This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft
File: uOpx0E7INugYCHPJ6dQM0uNVNwE.mft (raw, json)
Hash identifier: 1F5A9ebuhdL+u+aCefRcOWvhBYTxm8fdQq8sMfPTf3k=
Subject key identifier: 03:0E:EC:19:F3:2D:31:5E:4F:F4:F6:26:32:C2:86:34:0B:50:AA:B3
Authority key identifier: B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01
Certificate issuer: /CN=A91CCF10/serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701
Certificate serial: 0265
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft
Manifest number: 024F
Signing time: Fri 19 Dec 2025 01:01:10 +0000
Manifest this update: Fri 19 Dec 2025 01:01:09 +0000
Manifest next update: Fri 26 Dec 2025 01:01:09 +0000
Files and hashes: 1: uOpx0E7INugYCHPJ6dQM0uNVNwE.crl (hash: tqNutBBpUojk9llmTC9ifEFIWV0y7BUoKF87DZrwxEE=)
2: C9E35E848A8711ED98572D26C4F9AE02.roa (hash: yLDQTH1/xLkh+utXRnMQUyJMsGGbM5Z46ZKlMYrRcG0=)
3: 4D54B546616411F0B65D5F70C4F9AE02.roa (hash: g7NhMcIvAczmkYOaXYDkcEWAOqsD+kUhhcWaHDNMsU4=)
4: CC74271E8A8711ED98572D26C4F9AE02.roa (hash: 0G60ULRR1aiCecrfg+BqeMhABE9xkF63RW5J89d3We8=)
5: 82B99B1C6B9F11F09CD3A334C4F9AE02.roa (hash: X7kxe5tASpLZd1QCRc9L8JdIwUW7kRfM+3Yt3hVMA6k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl
rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 613 (0x265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCF10, serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701
Validity
Not Before: Dec 19 01:01:09 2025 GMT
Not After : Dec 26 01:01:09 2025 GMT
Subject: CN=6944a3d6-01c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:50:28:c3:5e:c8:17:77:3e:42:49:49:26:
70:03:5a:c0:ed:f2:3b:22:76:d0:1c:c4:12:91:88:
6d:96:fe:38:b9:cd:81:65:dc:04:8e:0a:ca:50:8b:
d0:fc:47:e8:b8:a7:11:b6:75:0b:24:c3:d1:f5:a3:
1e:2a:71:4e:51:3d:1f:36:8c:47:b0:bf:78:39:b4:
89:30:0b:18:d2:2e:af:32:2a:be:fd:82:42:23:2e:
8c:f1:65:e6:c4:af:a3:ca:51:36:18:2e:92:de:47:
65:79:e3:39:d9:38:96:9d:4c:97:e6:69:58:6b:4f:
c5:7d:be:7e:eb:50:5a:86:6e:d0:d2:e1:a6:b3:c0:
0c:2d:8b:9f:6d:6c:bf:8e:e0:d1:a6:71:ca:0e:80:
4f:ad:80:d7:22:32:a9:0d:c6:95:7b:9d:30:10:d3:
8d:72:3b:00:df:c0:22:a8:89:b7:99:d1:81:be:a1:
6e:93:a3:a6:f1:b1:0e:e2:8d:12:80:4f:62:ea:f3:
a7:f5:ad:18:86:ee:b0:a7:6c:a2:bf:6b:f9:c2:92:
4f:72:b9:77:5e:e5:d1:c9:26:85:4c:05:02:95:de:
6d:00:b3:3b:d3:c4:4f:06:06:ab:b8:7a:6c:5a:33:
24:35:77:0a:c7:f1:ca:90:19:5a:00:73:b4:cf:24:
77:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0E:EC:19:F3:2D:31:5E:4F:F4:F6:26:32:C2:86:34:0B:50:AA:B3
X509v3 Authority Key Identifier:
keyid:B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:4e:4c:27:cd:6e:12:82:fb:be:ac:22:5c:79:ba:1e:f3:64:
26:76:5b:8e:30:de:01:e6:bf:44:f3:8b:10:19:93:e8:54:dc:
08:93:18:9b:e5:0d:45:71:78:2e:fc:52:62:92:ee:80:95:c4:
77:9b:63:67:e2:ca:f7:98:d6:67:33:3b:e5:93:41:35:bb:2a:
c5:56:a3:fd:1b:84:4a:f3:a8:84:e8:f6:79:f3:ae:65:8a:fb:
27:77:fe:e2:69:b6:6b:1d:ea:91:89:23:b0:70:6d:2b:5a:30:
7c:70:2f:5e:7c:54:ba:21:e6:ce:41:bc:d2:bd:85:72:87:d0:
5f:52:64:c1:10:55:71:c1:45:46:50:99:f2:15:70:a4:45:9d:
55:f3:36:e7:53:93:cf:90:74:42:a1:a2:43:6b:5e:4b:53:bc:
1c:e7:a2:82:fb:e3:36:e0:e3:67:ff:4c:3f:84:ef:5a:d2:c5:
dd:ea:9a:2e:ca:c6:e3:3d:c4:fd:ee:5d:53:a4:d3:b6:75:82:
2e:08:10:e1:d5:28:f7:69:60:22:c6:ea:61:59:6c:33:5e:d2:
a2:1f:a0:4b:57:1f:5c:df:33:ab:08:d6:65:bf:47:ee:3e:1a:
cb:66:59:8e:ef:dc:ae:dc:73:30:79:4f:fc:91:7f:eb:5a:82:
94:9d:a4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:30:45 2025 by rpki-client