This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft
File: uHDS4OMcipEO37p2W7fPBMPBDL4.mft (raw, json)
Hash identifier: hD3o8R4UdT3rAYM4vNUlzJwnTL+92Olb0NcpOehIYoM=
Subject key identifier: CC:03:A8:38:34:76:93:F2:60:90:BF:46:E5:D5:AF:60:A0:EF:98:C8
Authority key identifier: B8:70:D2:E0:E3:1C:8A:91:0E:DF:BA:76:5B:B7:CF:04:C3:C1:0C:BE
Certificate issuer: /CN=A91731AD/serialNumber=B870D2E0E31C8A910EDFBA765BB7CF04C3C10CBE
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft
Manifest number: 58
Signing time: Fri 05 Dec 2025 05:03:36 +0000
Manifest this update: Fri 05 Dec 2025 05:03:35 +0000
Manifest next update: Fri 12 Dec 2025 05:03:35 +0000
Files and hashes: 1: uHDS4OMcipEO37p2W7fPBMPBDL4.crl (hash: CG37vDfbC9X+qr2xVbCE9t9jEXBJvgGn2eqKJyc2/Fo=)
2: 48B17B5CB4CD11F094AF5C23C4F9AE02.roa (hash: nlIGArnSyHQ+mO4FvncFWFbJtBmLN0/ZfyCLV+iceoM=)
3: 495E782AB4CD11F094AF5C23C4F9AE02.roa (hash: eLaZWYd2IAoJX/jCVip0I9wbpsnmQdFUjnIKDbKlG2A=)
4: 483FF590B4CD11F094AF5C23C4F9AE02.roa (hash: lwPZRkJ3CKT2W62+tNtEUbMDOcca3CEzT/1iEB04PzY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.crl
rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91731AD, serialNumber=B870D2E0E31C8A910EDFBA765BB7CF04C3C10CBE
Validity
Not Before: Dec 5 05:03:35 2025 GMT
Not After : Dec 12 05:03:35 2025 GMT
Subject: CN=693267a8-1e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:db:b0:c3:e7:46:41:ca:8d:c5:8a:d9:77:55:
da:77:43:07:a6:5b:a2:56:88:ad:0a:13:8b:2b:a5:
3e:12:ac:65:cd:47:a5:65:3a:bb:71:81:ae:6a:17:
a4:db:55:0d:75:2f:17:c0:8b:38:8c:6a:45:0d:aa:
5c:3b:0b:2a:36:b4:a6:1d:db:e5:15:5f:b8:7d:a9:
39:6c:59:9e:e7:85:2b:94:c2:da:85:a9:d8:24:33:
7b:02:d0:47:90:8a:1f:3c:f5:16:7e:a6:c3:f7:a9:
60:de:71:aa:20:92:0e:ea:d4:77:03:15:df:0d:8e:
c3:54:31:ca:8e:5c:df:6e:97:99:83:a2:5a:17:6c:
59:b0:24:78:43:ed:c6:26:ec:0d:39:27:5a:e8:58:
3a:49:7f:ef:6d:9e:8b:aa:64:6f:2b:78:f5:ae:27:
69:7c:e2:65:11:77:95:bb:8d:39:d8:33:60:34:74:
20:e2:45:df:1f:4a:c1:98:b7:c4:1a:2a:b7:dd:24:
7c:91:6d:6c:17:80:13:41:64:b8:12:71:2c:84:75:
7f:5f:61:78:54:ee:4b:23:87:49:11:71:61:18:40:
be:1d:57:26:a2:1f:41:26:6c:7f:83:96:1b:7d:6c:
d5:2c:4b:82:45:da:70:e6:31:06:1d:dd:b2:27:99:
c1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:03:A8:38:34:76:93:F2:60:90:BF:46:E5:D5:AF:60:A0:EF:98:C8
X509v3 Authority Key Identifier:
keyid:B8:70:D2:E0:E3:1C:8A:91:0E:DF:BA:76:5B:B7:CF:04:C3:C1:0C:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:87:94:a6:54:9b:94:f1:37:cb:94:0f:f5:04:59:5c:e2:73:
8c:43:fb:d2:98:fe:44:d1:50:c3:b6:44:53:2f:09:df:67:85:
ed:58:59:90:d1:ba:7a:d7:33:b0:2b:03:c5:0b:bb:c0:ed:8c:
34:67:85:41:4a:5d:79:4a:7f:4b:33:62:f4:6a:98:e6:7f:54:
fe:92:0b:97:3e:5c:f7:13:5f:13:0e:69:07:0c:90:71:76:89:
b4:26:61:36:89:d6:b8:a7:fc:b9:7c:e0:22:d0:d7:8a:cb:d8:
6c:b2:30:35:21:66:1f:58:60:21:1b:fc:ec:28:55:81:b9:7f:
b7:06:20:85:b3:7f:ab:e5:17:65:d3:ff:e4:88:a7:fa:0c:5c:
5e:a2:92:61:5b:65:39:d8:78:73:1e:94:17:ed:81:51:97:f0:
52:d2:97:b8:9c:a9:ad:0c:d3:c6:7c:51:dd:f3:8a:de:bc:34:
43:b9:7a:fd:8e:b2:b3:10:42:26:9b:7e:9b:40:8b:2a:05:d2:
e4:5b:c1:26:59:e1:80:56:a1:8b:ec:a5:14:2d:6e:04:b9:91:
e1:4c:d0:ab:45:f2:2e:e8:b6:8d:99:68:92:2f:71:26:cf:e7:
15:9b:58:4d:d0:c3:dd:80:2a:0b:a2:2f:2c:16:e6:fe:d2:3c:
f5:ae:e8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:43:39 2025 by rpki-client