This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
File: UZO9WZSe-bfaEnIPfUbufEvKMOw.mft (raw, json)
Hash identifier: ht2XLvl7gi/Pr3EcuVaGMAe04WpzDGRSEj3HoJ5udb4=
Subject key identifier: 5F:B3:D5:8D:DA:FA:0D:D4:DD:06:D8:3D:31:BD:52:59:2B:B4:6D:C2
Authority key identifier: 51:93:BD:59:94:9E:F9:B7:DA:12:72:0F:7D:46:EE:7C:4B:CA:30:EC
Certificate issuer: /CN=A91A1D8C/serialNumber=5193BD59949EF9B7DA12720F7D46EE7C4BCA30EC
Certificate serial: 04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
Manifest number: 03
Signing time: Fri 05 Dec 2025 05:57:46 +0000
Manifest this update: Fri 05 Dec 2025 05:57:45 +0000
Manifest next update: Fri 12 Dec 2025 05:57:45 +0000
Files and hashes: 1: UZO9WZSe-bfaEnIPfUbufEvKMOw.crl (hash: sT1YC89wOx36FgRv6N6ylADHdEUH5wwTzyN6/Bj8c8I=)
2: DF3F877ED01D11F09BB99C37C4F9AE02.roa (hash: qoXhCBWfjxGFnBTOb18uIzLQOhy+m8WFebelHqCpVmY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.crl
rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1D8C, serialNumber=5193BD59949EF9B7DA12720F7D46EE7C4BCA30EC
Validity
Not Before: Dec 5 05:57:45 2025 GMT
Not After : Dec 12 05:57:45 2025 GMT
Subject: CN=6932745a-683b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6d:2d:2f:a6:8a:fe:de:29:5f:59:ba:2e:8f:
aa:8d:2f:e3:84:d2:59:a5:26:f6:aa:84:41:0f:25:
ba:82:0d:ed:cd:1c:0c:0f:8d:7e:f7:50:47:62:80:
cb:b1:71:b3:20:e3:f7:6d:45:0d:72:22:9b:3b:a1:
48:2e:79:2f:0a:b4:67:f9:1b:7f:53:cb:80:84:55:
6a:dd:71:05:3c:74:e0:82:42:99:ba:70:1e:c1:74:
1a:2b:1d:32:02:43:0a:7f:00:e4:5a:47:81:11:21:
53:ae:91:8e:11:ce:ad:97:77:05:05:5e:42:1c:8f:
c8:0f:88:db:9c:1c:53:a5:59:3a:44:5a:e3:9f:ed:
c1:97:d5:4b:0d:43:c1:b1:33:24:20:d9:e4:b6:2a:
20:23:f4:d4:0e:fc:33:3b:89:fa:02:59:ca:48:ed:
c9:f4:52:b0:6f:4f:73:e7:8d:6c:ee:44:95:4a:74:
22:69:ba:f7:ee:28:73:3d:b3:a5:b9:a5:14:59:fb:
96:9f:d4:b0:4a:63:f7:0d:e7:4f:71:70:33:ed:ac:
82:0e:1b:1f:ec:9b:14:e2:ef:b9:03:b7:ac:36:d2:
1b:2f:4e:72:e8:19:89:8a:01:bd:ca:a4:1c:62:c3:
be:1b:c0:87:88:88:8a:41:a1:e7:73:3b:a7:e5:0d:
25:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B3:D5:8D:DA:FA:0D:D4:DD:06:D8:3D:31:BD:52:59:2B:B4:6D:C2
X509v3 Authority Key Identifier:
keyid:51:93:BD:59:94:9E:F9:B7:DA:12:72:0F:7D:46:EE:7C:4B:CA:30:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:62:56:de:53:48:c9:bc:42:14:f4:3f:9e:6e:59:21:f7:bd:
dd:ef:d0:da:c1:f8:77:72:9c:2b:12:70:76:d1:da:f2:f0:c1:
3e:1d:d7:1b:f6:3a:b7:1f:3e:a7:3a:50:f3:ee:0c:99:ca:ca:
3b:3b:9c:09:45:86:10:57:f8:0f:df:0e:2a:38:5e:55:39:4f:
17:78:35:bf:0c:cf:e1:06:a8:75:0f:87:d7:9e:8e:2f:c6:12:
e3:6b:cf:76:05:e0:be:dc:62:45:d2:b8:fc:9c:91:77:96:5b:
6f:1a:62:15:97:b8:e0:19:e6:2c:6a:05:92:0d:8b:fb:dd:60:
4b:64:e2:92:f8:46:c6:4f:1e:7f:b6:bc:07:5a:ac:15:da:7d:
96:aa:77:e1:8e:9b:f5:6c:2a:fc:4c:52:e7:0b:02:59:35:1a:
a4:03:44:48:ca:94:8d:17:d7:58:59:04:b5:4f:1a:19:8a:01:
41:30:3c:17:2d:54:76:5e:20:8b:90:e0:f9:a3:21:8d:3c:7d:
28:99:3a:f1:16:bb:02:06:f8:74:23:9d:04:54:11:b5:42:da:
78:f8:9a:de:5e:e5:ca:26:ce:6f:94:48:a8:9a:e1:da:97:d8:
6e:97:ba:3e:49:99:71:f4:3f:c4:03:50:f0:42:f8:05:69:f1:
cd:2c:85:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:05:18 2025 by rpki-client