This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
File: U05nXomsmsMC9TCid1KM-Bo8UwY.mft (raw, json)
Hash identifier: /toNshCsoLk+YgsLRBzpjQFvPERoiQz3I32nfEObEn4=
Subject key identifier: FC:6E:33:6E:E9:D3:8E:CB:FC:5C:19:ED:BD:DF:FC:F2:9A:C9:19:32
Authority key identifier: 53:4E:67:5E:89:AC:9A:C3:02:F5:30:A2:77:52:8C:F8:1A:3C:53:06
Certificate issuer: /CN=A91CC1EB/serialNumber=534E675E89AC9AC302F530A277528CF81A3C5306
Certificate serial: 0607
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
Manifest number: 05F4
Signing time: Thu 04 Dec 2025 21:42:58 +0000
Manifest this update: Thu 04 Dec 2025 21:42:58 +0000
Manifest next update: Thu 11 Dec 2025 21:42:58 +0000
Files and hashes: 1: U05nXomsmsMC9TCid1KM-Bo8UwY.crl (hash: N6u9yXgjGVWFYx4A1oEwTnWmSpElW+QwuYwoBkSnc5k=)
2: 5C0006B4E1B711EEA6D7F740C4F9AE02.roa (hash: 4jfL7SNWxDFOPvyEexB/Au04m937KqyBQLuHPsEG/BI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.crl
rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:42:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1543 (0x607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC1EB, serialNumber=534E675E89AC9AC302F530A277528CF81A3C5306
Validity
Not Before: Dec 4 21:42:58 2025 GMT
Not After : Dec 11 21:42:58 2025 GMT
Subject: CN=69320062-002b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d9:e6:5a:52:e4:04:e5:c4:35:1c:2f:83:3e:
c4:4c:d1:d1:6e:c6:8c:1d:3f:03:ee:c8:5c:c0:84:
20:6c:0a:cf:e9:19:70:d3:2f:f2:7c:64:c8:d5:94:
40:96:67:35:56:eb:89:d8:47:8a:93:79:15:64:3b:
1a:8f:d6:0c:13:da:9a:cb:e3:12:5f:fe:05:5f:d6:
05:8d:f5:1f:83:fe:51:e9:59:94:8b:97:54:bb:fb:
1e:d3:c2:45:bc:90:d7:49:33:9a:19:0b:2b:68:73:
3b:c8:aa:96:de:ee:9f:c3:25:1a:ce:1b:c6:9e:21:
80:c2:be:e3:31:16:9c:ad:f6:c9:d1:d0:89:d0:29:
47:69:9f:11:91:f0:aa:ba:d0:07:ae:38:25:47:c4:
7f:0d:eb:9e:ec:51:c3:05:8b:60:e0:07:09:6f:62:
ea:ce:04:29:8a:c2:8a:b1:40:11:26:e1:8b:ea:73:
78:c5:33:90:0c:99:6d:9a:5b:e8:df:e8:8b:19:ac:
8e:22:fa:22:b4:95:ed:f1:cb:5c:09:39:0b:3e:b5:
b3:13:46:be:ea:92:0f:bc:cb:74:75:a5:7e:37:c5:
45:a5:bd:08:b6:f0:e0:a2:2d:22:0f:1e:54:41:72:
4a:a6:b9:67:cc:cf:e3:e2:0d:16:78:91:e5:e6:30:
7c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6E:33:6E:E9:D3:8E:CB:FC:5C:19:ED:BD:DF:FC:F2:9A:C9:19:32
X509v3 Authority Key Identifier:
keyid:53:4E:67:5E:89:AC:9A:C3:02:F5:30:A2:77:52:8C:F8:1A:3C:53:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d9:63:d2:df:4d:f8:6d:d2:9e:fb:7e:8b:0a:70:25:d4:36:
68:ca:8f:10:43:39:5e:1e:41:fe:30:40:32:05:3c:fe:d8:68:
98:6f:48:81:6f:3f:78:50:2b:02:58:f9:79:eb:79:55:af:03:
29:6d:9e:6e:17:41:9b:84:46:3d:eb:92:da:d7:0e:08:cd:48:
76:cb:78:71:f5:cc:f4:9e:f3:1b:66:7d:85:4a:9e:9f:3a:33:
5d:fb:43:be:91:e9:7e:16:da:5d:0b:76:5c:ec:36:be:78:80:
ac:9c:34:50:bf:c7:f3:05:9c:b7:fd:b8:87:c5:fe:3a:60:9e:
41:0d:e0:d2:0f:8a:50:78:4c:6d:c3:fa:fc:56:f4:44:9c:84:
20:31:73:76:63:f4:15:0d:5f:d6:83:03:f3:67:02:9b:e8:2c:
13:ee:44:ee:75:a3:1a:03:0c:e1:70:46:06:5b:da:9b:61:c9:
04:81:ec:7f:d5:ee:9b:d1:0b:5a:ee:b4:aa:0e:6b:05:c4:c5:
02:7c:88:af:c4:88:6f:08:25:7b:2e:16:9d:c2:4f:58:ec:ce:
b2:dd:4e:29:25:3c:82:d0:4f:ea:b7:d3:0f:22:40:47:cf:45:
f7:50:f7:1b:dd:56:97:a3:6f:25:b9:d8:d4:62:14:58:8d:8c:
4d:e5:0c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:25:22 2025 by rpki-client