This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
File: UK8aopMCL3bNH1G6DdWKW4lmkVo.mft (raw, json)
Hash identifier: gY9svDsHDa4eQPDjyxy3f30baCSP3lwojZjWfmSRPaw=
Subject key identifier: 77:E8:C2:D3:53:AB:3D:51:66:04:88:C8:9A:79:CE:03:5A:D2:29:AB
Authority key identifier: 50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A
Certificate issuer: /CN=A915AC36/serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
Manifest number: 0E
Signing time: Fri 19 Dec 2025 06:56:15 +0000
Manifest this update: Fri 19 Dec 2025 06:56:15 +0000
Manifest next update: Fri 26 Dec 2025 06:56:15 +0000
Files and hashes: 1: UK8aopMCL3bNH1G6DdWKW4lmkVo.crl (hash: vvWXf3KqNWpJXkXU7URGyH3zDRlWXe6UU1GhaUhtF1A=)
2: BBD396F8CC1D11F09B362031C4F9AE02.roa (hash: gh8+qv3MhaUl1O19jg6tnVa+KoQIkfYNDiOkghKWIjk=)
3: 7D88011ACF4011F08FF1FE52C4F9AE02.roa (hash: /IHW3aHM/SUsb9kiCoK1jZIm/hDv2f3qYZbCqQZYAZs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl
rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 06:56:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AC36, serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A
Validity
Not Before: Dec 19 06:56:15 2025 GMT
Not After : Dec 26 06:56:15 2025 GMT
Subject: CN=6944f70f-024d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:38:22:88:8f:61:30:ea:b7:dc:f1:0f:e0:
a3:1d:9a:09:ef:72:86:7a:07:7e:96:3b:e2:43:27:
52:92:42:03:74:af:1e:58:f0:8a:b7:16:21:13:21:
bc:fb:a9:79:a7:3b:4d:35:db:fa:a5:4b:95:26:52:
da:ee:f6:a8:dd:cf:af:23:df:95:4b:e0:e2:fd:37:
d3:49:ce:1c:c9:45:01:5b:32:38:eb:7d:7e:a8:3e:
30:aa:18:c7:10:b6:68:a7:6a:59:ad:22:1f:0a:d0:
30:95:d9:ea:31:78:96:4f:59:63:8a:d6:02:3f:0e:
af:31:99:fb:69:f2:0a:d6:9f:0f:77:33:09:91:2f:
ce:4e:84:39:08:f8:11:99:b6:7c:ff:4d:73:9f:de:
e1:9b:2c:bc:35:4a:a4:85:c7:70:94:95:2b:ba:60:
d3:8e:c6:c9:1e:93:93:81:fe:61:d6:ee:76:a0:cb:
01:ae:c1:4d:b1:58:3c:14:54:a6:26:8e:65:b7:2c:
72:ac:23:e5:94:8e:75:38:eb:c4:ac:5d:97:19:17:
6f:58:16:73:2b:16:f7:a4:99:7d:c6:d3:9a:b5:fb:
3c:7f:69:2d:1f:92:15:04:c6:f0:03:01:20:b9:1a:
28:0e:d9:65:dd:fe:7a:58:d9:d4:2f:b6:aa:74:be:
3c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E8:C2:D3:53:AB:3D:51:66:04:88:C8:9A:79:CE:03:5A:D2:29:AB
X509v3 Authority Key Identifier:
keyid:50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:84:09:cd:6c:9a:6c:45:6d:6e:aa:4d:7f:1a:e0:38:9a:e8:
46:7c:37:be:51:f9:48:96:ec:82:dc:1a:2d:b7:51:06:31:ff:
6b:bc:91:f9:ff:8c:d3:a4:34:4b:22:7d:97:99:60:4a:e9:b3:
f5:09:15:42:5a:ea:b4:f0:8a:dc:ab:31:7a:d4:be:d3:e9:24:
ec:af:94:79:7c:ad:80:fb:53:b3:0a:6f:4b:0b:3b:62:f6:ee:
c0:0b:01:54:dd:1c:f4:a1:c2:35:ad:04:fe:d3:e3:7d:9a:c3:
df:56:61:20:6a:13:5c:a6:21:10:cd:12:33:11:90:ce:e1:d8:
db:96:f9:9b:96:a8:a8:f1:dc:3b:55:e9:d0:80:1e:b1:a6:5a:
57:7f:36:bb:29:9f:b0:60:f8:0b:92:9a:81:17:58:91:23:1d:
fe:e3:89:1d:63:0c:da:bc:4e:75:1e:38:e7:9d:60:6b:69:1f:
36:b5:2d:e2:45:32:7e:99:0e:3e:67:b2:75:b5:dc:52:83:70:
f1:3e:67:97:ba:2d:cd:a9:18:4f:c9:85:3a:ae:4b:6b:e4:27:
85:7b:f4:93:31:cc:29:e0:73:65:41:95:9f:3a:34:a7:99:86:
0e:5f:c7:8c:da:c1:3f:d9:07:7f:61:77:35:a6:d0:8d:86:d7:
9e:6e:a4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:02:25 2025 by rpki-client