This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
File: UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft (raw, json)
Hash identifier: WKt05Iio5ZfY8I1dLnKAliiVpdHhtcFYIjxeKWp3Ye4=
Subject key identifier: 97:71:DE:A2:3E:7E:79:26:42:52:B2:CF:E9:DD:D4:BE:A0:8F:6F:48
Authority key identifier: 53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56
Certificate issuer: /CN=A911BAD6/serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656
Certificate serial: 0280
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
Manifest number: 0275
Signing time: Sun 21 Dec 2025 00:50:34 +0000
Manifest this update: Sun 21 Dec 2025 00:50:33 +0000
Manifest next update: Sun 28 Dec 2025 00:50:33 +0000
Files and hashes: 1: UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl (hash: JhGRjSSsDDfYZUqzOnFULwzijYEvCJwjMXDrMy+qgXk=)
2: 35CBA9EC70D311F08BF5B035C4F9AE02.roa (hash: vwYJIXjTo9ECl3lyEIwlgLb2E4b1+3qq0PZxG+xCgow=)
3: B288EC9C870811F0A371DD81C4F9AE02.roa (hash: B822H39ccq9AkgBM7KMLjKKRoyj+1eXb0PxHzSH94G0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl
rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 00:50:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 640 (0x280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BAD6, serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656
Validity
Not Before: Dec 21 00:50:33 2025 GMT
Not After : Dec 28 00:50:33 2025 GMT
Subject: CN=6947445a-0d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:01:ec:eb:8d:c2:c9:2a:08:d1:df:21:c2:0c:
34:b3:ff:ee:e8:e5:20:99:80:63:ea:74:88:61:1d:
82:ba:89:3f:51:47:9f:1e:d3:a8:54:f9:8a:63:e6:
04:13:3b:9f:6a:8f:3a:2c:40:6b:07:05:45:d2:81:
57:3c:a5:b2:1b:dc:fa:01:1e:62:66:41:3c:3e:dd:
6e:59:71:45:9c:5f:f0:2e:99:61:5a:03:77:7b:47:
93:9b:82:d3:11:77:a9:04:c1:8d:5c:cf:e1:79:66:
65:14:81:5f:46:b9:6c:3f:34:20:d4:e4:b8:92:b0:
f0:63:eb:e6:8b:60:77:22:5f:1e:03:5a:88:67:1e:
6b:41:b0:63:72:19:8c:6c:5d:35:78:d6:75:59:1d:
7f:5f:09:15:a6:1d:76:55:5d:f5:0b:ce:8d:55:ef:
94:a1:40:da:ba:ce:ba:91:e3:d3:f0:7a:de:ca:10:
19:ef:49:49:f8:8e:18:87:e7:a0:95:a9:6d:d3:66:
e9:a9:88:c1:2d:11:b8:5b:ea:79:64:32:76:d0:a1:
53:08:13:3c:6f:0d:91:c3:f0:36:29:e7:58:2b:81:
63:91:20:7b:89:fc:70:94:51:7c:11:80:06:e5:8f:
46:a6:f1:c4:99:e7:70:2b:a4:fc:41:4e:04:37:4d:
e1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:71:DE:A2:3E:7E:79:26:42:52:B2:CF:E9:DD:D4:BE:A0:8F:6F:48
X509v3 Authority Key Identifier:
