This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft
File: _UXMVAPGTPsjCqfe7RC8aCKNdHM.mft (raw, json)
Hash identifier: bKDRCXZ1yF/aAG7eQ3A1kwJxQT7k3Rt21eWx6aG9qQU=
Subject key identifier: 9A:0D:C6:13:45:8F:4D:5E:98:3A:6C:77:2A:5C:60:F0:A2:83:F4:FA
Authority key identifier: FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73
Certificate issuer: /CN=A9186BCC/serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473
Certificate serial: 01B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft
Manifest number: 01B0
Signing time: Sun 21 Dec 2025 02:24:41 +0000
Manifest this update: Sun 21 Dec 2025 02:24:41 +0000
Manifest next update: Sun 28 Dec 2025 02:24:41 +0000
Files and hashes: 1: _UXMVAPGTPsjCqfe7RC8aCKNdHM.crl (hash: xqZyqLanSKyJxNgBbUDPoMgljMoe5Sc65HL+fDqiwCY=)
2: 6B62D92248D511EEBE05CC7FC4F9AE02.roa (hash: aad5STWtZPNgSUZlTpHai7ItORShh/+m60YWqMbY2wU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl
rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 02:24:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186BCC, serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473
Validity
Not Before: Dec 21 02:24:41 2025 GMT
Not After : Dec 28 02:24:41 2025 GMT
Subject: CN=69475a69-fd35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:48:2c:2d:a1:3f:c9:2d:4c:7e:12:f4:b9:
e7:42:dd:98:82:6f:45:27:a2:2e:5e:57:45:9b:8c:
d4:7d:c6:e1:e8:3b:77:7c:43:d5:5d:e7:1f:d2:b0:
3f:a5:8e:cb:76:4e:1a:7e:c7:d5:e9:ad:0b:98:36:
65:dc:ef:5d:9e:6c:85:64:54:9f:de:9d:0a:40:dc:
c1:43:76:fb:61:92:d0:4b:d4:50:01:b8:c1:cf:df:
44:d1:ce:f8:20:c3:84:8f:3c:f9:97:b0:ba:62:ac:
b4:95:b2:29:db:7b:83:c5:1d:fc:dc:5a:8e:32:de:
5b:1c:12:f8:6b:1f:e9:e9:00:45:1e:84:38:56:68:
4a:59:fc:4f:3e:ce:2c:6a:df:c1:39:15:61:53:4a:
01:50:77:99:ea:75:ff:23:39:f3:5d:29:be:f4:5a:
f1:ed:d3:e1:8b:b5:2d:e3:57:48:78:c0:26:62:d0:
d3:5f:5f:99:a9:a4:8a:18:a1:ff:ab:15:41:b9:89:
05:80:2a:0d:87:90:9a:8e:ab:27:1f:9a:f8:74:bc:
11:5d:23:3b:9b:61:ae:85:2f:2b:38:6d:cd:f1:3f:
f9:b9:a2:bc:02:df:03:56:11:52:1d:d4:9c:6a:7a:
63:a7:2d:dc:58:92:29:44:7a:98:e2:f0:20:c8:af:
d4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0D:C6:13:45:8F:4D:5E:98:3A:6C:77:2A:5C:60:F0:A2:83:F4:FA
X509v3 Authority Key Identifier:
keyid:FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:13:1c:ea:85:fb:8f:b6:95:07:62:d4:2e:9e:d0:ef:2c:96:
