This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft
File: UdUxrvegh8GOMB4OaixjcbJkw-g.mft (raw, json)
Hash identifier: 9sU2pQ58hVL1rv4c4YE+wz1klIdAvvDvC7gtpGe3fic=
Subject key identifier: E2:6E:39:CA:86:AD:B0:F1:E1:59:06:D8:EC:89:BA:A0:D2:E7:29:A1
Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8
Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8
Certificate serial: 022B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft
Manifest number: 0213
Signing time: Fri 05 Dec 2025 00:47:04 +0000
Manifest this update: Fri 05 Dec 2025 00:47:04 +0000
Manifest next update: Fri 12 Dec 2025 00:47:04 +0000
Files and hashes: 1: UdUxrvegh8GOMB4OaixjcbJkw-g.crl (hash: T9iny3FFwYUeS6fm6PyXCIyWxuAl66HWw2w4QkjG+I4=)
2: 891E633CB7F111EFA500D67CC4F9AE02.roa (hash: O4FUSN5LS+aElz5VOCMijpDVd7ugBsWS/neaZYIhjDU=)
3: 7D215B2CC3C111EE8F83CE1AC4F9AE02.roa (hash: WiLdUkxZVUsyLYaXHR0WIvWbfxTpV9CYC+KkS9rRgFs=)
4: B46796B8B8EE11F0B3E74640C4F9AE02.roa (hash: KU0fghawNYrmUS52BrVzcRnbvVugg48SLZDAX+rBsLA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl
rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:47:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 555 (0x22b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFAFF, serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8
Validity
Not Before: Dec 5 00:47:04 2025 GMT
Not After : Dec 12 00:47:04 2025 GMT
Subject: CN=69322b88-7877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:24:0c:84:06:c0:8d:6f:9a:a9:25:5e:a8:33:
e0:60:fb:36:10:0c:c8:2d:05:f0:ce:09:44:74:de:
ee:15:92:67:d7:29:a6:88:43:f2:14:a7:b4:51:0d:
83:d8:ed:de:10:a9:87:69:31:05:99:4b:62:23:0c:
0f:75:22:6c:36:e3:22:2f:af:c6:7c:72:07:0d:8c:
4e:39:e8:52:2e:f7:15:50:af:33:6a:dd:97:2d:31:
bf:bc:ae:fd:76:94:12:0e:c8:09:11:32:50:e7:10:
0d:61:28:1a:62:42:64:56:ba:c4:65:e8:43:4e:ec:
43:70:7b:96:f3:b7:c7:d3:b6:eb:57:f6:7a:9f:f6:
64:e8:e6:8b:01:db:79:80:07:43:1b:e3:44:ae:c4:
9e:3f:ca:ac:60:24:9c:89:43:22:e6:13:6f:97:16:
7d:f7:df:2e:e7:22:f3:a3:05:8c:56:76:87:f1:ac:
29:99:c7:77:6c:c4:b9:f7:3c:d3:3a:86:94:e9:68:
97:ac:41:57:0b:da:3c:00:c2:14:bc:f2:79:e3:66:
3a:89:de:db:bd:ad:23:64:0e:16:3d:77:34:ea:4d:
27:9d:84:9d:bb:d2:7b:a4:c1:26:3c:37:0d:65:bd:
69:6a:25:f5:01:a4:f8:22:c1:45:c2:b3:28:aa:98:
26:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6E:39:CA:86:AD:B0:F1:E1:59:06:D8:EC:89:BA:A0:D2:E7:29:A1
X509v3 Authority Key Identifier:
keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:fb:2e:5c:ab:af:41:63:40:77:a0:3b:a5:1d:a4:aa:4c:d8:
fd:e5:e1:7d:1e:f5:03:26:46:ed:e2:f5:90:13:0c:49:0f:b3:
82:c9:51:47:ab:d9:e5:16:80:da:aa:90:b1:a4:a5:c4:d5:c8:
4d:67:a9:01:9f:6e:d2:a5:9f:9f:c4:7e:88:63:87:d7:67:5f:
84:72:2c:56:6a:4b:4d:ba:27:f8:b2:84:93:29:3b:c9:22:86:
84:c6:90:a7:b9:00:22:cf:e0:d0:8f:02:e8:91:a9:4f:ce:2d:
ab:b1:48:c6:86:43:f4:6f:87:a0:1a:47:e2:98:c9:cc:45:a2:
85:64:e7:5a:c4:92:47:ba:78:20:fa:5b:17:4e:fd:f2:c5:39:
cd:4d:16:1b:ee:92:67:39:4a:0d:a0:87:c1:8d:a4:5e:ed:7d:
ed:e0:89:b4:c7:2b:3e:d2:74:c6:08:48:23:53:a5:94:bc:a0:
f9:d3:15:b9:60:62:6a:99:38:e7:7a:9f:f8:20:1f:17:74:a4:
cb:45:d9:01:52:ec:df:ce:6c:98:8d:ef:67:fd:0a:92:5e:02:
7d:db:50:2a:29:f6:56:48:76:43:25:c8:3c:50:e0:8a:71:17:
0e:87:b4:18:17:88:88:c1:24:e3:50:b0:f9:f9:fc:03:41:64:
d8:90:7d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:45:35 2025 by rpki-client