keyid:53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:6a:94:26:2c:7a:bf:22:9f:02:9a:45:d3:00:e3:a0:28:d2:
81:16:3f:90:50:e7:82:f7:72:d7:55:1f:19:ea:1f:fe:4b:42:
c1:bc:91:ec:25:c3:40:cb:22:f7:f8:ba:47:01:5d:25:f0:2c:
33:d4:ea:19:79:26:3d:6a:5f:17:ac:28:ab:86:1a:7f:1f:a9:
10:d7:aa:eb:63:12:d8:f6:f7:81:4b:d6:47:a0:1b:40:4e:08:
8b:26:08:dc:dd:bd:ca:9e:e3:73:b2:7c:37:03:f1:32:54:97:
f0:39:a9:92:f3:6f:8d:cd:4c:ae:0e:ec:49:9b:4d:15:b3:23:
32:a9:78:45:90:22:06:9a:c6:cb:57:8e:6f:40:40:c4:ae:68:
c5:be:47:cf:d7:83:ec:c3:04:dd:0e:4a:b2:e0:17:2d:70:92:
de:fb:0a:c8:22:83:4f:17:19:21:c4:56:5e:f1:e2:c6:43:77:
54:ac:c1:2e:57:6a:27:b8:b9:34:6d:5b:eb:21:51:71:af:06:
95:59:76:28:da:d6:6e:31:64:f2:6b:0e:67:cd:0d:6a:ec:78:
84:36:57:c9:1a:34:80:ae:aa:ff:f4:8c:38:e2:7c:9b:ea:52:
09:29:5b:fa:88:31:2c:2f:82:3d:43:62:6f:51:c8:c3:25:8c:
1a:3b:0a:e2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJBRDYxMTAvBgNVBAUTKDUzMzJGOUFGMzA1MkNGM0Y4NUVBQkREMEFBRDY4MTUy
Mzk1MkU2NTYwHhcNMjUxMjIxMDA1MDMzWhcNMjUxMjI4MDA1MDMzWjAYMRYwFAYD
VQQDDA02OTQ3NDQ1YS0wZDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8gHs643CySoI0d8hwgw0s//u6OUgmYBj6nSIYR2Cuok/UUefHtOoVPmKY+YE
Ezufao86LEBrBwVF0oFXPKWyG9z6AR5iZkE8Pt1uWXFFnF/wLplhWgN3e0eTm4LT
EXepBMGNXM/heWZlFIFfRrlsPzQg1OS4krDwY+vmi2B3Il8eA1qIZx5rQbBjchmM
bF01eNZ1WR1/XwkVph12VV31C86NVe+UoUDaus66kePT8HreyhAZ70lJ+I4Yh+eg
lalt02bpqYjBLRG4W+p5ZDJ20KFTCBM8bw2Rw/A2KedYK4FjkSB7ifxwlFF8EYAG
5Y9GpvHEmedwK6T8QU4EN03h5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdx3qI+
fnkmQlKyz+nd1L6gj29IMB8GA1UdIwQYMBaAFFMy+a8wUs8/heq90KrWgVI5UuZW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkFENi9ENjRGNEU5QzNB
RjIxMUVEQTg0MkM1NzZDNEY5QUUwMi9Vekw1cnpCU3p6LUY2cjNRcXRhQlVqbFM1
bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V6TDVyekJTenotRjZyM1FxdGFCVWpsUzVsWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QkFENi9ENjRGNEU5QzNBRjIxMUVEQTg0MkM1NzZDNEY5QUUwMi9Vekw1cnpCU3p6
LUY2cjNRcXRhQlVqbFM1bFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDYapQmLHq/Ip8CmkXTAOOgKNKBFj+QUOeC93LXVR8Z6h/+S0LBvJHs
JcNAyyL3+LpHAV0l8Cwz1OoZeSY9al8XrCirhhp/H6kQ16rrYxLY9veBS9ZHoBtA
TgiLJgjc3b3KnuNzsnw3A/EyVJfwOamS82+NzUyuDuxJm00VsyMyqXhFkCIGmsbL
V45vQEDErmjFvkfP14PswwTdDkqy4BctcJLe+wrIIoNPFxkhxFZe8eLGQ3dUrMEu
V2onuLk0bVvrIVFxrwaVWXYo2tZuMWTyaw5nzQ1q7HiENlfJGjSArqr/9Iw44nyb
6lIJKVv6iDEsL4I9Q2JvUcjDJYwaOwri
-----END CERTIFICATE-----
Generated at Sun Dec 21 06:18:40 2025 by rpki-client