This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
File: UhSSEEqxqLu-vYCplinU4uZjI3A.mft (raw, json)
Hash identifier: FwuZuUm5if+Qfuqzot23ivvBg37XdE9M8fxfOCUsRcw=
Subject key identifier: A1:58:29:4C:5B:22:43:36:29:26:C8:90:4D:E9:D9:47:73:D6:52:98
Authority key identifier: 52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70
Certificate issuer: /CN=A91C7409/serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
Manifest number: 37
Signing time: Fri 05 Dec 2025 05:20:38 +0000
Manifest this update: Fri 05 Dec 2025 05:20:37 +0000
Manifest next update: Fri 12 Dec 2025 05:20:37 +0000
Files and hashes: 1: UhSSEEqxqLu-vYCplinU4uZjI3A.crl (hash: 85TJjRMRX4t1c9PlYdgMtw+GVp60G7vNVvGphhPfHks=)
2: E983DB547CB711F0AC8F9D6EC4F9AE02.roa (hash: E0HpiYi9oekDhMBwLHO28cWKce/Mgln+cFcKFRPDwlg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl
rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:20:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7409, serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370
Validity
Not Before: Dec 5 05:20:37 2025 GMT
Not After : Dec 12 05:20:37 2025 GMT
Subject: CN=69326ba6-c754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:0a:e9:1d:df:73:5e:a1:cc:83:5c:92:3d:
30:7b:21:0b:85:ba:90:33:53:68:b7:13:7a:c8:04:
bf:de:bf:4b:bc:6d:3c:aa:ce:ff:f5:c8:04:bb:a3:
27:43:d4:9a:3a:6f:54:2a:0d:f0:c4:e2:90:83:5d:
1d:37:96:41:27:6d:84:5d:a5:d3:ab:82:ac:da:19:
cf:e1:d1:41:b2:65:fb:a0:b8:63:d6:7f:8c:f8:20:
52:65:e6:04:96:11:b2:16:98:e8:62:2f:92:cf:68:
2c:b6:ed:38:d1:ab:4a:dc:0a:dc:4c:58:14:a5:c0:
f3:b8:cd:97:ae:fd:30:68:52:5f:a3:29:4c:ae:26:
a6:1c:cd:34:27:ac:03:d7:3a:8f:09:84:39:e1:0a:
4b:02:b4:b6:1c:68:0a:69:88:4b:37:59:c8:a2:56:
c9:05:69:69:29:2b:12:cf:65:fb:84:09:ce:84:62:
31:06:b2:77:b4:5f:b2:b1:bd:3e:11:71:e8:c3:97:
9c:9c:48:57:96:a8:24:eb:b7:54:1a:79:8f:d2:18:
25:25:12:91:e1:6a:60:eb:92:94:22:f3:f2:20:92:
6a:97:9d:ee:9d:21:95:90:6e:ab:8e:97:60:12:96:
85:ed:99:a1:af:38:e4:a2:f8:23:5d:f8:d5:86:e7:
03:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:58:29:4C:5B:22:43:36:29:26:C8:90:4D:E9:D9:47:73:D6:52:98
X509v3 Authority Key Identifier:
keyid:52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:06:51:fd:41:67:f5:d9:5f:0f:a4:db:ee:95:c3:95:f8:91:
5c:77:cb:fb:25:78:07:48:51:fa:18:c1:95:2e:51:09:64:b3:
fd:30:70:6a:00:ee:47:f5:75:c2:fe:89:3c:90:08:8c:b1:2d:
84:a4:55:98:b4:cc:b4:00:2e:e1:2a:0f:55:d3:86:6c:d5:4c:
ee:44:c2:28:dc:12:bd:65:27:67:ab:94:c3:fd:76:eb:b9:77:
4b:0a:6b:1d:5d:86:32:1a:79:9a:d5:b7:71:15:18:32:4f:2e:
ec:3b:35:0a:9c:9b:d7:a0:40:b2:68:83:69:e7:4a:e3:81:e8:
28:a1:f2:9f:d5:87:c8:28:cd:b0:64:06:af:bd:dd:3d:3c:a4:
ef:26:ba:5a:b1:51:25:8d:b5:5c:02:7d:53:32:4c:1a:73:b5:
fb:61:ec:cd:1e:5f:1e:46:02:58:a4:39:37:48:0b:46:7c:5d:
f5:b9:8b:e2:a1:38:99:da:c4:d9:e2:41:1a:09:b8:28:8d:2f:
bf:1a:b1:4f:6a:f4:96:ba:69:90:da:32:cc:c5:50:75:ba:30:
4c:98:3a:01:4f:a3:05:49:db:70:0d:61:fe:63:09:66:df:04:
db:fb:5f:b8:fa:76:93:c8:45:dc:44:e8:19:5b:03:8b:18:8d:
1b:db:d6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:36:03 2025 by rpki-client