This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
File: MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft (raw, json)
Hash identifier: VmSbl/g/U/cRJ63Rn4BX7ukizfF2BFHhOW53Vk9TKQs=
Subject key identifier: 27:F0:BB:57:93:91:59:B3:76:21:6D:8F:B0:FF:72:29:EE:C3:BB:AB
Authority key identifier: 31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23
Certificate issuer: /CN=A919EFEE/serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423
Certificate serial: 21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
Manifest number: 1C
Signing time: Fri 05 Dec 2025 05:42:20 +0000
Manifest this update: Fri 05 Dec 2025 05:42:19 +0000
Manifest next update: Fri 12 Dec 2025 05:42:19 +0000
Files and hashes: 1: MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl (hash: AUD+eCwBMhWAz+kRh4sFtFfWMeZrMIfVbY2JvJEs05E=)
2: DD1D106AB55611F0ABCE9254C4F9AE02.roa (hash: 9CTSG5q3PX2OXWTpXZsoG6zDo7ZTPSPW6mdCdigUYiQ=)
3: 5E0AA532B55911F082D2971FC4F9AE02.roa (hash: CTGTO53GjWBR99Z5NFAs3gE98Mp+0uswAwuc6chNDz8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl
rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:42:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EFEE, serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423
Validity
Not Before: Dec 5 05:42:19 2025 GMT
Not After : Dec 12 05:42:19 2025 GMT
Subject: CN=693270bc-5a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:7d:95:05:68:5a:c7:35:9f:7d:5a:0f:ca:
f4:94:67:bc:8f:77:d7:87:e7:94:8d:9e:8e:61:63:
c1:86:7a:5a:5e:66:bb:29:95:3b:d6:d4:b1:83:ef:
db:38:c0:d2:9c:8d:8f:5b:c3:a8:2c:e2:b1:0d:f7:
27:98:d8:49:6e:0d:65:6f:1e:45:70:9a:1c:54:f8:
3b:b9:3f:88:5d:48:e7:69:fc:76:9b:f1:f8:1b:7d:
67:f5:0b:d3:03:32:7f:c0:33:92:f0:ae:5e:98:9a:
23:c3:42:a2:f8:ac:c5:95:c3:d6:28:98:43:5a:db:
32:e9:25:87:df:52:58:bb:c8:ba:fd:8a:89:6b:55:
2d:4a:24:8c:50:06:10:aa:09:5a:e4:ee:a0:06:24:
0b:24:7c:9f:76:29:22:7c:5d:b4:31:e8:9c:89:fe:
9e:40:5a:97:6c:11:b1:96:a4:42:0f:40:1e:04:7f:
8c:18:0f:56:f3:aa:3b:cb:f4:a7:ff:47:69:e0:ac:
e8:4e:0e:96:c1:82:0b:93:b9:25:a2:6f:17:7f:04:
22:bc:c8:8b:80:5b:66:64:e8:82:cd:f8:55:55:67:
b9:f8:6e:4b:37:68:ae:d7:d8:20:30:ce:1b:ab:64:
ad:4e:26:28:c8:f5:ed:23:0f:e7:88:99:4a:89:d8:
9a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F0:BB:57:93:91:59:B3:76:21:6D:8F:B0:FF:72:29:EE:C3:BB:AB
X509v3 Authority Key Identifier:
keyid:31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:12:bd:34:5d:d1:58:a2:94:75:3e:bd:1a:4b:9f:81:7d:0d:
93:21:45:e7:21:04:3c:f0:4b:5d:16:0d:ef:37:d5:78:2e:11:
d3:a2:05:ea:be:29:e3:e4:ea:e2:26:21:46:72:56:63:74:ba:
99:08:07:af:77:e8:37:3a:b8:3c:c1:f8:65:66:d4:7c:e1:2d:
88:fc:04:e6:ed:11:f4:fa:59:05:25:7b:a1:e0:dd:72:a4:ac:
85:9d:fb:29:3c:4a:13:ef:c4:91:c7:81:3c:13:25:7b:1a:37:
ed:b9:cd:1e:3e:b7:9a:e3:20:89:3c:51:91:43:dd:8c:9e:ed:
9c:f8:d5:2e:34:df:37:fc:41:c7:2a:e3:0c:23:76:22:ff:b4:
24:04:f6:b2:3c:ed:12:dc:8e:ac:40:92:fd:c5:b8:e1:00:08:
ce:19:ba:da:1b:70:1e:01:58:7c:a4:8e:95:f1:57:b6:9e:68:
05:92:6b:e3:2a:07:a8:db:4b:13:7f:01:cf:c8:ee:45:8c:f5:
97:82:29:7b:b0:cf:9f:a7:ec:dd:96:70:e6:29:f2:e6:21:2d:
57:43:09:4a:72:e2:b5:65:eb:82:9c:ac:a1:db:12:f3:6d:1f:
e5:20:7a:44:7c:07:a3:e3:c2:56:ee:2a:d8:d1:93:74:b1:1b:
99:fb:c1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:46:05 2025 by rpki-client