This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
File: RUCi-buGGfZIYtCWyEyTjoivPGw.mft (raw, json)
Hash identifier: BvBfwol0EHXexz946TNE+U+8fEzgWmcV7vJoLBsF15I=
Subject key identifier: 92:0E:5D:FC:75:34:E8:7B:7F:1E:FD:DD:7D:DF:37:2C:D8:88:E4:39
Authority key identifier: 45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C
Certificate issuer: /CN=A91DCF3D/serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C
Certificate serial: 01C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
Manifest number: 01C7
Signing time: Fri 05 Dec 2025 01:10:03 +0000
Manifest this update: Fri 05 Dec 2025 01:10:03 +0000
Manifest next update: Fri 12 Dec 2025 01:10:03 +0000
Files and hashes: 1: RUCi-buGGfZIYtCWyEyTjoivPGw.crl (hash: PXuqe1k9eykgMTpS/5lYzWFps3l0+lCVwd1t9P+J7RE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl
rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCF3D, serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C
Validity
Not Before: Dec 5 01:10:03 2025 GMT
Not After : Dec 12 01:10:03 2025 GMT
Subject: CN=693230eb-a6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f2:3b:96:34:d7:f1:af:9e:62:b2:65:50:98:
c8:56:ba:c9:85:82:58:db:6e:14:25:51:13:02:8f:
dd:b0:95:48:a1:ab:cf:b9:47:65:af:65:01:3c:85:
ee:8c:d2:d3:bb:c6:df:5e:21:13:7a:6d:71:71:0d:
54:00:d5:fd:cd:42:b1:d4:6e:b7:7e:6d:0b:85:2e:
b1:f6:87:8f:81:64:95:77:a6:11:8a:eb:d7:0e:dd:
aa:c1:d9:50:1b:3e:b5:80:dd:de:49:98:24:7a:f1:
20:56:4b:f5:e7:3c:01:f4:ac:23:6a:88:c5:e9:9b:
7e:e2:af:3b:97:34:2e:26:ff:7e:90:c0:f4:1e:15:
01:9b:e0:ea:00:17:60:ec:bb:d0:40:85:76:03:51:
41:19:e2:9c:04:3b:62:df:9d:86:ca:2a:d9:9c:e4:
61:2c:74:54:d4:90:e3:14:74:72:52:97:88:3d:ee:
12:87:61:55:1f:88:35:cf:67:38:58:33:42:ba:97:
30:3d:10:27:3f:f6:58:76:4f:33:7c:cb:e4:9a:d9:
dd:b1:36:2e:8b:b7:34:68:fb:84:d0:01:c2:e9:f8:
8b:8f:82:0c:77:a8:6d:7d:c0:53:ec:63:22:6a:88:
92:32:30:0b:58:f8:b1:af:3e:56:83:e7:9c:da:ae:
34:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0E:5D:FC:75:34:E8:7B:7F:1E:FD:DD:7D:DF:37:2C:D8:88:E4:39
X509v3 Authority Key Identifier:
keyid:45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:99:62:2e:29:dc:aa:35:d2:1d:0d:7b:ff:4d:00:6b:a0:4f:
28:71:dc:b5:d8:98:1f:fb:bc:2a:05:d5:78:eb:d4:eb:e3:81:
92:bf:2f:8a:bf:84:87:27:49:0a:16:57:50:f4:fd:bc:62:c7:
3d:ec:d7:1b:6f:7f:20:48:d8:07:3b:9b:02:28:b8:ad:7e:16:
f3:22:7c:80:c9:e7:19:d9:80:90:c9:ca:11:59:00:ad:ab:f5:
13:10:a9:d6:ce:1e:aa:fb:a0:7c:22:2d:86:e3:f9:34:7b:55:
63:b1:f2:73:4d:6f:9d:83:6e:cc:4b:e7:e9:c7:9b:f7:8b:21:
cf:f6:80:c1:e7:7d:e2:f3:e4:2e:37:32:cc:66:66:08:85:05:
6d:d4:ab:0d:ad:f6:79:15:73:59:d3:da:e2:c8:6d:5b:83:fc:
d1:f8:19:66:b2:b7:49:93:45:ea:65:a2:c0:95:91:fc:d1:e0:
32:e4:78:23:08:4e:da:9c:9b:56:c3:a1:ce:30:53:70:3d:55:
a5:97:cd:f9:18:d8:89:41:0a:cd:27:a9:6f:fd:74:0f:49:eb:
e6:ae:f2:3a:ac:41:4a:e0:e4:36:de:a9:e4:a5:4a:a2:1c:09:
6f:a0:0c:f9:65:e4:5a:b5:d4:2b:6d:6d:5d:d1:f9:28:43:62:
b7:be:a4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:51 2025 by rpki-client