This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft
File: UKsTEAVD9kbAxVN13vhQXRTzZrg.mft (raw, json)
Hash identifier: 1uT/pd1mbF84Tzt428E2JExqQHLPh5VMwfUn8F3uSNw=
Subject key identifier: 75:94:9A:AF:C2:C9:AF:C8:6C:22:AE:C2:D8:C8:AD:8E:60:7D:78:7B
Authority key identifier: 50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8
Certificate issuer: /CN=A911270F/serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8
Certificate serial: 0B9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft
Manifest number: 0B98
Signing time: Thu 18 Dec 2025 18:40:40 +0000
Manifest this update: Thu 18 Dec 2025 18:40:40 +0000
Manifest next update: Thu 25 Dec 2025 18:40:40 +0000
Files and hashes: 1: UKsTEAVD9kbAxVN13vhQXRTzZrg.crl (hash: BSqNP4iSBnWI0BzCvt1bgoo2wsEopPB7J8HVn0qGeSc=)
2: 74D2ABEE39F811EAA4343534C4F9AE02.roa (hash: WNF8DvI+W4AUYThET4ebOd4+s48ZJAgIRPErXZ/X2b4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl
rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 18:40:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2974 (0xb9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911270F, serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8
Validity
Not Before: Dec 18 18:40:40 2025 GMT
Not After : Dec 25 18:40:40 2025 GMT
Subject: CN=69444aa8-7d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fa:cd:37:85:3a:a0:d6:e8:a2:9c:24:d7:11:
4b:cc:37:1b:f6:97:87:0c:21:ce:5b:1c:f2:31:c8:
92:ae:e1:73:eb:21:4b:65:2c:fb:18:98:c3:a9:3d:
52:8c:84:22:88:e5:63:98:ce:77:77:d1:13:bc:0e:
f3:c9:16:08:49:87:53:b9:3a:60:6e:b1:f5:0c:4a:
de:09:5e:5f:16:2e:3e:f0:d5:5e:0d:a9:22:19:a8:
fe:ec:b5:53:86:93:a3:95:03:6c:51:92:d1:60:ac:
ab:d6:65:33:58:91:74:07:f8:fd:74:71:e4:78:ee:
f7:b5:d9:e2:0e:a7:23:25:73:03:b2:53:fd:d4:62:
ef:25:9a:a3:1f:a8:90:37:52:08:8f:fb:70:b3:73:
1f:be:f3:f7:5d:5d:83:89:40:38:50:ba:4c:46:cc:
33:e7:3d:7c:aa:4a:34:ec:e9:ea:cf:0b:4a:7c:69:
d7:87:46:a1:31:39:5c:c3:78:fc:a8:cf:ec:7d:5e:
43:89:e6:d6:23:19:83:1e:1a:e6:7d:c2:aa:1a:68:
14:57:39:a7:4f:5e:48:5f:76:78:e9:7c:f0:4d:42:
6f:be:9b:ac:e3:ec:8d:9f:a1:1a:26:c2:d5:80:99:
71:04:28:e9:0b:84:6e:f9:d0:ad:2b:fe:63:94:d1:
12:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:94:9A:AF:C2:C9:AF:C8:6C:22:AE:C2:D8:C8:AD:8E:60:7D:78:7B
X509v3 Authority Key Identifier:
keyid:50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:19:b2:8a:4e:4a:45:51:b5:29:dd:d2:7b:5b:35:c4:66:41:
bc:39:72:1f:d8:21:60:b7:bd:cf:df:ff:f4:51:c6:e3:cd:6c:
d1:79:fc:d7:51:b1:d0:f3:3d:af:83:d5:cf:74:7e:38:e8:18:
56:f3:68:e4:1a:54:de:5d:37:ce:45:a1:c4:79:55:28:ed:87:
9d:6f:41:2c:ba:39:a7:22:be:f1:ba:e6:c9:67:55:15:cd:36:
43:10:1c:03:39:b1:9b:30:d1:75:1e:7d:d1:c5:3f:9b:37:0c:
11:d2:49:90:0d:cc:0d:31:8f:70:09:f7:0e:ec:82:f1:c0:17:
db:90:a0:bf:99:a7:c6:b6:e3:0e:59:d2:98:7a:85:7e:65:7e:
c5:bb:72:9e:e2:1f:6f:84:ad:8a:7d:00:b0:9f:3d:d5:96:61:
7a:de:93:1e:c8:92:b3:1b:45:c3:cf:90:73:2e:8d:10:c9:01:
39:2e:d6:29:96:bc:77:f4:e4:fc:d2:24:0d:f3:0b:03:08:a9:
be:b8:9c:8e:fe:cd:f9:f0:12:e8:48:5a:8e:0e:cd:4e:dd:1c:
4d:03:4d:7f:b0:a0:ac:80:a1:9b:4b:67:2b:6f:d4:df:1e:ed:
ff:ce:1e:da:2d:78:95:53:e7:eb:c8:e9:c5:9a:41:2e:bf:85:
52:8b:1b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:50 2025 by rpki-client