This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
File: uHLzTVUlH6dw7MOT0mcSED1VBzc.mft (raw, json)
Hash identifier: 1goFvypjQAzC/cHBQJ+msup5HnatGxv1QQpTs0+KLeM=
Subject key identifier: 07:AA:6A:0A:09:91:5D:0C:FB:39:54:AC:11:65:99:33:2E:28:C3:46
Authority key identifier: B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37
Certificate issuer: /CN=A917C606/serialNumber=B872F34D55251FA770ECC393D26712103D550737
Certificate serial: 042D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
Manifest number: 0421
Signing time: Sat 06 Dec 2025 23:02:41 +0000
Manifest this update: Sat 06 Dec 2025 23:02:41 +0000
Manifest next update: Sat 13 Dec 2025 23:02:41 +0000
Files and hashes: 1: uHLzTVUlH6dw7MOT0mcSED1VBzc.crl (hash: pbe/FSa9hWpCR/wSw18aJY+e0WxyqfPZKJ8pxhQrRxk=)
2: 945375FAF69511EC90A47215C4F9AE02.roa (hash: ZvBKfJ1ADA7aCUjrmjndruwHDHPG/7Dn7tC/SJj/AFU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl
rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 23:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1069 (0x42d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C606, serialNumber=B872F34D55251FA770ECC393D26712103D550737
Validity
Not Before: Dec 6 23:02:41 2025 GMT
Not After : Dec 13 23:02:41 2025 GMT
Subject: CN=6934b611-88bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:67:20:de:88:4c:cd:73:90:5a:42:63:cf:
84:f7:e0:e9:54:c5:6a:24:f0:6e:78:51:b4:aa:9b:
78:f0:63:df:c0:35:00:46:86:e8:2d:6e:6e:3e:ed:
2b:65:79:91:68:93:f4:e3:63:18:bf:d2:f6:b9:3e:
f1:83:61:62:a9:0b:1f:10:4b:0d:d7:08:5b:73:35:
56:34:a6:01:a4:34:2e:d0:a1:64:3d:61:b3:5c:54:
f9:a6:ca:de:e0:4e:c3:84:02:b3:83:64:d3:a5:6f:
dc:df:9d:7c:ee:f4:85:e7:3a:62:b1:a8:2a:d5:3a:
3b:ef:01:17:5a:a4:18:70:40:05:d2:b8:43:4c:6a:
1e:8a:90:15:13:a0:56:00:9f:7f:b5:33:ec:d8:a5:
54:5d:af:ba:f7:a1:ad:af:2f:af:87:5f:f9:61:66:
34:61:19:04:d6:3f:23:3e:52:1e:ab:85:eb:5a:57:
93:c6:7b:59:eb:67:06:60:2c:59:7c:55:fa:b2:0c:
4b:54:85:e3:d0:bc:5d:04:cc:d7:ab:01:28:a0:92:
90:43:f5:cb:ee:d1:c5:76:48:e9:ee:c0:c3:4e:98:
3c:ef:27:98:22:13:98:30:ef:06:c0:cf:7f:80:63:
f6:b5:ca:44:eb:56:6e:59:a7:48:68:56:d9:82:18:
04:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AA:6A:0A:09:91:5D:0C:FB:39:54:AC:11:65:99:33:2E:28:C3:46
X509v3 Authority Key Identifier:
keyid:B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:00:2f:c4:5d:17:f6:5f:8e:e9:67:4c:12:d1:cd:57:20:cc:
70:47:a7:e0:74:29:db:8c:c5:8e:45:6e:d9:c7:b7:91:b8:24:
fe:2b:d6:63:93:3c:7a:82:62:41:ee:86:09:79:61:41:a5:20:
6a:0e:03:06:b8:34:e1:bb:b9:cd:fe:1b:2d:74:6d:06:da:62:
df:51:12:9d:d4:27:19:05:54:2b:b9:ea:aa:3d:45:27:ce:99:
9c:e3:f3:11:4f:59:75:1c:cf:b7:f2:78:e0:e6:d7:e3:c6:b1:
34:48:4b:cc:b1:6b:80:e7:af:e5:45:bc:6f:30:a8:1b:44:0b:
b7:fe:91:7b:0c:26:9d:c6:af:cc:1b:57:c2:00:5c:07:1a:77:
34:3f:a4:58:29:6b:03:60:f0:75:41:67:af:06:ed:05:24:33:
f6:6d:32:3c:3e:ba:02:06:52:c7:9f:74:af:27:85:e4:b8:e6:
3e:00:5f:dd:57:71:85:14:9a:a4:e6:26:8f:aa:a1:e7:0b:8d:
d6:a9:2b:5e:33:14:1f:a6:b0:5e:36:66:97:49:ce:c8:dd:9d:
73:5e:2d:f2:13:4c:01:e6:58:39:43:ac:9b:e5:ca:7d:eb:e6:
c9:c1:07:f8:5f:84:ff:34:fb:b3:64:88:2f:9e:e6:b4:81:ac:
ac:eb:47:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:42:39 2025 by rpki-client