This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
File: lUpwG6oMkx0BduSFt6KHwTFlJg4.mft (raw, json)
Hash identifier: u/NL4T6BWdc5bTE7q3A3lcvwNFDi3yxDrqCmywgHjVw=
Subject key identifier: 1E:3E:6A:4A:2F:FF:FE:AB:5F:8C:BD:5A:6F:91:B1:CE:12:96:71:93
Authority key identifier: 95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E
Certificate issuer: /CN=A9185CED/serialNumber=954A701BAA0C931D0176E485B7A287C13165260E
Certificate serial: 069A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
Manifest number: 0697
Signing time: Thu 04 Dec 2025 21:11:52 +0000
Manifest this update: Thu 04 Dec 2025 21:11:52 +0000
Manifest next update: Thu 11 Dec 2025 21:11:52 +0000
Files and hashes: 1: lUpwG6oMkx0BduSFt6KHwTFlJg4.crl (hash: jz1xxWclJYJ1fwB7GA51IqyxdAbKxmFBKrW3mmXpGwk=)
2: 3A84DC2C44E411EFB0C1A135C4F9AE02.roa (hash: hzbXrtnctw9RaO4u4LO+M5su44TkMPAo6wV59Ue+QJk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl
rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1690 (0x69a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185CED, serialNumber=954A701BAA0C931D0176E485B7A287C13165260E
Validity
Not Before: Dec 4 21:11:52 2025 GMT
Not After : Dec 11 21:11:52 2025 GMT
Subject: CN=6931f918-b287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:00:24:3d:2e:2f:f4:f7:94:63:49:c8:58:
2f:c5:05:38:cb:14:b9:db:0b:5d:be:57:2e:bb:a1:
1d:74:b3:19:86:20:03:4e:93:dc:aa:3f:b3:46:e6:
f6:47:a1:d8:b4:11:c6:35:5b:aa:0b:0f:dd:a3:70:
96:44:6b:9b:7c:29:73:ed:ca:89:75:7e:ad:23:96:
11:09:51:ad:d6:ff:ac:fa:86:9d:0d:43:b2:29:12:
b5:63:85:1e:ae:5a:26:c6:1c:c6:e3:7a:59:5b:7e:
75:32:11:30:36:d6:ef:51:01:30:af:e9:0e:51:a6:
bc:1a:b9:95:f9:3c:b8:04:76:c2:ec:aa:89:00:1f:
15:d7:a0:91:bf:d7:09:b7:57:91:e0:61:85:43:c6:
50:ad:3d:e2:d6:66:ea:20:4b:33:73:84:6f:a6:a1:
53:d7:15:b9:2a:05:bd:00:53:bc:9f:c1:e0:4b:99:
d8:7a:d0:af:0c:26:a2:da:2d:99:3e:e4:c5:a5:1d:
d4:90:73:05:d6:ab:59:a7:f5:c2:93:55:02:6d:9b:
07:69:35:1a:9e:b4:ae:b4:97:67:df:55:08:8f:cc:
4c:e1:80:cd:64:a6:5c:5f:f2:c2:d3:0e:10:23:86:
b8:db:6e:05:aa:ee:33:c5:df:dd:4c:36:9b:c5:96:
5b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3E:6A:4A:2F:FF:FE:AB:5F:8C:BD:5A:6F:91:B1:CE:12:96:71:93
X509v3 Authority Key Identifier:
keyid:95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:cc:33:3a:19:96:c7:c6:8e:a2:d5:0c:2a:24:48:7f:bc:80:
