This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
File: ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft (raw, json)
Hash identifier: tgYI0rf5kCywJRRjRdVN95R/j0WIahRIS+G38fsevlM=
Subject key identifier: 42:E9:CE:2E:C1:F9:F9:30:B0:AB:5B:5E:A8:01:A8:3A:C8:ED:2F:5E
Authority key identifier: BA:39:46:B0:13:D5:47:D0:E9:CB:A4:BB:11:B5:8A:C9:00:1C:57:E3
Certificate issuer: /CN=A91F731E/serialNumber=BA3946B013D547D0E9CBA4BB11B58AC9001C57E3
Certificate serial: 0144
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
Manifest number: 0144
Signing time: Wed 24 Dec 2025 15:51:14 +0000
Manifest this update: Wed 24 Dec 2025 15:51:14 +0000
Manifest next update: Wed 31 Dec 2025 15:51:13 +0000
Files and hashes: 1: ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl (hash: wqsmuGhBAp4ypnuSAzTMudovvJHrbbtastglpzKsYFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl
rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 15:51:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F731E, serialNumber=BA3946B013D547D0E9CBA4BB11B58AC9001C57E3
Validity
Not Before: Dec 24 15:51:14 2025 GMT
Not After : Dec 31 15:51:13 2025 GMT
Subject: CN=694c0bf2-3188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f6:92:88:7f:6b:e0:b2:6e:cf:20:2a:53:d5:
6e:f5:b2:99:19:b9:80:c2:b5:57:20:db:2a:47:81:
70:3f:be:77:eb:4e:0e:17:bc:7f:95:e1:a4:ba:4f:
39:ca:8a:98:3f:8a:dd:4e:f2:9a:07:c5:d6:20:46:
d8:b1:7d:f5:df:71:5d:58:dc:d2:ab:b2:c4:e1:3d:
ad:78:cd:28:06:9f:2e:82:3f:d7:be:09:5f:46:53:
0b:bd:2c:06:34:4c:0e:48:f5:3d:5d:61:92:7a:33:
da:19:9e:4c:9c:a2:7d:80:72:fc:d9:d1:bc:c1:bd:
44:56:fe:7d:88:84:5a:cf:c0:9c:be:e8:99:3b:be:
43:c7:79:c5:79:86:6d:3d:f5:7a:72:1e:e4:c6:f8:
2b:32:bb:e9:66:d2:6f:3c:6d:a6:e7:97:4a:2b:66:
c3:9e:44:81:33:34:86:6c:9f:27:5e:f4:fc:99:a7:
3a:e3:aa:6c:dd:d9:43:e4:36:ef:44:e8:ed:68:72:
0e:03:ed:f3:9f:39:8a:f5:b5:cd:96:8b:09:97:0f:
94:a2:08:fc:28:72:f6:8b:b3:b6:81:78:9b:4d:fb:
44:81:77:a2:14:80:c2:0a:e7:43:d8:d6:9e:4b:a2:
67:1e:10:e7:4a:46:57:df:92:da:14:e9:24:29:60:
fd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E9:CE:2E:C1:F9:F9:30:B0:AB:5B:5E:A8:01:A8:3A:C8:ED:2F:5E
X509v3 Authority Key Identifier:
keyid:BA:39:46:B0:13:D5:47:D0:E9:CB:A4:BB:11:B5:8A:C9:00:1C:57:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:1e:5d:2e:9f:81:cb:7d:b2:bc:f1:3c:69:93:d3:06:7d:25:
53:a4:7a:d9:2d:4f:2b:63:ef:56:0a:83:56:32:cc:f3:bc:70:
ee:d2:51:a4:2b:f1:07:1f:43:a7:ac:df:76:38:3c:b9:ad:6a:
f6:9a:5d:d1:bb:6a:54:9b:9b:f0:85:4e:38:dc:32:db:18:10:
d2:32:d3:c0:f8:95:85:d3:9b:43:22:c8:18:cc:5d:17:35:ab:
08:1f:78:8b:41:79:62:66:6b:38:1c:82:71:1c:26:79:5e:c6:
68:3c:48:b3:1e:dc:a2:43:4e:61:19:5a:4b:ac:aa:76:07:75:
45:76:03:4c:bb:9e:3a:4b:1d:92:46:d2:41:ad:7e:75:78:73:
b7:a5:99:30:75:71:f2:6d:9f:bb:ea:4d:21:06:da:c4:2c:7e:
b7:61:c5:92:47:10:4d:f1:58:56:57:12:4a:d3:6f:74:b6:3e:
03:6d:9e:13:4c:7c:57:5c:38:06:f6:b7:31:f0:4c:20:c0:83:
bd:05:18:0c:d6:e8:10:50:74:8a:28:29:9c:72:ad:eb:c3:2f:
5e:e0:13:18:a2:c2:a6:1c:db:ab:18:4c:34:e2:6a:bd:ae:8c:
ba:55:68:f3:e4:df:2f:17:35:af:cf:fe:ed:a8:b0:af:2c:ea:
e1:be:eb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 01:29:01 2025 by rpki-client