This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
File: uoXZHSSsqengMR5VLb83WXY6Yro.mft (raw, json)
Hash identifier: Ml2s+VMFfdyque+weXCeQdgxqdcWA705/PEM9uCSEMs=
Subject key identifier: EB:7F:69:01:9C:39:6A:47:A3:F8:21:68:36:D4:A8:36:C1:5C:51:1F
Authority key identifier: BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA
Certificate issuer: /CN=A91B391F/serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
Certificate serial: 0116
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
Manifest number: 0111
Signing time: Thu 25 Dec 2025 03:59:57 +0000
Manifest this update: Thu 25 Dec 2025 03:59:56 +0000
Manifest next update: Thu 01 Jan 2026 03:59:56 +0000
Files and hashes: 1: uoXZHSSsqengMR5VLb83WXY6Yro.crl (hash: oI18oHHa8IB5Wpa4Q34o7yr5UVJ65vS78tB4lsTSIOQ=)
2: 37C8E00A6EA011F0835F9E19C4F9AE02.roa (hash: RhQloGXtcZHnLcoyU2Qhf/8Ls5h2TxH8G+0z0bjWi3E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl
rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Jan 2026 03:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B391F, serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
Validity
Not Before: Dec 25 03:59:56 2025 GMT
Not After : Jan 1 03:59:56 2026 GMT
Subject: CN=694cb6bc-ca3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cd:73:83:2f:57:5e:82:91:68:82:cc:e8:7f:
58:c8:0d:96:aa:c7:6f:89:1a:f1:cd:8c:f0:d7:01:
75:62:cd:b9:47:7d:c7:ad:a5:4f:73:dd:8c:6a:6a:
4f:8d:07:f4:a0:c3:5e:de:5c:6c:fb:2d:1d:45:ec:
ef:ba:59:dd:e9:7b:3f:05:22:02:1c:a2:70:5a:e4:
0f:c2:5f:23:e9:f8:84:1e:08:3b:e5:e8:b4:48:22:
31:0f:ca:a6:03:4c:8e:43:e0:98:ae:6c:86:a9:4d:
22:58:03:8f:21:df:9a:64:53:07:14:b0:93:91:e0:
1d:c9:04:d9:28:21:73:ca:12:67:6c:df:a0:75:86:
ed:60:76:07:da:62:76:14:68:7a:cc:76:21:20:6e:
f4:a0:97:54:69:26:98:4e:02:5b:db:21:e1:3c:62:
19:60:4d:61:41:5e:ea:57:ff:81:c4:78:d8:34:9d:
68:a6:b6:48:09:c1:40:f2:de:9b:6b:06:9d:7f:c7:
80:73:e1:50:b4:a6:5b:1a:fc:88:e6:24:62:22:91:
72:b4:46:8c:81:4f:62:12:d5:00:87:32:41:22:1f:
5d:91:8a:a3:88:55:94:98:22:fc:65:d6:66:dc:d8:
f5:ae:87:bb:1c:79:ea:12:16:47:54:43:29:16:6c:
3f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7F:69:01:9C:39:6A:47:A3:F8:21:68:36:D4:A8:36:C1:5C:51:1F
X509v3 Authority Key Identifier:
keyid:BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ce:2d:51:52:fb:2d:fe:b5:7b:a3:3c:a3:67:e7:22:c2:c0:
b1:ea:63:c1:47:41:71:cd:01:3e:ec:2b:5a:74:08:5e:69:a3:
bd:54:d5:63:e6:8a:70:6c:71:e5:f3:ff:09:ef:6b:71:8a:09:
bc:c5:7f:22:17:80:51:5c:8b:b1:13:63:83:1e:82:70:f7:dc:
73:bc:d0:57:ab:ab:29:1e:d8:d2:50:b0:bb:7f:d1:62:02:58:
6a:b6:13:e1:dd:9d:96:71:98:d5:af:b3:a8:32:55:fb:b5:75:
56:2f:ef:11:46:09:61:a8:14:b8:54:aa:4c:bc:f0:b6:a1:59:
4a:39:6c:12:6a:71:e7:fb:10:69:ae:25:4d:a9:d4:6f:41:7b:
4a:ca:89:9c:02:a4:c5:aa:b8:ec:4a:e9:a0:d6:1b:a6:d3:6b:
fb:59:1a:93:45:c1:18:52:40:d6:a0:67:4c:dd:8f:6e:42:43:
c7:17:42:02:e5:48:0f:99:24:fa:38:38:b3:c5:10:3b:c3:e0:
72:f4:a5:19:1d:13:dc:b5:a9:9d:82:fc:eb:04:41:8c:d4:47:
5f:80:ce:48:cc:f5:99:89:66:9c:74:42:95:48:39:0a:3f:68:
09:df:83:11:09:77:98:cb:67:41:1b:63:70:ea:dc:81:9e:f1:
02:82:7c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 05:31:19 2025 by rpki-client