This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
File: UgupTND7nnwUDfvAzFi5PPVMIvM.mft (raw, json)
Hash identifier: k8JGBJLTSxhCZhPZOVAbYwE514IDWht1ApiHHu5U7As=
Subject key identifier: 02:9E:9D:14:BC:22:12:08:4D:FE:E0:18:59:B5:33:37:A3:68:DD:6C
Authority key identifier: 52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3
Certificate issuer: /CN=A91F8981/serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
Certificate serial: EB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
Manifest number: E9
Signing time: Fri 05 Dec 2025 03:25:39 +0000
Manifest this update: Fri 05 Dec 2025 03:25:39 +0000
Manifest next update: Fri 12 Dec 2025 03:25:39 +0000
Files and hashes: 1: UgupTND7nnwUDfvAzFi5PPVMIvM.crl (hash: h812yT/P7aNiZWHO97tuavDmrYReQiW2I+kD8KEj+MU=)
2: D79D112E6C7F11EF92105459C4F9AE02.roa (hash: taSipunEH/A4JKib1d15PbUF8sLm4qJrajeTCDOlA48=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl
rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8981, serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
Validity
Not Before: Dec 5 03:25:39 2025 GMT
Not After : Dec 12 03:25:39 2025 GMT
Subject: CN=693250b3-fa4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:68:92:87:31:a6:2b:b3:96:52:67:0c:0c:e2:
33:9e:03:a2:71:54:9f:89:ad:29:38:3c:a0:2e:f2:
5d:68:b0:d8:3c:6a:9d:0c:67:b4:00:68:4b:02:32:
bd:bf:61:04:38:54:56:9e:ce:f0:ea:98:20:19:ee:
fb:ee:69:30:ea:bc:36:2d:96:e1:73:a6:ac:fd:e5:
92:16:32:84:a8:33:6f:7d:14:63:aa:3a:96:03:38:
09:87:5f:c0:50:8e:0a:f5:9b:36:1e:41:9c:35:4f:
b5:4c:c0:96:48:50:7c:aa:c4:18:90:f8:42:62:11:
54:3e:b9:0c:46:90:58:2a:51:bb:99:0b:b0:51:4b:
3f:8b:ad:b4:31:07:88:42:54:54:cc:0b:4a:7c:d5:
bc:53:bb:5d:55:bf:12:12:f4:5d:ae:ff:b4:23:3a:
fb:6b:3a:84:58:67:7b:b5:fd:9f:f5:57:71:66:35:
91:91:87:2f:bf:ac:d8:aa:4b:b2:99:52:4e:be:9c:
61:2a:f9:dd:5f:a5:7e:bf:7f:63:e8:cc:aa:c2:3e:
c1:cf:f4:2c:aa:60:65:be:78:de:20:dd:44:56:9a:
29:f7:d4:36:e0:b4:9a:87:a2:81:aa:fa:ce:c6:7f:
1d:a0:eb:ed:e1:41:fd:71:13:54:fe:a9:d3:23:cc:
d1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9E:9D:14:BC:22:12:08:4D:FE:E0:18:59:B5:33:37:A3:68:DD:6C
X509v3 Authority Key Identifier:
keyid:52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:30:ef:2f:28:21:2e:53:24:ef:59:8b:57:10:2e:e3:b5:b2:
ac:5c:0e:cc:2a:3d:51:6a:a9:df:9e:5a:d1:d6:97:10:e5:45:
0b:72:be:3a:ed:21:9f:31:9d:bb:9f:2a:cf:45:d9:fb:59:75:
4d:fb:99:61:ff:7b:00:48:da:da:b1:4a:e1:37:a6:89:9b:90:
78:87:75:98:cf:68:02:56:ac:fd:a0:8c:dc:9d:41:89:21:ce:
bd:ae:4c:45:b0:59:c0:7f:ea:7b:f2:5b:eb:85:ae:c7:34:29:
79:64:77:2c:09:62:92:b7:56:75:54:86:78:06:70:28:ef:fa:
2c:bb:ee:0c:fc:0d:d1:14:7b:dd:5a:ae:05:3e:a1:a4:1e:21:
d8:46:60:9c:af:41:06:d0:90:13:73:29:4a:89:dc:6e:bf:dc:
3e:07:c8:c1:ff:85:4d:b6:f0:8b:43:52:6c:46:41:74:22:fd:
e0:e5:1a:52:80:41:2d:2d:60:b6:9f:d6:97:f9:fd:c2:e8:ca:
71:6d:82:01:de:c3:b1:af:1c:c7:b8:ae:ab:5e:eb:26:50:e7:
61:34:7c:35:76:6e:57:7b:e5:e8:37:0d:75:5d:78:08:e4:95:
00:16:2c:f5:42:e3:6b:3a:6b:a5:c6:d0:4c:83:6c:e4:da:47:
60:bb:f0:46
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5ODExMTAvBgNVBAUTKDUyMEJBOTRDRDBGQjlFN0MxNDBERkJDMENDNThCOTND
RjU0QzIyRjMwHhcNMjUxMjA1MDMyNTM5WhcNMjUxMjEyMDMyNTM5WjAYMRYwFAYD
VQQDEw02OTMyNTBiMy1mYTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2WiShzGmK7OWUmcMDOIzngOicVSfia0pODygLvJdaLDYPGqdDGe0AGhLAjK9
v2EEOFRWns7w6pggGe777mkw6rw2LZbhc6as/eWSFjKEqDNvfRRjqjqWAzgJh1/A
UI4K9Zs2HkGcNU+1TMCWSFB8qsQYkPhCYhFUPrkMRpBYKlG7mQuwUUs/i620MQeI
QlRUzAtKfNW8U7tdVb8SEvRdrv+0Izr7azqEWGd7tf2f9VdxZjWRkYcvv6zYqkuy
mVJOvpxhKvndX6V+v39j6Myqwj7Bz/QsqmBlvnjeIN1EVpop99Q24LSah6KBqvrO
xn8doOvt4UH9cRNU/qnTI8zR0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKenRS8
IhIITf7gGFm1MzejaN1sMB8GA1UdIwQYMBaAFFILqUzQ+558FA37wMxYuTz1TCLz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk4MS8xQ0Y2Q0Q3NDZD
N0YxMUVGOTE0RDdENTdDNEY5QUUwMi9VZ3VwVE5EN25ud1VEZnZBekZpNVBQVk1J
dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1VndXBUTkQ3bm53VURmdkF6Rmk1UFBWTUl2TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODk4MS8xQ0Y2Q0Q3NDZDN0YxMUVGOTE0RDdENTdDNEY5QUUwMi9VZ3VwVE5EN25u
d1VEZnZBekZpNVBQVk1Jdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCjMO8vKCEuUyTvWYtXEC7jtbKsXA7MKj1RaqnfnlrR1pcQ5UULcr46
7SGfMZ27nyrPRdn7WXVN+5lh/3sASNrasUrhN6aJm5B4h3WYz2gCVqz9oIzcnUGJ
Ic69rkxFsFnAf+p78lvrha7HNCl5ZHcsCWKSt1Z1VIZ4BnAo7/osu+4M/A3RFHvd
Wq4FPqGkHiHYRmCcr0EG0JATcylKidxuv9w+B8jB/4VNtvCLQ1JsRkF0Iv3g5RpS
gEEtLWC2n9aX+f3C6MpxbYIB3sOxrxzHuK6rXusmUOdhNHw1dm5Xe+XoNw11XXgI
5JUAFiz1QuNrOmulxtBMg2zk2kdgu/BG
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:57:02 2025 by rpki-client