This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
File: UgupTND7nnwUDfvAzFi5PPVMIvM.mft (raw, json)
Hash identifier: v9W3IyyYPY7gZVkVG6VUPExg25aHBNyPYQwdn/fq+Vw=
Subject key identifier: 76:35:C0:CA:0D:C0:4D:4E:73:20:EE:8D:14:34:BD:7E:01:DC:3C:09
Authority key identifier: 52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3
Certificate issuer: /CN=A91F8981/serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
Manifest number: F0
Signing time: Fri 19 Dec 2025 04:26:24 +0000
Manifest this update: Fri 19 Dec 2025 04:26:24 +0000
Manifest next update: Fri 26 Dec 2025 04:26:24 +0000
Files and hashes: 1: UgupTND7nnwUDfvAzFi5PPVMIvM.crl (hash: jvEVlHxFMRN2bp20fm3UdNDmYIJ6GFE/oN5oaSJNifs=)
2: D79D112E6C7F11EF92105459C4F9AE02.roa (hash: taSipunEH/A4JKib1d15PbUF8sLm4qJrajeTCDOlA48=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl
rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:26:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8981, serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
Validity
Not Before: Dec 19 04:26:24 2025 GMT
Not After : Dec 26 04:26:24 2025 GMT
Subject: CN=6944d3f0-9899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:9c:30:a9:df:32:2d:e2:d5:4d:7e:de:ec:
11:d8:9e:7f:99:d7:86:d3:fd:e6:20:1d:36:38:75:
32:ae:e1:c5:b5:df:30:3e:e0:c5:7c:88:d0:f6:db:
69:07:6d:42:e1:ee:a2:33:c7:8d:01:cd:0d:fd:af:
44:73:47:69:b1:93:95:c4:c8:1c:13:49:2d:4d:7e:
04:e3:42:64:98:05:58:7c:45:84:71:85:25:2e:72:
38:6e:a4:48:bc:6a:03:b7:ed:43:59:36:e3:7b:65:
da:08:ce:7f:e8:85:b4:4d:0b:d1:a9:1f:2b:85:f6:
30:ed:85:85:0a:a3:30:97:2c:7a:6d:07:80:ec:a9:
3f:da:d0:c1:38:0a:e1:d2:ce:04:e9:66:75:59:b5:
b4:fa:20:f9:18:6c:da:34:bb:58:19:01:49:3a:19:
69:19:cd:3a:57:5d:f3:d1:d1:de:f1:ee:cc:e2:87:
6c:f7:48:73:48:e1:65:d0:1b:61:e0:32:80:8a:cf:
86:bb:40:0d:f2:1a:ff:20:e0:70:df:96:86:35:08:
e2:89:18:ad:5c:9a:f1:f2:f5:59:df:e3:2b:f7:08:
9a:e2:e4:24:6b:26:15:49:68:72:9d:ad:3b:d3:81:
a3:05:ca:0c:68:02:20:8e:1a:00:fc:55:a3:d3:31:
ac:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:35:C0:CA:0D:C0:4D:4E:73:20:EE:8D:14:34:BD:7E:01:DC:3C:09
X509v3 Authority Key Identifier:
keyid:52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d0:01:58:6f:c0:73:6c:76:c6:77:6d:b9:3f:13:17:19:e6:
0a:9f:f9:c7:0d:55:08:50:58:f7:e8:af:d9:f1:e8:e6:8c:79:
cc:8b:55:57:a4:ab:a2:b0:fb:36:95:52:d5:88:21:de:9a:7a:
2e:4f:3a:d8:2b:99:80:e1:9e:ed:d9:2b:85:26:c3:d1:fa:c6:
38:f1:73:4b:34:c2:d5:e3:3f:86:81:37:b0:ab:c9:d6:b1:17:
73:7f:38:47:1a:1a:88:a8:21:11:f2:46:b4:06:49:52:08:4d:
27:9b:63:fd:aa:0d:ca:a3:0d:87:3d:75:0f:d2:38:1f:69:2a:
a0:b2:0d:bd:f5:63:65:23:05:ea:56:c3:cc:1d:2d:9d:49:db:
f7:58:f4:1b:72:1d:65:a7:62:58:9a:9a:8a:be:5c:62:11:d3:
1e:38:cb:ed:27:65:7b:61:82:ad:a1:f3:6d:0f:90:02:8f:52:
c0:5e:2a:44:7a:ef:67:0b:18:82:81:5e:9e:7c:75:01:da:75:
bf:13:fe:46:f6:fc:b0:20:8a:43:9c:01:31:c4:f2:5b:aa:c7:
f9:cd:5c:59:7c:f3:ac:03:55:2e:f2:64:87:5d:6e:b7:3b:a2:
c4:b8:76:af:4c:35:07:06:b9:b7:3b:32:90:e0:a7:09:1d:02:
f3:2a:08:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:28:33 2025 by rpki-client