This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft
File: _MUE2ks5jGbdvyw5K3UZzJDBoQk.mft (raw, json)
Hash identifier: kZPr4H6R7iONxt1RhCGqCV2ZcRZ2Bg8kVjyZ347p+Mg=
Subject key identifier: 4D:14:89:75:B9:3B:84:D0:84:FE:BC:64:BD:36:80:29:26:1B:B9:85
Authority key identifier: FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09
Certificate issuer: /CN=A91251EF/serialNumber=FCC504DA4B398C66DDBF2C392B7519CC90C1A109
Certificate serial: 09DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft
Manifest number: 09D5
Signing time: Thu 18 Dec 2025 19:30:32 +0000
Manifest this update: Thu 18 Dec 2025 19:30:31 +0000
Manifest next update: Thu 25 Dec 2025 19:30:31 +0000
Files and hashes: 1: _MUE2ks5jGbdvyw5K3UZzJDBoQk.crl (hash: dFeBhMzxbu8+5JGOrZEvEBPVPJ73mbdsf3qjzqlzphk=)
2: 869CBF5E91DC11EAA5FD4A1CC4F9AE02.roa (hash: xa2e2Chwv4yeL7fHM+A196uDscfEXGZLiMt2MCiQxb0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.crl
rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 19:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2524 (0x9dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91251EF, serialNumber=FCC504DA4B398C66DDBF2C392B7519CC90C1A109
Validity
Not Before: Dec 18 19:30:31 2025 GMT
Not After : Dec 25 19:30:31 2025 GMT
Subject: CN=69445658-097e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:93:a6:5e:a6:3b:a6:db:d2:de:e1:64:37:25:
5e:23:45:5c:ed:d4:df:ce:2c:1d:3e:ed:9d:50:3b:
50:af:b2:e4:15:18:92:23:55:e4:26:6e:31:8f:a7:
fc:e8:69:50:f1:44:8f:15:a7:d1:cf:6d:5c:57:ca:
cb:99:50:41:1f:80:52:7f:e9:4f:4b:82:db:fb:3f:
e2:1b:ed:b0:c4:51:23:c2:58:7b:e5:0d:6b:50:e9:
78:6c:bc:11:e4:8b:89:a2:64:ac:3c:9e:eb:cd:90:
5f:fe:c9:05:ce:16:cf:4e:63:12:66:7b:c9:3b:7e:
b0:af:34:b8:8d:5c:32:89:df:28:36:14:34:60:9a:
49:b9:75:a8:71:a4:e0:2e:10:0f:35:02:5e:df:aa:
47:67:36:5b:f9:a1:cf:14:22:56:d3:5b:b9:f1:6b:
7b:15:50:9c:a6:0f:58:4e:8b:e5:58:1b:a9:81:1e:
3d:d1:2a:8b:89:87:fe:eb:b2:89:1f:2d:66:40:a8:
a5:a9:cb:ee:a8:64:c3:4e:55:f5:5a:56:63:a8:c1:
04:62:42:99:f8:59:69:49:6b:55:f2:35:36:c8:11:
48:8e:b2:b7:3d:b2:c7:35:20:2d:ba:72:d0:cf:86:
cf:2c:07:3f:a1:ab:46:a1:eb:14:00:63:3e:fc:7b:
53:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:14:89:75:B9:3B:84:D0:84:FE:BC:64:BD:36:80:29:26:1B:B9:85
X509v3 Authority Key Identifier:
keyid:FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:6b:4d:6d:c6:73:6b:99:b1:4c:cd:79:69:7b:d5:bd:16:bf:
7f:ea:c6:6f:4a:ba:3c:d2:74:69:f1:a9:b4:ac:ad:96:44:bc:
db:bc:1d:21:b8:33:67:f1:ed:3e:2f:70:31:80:bf:a4:4e:11:
23:8f:a7:2b:a3:c4:7f:57:5b:ed:e3:09:82:46:cd:82:c1:db:
30:9b:40:e4:4d:f3:61:0c:dc:93:7e:d8:0b:af:49:df:9d:b6:
4a:cd:ef:f3:32:60:28:78:21:d7:61:30:fe:2f:93:11:4d:b8:
36:c9:f1:8a:d3:ec:e9:ee:75:55:94:69:35:51:d8:dd:bf:2c:
21:14:b1:94:95:0d:40:c8:58:3e:b5:e6:09:fc:62:a8:eb:c6:
cf:1f:f9:39:6f:77:b2:e6:14:40:de:f9:6f:a5:21:3c:de:a4:
1c:c8:36:dc:7a:b7:f8:18:a7:3d:b8:b5:7c:af:ce:76:a0:32:
c4:83:1d:0e:c9:ef:9c:43:dd:41:85:9b:eb:cf:53:3d:47:59:
bc:bc:0a:e5:85:57:ed:1d:dd:97:ed:05:32:cd:2d:3a:62:a5:
c8:9c:19:c2:55:0a:bf:28:86:f7:67:25:e5:11:fe:cc:28:c0:
35:06:32:7b:7f:07:83:e3:e5:de:7c:45:a7:d0:6c:01:1b:90:
f7:29:58:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:39 2025 by rpki-client