This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft
File: UqAK42gJYToMmRW4LS7dewR_BBY.mft (raw, json)
Hash identifier: qnfF9T50RNjisI3m6n1+tSsLi7r0G/dWruTO1WfFFDo=
Subject key identifier: 52:A9:AF:65:E2:C4:A5:AB:C1:26:F0:D5:49:F8:3B:50:50:E6:1E:F7
Authority key identifier: 52:A0:0A:E3:68:09:61:3A:0C:99:15:B8:2D:2E:DD:7B:04:7F:04:16
Certificate issuer: /CN=A91CC4A7/serialNumber=52A00AE36809613A0C9915B82D2EDD7B047F0416
Certificate serial: 1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft
Manifest number: 1A
Signing time: Fri 05 Dec 2025 05:38:50 +0000
Manifest this update: Fri 05 Dec 2025 05:38:50 +0000
Manifest next update: Fri 12 Dec 2025 05:38:50 +0000
Files and hashes: 1: UqAK42gJYToMmRW4LS7dewR_BBY.crl (hash: 1LyZPyWOHj3qMqRVGu5v0UmlEaprNwqe/Vgz759bMYM=)
2: 94CEBFFEAB4511F09AA0C458C4F9AE02.roa (hash: 1k8O6Bsioa6ijWmD1KkKknB0AK/qAIm/Rz9ZwI76zuQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.crl
rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:38:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC4A7, serialNumber=52A00AE36809613A0C9915B82D2EDD7B047F0416
Validity
Not Before: Dec 5 05:38:50 2025 GMT
Not After : Dec 12 05:38:50 2025 GMT
Subject: CN=69326fea-0fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ca:36:47:e7:6b:ea:df:fe:7a:25:ce:e4:6e:
be:b5:31:f7:32:11:5c:fa:e3:f4:71:dd:c0:49:9c:
bb:37:f6:87:e7:b6:02:8a:48:75:ee:49:2f:2c:69:
96:3f:47:8d:6b:b1:4e:6e:f5:7e:e4:2f:76:11:41:
46:2b:1c:03:c1:4c:cf:a5:00:82:d6:d5:59:3c:04:
2c:b6:e3:7a:62:35:86:69:b4:0c:ed:9f:d7:4f:2e:
44:2b:3b:2d:69:4e:3b:e4:1d:3d:4b:ac:22:45:dc:
5d:86:f1:56:49:54:4a:be:6b:fe:91:65:cf:7a:eb:
73:68:af:4e:68:f7:e4:4b:53:85:80:f7:22:f1:5c:
57:7f:c3:09:e1:5f:01:cf:2a:7f:27:0c:d6:5d:b5:
61:bd:cd:98:b7:92:63:d1:42:e7:d0:cd:6b:85:1e:
4b:54:03:84:a2:24:86:77:18:3f:fc:18:84:87:72:
63:b4:59:6c:c7:ec:be:8b:17:60:14:ef:5a:a4:98:
84:64:a9:0c:9d:74:cf:68:f5:11:95:87:e3:77:ed:
4b:ec:27:c0:50:5a:a9:3f:81:b3:28:a3:27:41:82:
d2:66:af:c8:fb:09:68:77:7d:e9:12:6b:bd:dd:2e:
26:c9:35:9a:30:6a:9a:44:11:5f:ec:67:2c:9c:30:
37:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A9:AF:65:E2:C4:A5:AB:C1:26:F0:D5:49:F8:3B:50:50:E6:1E:F7
X509v3 Authority Key Identifier:
keyid:52:A0:0A:E3:68:09:61:3A:0C:99:15:B8:2D:2E:DD:7B:04:7F:04:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:09:ab:73:b3:9d:63:b4:0c:73:ce:f0:b0:1c:39:9c:f2:d4:
7a:01:9c:55:bf:85:e4:1c:34:3d:f3:6a:22:ba:07:1f:de:28:
48:15:a1:2b:b9:37:4f:7b:9e:86:92:9c:86:da:09:0a:d6:bb:
77:25:a6:9f:c9:f5:47:2f:c0:99:81:02:3c:d9:be:1c:5f:75:
18:df:99:7e:46:ed:5c:d3:e2:ec:fc:92:fd:af:b3:af:ed:f8:
62:48:9e:f2:28:00:bf:05:30:27:c2:3b:86:12:9e:06:6c:90:
50:25:63:e2:b8:1e:97:37:46:51:d0:85:8e:fe:2a:36:60:41:
3a:1b:0c:1a:14:6c:dd:f5:ac:93:24:5f:50:13:6a:11:32:0b:
c9:f0:03:37:67:c5:25:77:42:9f:48:ea:de:f8:9e:cb:51:69:
11:81:8a:c8:72:fe:77:1e:00:78:b0:fb:0b:f2:d7:b5:9c:dd:
39:6f:8a:68:b9:e8:e9:b7:90:2b:3a:df:95:9c:e5:0a:26:d8:
e9:96:4b:15:54:10:a9:9d:e2:4a:10:ae:6a:5e:76:d9:e3:a3:
13:0c:38:b6:bc:77:6b:f4:1b:fc:0a:90:c0:af:73:04:df:49:
d4:e5:cf:68:cb:d3:d8:e1:c6:8c:81:68:83:e2:bd:1c:4f:56:
3b:d8:c8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:48:58 2025 by rpki-client