This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft
File: UoKkZCr301eZKRu6RH6hQlGk1fw.mft (raw, json)
Hash identifier: FbJeKvVSRNuiLYdAobLxjvhIN4ugeeXRJX+tdJvXBAw=
Subject key identifier: 1C:C1:0E:6B:A7:55:9F:CE:61:8A:9B:BB:4D:EA:5A:88:0D:3A:E2:D6
Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC
Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC
Certificate serial: 08B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft
Manifest number: 206C
Signing time: Sun 28 Dec 2025 16:18:51 +0000
Manifest this update: Sun 28 Dec 2025 16:18:51 +0000
Manifest next update: Sun 04 Jan 2026 16:18:51 +0000
Files and hashes: 1: UoKkZCr301eZKRu6RH6hQlGk1fw.crl (hash: aYWaadfApJp9LFGDibm4zPH2TqqTwq5/XNPFIoB3s14=)
2: B5E806CC8BC711EE899A5284C4F9AE02.roa (hash: XzzXA6m5Sfbs0sLhTPVckgYHL3ZiipFrwRLSzgKZ33U=)
3: 172C2B96197711F0A993397AC4F9AE02.roa (hash: 8Qo70bxIag9X+h+p9rkvEiGVmiiK66r021Qwo1g6tkk=)
4: 654665EA197611F09D2B1C76C4F9AE02.roa (hash: hgO4m8NBFvCWTk/xZ7lTPgH3uo1aBC3KP8OdcPsjkbo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl
rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Jan 2026 16:18:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2231 (0x8b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91582D9, serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC
Validity
Not Before: Dec 28 16:18:51 2025 GMT
Not After : Jan 4 16:18:51 2026 GMT
Subject: CN=6951586b-515e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c6:82:25:18:31:c3:71:87:d8:43:55:1b:01:
57:e8:f7:52:6b:99:8b:d8:42:7e:d8:dd:44:d1:28:
a1:93:64:a2:14:c0:f8:d6:de:6f:7b:b9:9c:c8:cf:
b9:08:1f:37:03:2a:3d:a7:64:2a:c5:9c:a5:f4:ea:
bd:c1:6a:e8:d6:f8:cd:1e:9a:cc:df:d3:3c:ac:cf:
59:a1:7f:ec:57:de:6b:b5:e3:fa:2b:bb:fb:b9:42:
cc:65:f6:57:b1:8b:75:e4:9c:e5:7a:86:bf:05:15:
27:92:c1:9e:78:1f:1a:08:d6:12:f0:a9:87:f4:7a:
50:ce:b0:a7:30:4c:56:88:17:7a:ee:4f:24:c8:8e:
a1:8c:a6:6b:a2:82:37:62:e0:99:d5:ed:4a:ff:3b:
28:a5:a8:91:79:2d:94:7b:a5:93:c5:4b:85:ef:00:
e3:02:07:5c:f3:79:4b:0d:71:da:1c:13:ea:c1:e8:
38:8c:ad:e3:7b:02:4a:89:ee:2f:12:b8:33:50:97:
a9:61:7d:5e:61:f7:59:ed:4f:0b:6c:23:82:d2:db:
e7:57:24:2d:f9:10:69:56:f2:a5:1e:ee:34:53:e5:
b6:a7:42:f1:ed:a4:23:74:80:69:79:d9:af:22:e2:
53:44:2d:83:cb:4a:ae:f4:39:2b:a2:6d:e9:c5:f7:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C1:0E:6B:A7:55:9F:CE:61:8A:9B:BB:4D:EA:5A:88:0D:3A:E2:D6
X509v3 Authority Key Identifier:
keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:c1:00:c0:ce:44:b9:0a:e1:4a:a3:b9:14:66:14:ae:ab:25:
db:eb:d9:16:d0:f0:ed:a0:9c:48:76:4b:15:b5:5d:34:ed:15:
f7:8d:a9:27:3c:68:a4:2a:a3:6a:3d:fd:ae:43:0f:cb:19:42:
ef:e0:c0:ab:3d:9d:05:9d:31:d0:ce:aa:a6:25:17:c8:ce:f4:
76:14:55:a5:cd:e2:7e:c2:5c:32:27:7a:48:8c:3d:86:c6:41:
5b:fa:ab:81:fa:9e:46:8d:38:d1:58:09:e6:2c:96:b1:9f:10:
6e:6a:3b:2d:2e:5f:55:c0:7c:06:87:8f:fa:f8:63:90:8c:22:
29:e7:cb:84:5b:3c:a9:56:b0:dc:5b:bc:17:74:ca:4c:63:9b:
7e:2e:eb:eb:43:4d:dd:7f:8d:29:73:25:df:0e:28:0e:fc:79:
61:05:2f:07:57:e3:72:dd:e0:ff:e0:b4:a2:6c:74:67:04:b8:
c5:5a:fe:25:54:5e:eb:d2:43:cc:36:3e:5e:bf:47:0a:f2:db:
86:d3:b4:05:9c:f4:bf:9f:86:22:6e:7a:71:0d:fd:ee:ac:c0:
d7:6a:b0:6c:c9:a6:31:cf:cb:e5:00:3e:64:bd:2c:11:2f:8e:
3b:60:7c:83:76:be:c5:a7:91:8e:be:61:bf:36:a2:99:3b:47:
2a:47:14:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 22:18:36 2025 by rpki-client