8e:a8:72:2a:9b:a8:07:f1:b4:d1:51:a5:95:04:c8:2d:92:ba:
f0:9a:ce:b0:e5:bb:e8:7e:04:ad:37:e6:0a:5d:be:6c:97:49:
3c:53:cb:4f:eb:75:f5:cf:e3:f3:a7:0c:c3:49:49:dc:40:5c:
84:5a:81:95:8e:16:d7:15:7c:84:26:93:e5:14:07:a6:68:e9:
fa:a3:a4:43:9d:2b:73:d7:88:ce:71:3e:cc:f6:e7:b7:11:da:
e2:d4:f9:3b:66:a4:3f:17:01:f0:0f:91:a2:c4:36:10:ec:0e:
ce:1d:0a:6a:f0:fe:fd:23:21:1f:c9:da:73:1a:d6:80:5c:07:
2e:ee:d1:08:78:d3:6a:5b:df:c4:46:59:e3:1e:db:d1:e5:6c:
df:92:18:14:5f:f9:a4:5c:44:ed:f6:e1:47:26:e0:40:8a:66:
df:5e:0e:b2:19:ec:f3:c9:d8:72:4b:33:25:bb:1c:bb:3f:77:
34:e8:4b:58:c0:74:b1:5e:50:b2:1a:5e:02:42:56:43:12:01:
ef:d7:88:86:ae:bc:d7:3e:6f:de:1f:01:36:f2:c0:64:d7:d0:
5d:02:59:4b:f1:28:0f:a4:07:8f:05:dd:5c:f9:67:4c:e6:6e:
02:c1:ab:20
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVDRUQxMTAvBgNVBAUTKDk1NEE3MDFCQUEwQzkzMUQwMTc2RTQ4NUI3QTI4N0Mx
MzE2NTI2MEUwHhcNMjUxMjA0MjExMTUyWhcNMjUxMjExMjExMTUyWjAYMRYwFAYD
VQQDEw02OTMxZjkxOC1iMjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv4cAJD0uL/T3lGNJyFgvxQU4yxS52wtdvlcuu6EddLMZhiADTpPcqj+zRub2
R6HYtBHGNVuqCw/do3CWRGubfClz7cqJdX6tI5YRCVGt1v+s+oadDUOyKRK1Y4Ue
rlomxhzG43pZW351MhEwNtbvUQEwr+kOUaa8GrmV+Ty4BHbC7KqJAB8V16CRv9cJ
t1eR4GGFQ8ZQrT3i1mbqIEszc4RvpqFT1xW5KgW9AFO8n8HgS5nYetCvDCai2i2Z
PuTFpR3UkHMF1qtZp/XCk1UCbZsHaTUanrSutJdn31UIj8xM4YDNZKZcX/LC0w4Q
I4a4224Fqu4zxd/dTDabxZZbDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4+akov
//6rX4y9Wm+Rsc4SlnGTMB8GA1UdIwQYMBaAFJVKcBuqDJMdAXbkhbeih8ExZSYO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUNFRC8xQUFGN0Q5NDky
MjcxMUVCQkU3MzRGNDBDNEY5QUUwMi9sVXB3RzZvTWt4MEJkdVNGdDZLSHdURmxK
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xVcHdHNm9Na3gwQmR1U0Z0NktId1RGbEpnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUNFRC8xQUFGN0Q5NDkyMjcxMUVCQkU3MzRGNDBDNEY5QUUwMi9sVXB3RzZvTWt4
MEJkdVNGdDZLSHdURmxKZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAezDM6GZbHxo6i1QwqJEh/vICOqHIqm6gH8bTRUaWVBMgtkrrwms6w
5bvofgStN+YKXb5sl0k8U8tP63X1z+PzpwzDSUncQFyEWoGVjhbXFXyEJpPlFAem
aOn6o6RDnStz14jOcT7M9ue3Edri1Pk7ZqQ/FwHwD5GixDYQ7A7OHQpq8P79IyEf
ydpzGtaAXAcu7tEIeNNqW9/ERlnjHtvR5WzfkhgUX/mkXETt9uFHJuBAimbfXg6y
GezzydhySzMluxy7P3c06EtYwHSxXlCyGl4CQlZDEgHv14iGrrzXPm/eHwE28sBk
19BdAllL8SgPpAePBd1c+WdM5m4Cwasg
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:27:24 2025 by rpki-client