This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
File: T_UoRyFcSiLp8RSebL_t901hzos.mft (raw, json)
Hash identifier: iu84vaer/b7R+h32uDJ5r9IfRizAUrsDLz1+uWfG2sQ=
Subject key identifier: 50:33:25:01:4F:BC:9D:9D:55:0A:A6:9E:E0:45:AF:09:B3:88:A6:10
Authority key identifier: 4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B
Certificate issuer: /CN=A91F33A5/serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B
Certificate serial: 03B9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
Manifest number: 0393
Signing time: Thu 04 Dec 2025 23:19:19 +0000
Manifest this update: Thu 04 Dec 2025 23:19:19 +0000
Manifest next update: Thu 11 Dec 2025 23:19:19 +0000
Files and hashes: 1: T_UoRyFcSiLp8RSebL_t901hzos.crl (hash: QlVCOIjjc0ycDo/9lGxLErrQZPbFEaPiZ2B5Ooj5SEQ=)
2: 23D7B1B81EDD11ED83B7963BC4F9AE02.roa (hash: OIuIkx6LNP541+ogHj0tTuwVsOI11PX4TfWyw7GN2I0=)
3: D9750E78F01111EFB1720645C4F9AE02.roa (hash: +Yz6orAM99P+kFeVfZoKus8hCh0ONcQuiBI4/E0rf1A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl
rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:19:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 953 (0x3b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F33A5, serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B
Validity
Not Before: Dec 4 23:19:19 2025 GMT
Not After : Dec 11 23:19:19 2025 GMT
Subject: CN=693216f7-731c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f8:c4:86:68:28:1c:33:81:83:20:08:ce:7d:
3f:89:fe:30:75:33:38:f3:97:ec:7f:3d:2c:61:14:
ec:c7:84:5f:64:b3:e7:b8:0c:fa:ec:65:68:93:b4:
44:33:98:b6:a8:9a:5e:02:58:a0:1e:60:29:6b:9a:
39:42:b2:bb:45:5c:e6:66:f1:21:3f:9d:b1:8e:8a:
15:f9:bd:8a:74:d9:63:99:2c:e1:94:13:fa:aa:18:
ca:e5:44:44:24:59:74:87:6f:15:7d:bf:42:c0:49:
47:8a:39:8d:2a:de:c1:2b:60:26:a9:37:a3:f2:6f:
86:05:e5:b9:a7:56:0e:68:ac:64:de:aa:0e:10:be:
66:3f:26:d2:03:20:76:7f:5a:4f:9d:6c:61:01:a5:
13:14:a1:5f:4c:40:80:b7:02:2e:e6:5d:60:80:38:
1c:36:93:c3:50:4f:ef:a2:0f:fa:81:79:8f:f7:14:
70:92:c6:33:f8:9b:ac:62:19:a0:23:13:d8:46:f0:
3f:04:f0:87:af:b8:ae:9a:81:b7:9c:be:de:7d:76:
68:67:ba:2a:61:74:08:5c:c6:7b:2c:ed:6e:2d:d8:
11:3e:ad:d8:83:96:56:86:e9:86:e1:db:27:bc:8d:
16:ca:c5:6a:51:00:a4:89:f8:82:6d:f2:1d:84:0d:
8f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:33:25:01:4F:BC:9D:9D:55:0A:A6:9E:E0:45:AF:09:B3:88:A6:10
X509v3 Authority Key Identifier:
keyid:4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:47:41:ca:6e:3c:70:10:92:32:37:f3:f4:9c:6c:70:ae:d6:
9f:53:a4:fb:f2:94:6c:cf:2d:ad:4a:83:0a:14:9e:05:e7:ce:
63:c5:40:b8:f8:2c:be:7b:27:18:9d:eb:22:6b:dd:12:bc:4b:
62:78:a5:8d:8d:69:d5:39:43:3b:99:5a:9a:93:80:be:e7:f6:
62:51:3c:6f:2c:3e:53:e5:c3:47:33:98:e7:7f:f2:7b:84:3f:
37:db:4c:fb:d8:08:e6:15:f3:b1:95:c1:ee:39:62:0a:e3:02:
10:f2:49:2c:ca:7b:d6:e0:7a:3d:c9:77:54:15:0b:84:4e:69:
10:b5:50:fb:b6:11:80:2e:33:17:be:95:6e:1c:f3:4e:63:07:
d5:34:73:e2:04:13:f0:1b:a9:9a:87:d1:fc:0b:cb:06:96:9d:
c5:d7:99:93:76:cf:36:2f:10:f8:88:9a:35:ca:5e:18:a6:1f:
b7:e1:d3:17:e3:a5:d9:0f:79:95:69:36:7e:45:99:af:49:69:
d7:e3:8a:13:d4:fa:95:5a:2c:aa:73:81:a7:23:5b:7b:b5:da:
b6:a9:02:f6:cd:d3:f9:bd:ef:8c:f2:20:da:a1:98:c8:87:34:
67:bc:04:28:e0:e1:77:40:49:e3:dc:30:6e:de:0b:dc:c5:c6:
19:f5:6f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:31:51 2025 by rpki-client