This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
File: UZQtJe28pR36Vs4J7TYet6JtvSU.mft (raw, json)
Hash identifier: QZy+LjWUepXNR0XPqbHDSN1Im9kMKo8QfKVvs5But+0=
Subject key identifier: A6:24:33:AD:CC:4A:68:A1:D0:DC:79:96:E7:A8:AF:51:BB:44:8D:4B
Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
Certificate issuer: /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Certificate serial: 09B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
Manifest number: 0995
Signing time: Wed 31 Dec 2025 19:47:04 +0000
Manifest this update: Wed 31 Dec 2025 19:47:04 +0000
Manifest next update: Wed 07 Jan 2026 19:47:04 +0000
Files and hashes: 1: UZQtJe28pR36Vs4J7TYet6JtvSU.crl (hash: yodjosMVApdDhr6fwbwtEE7fdRogNB+s0231BkIWD0Q=)
2: 11DBC0ACEB3211EFBDFC3E0FC4F9AE02.roa (hash: zYdZV0PmY995jxBgObVxrNeEKm4srCzVt7whFrsxdT8=)
3: 6602AEE2CD7411EFB3DC8110C4F9AE02.roa (hash: nXVtsybD/p0SClRwWP9c2+ZIMGXniljjDK2EFaKpa7A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Jan 2026 19:47:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2482 (0x9b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AFA4, serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Validity
Not Before: Dec 31 19:47:04 2025 GMT
Not After : Jan 7 19:47:04 2026 GMT
Subject: CN=69557db8-b9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4a:bd:94:e1:bc:b9:6c:c3:2c:40:6c:cd:7a:
5c:cd:fe:f3:de:68:c6:54:d3:0f:f9:a9:83:7e:fe:
ea:b0:9b:86:2e:b4:5c:dd:c2:23:8f:49:29:2a:39:
72:f2:35:e2:a9:78:56:52:bd:cd:53:32:51:48:a2:
25:b7:9e:b7:cb:55:65:54:f5:14:53:fc:79:df:4d:
83:67:d7:6e:f5:13:74:bb:1a:0d:ca:f8:ca:8c:1d:
b9:d4:d8:e8:20:e6:c5:b1:5c:8e:db:e0:c5:7c:80:
ba:37:8f:02:38:32:ad:91:bd:91:6a:88:0f:40:45:
ae:5b:a6:c8:b1:74:fb:fd:be:12:a7:3c:33:5f:48:
e5:a0:bd:4a:74:f8:a2:b2:ec:50:2a:2a:98:7f:6a:
99:67:e5:0c:58:65:bc:b7:da:89:11:1d:72:a9:48:
b2:6b:3d:6d:16:05:9f:73:af:10:a2:77:64:2a:1c:
8d:9d:8b:43:bb:43:d5:41:b6:29:4d:bb:a9:52:fb:
e0:90:a1:9d:74:78:ab:39:64:fb:89:2c:f7:8e:ea:
e2:60:08:86:6f:6b:6f:41:f1:00:e5:9a:7e:77:94:
03:7d:c8:b8:8f:fb:59:58:b8:6f:11:20:2c:d0:8b:
a7:2f:31:1c:aa:50:74:6e:44:63:d4:15:f9:d7:de:
52:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:24:33:AD:CC:4A:68:A1:D0:DC:79:96:E7:A8:AF:51:BB:44:8D:4B
X509v3 Authority Key Identifier:
keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:cc:fb:5d:ea:26:aa:82:69:c2:f0:48:70:e9:1f:ad:fe:e6:
19:1e:76:f8:b4:2b:ee:4d:7d:60:fa:f2:1c:a4:00:97:47:a8:
05:ea:61:51:17:e1:e8:99:64:8e:f9:75:91:51:f7:b3:0c:53:
5d:63:12:50:70:83:82:94:76:b8:12:d7:5f:c4:cb:62:48:0a:
de:02:1a:58:95:89:e3:38:35:64:1d:3e:cd:16:45:9a:af:d7:
ae:99:60:ef:92:dc:c2:93:f3:87:c4:4c:0c:91:44:a0:de:66:
68:af:91:8a:f3:16:71:88:75:10:22:17:10:96:6a:a0:ed:35:
2e:2a:29:23:2a:ba:3d:5d:1d:d1:3a:b6:69:21:d8:4b:71:2c:
11:2b:3b:51:c0:c7:0c:a9:15:78:9d:63:42:d0:9e:d9:d7:fe:
3b:80:ff:a4:be:a9:51:79:bf:52:5f:5e:af:29:f1:37:ff:ec:
ca:b2:72:1f:36:eb:7e:30:c6:9f:6a:b1:2c:d9:f3:88:63:f0:
0d:94:af:75:bc:51:4d:66:be:eb:b2:2a:2f:cb:81:18:c7:d7:
59:8b:37:c2:03:b6:ee:e7:91:cf:43:0e:b9:09:b9:4f:6f:14:
fb:87:36:38:27:fd:4f:eb:a5:04:18:a1:e8:f9:f5:39:55:29:
bb:02:ef:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 11:05:50 2026 by rpki-client