This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft
File: uttpn6AqlXLm70n0-Rof4Kc8LI0.mft (raw, json)
Hash identifier: MuYWQ/K6PM/GA/sni+tL795Oewo5RqquGjyh9oBbXxo=
Subject key identifier: 2E:B4:1B:14:19:E3:7D:98:BA:B5:2B:D6:31:0A:F2:F3:EF:35:FA:09
Authority key identifier: BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D
Certificate issuer: /CN=A91E27B9/serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D
Certificate serial: 0873
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft
Manifest number: 085D
Signing time: Thu 18 Dec 2025 20:16:23 +0000
Manifest this update: Thu 18 Dec 2025 20:16:23 +0000
Manifest next update: Thu 25 Dec 2025 20:16:23 +0000
Files and hashes: 1: uttpn6AqlXLm70n0-Rof4Kc8LI0.crl (hash: oqGS+k2DnSIKR8wz4uNet0/lS3Cp3+p1T/DNLAiLL+Y=)
2: C8BD376C3ADF11EC85EB255FC4F9AE02.roa (hash: TSiEeadhDUJoSMwAUqYhtuLIX4q41FceDd825B0nJzY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl
rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 20:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2163 (0x873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E27B9, serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D
Validity
Not Before: Dec 18 20:16:23 2025 GMT
Not After : Dec 25 20:16:23 2025 GMT
Subject: CN=69446117-1a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f2:de:2d:e4:d5:4e:71:b1:88:0d:2c:29:46:
9d:66:1b:b2:3b:d7:5f:e4:3b:3f:8a:48:1f:45:72:
94:e8:a2:2d:06:4e:68:bd:6f:38:a1:c4:dc:3c:1e:
ac:4d:8f:44:83:01:51:83:e0:ed:79:7d:1e:56:db:
38:a4:af:bd:d7:d0:98:16:7f:75:3f:8f:76:fd:96:
79:06:1a:7c:6b:f6:43:58:f0:2c:c9:f6:32:6a:49:
55:ea:5d:99:0f:a1:bd:d5:5f:93:1c:3e:01:78:68:
4f:6c:0b:b3:0a:58:9e:19:2f:d3:7f:cb:69:54:9a:
25:a1:6e:34:89:6b:81:34:b0:7c:69:87:93:a0:6a:
62:66:ca:aa:9f:a8:8c:77:0e:08:6f:d0:0d:4e:d2:
27:f7:a2:50:3e:d5:f4:21:4c:95:b5:38:d2:16:86:
1f:45:8f:5b:b6:70:5b:0d:41:1d:b6:29:cb:0c:17:
e6:4c:b0:a8:79:e4:86:10:93:5b:d1:0a:20:50:e9:
86:3b:0a:6c:6d:cd:95:5c:fe:25:be:82:ef:41:84:
a0:2a:92:e8:30:73:a0:f0:fa:f9:d9:21:20:47:78:
2a:f6:38:31:d8:1c:1f:4e:49:79:f0:c4:93:57:5e:
2f:6e:c8:96:58:47:08:89:08:52:e1:01:be:e4:bd:
3c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B4:1B:14:19:E3:7D:98:BA:B5:2B:D6:31:0A:F2:F3:EF:35:FA:09
X509v3 Authority Key Identifier:
keyid:BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:25:f1:d9:97:cd:11:36:a3:1b:92:f4:81:1e:4d:43:36:df:
fb:9b:a7:5c:21:e6:bb:ff:7f:54:91:aa:c6:1c:5c:2a:7b:f7:
85:51:7d:08:8c:38:dc:2d:00:83:a5:81:a7:71:64:ae:b7:c6:
c3:2b:a7:78:08:a6:24:ab:15:05:f8:45:c4:b2:89:a1:37:0c:
76:0d:ea:16:15:c6:e0:a4:94:c1:66:71:1f:f1:3e:a9:fa:c7:
e2:b8:57:7e:29:f3:5a:5f:97:92:6d:3c:6e:3c:83:5e:d7:8a:
ce:c5:c5:9d:0d:e7:5a:9d:03:b2:fc:41:2d:9d:86:fb:02:60:
be:54:c2:95:a4:bd:a8:f5:2a:18:6e:d5:7c:b0:10:15:6e:36:
26:73:e9:94:44:3a:13:88:2d:2c:c3:65:d8:f5:35:0d:3a:be:
fe:4b:35:f1:bd:8d:79:76:c5:dc:b9:d6:45:80:ee:a1:72:e1:
77:80:af:5c:ea:14:3a:7c:7c:5b:aa:85:6a:ca:43:ff:04:7d:
c3:20:72:05:7d:81:9a:16:f2:11:67:d5:fc:32:8d:81:78:42:
e4:ab:e1:c9:53:bd:a9:02:1e:f3:fd:59:91:26:c7:97:4e:c1:
56:05:53:34:70:c8:9c:e7:9f:00:d5:ba:33:a7:c7:b8:3b:38:
41:b5:89:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:50:39 2025 by rpki-client