This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft
File: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft (raw, json)
Hash identifier: wmMmBo4s/VBP+MlRvOt/ZGh8OsYVaUJPCobqXll3dy0=
Subject key identifier: 5E:A1:8C:BA:8A:9C:98:8B:7E:1A:42:F5:9F:15:D5:39:2D:6C:7A:80
Authority key identifier: 52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24
Certificate issuer: /CN=A91774FB/serialNumber=5296BC801402C73909F591E19095F22465414324
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft
Manifest number: 0118
Signing time: Tue 23 Dec 2025 03:49:32 +0000
Manifest this update: Tue 23 Dec 2025 03:49:32 +0000
Manifest next update: Tue 30 Dec 2025 03:49:32 +0000
Files and hashes: 1: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl (hash: JWb+EbR6FCBP34PZsTDbu5PaPRyH9ngvXn2gRmy6Jm0=)
2: 24142938343C11EFA0165876C4F9AE02.roa (hash: n7AIK79a5+aPFKSTz88y32yhIzyT87IgTPflOpV9KLI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl
rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:49:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91774FB, serialNumber=5296BC801402C73909F591E19095F22465414324
Validity
Not Before: Dec 23 03:49:32 2025 GMT
Not After : Dec 30 03:49:32 2025 GMT
Subject: CN=694a114c-07c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:af:51:59:06:b7:15:4c:dd:1d:2e:99:e1:98:
57:ae:04:3c:69:99:00:2f:65:9c:ee:5b:b1:36:5c:
22:f9:b6:61:bc:95:aa:55:9e:fa:36:8e:57:9d:04:
91:b6:20:c9:ff:6f:56:67:0b:21:8a:55:0f:1b:03:
4b:66:22:6a:02:eb:1f:47:cb:c5:2b:df:a1:af:7f:
7b:e1:62:33:9c:3b:9b:2d:63:87:a9:74:c5:1e:dd:
2e:e9:1c:d5:9f:ee:3f:59:c2:29:49:86:c9:2f:04:
62:cb:78:9a:89:48:cf:16:3d:4c:6c:96:d2:1b:be:
82:9d:e4:01:1a:3a:38:b8:20:04:62:57:1f:b6:3a:
9b:fc:f8:b3:da:8c:cb:17:cd:0e:6f:f3:ef:48:53:
87:01:99:4c:40:2d:8f:35:23:68:bf:9b:f0:0e:d7:
4b:4d:32:8c:da:ce:bf:11:99:32:93:e8:12:76:59:
ee:fe:e1:ad:f5:90:09:51:2f:d4:ff:e2:28:51:1a:
89:75:a2:3c:c9:d1:6c:3b:51:be:ef:47:05:71:cf:
49:23:c6:97:c6:dc:e5:8c:7a:44:c7:bb:2a:83:b3:
45:50:11:fa:08:8e:27:2c:39:d2:0b:df:5a:7f:f8:
f3:ad:4f:ac:e7:9e:84:52:6b:76:bf:c4:98:04:93:
c9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A1:8C:BA:8A:9C:98:8B:7E:1A:42:F5:9F:15:D5:39:2D:6C:7A:80
X509v3 Authority Key Identifier:
keyid:52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:14:5c:c2:ba:57:90:95:af:b2:dc:4d:7d:17:6e:74:60:1f:
5b:31:f0:a8:61:a8:a2:9c:22:4b:4a:d0:3e:bd:e7:00:31:48:
3e:41:e9:af:01:3b:5b:3d:ce:1a:d9:40:b2:86:04:53:20:3c:
df:c0:d2:d2:23:30:74:37:88:3b:a1:76:5f:31:68:43:a7:bd:
73:cb:cc:b2:18:bc:ff:62:58:2e:ee:ec:91:e0:94:32:20:7e:
05:7d:bf:f9:60:f4:ba:71:d4:0c:63:2d:12:f7:5a:a9:fe:fe:
32:4f:92:7e:42:98:ed:c9:17:85:66:e4:62:3c:eb:7f:5d:58:
ce:d5:81:11:d1:cb:22:cc:bc:d0:13:98:2d:32:b6:1b:a9:26:
6a:d1:07:82:b2:cd:e8:b7:46:67:e4:7e:b7:d3:cf:a7:e6:cf:
1f:d6:c7:57:4d:22:e1:d0:99:f5:dd:48:d8:b2:d1:66:f7:dc:
00:f8:e3:a6:5d:74:e1:0e:14:87:fd:e7:94:04:db:a9:01:2e:
b1:b0:d9:2c:02:72:18:02:28:32:d9:aa:8e:4f:5d:ed:7b:d5:
98:d9:04:f3:77:38:74:e6:64:b0:26:8c:02:c4:90:4b:b2:c1:
55:89:71:46:16:51:02:40:05:9c:63:7c:44:c0:40:f5:91:1a:
ab:b6:99:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 18:36:23 2025 by rpki-client