This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft
File: uHMcMIhjyygE4HbVjowHFZtOXxk.mft (raw, json)
Hash identifier: eDlun44JjJYtyUIMKilHvUefK7+B0yVHv4qgik4U2SM=
Subject key identifier: 59:B3:2F:81:81:E1:34:D8:D1:6C:1A:1C:0B:59:0B:09:3F:F1:5B:83
Authority key identifier: B8:73:1C:30:88:63:CB:28:04:E0:76:D5:8E:8C:07:15:9B:4E:5F:19
Certificate issuer: /CN=A9164663/serialNumber=B8731C308863CB2804E076D58E8C07159B4E5F19
Certificate serial: 0876
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHMcMIhjyygE4HbVjowHFZtOXxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft
Manifest number: 1AF9
Signing time: Thu 18 Dec 2025 16:56:03 +0000
Manifest this update: Thu 18 Dec 2025 16:56:02 +0000
Manifest next update: Thu 25 Dec 2025 16:56:02 +0000
Files and hashes: 1: uHMcMIhjyygE4HbVjowHFZtOXxk.crl (hash: qUl7Lz7mDVju3vIn4gjXTwLBJd7NgzBON0Xe7ascFQk=)
2: 7BB2BC009FFA11ECA13C2839C4F9AE02.roa (hash: K7jgwtFrPBKypxv1Ln8vBllbtClVCUlvOXHISxYGRB0=)
3: 3D626CDC065111F0BFE43624C4F9AE02.roa (hash: PyysKZ+hZFXrRWA3LPUfHO46XtpZrkwg+n+8mnDBEZE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.crl
rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHMcMIhjyygE4HbVjowHFZtOXxk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 16:56:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2166 (0x876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164663, serialNumber=B8731C308863CB2804E076D58E8C07159B4E5F19
Validity
Not Before: Dec 18 16:56:02 2025 GMT
Not After : Dec 25 16:56:02 2025 GMT
Subject: CN=69443222-2474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:62:ea:f1:6e:e3:0d:da:c7:59:94:19:c8:
21:e3:74:03:2e:65:48:c5:22:8e:24:fc:af:3c:98:
b9:15:c5:1c:0c:b0:44:25:ce:e3:dd:8b:0e:7d:c6:
49:bc:be:73:74:0b:19:e9:7f:f4:b5:15:64:ec:45:
0b:c7:42:e0:99:f8:72:52:09:70:3a:08:b0:2e:12:
32:c9:6f:8e:db:5f:5a:78:99:4c:66:27:f2:a6:f7:
9b:1a:53:3e:ba:00:0b:9c:aa:fe:5d:13:e4:52:7c:
f3:84:aa:46:46:0d:be:53:cb:70:f5:aa:11:58:3e:
7c:d4:57:f9:52:99:ee:27:9a:e7:e6:bc:03:06:a9:
43:f9:a1:78:77:ed:54:27:60:77:27:62:76:4b:83:
00:3e:e7:c0:ce:f2:a8:e4:c8:0b:42:17:96:34:e1:
89:bf:93:d0:69:b6:d0:10:c1:ea:c1:e6:21:19:03:
d8:2f:c0:a2:fa:2e:95:c5:42:23:c6:f4:6c:54:82:
1f:f0:2e:f9:5a:2a:11:b3:4b:ce:5b:6b:0f:1d:c5:
21:bf:45:25:55:3e:98:a6:71:f2:4e:3a:cb:e8:e8:
f1:13:d9:38:15:27:b3:e7:2e:a8:15:2d:ce:15:2f:
25:24:ae:d8:7e:b1:0f:7d:a8:bf:a3:d9:77:0e:1f:
d8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B3:2F:81:81:E1:34:D8:D1:6C:1A:1C:0B:59:0B:09:3F:F1:5B:83
X509v3 Authority Key Identifier:
