This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft
File: u0yWZedfnhna1G-LYJ00RPto7Uc.mft (raw, json)
Hash identifier: GgOBu4PTSHeR2BcDbpqJzVMzJ22wig/1+R1nM5ek8hM=
Subject key identifier: 1B:01:76:0E:3A:70:EA:F4:B5:97:C9:27:D5:55:1D:5E:82:11:8A:2A
Authority key identifier: BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47
Certificate issuer: /CN=A9142DA4/serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47
Certificate serial: 03DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft
Manifest number: 03C9
Signing time: Sun 28 Dec 2025 23:46:24 +0000
Manifest this update: Sun 28 Dec 2025 23:46:24 +0000
Manifest next update: Sun 04 Jan 2026 23:46:24 +0000
Files and hashes: 1: u0yWZedfnhna1G-LYJ00RPto7Uc.crl (hash: kWy2wr7EYccIBm6pSIyekblqubi/2YMt3MV2w/k2ipo=)
2: FC35CE340A4711F0809C3032C4F9AE02.roa (hash: U5oQvcg4w4KLcI7rzHf7QE3coC6CkJg5TgXKnBGDWvE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl
rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Jan 2026 23:46:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 986 (0x3da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142DA4, serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47
Validity
Not Before: Dec 28 23:46:24 2025 GMT
Not After : Jan 4 23:46:24 2026 GMT
Subject: CN=6951c150-85da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:27:49:6e:c8:71:bc:49:bb:da:4c:29:f9:10:
a9:86:42:d9:5e:3b:fe:0b:44:e1:17:ef:0f:3c:d7:
6d:7f:47:ec:02:17:5f:4d:37:af:cf:3d:71:91:c1:
e4:3b:67:a6:c8:73:9c:7d:39:aa:94:a2:86:fd:8e:
26:83:60:71:d2:41:e9:56:59:b8:0a:69:4f:3e:76:
97:f9:5d:46:4a:27:c8:9e:eb:f1:fa:04:d4:22:9c:
9e:79:c8:ee:a5:7b:19:d5:d9:7c:a4:a5:a9:38:e8:
13:3a:d0:7a:69:81:ad:6c:07:af:56:e5:17:2d:eb:
6f:a1:78:b8:b0:be:57:b1:98:b7:64:24:bf:a1:71:
63:b8:ba:e9:f9:bf:08:04:77:44:23:e1:43:9a:f5:
5c:45:d7:ef:25:ac:57:f6:0b:53:5f:8b:15:fb:bc:
f5:86:31:4c:69:d9:54:af:3e:0b:42:aa:68:33:57:
03:3d:18:5d:fc:f8:3c:de:82:ec:3d:d4:04:0d:90:
fc:36:24:5e:be:86:e1:24:74:eb:b8:25:1a:fa:df:
7f:bc:92:07:e5:b6:4b:71:83:22:6f:45:6a:49:e0:
dd:1b:1b:8d:ab:da:fa:53:de:09:46:39:18:70:10:
5c:97:a6:9c:e6:3c:6a:4c:3a:6f:bb:fa:1c:fd:d9:
9e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:01:76:0E:3A:70:EA:F4:B5:97:C9:27:D5:55:1D:5E:82:11:8A:2A
X509v3 Authority Key Identifier:
keyid:BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:0e:48:79:32:e0:b1:aa:8c:4f:2b:43:6a:3b:b0:10:bf:4e:
0f:4e:9f:88:ec:85:e8:48:13:fa:e3:47:34:38:2c:0d:21:37:
26:36:ab:a6:dd:88:9e:83:2e:26:7c:53:1d:5e:0a:72:2c:ab:
c2:18:e3:e6:b0:2a:2c:83:73:ed:43:f2:e6:33:fd:41:d7:8e:
5f:b8:1f:7e:e9:10:f8:02:1f:3e:c7:39:59:92:1a:4a:c5:62:
d5:08:e3:51:bb:29:12:b4:e3:2d:c3:02:69:3a:3b:ce:38:05:
4a:91:67:7b:07:a7:21:97:de:4c:43:db:02:e9:ef:c6:dc:2a:
3e:d3:5c:a8:f8:6e:14:07:46:88:2f:ff:eb:c6:38:29:09:df:
9b:ee:6b:70:ac:a8:5e:80:ee:1a:0f:0f:7d:54:5f:36:f0:e5:
9a:ab:35:6e:59:ec:8f:ec:71:7b:ca:a3:d2:fc:82:e0:1d:c9:
98:71:3a:a9:9f:29:60:6a:7a:94:b0:bd:5b:1f:e6:f2:ef:62:
0f:a4:b1:bb:29:e2:a5:41:b0:10:7b:c0:f3:53:47:ca:3b:c3:
c6:76:6c:fe:19:40:be:01:e9:ec:40:54:e0:d1:4a:47:f8:f7:
04:2c:77:85:c4:5d:79:72:66:de:52:58:18:8f:86:90:b3:53:
33:1d:61:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 14:57:39 2025 by rpki-client