This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
File: UG14DtF5dIDxUlE0f8KEQ9culQc.mft (raw, json)
Hash identifier: 3ex2wK662YeQrCooRQ6QO2pMWPg6bi1m2k9kQDPtuyo=
Subject key identifier: FC:DB:CE:BF:BB:E6:EF:A5:F6:69:C7:74:60:09:84:46:0D:32:53:EE
Authority key identifier: 50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07
Certificate issuer: /CN=A917EB0C/serialNumber=506D780ED1797480F15251347FC28443D72E9507
Certificate serial: 0C56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
Manifest number: 0C37
Signing time: Wed 31 Dec 2025 18:31:53 +0000
Manifest this update: Wed 31 Dec 2025 18:31:53 +0000
Manifest next update: Wed 07 Jan 2026 18:31:53 +0000
Files and hashes: 1: UG14DtF5dIDxUlE0f8KEQ9culQc.crl (hash: VBBZ8lLq+Si8TAZtm9SWLaGjD/xAlbTPaUQi3874rHc=)
2: E5B6117E2BC611EAB1456E4CC4F9AE02.roa (hash: 8xiW94BgUeQq9ZYVRmXYA3GrrXRDCnXkWRMC2enXdlY=)
3: FB2EC05CA3B111EE92169F16C4F9AE02.roa (hash: ZnbBQLWijX811JvZiE0GpFPKxpLE1gcXnN9dflC4yH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl
rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Jan 2026 18:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3158 (0xc56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EB0C, serialNumber=506D780ED1797480F15251347FC28443D72E9507
Validity
Not Before: Dec 31 18:31:53 2025 GMT
Not After : Jan 7 18:31:53 2026 GMT
Subject: CN=69556c19-a21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:09:61:16:84:01:bc:a4:e9:72:47:c5:df:
94:50:39:72:a7:e5:86:90:12:08:b1:2f:c8:50:5e:
3a:7d:23:7c:56:74:96:b9:56:f6:83:98:53:ad:39:
14:b8:b0:f4:19:71:06:ab:c0:eb:9f:c8:0f:2f:db:
48:04:f7:4e:be:0b:8c:a0:e3:ce:4d:51:80:23:74:
f2:8f:bd:d2:ab:11:02:34:d5:32:c4:b7:55:fe:e8:
6d:81:f6:9e:ed:fd:bf:42:d9:72:de:72:84:30:d1:
5c:6f:70:7d:84:ec:6d:38:dc:39:16:db:e5:ec:d1:
94:e4:c8:e7:fd:0e:d7:a3:5f:94:82:1e:d8:99:b4:
a6:15:d3:f4:05:72:c6:97:87:a2:e1:6c:3b:d6:81:
6b:54:22:84:ff:b2:8e:09:2f:b6:18:d0:20:74:1c:
c3:d2:3b:55:3a:cc:e0:d5:c6:1c:ed:a1:0c:c7:51:
2d:14:24:f2:fe:b6:b0:a7:48:8f:9c:fc:04:31:d6:
4a:d1:78:da:09:03:67:39:8c:ec:88:bd:97:7c:b5:
5f:b0:3e:98:41:f4:1a:b3:6d:e3:87:88:69:d6:61:
0a:16:90:17:15:a3:bf:ac:73:e3:59:0c:68:36:92:
22:76:f7:9d:e6:15:4d:7a:ce:aa:71:73:7a:dd:c8:
e8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DB:CE:BF:BB:E6:EF:A5:F6:69:C7:74:60:09:84:46:0D:32:53:EE
X509v3 Authority Key Identifier:
keyid:50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:a6:eb:48:1f:ee:24:db:1c:5c:55:bd:ee:3d:1b:ac:40:e1:
65:3a:ce:72:eb:b2:37:c5:45:de:fc:51:a9:4f:bc:9f:8c:6a:
4f:6c:f9:3f:93:07:14:19:a4:a6:25:fc:80:a5:7d:0a:ce:93:
57:65:ae:61:08:5e:c2:dc:99:54:5c:15:ac:41:8d:c6:dd:fc:
34:30:c6:91:06:6c:0c:4d:b0:62:58:dc:a4:73:ca:50:3d:ba:
8e:5f:11:84:26:18:02:e8:da:00:19:99:61:7c:af:5e:88:5e:
03:7d:bd:e6:86:22:55:22:31:23:df:7f:5e:db:64:14:17:d8:
7f:bd:a0:45:fe:7f:9f:a8:c5:fe:0e:a0:f7:d1:c2:8d:ed:18:
d5:91:a7:7e:2c:3e:d9:a2:a3:b7:6a:09:25:ec:ec:a6:be:59:
d5:89:c2:33:f9:9d:89:c4:a7:5b:ac:25:33:70:37:04:d3:c6:
d7:52:b4:43:ce:03:43:c2:46:06:2f:90:e2:18:69:5b:32:26:
25:8e:3b:04:aa:ff:d4:09:36:a1:21:df:90:c7:ae:e1:ed:7b:
0d:66:28:ed:df:f8:08:87:71:3b:9e:b5:0f:18:68:0d:51:03:
03:96:be:c5:d5:71:00:78:55:03:3c:4c:aa:79:36:ec:c3:95:
25:ed:c0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 08:19:25 2026 by rpki-client