This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
File: uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft (raw, json)
Hash identifier: otk+Foe1JJoBMu48p2EDCAeojOrKkkSAI5kEQvbwqUQ=
Subject key identifier: A2:8F:E7:3B:6E:1F:02:6D:03:AB:85:93:BA:24:47:94:CB:9D:64:8D
Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
Certificate issuer: /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Certificate serial: 085F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
Manifest number: 0841
Signing time: Sat 06 Dec 2025 19:55:40 +0000
Manifest this update: Sat 06 Dec 2025 19:55:40 +0000
Manifest next update: Sat 13 Dec 2025 19:55:40 +0000
Files and hashes: 1: uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl (hash: My7S2ANDUI2l2Ul8oL6A4qqnOzkFt5oj90U2XiqjDw0=)
2: E68BF368DD9911EF85614A53C4F9AE02.roa (hash: RcdkSPfjnAmz3uVP4FBhLTQ0GFBSdezmu4kQPa/+yaY=)
3: 8BB3088E982F11ED9D647578C4F9AE02.roa (hash: A1w8tHzqGX+jD/ISNBe9aPcQuL2J3HJQzhH/YAzCdq0=)
4: F89E68D6982911ED90F8C877C4F9AE02.roa (hash: XTLM9Il3d4SVArTDp/CLgDo1h6RlBLONdep9WAa5H5I=)
5: 2DCC2988982711ED9D75C85AC4F9AE02.roa (hash: cXIuMnEWUiuT4kupzUNHJo4zj/W45Qb9cwkr7yvw0vc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 19:55:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2143 (0x85f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E83B, serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Validity
Not Before: Dec 6 19:55:40 2025 GMT
Not After : Dec 13 19:55:40 2025 GMT
Subject: CN=69348a3c-37d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:5c:0d:0d:0f:b2:31:2a:ba:ba:4c:97:54:
88:ba:a3:e8:78:45:32:87:28:b8:71:03:c0:f1:1a:
1f:1b:25:83:71:f1:ac:15:a3:b6:99:30:ec:f4:97:
a7:ed:43:c4:c3:4b:eb:90:4d:a0:68:8f:66:11:53:
ef:2f:b6:50:ad:6a:5a:e2:ea:4b:27:9d:6d:c3:c6:
87:91:63:80:8d:be:6d:74:64:4f:75:24:19:cc:26:
35:13:7a:e1:76:cb:eb:fb:bc:bf:2e:e7:ee:f5:73:
f3:27:62:eb:82:50:9c:3d:eb:4a:b7:05:69:15:02:
dd:17:fa:52:47:ed:f7:0d:a8:9f:fd:d7:b3:df:46:
08:6d:f0:32:d0:60:91:e8:01:15:c5:61:46:5b:df:
e5:0c:01:97:67:ca:78:c6:4a:b6:0b:b6:82:b4:1b:
85:61:a2:59:48:95:ce:f8:9b:4a:1b:d3:ce:48:b7:
de:0e:be:03:b5:a3:51:c8:e6:a9:18:c6:79:b1:80:
82:86:e4:0e:61:58:83:54:31:5f:ff:cb:86:72:ae:
33:9c:96:f5:f3:94:55:d7:64:2d:c4:17:a5:50:89:
46:19:52:ab:01:27:6c:2e:88:fc:0e:22:3f:b0:6d:
d4:39:1f:d1:0f:6d:74:7f:6f:86:96:04:f9:f1:bc:
99:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8F:E7:3B:6E:1F:02:6D:03:AB:85:93:BA:24:47:94:CB:9D:64:8D
X509v3 Authority Key Identifier:
keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:53:50:05:e7:97:f0:c5:b0:d2:33:a7:79:cf:4a:b6:68:6e:
5e:e4:ea:b9:92:fa:14:5f:18:1a:57:86:20:6b:41:3e:dd:b3:
2f:a3:8f:72:9e:c2:f7:e4:28:47:ca:5e:1a:00:df:e0:8d:86:
6f:05:43:c5:b9:34:cd:97:5b:65:24:08:86:ee:80:11:ea:7a:
40:1e:c5:ca:4a:6a:c3:3b:76:f5:95:56:9c:24:f9:7b:53:5f:
e6:02:23:8b:2e:15:62:87:59:47:ed:79:ab:94:61:18:6e:37:
02:08:ba:b3:1a:fc:28:bb:0e:85:dd:5b:98:47:83:68:be:8e:
7a:b2:9b:0c:d3:a3:1c:6d:4d:f1:cf:26:55:49:59:85:ef:57:
eb:9d:24:40:92:e3:ff:91:73:6f:8b:64:03:a9:d8:a7:17:47:
86:6f:d0:49:98:3f:78:fa:73:20:76:f3:31:aa:07:a7:6e:ec:
aa:c1:36:35:04:63:9a:79:4d:c2:4f:f3:11:02:b5:ac:cf:8c:
ac:80:7b:ed:8c:39:f2:5c:6b:76:db:4f:88:c9:00:88:3b:69:
c2:6a:a0:7d:9a:4a:df:d9:22:23:1e:af:e3:a9:3e:b3:22:9f:
0b:67:c5:24:bc:b6:15:7b:0c:42:c1:e3:ce:af:42:b1:74:f3:
99:a4:99:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:25:34 2025 by rpki-client