6a:2a:ed:39:9c:e9:6f:45:91:52:bf:e8:3a:51:2f:0e:48:28:
ea:66:64:22:53:f8:2c:53:a6:8c:8f:83:4b:46:bf:95:0a:84:
2a:f2:f4:f2:cd:ce:a8:48:c7:2a:55:f8:2c:3c:48:81:4f:15:
83:23:11:57:17:e2:c5:b1:66:b3:8e:55:85:7f:cd:74:d1:8b:
ca:1b:f3:04:bc:0e:77:e6:c1:c2:be:57:fd:13:5b:88:93:4d:
4a:cd:78:2b:6a:be:6e:e4:51:47:1f:3c:9d:0a:b0:e1:7c:3b:
bb:9a:b1:86:91:a1:74:cb:48:55:4c:2c:51:11:34:fc:fa:7d:
19:8b:31:8a:b9:77:2d:dd:c2:cb:6c:d3:51:46:75:6e:17:f7:
ba:4f:f3:1d:87:bd:02:d8:ca:14:ad:a9:70:da:d9:8a:70:a8:
2c:cc:ba:e8:b9:48:f4:40:04:4b:ac:78:44:e7:5e:bf:a3:8c:
ca:6f:81:18:48:22:81:33:10:b6:39:fc:85:f7:81:f2:44:fe:
62:c4:6b:f9:39:0d:54:d4:10:ff:5c:f8:21:3d:3e:ab:51:84:
dd:34:83:4b:86:59:a8:2d:bb:ff:b2:f3:2f:5c:3e:b6:a6:00:
11:d4:06:1a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZCQ0MxMTAvBgNVBAUTKEZENDVDQzU0MDNDNjRDRkIyMzBBQTdERUVEMTBCQzY4
MjI4RDc0NzMwHhcNMjUxMjIxMDIyNDQxWhcNMjUxMjI4MDIyNDQxWjAYMRYwFAYD
VQQDDA02OTQ3NWE2OS1mZDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxwZILC2hP8ktTH4S9LnnQt2Ygm9FJ6IuXldFm4zUfcbh6Dt3fEPVXecf0rA/
pY7Ldk4afsfV6a0LmDZl3O9dnmyFZFSf3p0KQNzBQ3b7YZLQS9RQAbjBz99E0c74
IMOEjzz5l7C6Yqy0lbIp23uDxR383FqOMt5bHBL4ax/p6QBFHoQ4VmhKWfxPPs4s
at/BORVhU0oBUHeZ6nX/IznzXSm+9Frx7dPhi7Ut41dIeMAmYtDTX1+ZqaSKGKH/
qxVBuYkFgCoNh5CajqsnH5r4dLwRXSM7m2GuhS8rOG3N8T/5uaK8At8DVhFSHdSc
anpjpy3cWJIpRHqY4vAgyK/UDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJoNxhNF
j01emDpsdypcYPCig/T6MB8GA1UdIwQYMBaAFP1FzFQDxkz7Iwqn3u0QvGgijXRz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkJDQy85MDRFNTBGMDQ4
RDQxMUVFQjVENkExN0JDNEY5QUUwMi9fVVhNVkFQR1RQc2pDcWZlN1JDOGFDS05k
SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19VWE1WQVBHVFBzakNxZmU3UkM4YUNLTmRITS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NkJDQy85MDRFNTBGMDQ4RDQxMUVFQjVENkExN0JDNEY5QUUwMi9fVVhNVkFQR1RQ
c2pDcWZlN1JDOGFDS05kSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAGExzqhfuPtpUHYtQuntDvLJZqKu05nOlvRZFSv+g6US8OSCjqZmQi
U/gsU6aMj4NLRr+VCoQq8vTyzc6oSMcqVfgsPEiBTxWDIxFXF+LFsWazjlWFf810
0YvKG/MEvA535sHCvlf9E1uIk01KzXgrar5u5FFHHzydCrDhfDu7mrGGkaF0y0hV
TCxRETT8+n0ZizGKuXct3cLLbNNRRnVuF/e6T/Mdh70C2MoUralw2tmKcKgszLro
uUj0QARLrHhE516/o4zKb4EYSCKBMxC2OfyF94HyRP5ixGv5OQ1U1BD/XPghPT6r
UYTdNINLhlmoLbv/svMvXD62pgAR1AYa
-----END CERTIFICATE-----
Generated at Sun Dec 21 08:14:36 2025 by rpki-client