This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft
File: UCfzGS691UlQo5w9EwlKcfHTMmY.mft (raw, json)
Hash identifier: DMDYRgWGjKU0voyk8japz2VP4F9W6PfQnBgS37F1Y3M=
Subject key identifier: 15:97:4F:91:3A:24:3E:B1:95:52:12:E8:BE:C1:80:FD:33:EC:6A:14
Authority key identifier: 50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66
Certificate issuer: /CN=A91A3078/serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266
Certificate serial: 0B68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft
Manifest number: 0B49
Signing time: Sat 06 Dec 2025 18:31:33 +0000
Manifest this update: Sat 06 Dec 2025 18:31:33 +0000
Manifest next update: Sat 13 Dec 2025 18:31:33 +0000
Files and hashes: 1: UCfzGS691UlQo5w9EwlKcfHTMmY.crl (hash: 1Oo1vQDuk6UvR9t7HQ8/WWYoONWjZee/LFffnl2M5pA=)
2: F3F7D2B0CE9711ECA2477C19C4F9AE02.roa (hash: YSanlXPMFGlUc59onSU43QiRooXV0uHeNRhQl6sQvzs=)
3: CDD62642854E11EBA2CFDC87C4F9AE02.roa (hash: EMIkCzah8q7OcQkgGcb8CJSovHyJ1MV1+D6g6V84DdU=)
4: CEFEEFEA854E11EBA2CFDC87C4F9AE02.roa (hash: neskcJ2ryIraX5yGhHnDKoHimVr5nfZfeUgF/8p7xpw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl
rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 18:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2920 (0xb68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3078, serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266
Validity
Not Before: Dec 6 18:31:33 2025 GMT
Not After : Dec 13 18:31:33 2025 GMT
Subject: CN=69347685-9e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2a:c5:94:87:2b:08:bf:49:95:93:28:9c:fd:
7a:28:35:a3:d5:c4:52:f5:7f:7f:0a:08:d7:36:1d:
84:eb:45:01:ff:55:c9:fc:fe:e2:22:a1:a8:1e:ba:
9b:1c:5f:1b:87:fc:79:18:6f:68:80:14:94:da:0c:
2b:eb:0a:5d:57:71:1e:4b:ce:eb:58:11:3b:aa:14:
c3:c9:60:88:8c:8c:5a:41:f9:81:b9:77:cd:5f:4e:
0c:f4:c6:ef:4a:e0:9a:42:11:a5:36:74:7a:b8:f2:
75:54:70:24:2c:15:b0:95:9d:c7:88:29:18:a3:4c:
12:84:5f:0b:7a:12:7a:6e:b2:e5:a6:e4:7f:dd:80:
b6:aa:a7:d0:18:c4:65:e6:cb:86:83:7e:13:fa:97:
02:16:09:c1:51:c5:26:04:ac:67:9c:33:f9:77:04:
e9:e5:d2:be:a1:bc:80:fc:21:52:bb:b6:95:e3:39:
57:a0:11:3e:89:26:c3:16:97:3a:e7:c6:bb:07:33:
87:6e:96:e2:f7:57:43:4a:1a:d1:61:3b:d4:d8:7c:
c0:a9:94:a8:27:f2:dc:71:27:40:44:f9:28:fa:7f:
86:e4:0d:6d:00:0d:b3:7b:18:c4:97:62:6e:48:84:
a6:19:36:11:93:e8:5c:69:a8:af:ad:d2:c6:9b:75:
dd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:97:4F:91:3A:24:3E:B1:95:52:12:E8:BE:C1:80:FD:33:EC:6A:14
X509v3 Authority Key Identifier:
keyid:50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:8a:1b:58:51:77:2d:84:0b:56:20:1f:19:4d:97:b2:6a:74:
fa:1c:dd:8e:7f:a7:f9:12:14:06:f6:52:d4:55:ef:f9:d7:90:
41:12:df:85:15:3e:f0:87:64:49:c4:38:e7:04:9b:f0:75:de:
5f:ea:87:aa:3a:ad:3b:84:ff:a0:7a:7b:b7:7f:dc:86:e7:e8:
a2:fc:82:38:d6:80:9f:6a:40:76:52:3c:00:e6:99:03:0e:44:
d8:5c:16:a1:4d:1a:a4:f7:26:cc:3b:45:ba:79:fa:6f:8b:05:
a6:00:45:ab:47:e3:cf:78:d3:89:c4:b4:60:ba:7f:e7:3a:ee:
72:27:bd:5e:6b:7f:fa:a3:ec:29:71:f3:48:92:1a:cc:87:f4:
2f:96:2a:53:d1:e1:9c:4d:08:5d:2d:f3:16:7a:0b:f7:49:57:
c6:8f:64:98:fa:1d:85:91:b8:1b:e2:d7:c8:46:06:7f:9e:66:
c8:fe:e6:43:17:44:f6:79:69:32:b0:2c:7e:aa:1d:d8:0b:92:
c1:2b:83:2e:71:78:02:83:f6:70:a7:67:58:37:16:3e:68:c2:
9a:1f:5b:18:a4:81:55:27:ff:5f:7e:ec:7d:bd:14:30:b8:89:
08:82:be:5e:1a:09:04:cd:b3:cb:8c:8c:f8:e1:57:12:17:f6:
5c:46:32:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:48:59 2025 by rpki-client