This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
File: uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft (raw, json)
Hash identifier: ehwSc7i7rAe2ss5rIifpU8FvulitgUl63RjRM1RPz2w=
Subject key identifier: 52:DA:A1:78:44:71:9D:8F:56:06:69:83:6D:95:1D:B5:D6:9B:1C:92
Authority key identifier: B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25
Certificate issuer: /CN=A917068E/serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25
Certificate serial: 06D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
Manifest number: 06C6
Signing time: Wed 24 Dec 2025 21:28:20 +0000
Manifest this update: Wed 24 Dec 2025 21:28:19 +0000
Manifest next update: Wed 31 Dec 2025 21:28:19 +0000
Files and hashes: 1: uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl (hash: h1cisyYAfrNHfHnoguLg8McL2cd5f2ft3yHQi4K/KrE=)
2: 7464EB1E876411EE8971C221C4F9AE02.roa (hash: zpTvJznQ+5mTsWYuBwFqmhL2aTwH3SE1aCKMAY/WGXM=)
3: 8889F4E484A711EBB701E773C4F9AE02.roa (hash: lWZRobhtO0oFUd+vRpiCuxRaZUL791izmBtb3cII0fo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl
rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 21:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1744 (0x6d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917068E, serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25
Validity
Not Before: Dec 24 21:28:19 2025 GMT
Not After : Dec 31 21:28:19 2025 GMT
Subject: CN=694c5af4-119e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:fb:06:16:f0:c7:3b:7a:11:e5:ac:28:2b:
4a:81:65:d8:11:1d:94:a0:34:6e:bd:01:16:46:d4:
ac:83:75:b3:46:79:57:d1:a8:1b:02:f4:e4:98:cd:
5b:9c:37:ed:26:c0:08:79:5e:a1:f8:3d:6c:0a:2d:
24:6b:f5:02:ad:00:93:0b:30:83:d5:87:c8:00:33:
03:96:a2:ff:4b:ed:f4:9e:fe:51:f8:e2:9b:e9:0d:
21:9e:b0:ac:c6:0e:51:cd:08:64:cb:df:46:f1:cb:
17:ac:7c:7a:79:0a:6a:9b:5d:90:65:e1:3a:12:01:
3c:59:c4:1e:dd:b0:e3:91:fb:4f:85:8e:41:31:f1:
ad:fd:08:11:9b:d7:35:b2:65:f4:78:6a:ab:58:42:
b6:da:e2:09:aa:8a:d8:fc:7a:58:9e:19:3c:c0:9e:
8a:3c:50:43:1a:9d:43:bc:f8:1d:12:79:a3:fa:06:
1d:27:b6:f3:fd:c5:63:82:63:56:9e:e0:36:e8:81:
44:27:ba:b4:64:ea:b9:b2:21:62:d4:40:7e:51:cc:
11:06:60:ef:64:5a:85:93:66:cb:20:a1:cb:15:45:
54:a2:01:45:a2:14:b4:88:de:44:18:4a:7c:c2:00:
0e:20:c2:47:ee:b6:21:31:3f:69:1f:72:b0:23:d1:
e8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DA:A1:78:44:71:9D:8F:56:06:69:83:6D:95:1D:B5:D6:9B:1C:92
X509v3 Authority Key Identifier:
keyid:B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:c2:f1:a2:2f:d2:6f:e1:5f:20:11:b3:2b:5c:15:59:78:3c:
ff:f1:8a:7a:ce:94:2a:05:ba:d5:d2:3b:55:0e:cc:ab:f1:7b:
b3:44:12:33:f7:1d:02:e8:24:81:f0:48:fa:42:71:72:c2:3d:
23:f5:68:c7:21:75:93:81:1b:ff:47:4c:9b:20:21:6a:c8:70:
a5:02:d9:17:28:03:87:27:75:9d:4f:9e:5c:f7:bc:00:5f:e4:
3a:33:4b:ed:6e:f5:47:ac:31:6c:27:89:3a:dc:2f:b0:96:51:
b3:d8:cf:24:68:b0:47:de:d4:e2:a7:4d:1a:4f:22:70:39:06:
88:0d:a8:49:d8:68:07:93:ce:db:a4:5c:99:40:41:7d:1a:2d:
aa:45:cd:e2:02:49:4d:d1:a6:18:16:03:a8:eb:bb:2b:21:65:
91:8b:6c:ac:f5:7c:25:31:cf:72:97:85:2d:9d:de:fd:b1:c5:
13:81:8f:7e:90:24:d9:ae:1f:a6:cb:26:c6:98:25:12:2a:8a:
8e:47:d2:5c:bb:6a:e8:0c:f3:32:83:0e:99:8d:cf:93:5d:cd:
7b:e3:1c:01:01:19:54:31:db:e0:be:44:ea:fd:b7:0a:0d:95:
01:65:1d:7b:79:22:e0:d3:cb:25:7b:13:5f:68:6a:13:67:04:
2d:7c:e2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 10:43:24 2025 by rpki-client