:9A:C5:75:94:D3:01:3C:CD:BA:10:1D:2C:7C:F5:12:00
X509v3 Authority Key Identifier:
keyid:91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:89:5d:9d:a0:8f:48:02:52:45:24:a2:76:c4:be:d5:85:cd:
2d:0b:ee:48:74:3e:97:18:72:98:ad:4e:7d:de:7e:55:b0:97:
23:dc:1b:f0:3a:10:c7:39:f9:ce:c4:52:a3:75:b7:46:e0:9f:
fe:f6:04:c1:4f:61:6b:af:9d:4b:e7:59:42:75:cd:6e:63:a8:
97:3b:d3:1c:95:e5:a1:e7:56:82:b0:70:02:4d:bf:12:5a:99:
68:4e:5e:f5:ea:4c:3f:ab:5b:c5:28:ff:0d:a1:b5:f6:1e:9f:
95:b7:42:46:ca:a0:c4:b4:76:b8:9b:0a:68:68:6f:7e:f2:93:
20:7a:cc:d1:23:7d:e9:b3:5c:54:96:d3:e2:16:4c:80:e1:18:
ae:d6:11:0c:d8:0e:a4:b0:31:08:4d:8c:49:65:33:f3:92:54:
e3:3b:3d:fa:aa:02:7d:61:65:5e:55:72:73:f2:7e:61:ba:73:
36:c7:8b:4f:da:12:52:a7:d9:cd:ca:af:ac:a9:0e:29:23:02:
98:10:e3:9e:98:ee:61:05:94:a2:fa:9b:54:21:b1:4d:de:6d:
77:20:f7:d7:56:9e:b7:a2:4e:53:2a:82:97:6a:e3:e3:06:78:
12:2c:db:0e:35:63:73:9a:ec:cd:c3:95:8d:a4:b5:e8:65:96:
cb:a7:84:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:24:52 2025 by rpki-client