keyid:B8:73:1C:30:88:63:CB:28:04:E0:76:D5:8E:8C:07:15:9B:4E:5F:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHMcMIhjyygE4HbVjowHFZtOXxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:50:e2:64:89:41:e1:88:d3:73:c1:88:d9:1b:7e:eb:e8:2f:
71:6f:8e:1e:17:6f:9e:e8:73:93:04:f2:97:c5:49:59:db:31:
55:5d:95:87:f7:4a:95:b3:24:10:2b:67:c6:ed:ac:71:a5:3c:
7c:d8:09:0e:a0:6e:f3:57:b8:46:04:d7:81:08:93:db:35:37:
f6:48:05:ee:10:92:96:50:f1:51:00:e5:40:da:09:6a:47:88:
8d:cf:d3:24:e2:1d:28:4e:63:aa:6c:cd:be:19:ae:de:40:32:
66:12:03:a2:43:a3:5b:c7:2c:d3:ce:1f:98:e8:d9:e5:75:8f:
a6:2b:b3:20:88:41:1c:fd:d3:a0:09:53:ff:9a:43:ed:b8:9e:
2a:38:0f:6d:5f:ab:b9:ac:ce:39:cf:fa:12:52:d4:74:67:44:
a9:11:86:d5:0e:83:91:5b:31:46:9b:f6:9c:25:11:b1:6a:91:
9b:28:8e:ad:60:17:3e:53:d8:0d:d8:94:1e:36:85:0d:2d:eb:
53:4a:01:77:81:c0:bc:c3:48:aa:d8:bf:ba:20:55:c8:03:cc:
a8:36:76:bd:38:ee:88:0e:ae:bb:2a:6b:61:8f:12:6c:2b:7e:
a0:2c:cc:b9:6e:a1:cf:ea:68:90:8d:97:4c:ae:76:3e:41:93:
4c:2f:28:5b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQ2NjMxMTAvBgNVBAUTKEI4NzMxQzMwODg2M0NCMjgwNEUwNzZENThFOEMwNzE1
OUI0RTVGMTkwHhcNMjUxMjE4MTY1NjAyWhcNMjUxMjI1MTY1NjAyWjAYMRYwFAYD
VQQDDA02OTQ0MzIyMi0yNDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv01i6vFu4w3ax1mUGcgh43QDLmVIxSKOJPyvPJi5FcUcDLBEJc7j3YsOfcZJ
vL5zdAsZ6X/0tRVk7EULx0LgmfhyUglwOgiwLhIyyW+O219aeJlMZifypvebGlM+
ugALnKr+XRPkUnzzhKpGRg2+U8tw9aoRWD581Ff5UpnuJ5rn5rwDBqlD+aF4d+1U
J2B3J2J2S4MAPufAzvKo5MgLQheWNOGJv5PQabbQEMHqweYhGQPYL8Ci+i6VxUIj
xvRsVIIf8C75WioRs0vOW2sPHcUhv0UlVT6YpnHyTjrL6OjxE9k4FSez5y6oFS3O
FS8lJK7YfrEPfai/o9l3Dh/YNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmzL4GB
4TTY0WwaHAtZCwk/8VuDMB8GA1UdIwQYMBaAFLhzHDCIY8soBOB21Y6MBxWbTl8Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY2My8xNEVBQTlGQURB
NzkxMUU4OUI5NUE2NzJDNEY5QUUwMi91SE1jTUloanl5Z0U0SGJWam93SEZadE9Y
eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VITWNNSWhqeXlnRTRIYlZqb3dIRlp0T1h4ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NDY2My8xNEVBQTlGQURBNzkxMUU4OUI5NUE2NzJDNEY5QUUwMi91SE1jTUloanl5
Z0U0SGJWam93SEZadE9YeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAKUOJkiUHhiNNzwYjZG37r6C9xb44eF2+e6HOTBPKXxUlZ2zFVXZWH
90qVsyQQK2fG7axxpTx82AkOoG7zV7hGBNeBCJPbNTf2SAXuEJKWUPFRAOVA2glq
R4iNz9Mk4h0oTmOqbM2+Ga7eQDJmEgOiQ6NbxyzTzh+Y6NnldY+mK7MgiEEc/dOg
CVP/mkPtuJ4qOA9tX6u5rM45z/oSUtR0Z0SpEYbVDoORWzFGm/acJRGxapGbKI6t
YBc+U9gN2JQeNoUNLetTSgF3gcC8w0iq2L+6IFXIA8yoNna9OO6IDq67KmthjxJs
K36gLMy5bqHP6miQjZdMrnY+QZNMLyhb
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:24:06 2025 by rpki-client