This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
File: UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft (raw, json)
Hash identifier: zg4kIX9Kn6a8p78fuWZLL+yUq7vB+f3DFbFj8Be7X5s=
Subject key identifier: 70:6A:B4:F6:9B:71:24:50:99:38:5A:B9:B6:7A:24:03:F8:9A:0C:85
Authority key identifier: 50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A
Certificate issuer: /CN=A916ED18/serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A
Certificate serial: 198B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
Manifest number: 198B
Signing time: Sat 06 Dec 2025 16:01:39 +0000
Manifest this update: Sat 06 Dec 2025 16:01:38 +0000
Manifest next update: Sat 13 Dec 2025 16:01:38 +0000
Files and hashes: 1: UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl (hash: 2beBmB7qP5yS7BK504FlRUhh33VCneKvMMVM6O1HPKc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl
rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6539 (0x198b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ED18, serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A
Validity
Not Before: Dec 6 16:01:38 2025 GMT
Not After : Dec 13 16:01:38 2025 GMT
Subject: CN=69345363-3c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:05:12:1d:d4:c7:32:ff:f5:ca:d4:be:bb:c1:
6a:e0:71:00:27:34:09:b3:bd:f5:fa:ab:38:9f:19:
08:88:79:84:1f:8b:2b:1e:d4:c1:9f:79:64:4b:2e:
92:b8:84:a7:0d:e3:7a:8c:d7:df:48:a2:f7:bf:1c:
67:e0:de:ed:39:73:f4:65:4d:f3:16:f7:62:ca:cf:
b3:aa:7f:8f:ad:56:8b:f8:2b:fa:8a:81:92:81:db:
1f:25:5d:4e:a1:7e:97:ad:71:58:69:03:23:45:48:
d9:4b:b1:72:a1:c6:3b:c1:37:2f:2f:fb:f3:91:36:
2b:f4:8d:f0:79:13:b4:4c:50:d6:23:f0:d7:fa:72:
48:0a:bb:95:c3:a7:d0:d0:26:c0:43:25:cc:29:ce:
61:ef:4f:a8:52:62:64:e5:9c:2d:19:47:71:4d:07:
7a:f9:48:46:46:74:66:a5:83:fb:01:5b:16:89:9c:
d8:a8:5f:c3:09:cf:ed:6e:22:e6:fb:8f:3e:d9:9e:
ec:55:98:94:71:93:3a:57:ab:c8:44:75:2e:9f:85:
c5:00:d7:7a:10:ba:6c:60:0f:fe:11:64:c7:41:c9:
d2:15:aa:f8:26:3f:c3:bb:a5:f0:7e:4d:13:53:36:
e8:54:80:da:85:39:65:62:b0:28:2d:04:c0:7e:5d:
f7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6A:B4:F6:9B:71:24:50:99:38:5A:B9:B6:7A:24:03:F8:9A:0C:85
X509v3 Authority Key Identifier:
keyid:50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:1a:a4:2a:c8:17:23:4b:a8:e6:63:b3:38:76:df:33:e8:72:
7a:e8:4d:d2:bb:30:15:0d:0b:2f:13:c1:c4:e6:0b:7a:db:ff:
4f:97:5b:fe:1b:9f:96:b3:db:ab:ad:87:b6:c5:a5:3c:9c:e7:
d2:47:01:13:a7:67:22:c4:13:86:c0:49:8b:cb:a3:17:d4:3d:
5e:95:ea:88:11:69:65:56:c1:85:d8:5a:26:b3:71:f8:c6:fb:
78:dd:0e:fe:f4:58:cc:e9:15:9a:99:c7:6a:40:d4:66:a9:ed:
6f:71:1f:b8:35:4e:d9:91:00:2f:f1:c9:29:2f:e6:cc:83:e7:
d3:a4:cb:4f:aa:07:09:e9:2a:1b:65:34:5a:16:46:2b:0f:ee:
1d:ee:a6:08:3f:b9:6a:d5:f2:49:99:75:e8:c9:3f:63:49:4d:
fb:60:0f:32:41:d6:2d:da:33:4e:d7:80:ea:dc:db:e0:d0:54:
ef:2b:79:94:90:e5:42:16:69:f2:11:27:1e:2e:42:82:75:f2:
75:84:97:ab:e5:27:4d:f2:97:58:7c:63:78:38:cc:39:f7:bc:
e8:37:2b:00:a7:f9:4a:ee:f1:b2:84:44:e9:e2:cb:5a:b6:e6:
a1:79:ec:01:a9:9b:8c:2a:9e:ea:bf:a9:16:1a:30:2e:69:21:
e1:09:81:16
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkVEMTgxMTAvBgNVBAUTKDUwM0QyNzY1MTEzQ0I2RDEzQjk4NkZCQjRDQjc5RkYx
OENBQjc3NUEwHhcNMjUxMjA2MTYwMTM4WhcNMjUxMjEzMTYwMTM4WjAYMRYwFAYD
VQQDEw02OTM0NTM2My0zYzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0QUSHdTHMv/1ytS+u8Fq4HEAJzQJs731+qs4nxkIiHmEH4srHtTBn3lkSy6S
uISnDeN6jNffSKL3vxxn4N7tOXP0ZU3zFvdiys+zqn+PrVaL+Cv6ioGSgdsfJV1O
oX6XrXFYaQMjRUjZS7FyocY7wTcvL/vzkTYr9I3weRO0TFDWI/DX+nJICruVw6fQ
0CbAQyXMKc5h70+oUmJk5ZwtGUdxTQd6+UhGRnRmpYP7AVsWiZzYqF/DCc/tbiLm
+48+2Z7sVZiUcZM6V6vIRHUun4XFANd6ELpsYA/+EWTHQcnSFar4Jj/Du6Xwfk0T
UzboVIDahTllYrAoLQTAfl339QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBqtPab
cSRQmThaubZ6JAP4mgyFMB8GA1UdIwQYMBaAFFA9J2URPLbRO5hvu0y3n/GMq3da
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQxOC9GNzI3RkU5RTdB
RjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0RTdtRy03VExlZjhZeXJk
MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1VEMG5aUkU4dHRFN21HLTdUTGVmOFl5cmQxby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RUQxOC9GNzI3RkU5RTdBRjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0
RTdtRy03VExlZjhZeXJkMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAnGqQqyBcjS6jmY7M4dt8z6HJ66E3SuzAVDQsvE8HE5gt62/9Pl1v+
G5+Ws9urrYe2xaU8nOfSRwETp2cixBOGwEmLy6MX1D1eleqIEWllVsGF2Foms3H4
xvt43Q7+9FjM6RWamcdqQNRmqe1vcR+4NU7ZkQAv8ckpL+bMg+fTpMtPqgcJ6Sob
ZTRaFkYrD+4d7qYIP7lq1fJJmXXoyT9jSU37YA8yQdYt2jNO14Dq3Nvg0FTvK3mU
kOVCFmnyESceLkKCdfJ1hJer5SdN8pdYfGN4OMw597zoNysAp/lK7vGyhETp4sta
tuaheewBqZuMKp7qv6kWGjAuaSHhCYEW
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:41:53 2025 by rpki-client