This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft
File: uLRz022lJgglzQu_YvbsGQ00Ahg.mft (raw, json)
Hash identifier: sBG8AddYNuRKWwLW8I5KSZAratXjy+/QYF+xpe4Ylo8=
Subject key identifier: 30:5C:17:A0:ED:7B:D8:31:F3:4E:BD:2C:4E:72:CA:0B:81:2C:53:E5
Authority key identifier: B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18
Certificate issuer: /CN=A91C5D81/serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218
Certificate serial: 34FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft
Manifest number: 34F6
Signing time: Thu 18 Dec 2025 14:18:05 +0000
Manifest this update: Thu 18 Dec 2025 14:18:04 +0000
Manifest next update: Thu 25 Dec 2025 14:18:04 +0000
Files and hashes: 1: uLRz022lJgglzQu_YvbsGQ00Ahg.crl (hash: kz4gEDNjmtrkSKeRKdUBYgx1XXJ4z0KXDrm5FHx4SbQ=)
2: 75C18F96305811EB94E3192FC4F9AE02.roa (hash: oI8UmPtI+e/lNHKPjl/mA09y7Gr50NMbgC5wn6SXx2Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl
rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 14:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13564 (0x34fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5D81, serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218
Validity
Not Before: Dec 18 14:18:04 2025 GMT
Not After : Dec 25 14:18:04 2025 GMT
Subject: CN=69440d1d-0ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:27:cd:a3:52:bb:fe:44:1a:da:85:8d:f7:02:
22:fb:ce:b1:09:b7:f5:c0:ef:c1:2b:13:bf:72:c9:
c1:ab:32:05:8b:02:1a:6d:90:d3:da:86:fe:05:4b:
60:69:b7:c6:f6:47:8a:ff:78:cb:42:45:18:b4:0d:
3c:2d:b8:93:22:11:db:5a:4f:e2:ad:bb:59:e2:93:
63:7c:07:04:f4:02:f1:75:7c:96:dd:a5:03:e8:7e:
6e:4c:de:23:06:ca:c5:37:b6:eb:1c:b7:ad:02:6e:
7c:ff:db:03:b4:8f:5f:f2:fc:ce:41:03:15:97:3b:
08:6c:f3:63:ac:cc:44:25:d0:61:4a:48:8e:ba:eb:
96:93:41:bb:a6:2f:a9:a8:92:ef:17:27:ec:07:11:
ed:c5:33:b7:fd:c8:d6:16:9d:52:a0:38:57:d8:d8:
35:53:24:59:7a:47:9d:99:a5:7f:b1:cf:de:f0:4a:
5b:25:57:e5:c1:d1:0d:eb:9c:1f:7a:1a:70:a2:8a:
93:f6:6c:77:10:ea:43:6f:c4:22:f2:43:3f:91:64:
fd:a7:59:ce:16:2d:21:da:5c:c6:07:37:7a:6e:4b:
b9:ae:bf:4f:63:32:ce:65:58:f8:49:21:b7:7f:80:
c9:7e:32:2a:ab:02:d9:d0:e9:cf:a5:a3:87:e4:a5:
6e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5C:17:A0:ED:7B:D8:31:F3:4E:BD:2C:4E:72:CA:0B:81:2C:53:E5
X509v3 Authority Key Identifier:
keyid:B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ad:51:46:ad:44:7e:da:38:c4:3d:7e:ed:b5:27:bc:64:47:
13:14:cf:03:62:ec:c6:fc:ab:f8:7f:df:6c:d9:19:42:06:11:
d7:cd:9e:fb:76:2e:b2:b5:42:68:c2:de:97:57:c4:8a:1a:0c:
c6:40:50:5f:d9:22:a8:3b:1f:37:f2:a2:fa:7f:65:7f:c5:d2:
83:6d:2a:9f:14:e2:c7:1d:9f:80:36:63:2a:75:36:23:78:16:
58:02:e1:1b:d8:10:8b:2e:e6:bc:46:e2:c5:a5:ac:a4:1b:35:
f8:af:3f:6e:ce:48:1e:89:bf:43:a6:63:d5:24:9c:dd:24:7f:
9d:43:fc:73:8c:87:a8:f3:16:a1:92:d6:58:17:85:30:ce:68:
6c:64:37:89:f5:6b:c2:6e:41:48:70:b5:98:b9:ff:ba:80:0e:
17:1c:3d:57:5e:42:c6:b2:62:bc:1a:91:a0:3a:c1:9b:1a:7c:
e5:ac:30:c5:cd:7a:e8:e7:15:5b:ae:b0:38:90:98:6b:16:73:
2d:13:bc:31:30:95:8d:e2:5f:3e:42:12:63:63:9b:55:78:bf:
a5:a9:dd:c8:09:af:08:7a:c9:6e:db:4a:bd:0f:59:f1:90:0f:
5f:c9:e9:f9:6c:13:3c:47:24:02:96:86:db:ab:69:c0:62:23:
21:c9:d7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:30:35 2025 by rpki-client