This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
File: tUdigfNZTThknMz_UvWLtJtHXwk.mft (raw, json)
Hash identifier: LGfVoTatIj41b7MRcJ/24j5nFaU0fmhMhRTAyVylWwA=
Subject key identifier: 29:97:90:EF:8C:D6:50:F0:98:B8:7F:CC:3A:CE:A4:51:7D:17:85:DE
Authority key identifier: B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09
Certificate issuer: /CN=A9169351/serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09
Certificate serial: 0186
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
Manifest number: 017F
Signing time: Fri 05 Dec 2025 01:59:53 +0000
Manifest this update: Fri 05 Dec 2025 01:59:53 +0000
Manifest next update: Fri 12 Dec 2025 01:59:53 +0000
Files and hashes: 1: tUdigfNZTThknMz_UvWLtJtHXwk.crl (hash: PwNqbFayJ/uf7BcsHh6VObPoAlUuSMX25HTglk87k+8=)
2: 86080D8A940511EE8A83F00DC4F9AE02.roa (hash: bcxcsPekxix6Fyl8eqyL7H0ERqIMwK9GEhKTFmsvSAI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl
rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390 (0x186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169351, serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09
Validity
Not Before: Dec 5 01:59:53 2025 GMT
Not After : Dec 12 01:59:53 2025 GMT
Subject: CN=69323c99-aa50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ca:90:10:66:8c:27:0f:2c:18:f6:e5:97:e1:
ea:cd:bb:93:7f:c1:1b:2f:36:7d:9c:98:b0:53:ac:
72:4f:14:41:76:f2:19:2d:18:31:20:0a:e8:bb:1f:
3f:f5:02:35:61:40:12:3e:77:8a:07:a5:6e:f4:66:
2a:a8:43:34:ee:11:0f:af:1a:8e:b0:53:96:19:96:
16:d2:1b:83:bc:f2:f4:a2:17:45:35:48:19:93:08:
bd:76:60:e0:e3:bd:81:63:63:de:31:c3:3e:75:be:
5e:2d:21:02:9d:bf:12:fd:6e:f9:ed:8b:4c:0b:bd:
e3:41:b2:7b:a5:75:78:03:61:ac:99:48:f5:2f:f2:
76:66:0d:47:8a:85:96:87:c3:9f:58:62:d0:55:76:
9c:73:36:6e:49:6b:27:67:a5:26:f3:c9:68:ec:59:
1f:8a:0b:f7:6c:ae:32:df:51:34:3d:d4:f6:1c:93:
97:38:f9:33:67:fa:3c:4c:02:bd:18:ae:82:59:08:
0d:fb:b2:a5:01:81:29:d3:6a:07:96:c1:bc:02:b9:
0e:da:c8:eb:cc:70:53:d6:27:00:9f:91:ff:bd:39:
35:07:04:10:ba:db:fa:69:7e:35:d3:4b:ae:de:43:
61:fc:63:ce:29:98:e3:d4:eb:37:fc:ff:43:03:a9:
ef:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:97:90:EF:8C:D6:50:F0:98:B8:7F:CC:3A:CE:A4:51:7D:17:85:DE
X509v3 Authority Key Identifier:
keyid:B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:60:33:9c:ca:85:21:2a:11:4f:34:c6:71:82:12:8a:19:62:
6f:ae:19:16:b9:f2:4a:5c:c1:30:a8:43:2f:59:45:e3:db:80:
97:95:68:37:30:d1:22:60:db:af:ee:83:9c:1c:b9:2d:79:1b:
b6:6b:77:d7:a1:52:d4:ed:73:84:1c:ef:33:3d:85:f9:84:e9:
db:b0:87:84:ee:ce:c5:02:2f:fd:e0:4b:ad:16:62:54:1b:ac:
47:eb:cf:04:7b:f1:ca:61:cd:5b:a3:af:16:58:80:b0:f9:ae:
b4:9a:f7:f5:84:a2:45:c9:e6:97:f3:4b:af:92:69:66:4f:06:
de:b3:99:5f:da:f4:73:6c:20:2f:64:74:4a:e0:02:a0:07:46:
0b:4e:66:f3:a3:17:27:32:68:b9:36:0f:83:22:91:fb:94:b0:
35:8c:b9:a4:68:4c:4b:f6:9f:f2:a8:23:28:30:ab:06:d8:f6:
94:5e:f8:0c:57:96:b2:9e:1c:9b:c2:d3:98:34:53:33:f4:96:
0b:eb:5f:d1:cd:0e:cb:c9:eb:19:ad:88:fc:01:36:7d:af:8c:
04:94:28:d0:7c:6d:2c:3c:48:0a:1f:73:ed:bb:00:73:bf:4b:
fd:b9:0c:9b:d7:51:0d:8e:99:49:17:52:19:4e:d5:b0:a1:bf:
a7:10:74:2d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjkzNTExMTAvBgNVBAUTKEI1NDc2MjgxRjM1OTREMzg2NDlDQ0NGRjUyRjU4QkI0
OUI0NzVGMDkwHhcNMjUxMjA1MDE1OTUzWhcNMjUxMjEyMDE1OTUzWjAYMRYwFAYD
VQQDEw02OTMyM2M5OS1hYTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1MqQEGaMJw8sGPbll+HqzbuTf8EbLzZ9nJiwU6xyTxRBdvIZLRgxIAroux8/
9QI1YUASPneKB6Vu9GYqqEM07hEPrxqOsFOWGZYW0huDvPL0ohdFNUgZkwi9dmDg
472BY2PeMcM+db5eLSECnb8S/W757YtMC73jQbJ7pXV4A2GsmUj1L/J2Zg1HioWW
h8OfWGLQVXacczZuSWsnZ6Um88lo7Fkfigv3bK4y31E0PdT2HJOXOPkzZ/o8TAK9
GK6CWQgN+7KlAYEp02oHlsG8ArkO2sjrzHBT1icAn5H/vTk1BwQQutv6aX4100uu
3kNh/GPOKZjj1Os3/P9DA6nvKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmXkO+M
1lDwmLh/zDrOpFF9F4XeMB8GA1UdIwQYMBaAFLVHYoHzWU04ZJzM/1L1i7SbR18J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTM1MS8zMUEwRDE4Mjk0
MDUxMUVFQTg2ODc1NDdDNEY5QUUwMi90VWRpZ2ZOWlRUaGtuTXpfVXZXTHRKdEhY
d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RVZGlnZk5aVFRoa25Nel9VdldMdEp0SFh3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OTM1MS8zMUEwRDE4Mjk0MDUxMUVFQTg2ODc1NDdDNEY5QUUwMi90VWRpZ2ZOWlRU
aGtuTXpfVXZXTHRKdEhYd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAcYDOcyoUhKhFPNMZxghKKGWJvrhkWufJKXMEwqEMvWUXj24CXlWg3
MNEiYNuv7oOcHLkteRu2a3fXoVLU7XOEHO8zPYX5hOnbsIeE7s7FAi/94EutFmJU
G6xH688Ee/HKYc1bo68WWICw+a60mvf1hKJFyeaX80uvkmlmTwbes5lf2vRzbCAv
ZHRK4AKgB0YLTmbzoxcnMmi5Ng+DIpH7lLA1jLmkaExL9p/yqCMoMKsG2PaUXvgM
V5aynhybwtOYNFMz9JYL61/RzQ7LyesZrYj8ATZ9r4wElCjQfG0sPEgKH3PtuwBz
v0v9uQyb11ENjplJF1IZTtWwob+nEHQt
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:11:42 2025 by rpki-client