This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
File: Co-Ufpyg_6RUeOxip-utknsEGTA.mft (raw, json)
Hash identifier: 8WB/EKGiR2THimeA+O7iZxqSvq3z3bjV/iI1W0pYclw=
Subject key identifier: 95:4A:4C:7F:E9:13:55:76:F2:D7:B2:61:ED:AA:EC:25:95:E9:D9:23
Authority key identifier: 0A:8F:94:7E:9C:A0:FF:A4:54:78:EC:62:A7:EB:AD:92:7B:04:19:30
Certificate issuer: /CN=A91160E4/serialNumber=0A8F947E9CA0FFA45478EC62A7EBAD927B041930
Certificate serial: 0507
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
Manifest number: 04FE
Signing time: Thu 18 Dec 2025 23:02:03 +0000
Manifest this update: Thu 18 Dec 2025 23:02:02 +0000
Manifest next update: Thu 25 Dec 2025 23:02:02 +0000
Files and hashes: 1: Co-Ufpyg_6RUeOxip-utknsEGTA.crl (hash: /2FSEnuhZu4S/HKRMMmvowZphWAscSQIr2513PN3q78=)
2: 836F1D0AE0FB11EEB861CD40C4F9AE02.roa (hash: TZrK0Feld/Y4/iPkyFu+uGFDuJj1OCyyDAt+MgPwxHk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.crl
rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1287 (0x507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91160E4, serialNumber=0A8F947E9CA0FFA45478EC62A7EBAD927B041930
Validity
Not Before: Dec 18 23:02:02 2025 GMT
Not After : Dec 25 23:02:02 2025 GMT
Subject: CN=694487ea-b2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:48:80:c0:e5:08:b9:c3:97:76:a0:74:97:c7:
48:c5:fb:54:6a:c6:47:e9:37:b2:5c:00:0d:1b:c7:
17:62:70:88:e2:ec:fe:0e:94:77:1d:58:d2:9b:7d:
a3:e8:fb:4a:eb:9f:a2:43:cf:05:f6:38:e0:4d:31:
70:0d:fa:3d:90:ee:f7:8f:56:c1:87:d2:23:57:5a:
dd:3d:c5:d4:18:a9:98:0e:46:79:0f:5a:8f:2b:c9:
1a:91:18:64:85:6f:db:cc:b6:2f:b4:4e:51:3c:c5:
d3:d4:71:34:79:df:c5:b4:a4:c8:5d:c1:64:b4:22:
28:76:44:26:b3:6f:09:3c:ec:f7:6a:31:48:c5:9e:
96:cb:c0:15:eb:28:b9:b5:14:26:df:6d:db:7b:7f:
f7:2c:30:cc:d8:40:12:50:2f:ff:5f:da:21:98:12:
20:c9:95:a4:d7:1c:86:c8:ef:56:c1:1c:b5:e6:a7:
c5:f9:29:10:c5:e8:90:5f:d4:e7:bb:18:dc:40:05:
08:8b:6e:f4:9f:ff:3f:e0:c3:99:41:6f:91:89:5e:
51:39:65:16:00:0c:c7:86:6f:2e:f5:ca:07:c8:93:
fb:19:87:b7:cf:fc:8c:2d:c4:b3:7b:1e:e9:4c:d3:
80:cb:5f:8e:1b:8d:7c:fb:f8:48:4b:9a:d9:96:3a:
89:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4A:4C:7F:E9:13:55:76:F2:D7:B2:61:ED:AA:EC:25:95:E9:D9:23
X509v3 Authority Key Identifier:
keyid:0A:8F:94:7E:9C:A0:FF:A4:54:78:EC:62:A7:EB:AD:92:7B:04:19:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:de:c2:dd:ae:48:14:bd:cd:66:09:5e:7d:dc:d0:6c:30:98:
49:7d:05:a3:b5:78:af:51:51:8a:c1:91:21:ac:a9:c5:ed:14:
e2:ae:7b:dc:3b:7d:7a:c2:f5:86:48:d4:6a:7b:5f:2d:bb:1c:
32:ce:59:95:6c:67:e0:e7:d7:a7:c5:81:23:46:ef:22:b9:28:
89:ba:a3:fe:16:32:a8:8d:e5:83:7b:03:4e:74:9b:9e:8c:9a:
7a:b8:7c:0a:3a:4c:ed:67:81:1a:90:99:ed:25:d2:fb:f6:0a:
2e:aa:8d:29:5f:b5:b3:03:9e:55:b1:36:76:b3:36:00:80:17:
cf:82:e7:c4:a6:6a:77:7b:22:bd:42:8c:9d:a5:40:5b:a7:92:
f9:da:6e:c6:f1:ab:1e:73:06:ae:ba:b1:39:1f:c2:9a:cc:2f:
17:0a:15:66:06:53:a5:06:a9:fd:36:0a:45:77:88:aa:e2:65:
a3:b1:fa:a6:4b:c4:0f:a0:d2:26:5f:6c:c5:5c:d1:f9:0b:c2:
f0:32:04:e5:07:b3:d4:29:17:b9:25:72:d2:af:0e:5c:e1:ee:
f4:0d:39:97:a9:89:1a:a2:d8:e0:48:08:51:cc:b5:07:75:95:
ba:8f:ca:d5:ba:7e:3e:3a:3f:a5:13:1c:66:31:37:19:9e:a3:
d5:e5:01:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:06:02 2025 by rpki-client