This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
File: Ul6ia2phflqvwFQjzOWI3hnsWEc.mft (raw, json)
Hash identifier: UDTPE34S0CqA2x6dQLW5N4KpGX2U0iMG1BackZLXtXE=
Subject key identifier: 57:57:2A:F4:FE:C5:67:F8:2B:30:A1:59:C8:D6:29:BC:E5:B5:C0:95
Authority key identifier: 52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47
Certificate issuer: /CN=A91975F1/serialNumber=525EA26B6A617E5AAFC05423CCE588DE19EC5847
Certificate serial: 0326
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
Manifest number: 0324
Signing time: Thu 04 Dec 2025 23:28:17 +0000
Manifest this update: Thu 04 Dec 2025 23:28:17 +0000
Manifest next update: Thu 11 Dec 2025 23:28:17 +0000
Files and hashes: 1: Ul6ia2phflqvwFQjzOWI3hnsWEc.crl (hash: i6EA/20JIfQNA9k0I6XcfrDjPUnrm52gB+CNpMAy5ss=)
2: 412DD396EE3B11EC8EE6DA63C4F9AE02.roa (hash: 90iQ52pzi3F+reOCS+hcjY5A8xSUULeYkZXVo6UNIXg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.crl
rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 806 (0x326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91975F1, serialNumber=525EA26B6A617E5AAFC05423CCE588DE19EC5847
Validity
Not Before: Dec 4 23:28:17 2025 GMT
Not After : Dec 11 23:28:17 2025 GMT
Subject: CN=69321911-9343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ec:c3:ee:5f:66:ee:77:09:0f:98:f2:53:dc:
78:bd:1c:3e:98:14:d9:09:5b:bf:fb:af:c3:83:a8:
30:ff:49:eb:94:65:68:02:80:13:9d:0c:63:22:56:
35:21:e3:ce:11:e6:d3:21:f8:f8:a7:76:4e:8f:c3:
99:f1:ce:86:c1:f5:6a:94:c2:a0:6d:60:f9:63:0f:
24:cb:dc:3e:92:91:18:56:96:28:9b:2f:12:77:2e:
d5:70:83:10:ee:5b:8f:90:22:8f:03:d1:06:14:db:
63:fa:6a:d8:95:02:c9:6a:75:f3:ac:89:9e:cc:b8:
5d:b3:e2:48:86:e4:99:da:19:09:8a:30:52:a0:9b:
4e:be:3a:c2:36:03:09:5f:b2:20:dd:f7:be:05:0d:
a1:aa:ce:db:7b:e4:08:6f:9d:e4:65:56:b9:47:f5:
41:28:ca:b4:56:8d:aa:86:a6:12:ed:7e:23:60:c6:
50:b0:c7:cd:50:37:48:f5:30:63:56:de:a9:1d:65:
7b:5a:89:b3:33:83:dc:57:cb:6b:c3:b3:bd:93:71:
93:58:0e:60:bb:6e:cf:a7:e9:b2:75:80:f3:cc:7d:
4a:3c:ad:f4:a7:18:90:02:f6:37:4e:bd:0a:5f:c2:
f9:95:01:98:7c:58:c8:40:7f:b4:cb:4c:6f:cd:ac:
d2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:57:2A:F4:FE:C5:67:F8:2B:30:A1:59:C8:D6:29:BC:E5:B5:C0:95
X509v3 Authority Key Identifier:
keyid:52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:9f:84:f9:65:3c:d4:ab:36:62:02:75:e1:0b:ba:45:7d:b0:
a2:09:de:4c:a5:14:fa:97:34:40:ce:01:a0:fd:d4:e3:a5:0b:
4b:06:83:a4:0c:78:7d:10:69:da:2d:5d:c5:3d:59:31:e5:7e:
c0:cf:2f:f8:3c:05:29:f5:08:e1:7f:9a:77:a7:a6:70:25:f1:
dd:0c:bd:45:46:83:8b:8c:0f:5e:9e:2a:ac:0d:85:73:1f:69:
16:86:16:8a:6e:c2:e1:df:b8:4c:d7:64:f2:4a:b7:cb:fc:91:
e9:f7:63:51:3f:0d:8f:aa:16:37:0c:bc:b1:22:5e:c8:a0:e3:
81:5b:b3:86:58:73:50:35:e2:f7:7d:d8:d5:e2:6d:9f:f6:e6:
af:65:1e:ed:31:a4:99:a8:d3:92:ee:31:f2:da:81:bf:d1:21:
d0:14:8f:ba:05:a0:32:ce:17:01:48:ff:11:98:8e:7d:a2:3c:
c7:c6:9a:b3:d5:e9:af:d2:bd:25:17:98:de:a9:c8:a0:b5:d5:
1f:19:a6:fc:6d:a8:6b:f6:e7:bf:a6:8f:f1:c5:99:be:d7:22:
c7:85:b5:8a:e1:0d:eb:96:89:e2:67:79:a7:e1:aa:39:b5:e1:
17:6d:22:91:27:38:db:2a:9f:5f:d6:d5:7e:60:bc:8a:5a:cb:
d0:3d:e4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:06:45 2025 by rpki-client