This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft
File: 5ufguvNPIMPZye8md2gF84JGO4Y.mft (raw, json)
Hash identifier: eHz+3ZUMEQ1BRBcnjquO1avUojK7piyYqyClq1otzho=
Subject key identifier: DF:E5:91:2D:35:E7:9E:FC:C8:E0:84:F8:A7:1A:EC:36:1E:E0:83:95
Authority key identifier: E6:E7:E0:BA:F3:4F:20:C3:D9:C9:EF:26:77:68:05:F3:82:46:3B:86
Certificate issuer: /CN=A9160BD2/serialNumber=E6E7E0BAF34F20C3D9C9EF26776805F382463B86
Certificate serial: 06D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft
Manifest number: 06CC
Signing time: Sat 06 Dec 2025 21:02:18 +0000
Manifest this update: Sat 06 Dec 2025 21:02:18 +0000
Manifest next update: Sat 13 Dec 2025 21:02:18 +0000
Files and hashes: 1: 5ufguvNPIMPZye8md2gF84JGO4Y.crl (hash: sqheCTN3mfhaL4rQWxn/+RTcekELIIDdJzKmXF599HU=)
2: 159A3C967D7211EBA0A7FF60C4F9AE02.roa (hash: Zxo0mKrJYkISVsqHRZIlLeBZhk5GaXEPMnvmTBTNLew=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.crl
rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1745 (0x6d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160BD2, serialNumber=E6E7E0BAF34F20C3D9C9EF26776805F382463B86
Validity
Not Before: Dec 6 21:02:18 2025 GMT
Not After : Dec 13 21:02:18 2025 GMT
Subject: CN=693499da-6906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:98:0c:be:ba:9e:80:b1:a5:ef:7b:ba:b7:91:
2f:3e:a6:7b:e4:58:c2:95:15:94:eb:4b:5b:ba:b2:
28:8d:5c:b8:da:d5:60:83:51:e1:b2:c8:2c:c0:20:
b2:d3:ef:6b:9b:01:b3:23:92:16:fd:c1:a3:8f:10:
54:3c:f8:6b:d3:aa:e5:c8:24:49:a6:16:53:a5:d6:
54:fe:5d:4f:6e:ba:fb:bc:7a:1c:8c:4a:d5:91:66:
78:50:75:58:9b:d9:99:59:bc:c6:e4:31:de:64:eb:
c6:b1:ca:9e:79:5d:c5:21:24:7c:31:64:67:93:81:
74:a7:2a:24:e2:da:cc:a4:f0:9f:1a:d7:69:33:00:
8e:64:db:3e:f1:55:f1:28:25:31:77:28:cd:6a:06:
67:0f:65:d9:51:2f:b3:30:ca:5b:a5:46:19:d0:ea:
a2:75:f6:a1:3b:22:02:fc:45:a5:6a:6a:b1:a2:a8:
40:72:c0:14:28:7c:d6:03:27:10:4f:f4:1e:78:7e:
a4:d7:71:70:be:fb:d7:5b:07:9d:b3:57:d1:ff:ee:
f3:58:95:03:c1:2c:74:6f:49:c5:d3:68:21:98:70:
f3:a3:dd:fb:e7:41:99:56:07:d4:57:57:e7:29:40:
6b:fc:5b:31:3a:b5:98:a8:fb:9e:6a:3d:86:c5:21:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E5:91:2D:35:E7:9E:FC:C8:E0:84:F8:A7:1A:EC:36:1E:E0:83:95
X509v3 Authority Key Identifier:
keyid:E6:E7:E0:BA:F3:4F:20:C3:D9:C9:EF:26:77:68:05:F3:82:46:3B:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:3a:0e:f6:64:c9:ff:d0:b1:6a:8c:84:21:aa:fe:1d:cb:dc:
66:d9:6c:b3:02:a3:0d:a2:d8:cf:19:e8:03:23:0d:15:e7:f4:
bb:90:32:84:0d:ef:27:91:27:d6:d1:2c:f9:ae:f9:d0:89:e7:
59:5a:36:4a:5c:1a:d7:2a:d9:02:9b:41:4b:dc:17:80:e9:a4:
63:95:9a:26:8b:56:89:69:c1:4d:e6:bc:55:e1:3c:82:21:21:
ec:7f:d3:72:b7:2f:70:65:cf:97:a2:53:f9:ae:9a:f3:d4:53:
27:12:b8:85:cb:b6:32:ea:ea:1c:2a:1f:b9:e3:12:a7:24:dd:
38:93:40:95:ee:bc:05:0e:3e:00:40:9b:e3:93:88:73:6c:71:
43:38:6f:55:1d:c0:92:62:d4:14:77:b1:25:a0:bc:a4:8e:f4:
97:c5:56:74:01:e6:be:6c:48:a1:8b:d5:9b:52:0f:2b:3f:13:
a2:d5:21:11:21:5b:41:a4:81:37:84:34:61:85:de:eb:5c:bd:
c5:d8:d0:88:8e:88:00:da:a5:62:b2:84:13:fb:a0:03:79:fa:
44:3e:69:6b:78:13:7f:a1:a3:05:9f:cd:2a:0b:aa:77:57:81:
53:fe:96:cf:15:64:78:02:e3:5d:41:c0:65:c6:04:fa:a8:40:
d8:fe:f5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:32:00 2025 by rpki-client