This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
File: uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft (raw, json)
Hash identifier: nViJF37c9ZZERv6FOJU2Y+c+2BcoftT6GJTZHBumKB0=
Subject key identifier: 21:95:F3:BE:42:E3:12:0B:36:6E:61:72:74:FF:3C:61:DB:89:F6:2C
Authority key identifier: B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B
Certificate issuer: /CN=A919D88F/serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
Manifest number: E0
Signing time: Fri 19 Dec 2025 04:43:29 +0000
Manifest this update: Fri 19 Dec 2025 04:43:28 +0000
Manifest next update: Fri 26 Dec 2025 04:43:28 +0000
Files and hashes: 1: uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl (hash: zoQa+slnEuMsWT15UD/7tkSRU9+S6dW0kuYQRWj7L8g=)
2: 17613044905F11EF8B4BC46BC4F9AE02.roa (hash: ++LVGRxofYEX6I3wU8GpWTit5dMqqug/RxXZrZLIN/Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl
rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D88F, serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B
Validity
Not Before: Dec 19 04:43:28 2025 GMT
Not After : Dec 26 04:43:28 2025 GMT
Subject: CN=6944d7f1-c75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:52:7a:b9:e6:5b:10:a5:9f:79:3f:0e:4d:0a:
99:aa:ad:d9:89:5e:58:6c:65:99:1e:10:8f:7e:a7:
0f:ac:0b:45:d3:ba:02:42:e7:33:e3:e1:3a:be:86:
8c:be:90:07:f2:14:7a:b8:70:99:2a:b5:3a:39:5f:
7d:f4:85:49:50:e3:b0:9c:05:98:fd:7b:70:2f:7c:
ed:b0:49:5f:ad:c3:9c:6d:da:a1:1f:94:16:f2:66:
1f:40:65:5b:e4:15:64:89:4f:77:81:96:3f:20:cf:
d3:a0:f9:b6:9e:7b:e5:d5:25:d0:06:9d:fc:71:32:
5e:fa:52:10:d4:94:d2:73:3f:fe:b4:a7:0e:59:13:
34:56:6f:e7:65:e3:fc:8f:0e:5c:94:30:66:23:27:
e4:8f:31:88:c4:0d:e4:48:da:5d:89:4a:5b:76:10:
1f:36:fa:e0:8b:70:4d:93:6c:a4:cd:d8:70:13:5d:
8c:d5:5c:02:c2:3a:04:5d:c5:9d:c7:86:65:a0:e7:
15:4f:74:e6:d3:4b:7a:47:e0:e4:80:ee:19:0f:67:
0c:ae:a0:79:42:52:3a:9d:7e:60:a7:3d:82:83:5d:
8e:2f:2c:a3:13:26:36:cd:59:c4:a6:72:68:28:d1:
7d:bc:7e:c3:e1:46:d8:36:9a:90:36:04:02:98:af:
11:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:95:F3:BE:42:E3:12:0B:36:6E:61:72:74:FF:3C:61:DB:89:F6:2C
X509v3 Authority Key Identifier:
keyid:B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c5:6a:00:9e:45:fa:a3:8e:54:2f:5d:53:25:2d:16:96:3f:
f9:95:e1:13:2d:37:d2:10:e0:99:c9:59:38:69:5a:cb:56:0c:
60:88:e8:fd:d0:fd:cd:19:7c:79:53:20:0e:15:93:fe:d1:3c:
ec:57:1d:e4:65:40:15:17:00:7b:f8:db:e1:0e:6c:b9:53:25:
78:cc:82:e9:fd:ce:3a:ce:2b:d5:6e:97:8b:df:63:3e:df:b9:
d6:a4:a7:0e:58:75:9b:20:c4:34:a9:d9:d8:76:e7:0a:2f:84:
45:a4:25:a9:77:42:e4:3d:05:ae:7f:58:c1:58:76:71:02:43:
9a:38:b9:17:1d:2d:d2:02:15:2a:12:7d:24:ba:10:bd:b4:d4:
aa:8f:f7:26:ff:57:90:7d:bf:8f:58:a2:45:30:b1:46:fc:b2:
e9:30:57:25:ae:f9:bc:1b:2f:f6:de:cb:87:16:51:80:c9:f3:
92:a4:f6:9b:eb:b2:14:ee:f9:73:3d:1d:6b:c0:22:43:c7:4c:
e1:d6:9c:07:09:49:94:71:2e:77:14:27:71:ea:c8:da:6a:6d:
03:3d:13:27:57:20:0d:4d:d0:42:6f:77:10:2e:71:e5:c8:3f:
f3:3d:97:b8:a0:2a:d9:e6:de:19:c8:e6:67:1c:8f:62:24:38:
eb:0e:7d:cd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQ4OEYxMTAvBgNVBAUTKEI4MTVDRjg1MDUzNjhCQTdGOTc2NzRFOUJCMUExNDAw
OTVCNEZGOUIwHhcNMjUxMjE5MDQ0MzI4WhcNMjUxMjI2MDQ0MzI4WjAYMRYwFAYD
VQQDDA02OTQ0ZDdmMS1jNzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAplJ6ueZbEKWfeT8OTQqZqq3ZiV5YbGWZHhCPfqcPrAtF07oCQucz4+E6voaM
vpAH8hR6uHCZKrU6OV999IVJUOOwnAWY/XtwL3ztsElfrcOcbdqhH5QW8mYfQGVb
5BVkiU93gZY/IM/ToPm2nnvl1SXQBp38cTJe+lIQ1JTScz/+tKcOWRM0Vm/nZeP8
jw5clDBmIyfkjzGIxA3kSNpdiUpbdhAfNvrgi3BNk2ykzdhwE12M1VwCwjoEXcWd
x4ZloOcVT3Tm00t6R+DkgO4ZD2cMrqB5QlI6nX5gpz2Cg12OLyyjEyY2zVnEpnJo
KNF9vH7D4UbYNpqQNgQCmK8RKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGV875C
4xILNm5hcnT/PGHbifYsMB8GA1UdIwQYMBaAFLgVz4UFNoun+XZ06bsaFACVtP+b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDg4Ri83QkI2RjIxMDkw
NUQxMUVGQTRGMzFEMkVDNEY5QUUwMi91QlhQaFFVMmk2ZjVkblRwdXhvVUFKVzBf
NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3VCWFBoUVUyaTZmNWRuVHB1eG9VQUpXMF81cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDg4Ri83QkI2RjIxMDkwNUQxMUVGQTRGMzFEMkVDNEY5QUUwMi91QlhQaFFVMmk2
ZjVkblRwdXhvVUFKVzBfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA9xWoAnkX6o45UL11TJS0Wlj/5leETLTfSEOCZyVk4aVrLVgxgiOj9
0P3NGXx5UyAOFZP+0TzsVx3kZUAVFwB7+NvhDmy5UyV4zILp/c46zivVbpeL32M+
37nWpKcOWHWbIMQ0qdnYducKL4RFpCWpd0LkPQWuf1jBWHZxAkOaOLkXHS3SAhUq
En0kuhC9tNSqj/cm/1eQfb+PWKJFMLFG/LLpMFclrvm8Gy/23suHFlGAyfOSpPab
67IU7vlzPR1rwCJDx0zh1pwHCUmUcS53FCdx6sjaam0DPRMnVyANTdBCb3cQLnHl
yD/zPZe4oCrZ5t4ZyOZnHI9iJDjrDn3N
-----END CERTIFICATE-----
Generated at Sun Dec 21 06:09:24 2025 by rpki-client