This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
File: UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft (raw, json)
Hash identifier: Bp/7PNBS3KhCCTT4GdN8J5Po1z7i+/2LQbJbD/102OM=
Subject key identifier: 04:01:8A:34:FC:FA:4A:2A:BC:08:AA:E0:EA:C4:69:ED:03:90:6B:54
Authority key identifier: 53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF
Certificate issuer: /CN=A9159967/serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
Certificate serial: 20F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
Manifest number: 20D0
Signing time: Sat 06 Dec 2025 15:40:31 +0000
Manifest this update: Sat 06 Dec 2025 15:40:30 +0000
Manifest next update: Sat 13 Dec 2025 15:40:30 +0000
Files and hashes: 1: UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl (hash: 9GWT0KFGT+4vyrelHzZ2y6e2kKkLTj+jlFuK63Jr4+Y=)
2: F79267D61E4011E6945BEB0DC4F9AE02.roa (hash: ebbHAc3H1xs8yb83KOxdepldMzKZEG2KB/oj0PgrPl0=)
3: 2991FB703EBC11F0B4390D6CC4F9AE02.roa (hash: ISWHnAnupcgdEe8p2mboULpSfRcbxX3lISCXNa8ynQ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl
rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:40:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8432 (0x20f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159967, serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
Validity
Not Before: Dec 6 15:40:30 2025 GMT
Not After : Dec 13 15:40:30 2025 GMT
Subject: CN=69344e6f-7858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:9a:a1:26:16:61:f0:67:39:50:79:c3:39:
25:ac:dd:7d:be:cd:9a:2f:b2:99:f8:33:c2:cb:bb:
98:c3:f6:df:df:9b:27:e2:53:de:71:88:db:55:a2:
ba:6f:b4:f6:37:c1:57:86:f4:f0:ac:7d:85:b1:e6:
a1:3e:e6:61:55:e4:bd:98:bc:6d:ef:61:e6:49:91:
78:d8:f5:cf:00:8e:e0:3c:32:6c:e2:c8:7f:4f:e0:
4e:9c:fe:3e:b0:59:a3:66:b3:3f:2a:88:26:51:0f:
e7:5a:67:c6:e8:60:9b:55:d5:9a:ee:7f:2c:f7:22:
35:28:ac:59:47:6d:61:6c:c7:a8:19:db:63:c8:4f:
45:45:8d:03:21:20:b3:fc:f6:93:38:25:80:7e:47:
d9:bf:1d:90:c7:f1:88:42:63:04:8e:10:d1:23:66:
64:03:82:f2:d0:ac:06:a9:cb:97:ff:b0:31:59:fd:
da:f5:e8:d4:04:01:45:ee:3b:55:6a:d7:4b:00:46:
e8:dc:0a:da:34:68:fa:ef:5c:49:25:c1:25:16:15:
e3:ce:63:7f:11:cc:c3:91:64:1a:23:d8:e1:39:f7:
bd:66:8c:e1:ab:62:13:0f:d2:72:3a:02:af:a8:a6:
72:7b:f3:00:88:c2:05:f0:32:19:04:a9:29:e3:f8:
e7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:01:8A:34:FC:FA:4A:2A:BC:08:AA:E0:EA:C4:69:ED:03:90:6B:54
X509v3 Authority Key Identifier:
keyid:53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:cb:44:fe:fc:d5:fa:90:45:69:40:9a:e7:35:27:7f:60:d5:
d1:c7:eb:93:f3:40:a3:58:ab:0a:98:ef:0d:02:cd:d7:17:0d:
eb:90:aa:79:11:b8:b7:d7:c4:c1:5f:70:b8:93:43:a5:42:56:
0b:c3:22:7e:44:b2:e8:38:72:15:84:a7:a9:b4:c9:21:5d:b9:
6d:c4:54:dc:c9:33:68:aa:54:b5:b8:01:96:27:ee:52:00:bc:
61:a0:b1:fc:bd:51:3a:2a:f5:6d:22:7a:da:73:eb:32:80:b9:
ef:72:d8:62:54:32:96:ac:2b:2c:e3:a9:44:e5:6b:c3:00:ca:
e9:1c:84:c2:86:2e:c9:e4:87:43:f4:17:c7:98:fe:53:d3:bf:
11:a5:03:7e:a9:99:fb:12:58:77:5f:87:5b:07:a8:c2:0b:2b:
98:6a:aa:71:82:98:1e:54:58:f8:22:a9:47:b0:e1:94:62:47:
b5:12:d2:99:1b:2a:63:11:39:b8:09:b9:90:ac:74:d1:0e:eb:
bb:d7:ac:98:7f:4b:86:17:74:70:15:d7:6e:75:dc:23:d8:48:
24:d9:f0:b9:cf:89:47:8f:63:57:b7:28:65:97:ad:c7:26:bb:
bc:ee:15:f7:85:a6:28:07:d6:a4:76:a7:b9:d3:a9:b0:93:da:
06:53:2c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:19:17 2025 by rpki-client