This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
File: UlhBQeXpBP16_D4Noo2QCKGvkhI.mft (raw, json)
Hash identifier: Q4TE42mojQsFFFrbvqdTro2E9Hqd1idOob2aEyKeJsM=
Subject key identifier: 8E:9D:AD:4C:B1:10:5D:C5:DD:0F:54:1B:DA:15:64:0A:0A:E9:79:41
Authority key identifier: 52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12
Certificate issuer: /CN=A91C2CCD/serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212
Certificate serial: 01BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
Manifest number: 01BA
Signing time: Fri 05 Dec 2025 01:17:35 +0000
Manifest this update: Fri 05 Dec 2025 01:17:34 +0000
Manifest next update: Fri 12 Dec 2025 01:17:34 +0000
Files and hashes: 1: UlhBQeXpBP16_D4Noo2QCKGvkhI.crl (hash: 0jnG0wC/hKVO477KYtUtaMjL4L88aL2yBC94npYKWwo=)
2: 41D133CC2B5911EE85AD762BC4F9AE02.roa (hash: 2h3iteWHWvj7eGZvRPLFqMA2o9nj7836hPNLX4DVTdU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.crl
rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445 (0x1bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CCD, serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212
Validity
Not Before: Dec 5 01:17:34 2025 GMT
Not After : Dec 12 01:17:34 2025 GMT
Subject: CN=693232af-30a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:90:d1:8a:df:87:12:57:91:51:c7:9e:38:25:
39:ef:bb:f8:d8:56:27:1a:5d:82:0a:a1:62:00:39:
00:92:f0:7c:d2:ac:93:fe:d9:73:be:da:d4:06:5b:
02:b3:48:ad:c4:b3:3b:59:4a:28:b0:02:a6:f7:c7:
8b:30:1d:73:44:1b:e8:a5:44:7b:90:de:d4:a7:50:
f7:a1:ba:a1:5d:21:48:6b:61:82:eb:df:4e:36:55:
7b:df:61:9c:92:64:d9:1d:94:28:3a:e2:76:8d:02:
2c:5a:d0:98:b1:7b:48:bf:bc:66:ac:24:a2:a5:48:
89:54:70:89:09:28:df:0b:9a:ee:1f:f2:47:a1:5f:
6f:68:2b:20:27:af:b6:8f:d6:88:13:ec:72:81:60:
d2:1b:94:b9:de:e2:ed:5a:db:7a:ba:82:79:2a:e9:
b3:8c:2d:18:d3:ef:6b:68:24:f9:0b:b2:c2:f7:c0:
57:a9:01:c4:40:e3:41:38:bd:8f:84:42:48:3b:b9:
89:ef:0b:ff:87:94:9d:c0:a5:39:c4:d3:76:e9:10:
ea:7a:01:ff:d8:9a:a4:06:93:3d:66:2f:4a:c6:07:
48:47:87:73:71:b4:a7:f9:36:14:20:32:3a:f3:82:
99:a0:18:3b:70:ad:9f:59:41:af:4a:af:2b:12:68:
5c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9D:AD:4C:B1:10:5D:C5:DD:0F:54:1B:DA:15:64:0A:0A:E9:79:41
X509v3 Authority Key Identifier:
keyid:52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:81:c4:28:95:3b:3e:d3:04:ce:19:fa:05:e1:36:74:28:06:
88:af:2a:bb:91:76:49:56:23:4d:21:c3:cb:e7:be:e1:c3:e7:
bf:0b:56:02:db:b5:e2:55:7b:48:30:e5:14:a4:45:71:eb:ff:
ae:1c:0e:86:96:bb:06:56:9c:6f:9d:0a:2a:b5:b0:86:c1:ef:
bc:2f:d5:77:14:f7:fb:cb:4a:d3:8f:d5:cf:be:c5:2b:35:de:
82:c6:3d:43:7a:26:ed:b0:2b:38:b7:9e:7f:26:5f:5a:4c:c3:
5f:fb:e3:68:cb:67:be:af:ff:c1:a6:f6:c0:9f:48:18:2b:8d:
1f:39:59:58:1c:f1:a7:2c:4d:8c:ba:0c:d3:24:8b:12:e5:75:
12:f3:75:e5:37:88:f6:03:77:9d:92:c4:0a:6f:36:d8:92:f3:
cb:f0:62:4c:ee:ea:81:41:78:37:5b:3f:e4:68:02:96:de:59:
68:53:1d:1c:38:b7:b4:cf:67:87:e2:15:aa:b9:13:de:61:5e:
35:7e:b7:d2:c3:a6:fb:1d:49:5e:e7:b3:68:32:d7:f6:9b:5a:
50:5c:4f:a8:40:7d:c9:c5:99:87:97:5d:2a:e3:c4:a8:fe:13:
5a:7f:05:17:f5:77:85:81:f4:7a:74:c6:72:d7:9b:2a:59:81:
95:ee:d4:fc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJDQ0QxMTAvBgNVBAUTKDUyNTg0MTQxRTVFOTA0RkQ3QUZDM0UwREEyOEQ5MDA4
QTFBRjkyMTIwHhcNMjUxMjA1MDExNzM0WhcNMjUxMjEyMDExNzM0WjAYMRYwFAYD
VQQDEw02OTMyMzJhZi0zMGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoJDRit+HEleRUceeOCU577v42FYnGl2CCqFiADkAkvB80qyT/tlzvtrUBlsC
s0itxLM7WUoosAKm98eLMB1zRBvopUR7kN7Up1D3obqhXSFIa2GC699ONlV732Gc
kmTZHZQoOuJ2jQIsWtCYsXtIv7xmrCSipUiJVHCJCSjfC5ruH/JHoV9vaCsgJ6+2
j9aIE+xygWDSG5S53uLtWtt6uoJ5KumzjC0Y0+9raCT5C7LC98BXqQHEQONBOL2P
hEJIO7mJ7wv/h5SdwKU5xNN26RDqegH/2JqkBpM9Zi9KxgdIR4dzcbSn+TYUIDI6
84KZoBg7cK2fWUGvSq8rEmhc/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6drUyx
EF3F3Q9UG9oVZAoK6XlBMB8GA1UdIwQYMBaAFFJYQUHl6QT9evw+DaKNkAihr5IS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDRC9EQzM1MkI1RTJC
NTgxMUVFQjdDMkRFMkFDNEY5QUUwMi9VbGhCUWVYcEJQMTZfRDROb28yUUNLR3Zr
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VsaEJRZVhwQlAxNl9ENE5vbzJRQ0tHdmtoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MkNDRC9EQzM1MkI1RTJCNTgxMUVFQjdDMkRFMkFDNEY5QUUwMi9VbGhCUWVYcEJQ
MTZfRDROb28yUUNLR3ZraEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAAgcQolTs+0wTOGfoF4TZ0KAaIryq7kXZJViNNIcPL577hw+e/C1YC
27XiVXtIMOUUpEVx6/+uHA6GlrsGVpxvnQoqtbCGwe+8L9V3FPf7y0rTj9XPvsUr
Nd6Cxj1DeibtsCs4t55/Jl9aTMNf++Noy2e+r//BpvbAn0gYK40fOVlYHPGnLE2M
ugzTJIsS5XUS83XlN4j2A3edksQKbzbYkvPL8GJM7uqBQXg3Wz/kaAKW3lloUx0c
OLe0z2eH4hWquRPeYV41frfSw6b7HUle57NoMtf2m1pQXE+oQH3JxZmHl10q48So
/hNafwUX9XeFgfR6dMZy15sqWYGV7tT8
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:40:49 2025 by rpki-client