This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
File: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft (raw, json)
Hash identifier: p87TUVJRfiGFNtbZm+AQL5bc32HcRE7Kef5rsOhYZRs=
Subject key identifier: 3C:54:7C:23:C7:6F:EE:94:25:1B:48:FD:33:4F:BF:59:18:A4:05:65
Authority key identifier: B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68
Certificate issuer: /CN=A91FA851/serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968
Certificate serial: 0169
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
Manifest number: 0166
Signing time: Fri 19 Dec 2025 03:09:59 +0000
Manifest this update: Fri 19 Dec 2025 03:09:58 +0000
Manifest next update: Fri 26 Dec 2025 03:09:58 +0000
Files and hashes: 1: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl (hash: GMt9Rxfvsh6eSuBNS+Q0hTgewliQsWCYYmBINIXzjb0=)
2: 8FD49B16BAE411EE9198A471C4F9AE02.roa (hash: L0qfyKxG6EHzysnGwaUqdqXIinzIkFTO2ksscDrrvZ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl
rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 03:09:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA851, serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968
Validity
Not Before: Dec 19 03:09:58 2025 GMT
Not After : Dec 26 03:09:58 2025 GMT
Subject: CN=6944c206-8356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:72:3b:85:a8:6c:17:a8:bc:e7:4c:51:cc:
fd:86:cd:85:0b:88:92:dd:ad:b0:cc:89:c9:76:cf:
38:28:72:ce:1e:d8:78:d6:b4:b0:59:d5:98:b4:9e:
75:42:2c:b8:d1:b7:e5:a9:5d:ff:83:7b:e6:6c:f3:
ad:79:6f:84:bf:03:62:fd:f0:b9:5e:33:68:29:f1:
e4:ee:ca:28:02:78:8b:56:8c:91:ce:6a:a6:67:a3:
93:7b:69:63:52:ac:32:92:21:16:80:33:8b:a1:02:
b1:e6:60:6e:e4:e4:df:ff:44:35:88:21:98:af:d3:
5d:28:2f:34:eb:a1:60:3e:96:89:00:aa:1a:a5:29:
09:f2:9a:a8:4c:81:a2:c3:7b:90:e6:0e:3c:5c:4e:
37:e9:39:0d:aa:6c:35:8f:03:6d:1a:1f:ab:45:5e:
9a:d8:0b:a8:17:85:86:6f:6e:c5:ea:a7:29:9c:24:
c0:34:f1:87:83:11:df:e8:29:c4:21:22:60:5e:08:
d9:21:3f:6e:07:5f:f7:bb:73:e3:ba:2d:15:0c:b6:
a0:e0:f6:28:03:6a:a1:fc:7e:a1:8c:6b:92:ca:e3:
4a:ab:b5:d5:ae:50:e1:71:f5:d6:82:91:9d:51:d9:
8d:59:58:47:0e:65:4e:72:51:30:03:c3:00:3c:a8:
5e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:54:7C:23:C7:6F:EE:94:25:1B:48:FD:33:4F:BF:59:18:A4:05:65
X509v3 Authority Key Identifier:
keyid:B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:78:76:3a:ab:6f:8d:96:fe:b4:19:97:7e:a9:00:52:23:4b:
fb:c9:78:53:8d:bf:d1:60:46:e7:59:35:53:77:98:e9:27:c4:
a0:e8:08:01:40:51:0e:70:1d:e9:c7:fe:a1:0d:09:26:b0:ca:
cf:64:8d:7e:6d:ad:8d:29:ec:0b:92:b8:52:14:2d:ca:95:be:
19:3f:2a:02:25:34:b6:96:15:d0:a6:96:24:8f:f6:8f:6a:e0:
39:fc:26:28:eb:41:99:b6:fc:74:d6:d3:ae:0d:d8:7c:6a:ba:
5b:f8:7f:13:82:6b:41:2f:7b:94:90:92:60:2d:e7:1b:a5:e3:
ca:e4:69:43:56:8f:72:26:8f:1d:8e:22:9c:0e:4c:1a:22:f3:
f1:77:ca:f3:13:99:39:d0:09:6c:8f:56:f4:06:3e:20:23:94:
73:ad:20:16:0b:fc:6b:a5:61:be:02:a3:71:80:91:ef:2d:c3:
3f:1e:8c:a2:7b:e6:8f:d9:5e:f9:05:33:7d:b8:ec:9b:9a:98:
6c:f0:07:b4:2d:9e:5d:c8:2e:7d:3a:3f:93:ab:7a:d2:65:6e:
de:30:96:dd:47:81:1d:3a:f9:4b:9c:2d:5f:7a:69:4f:1b:15:
17:92:6c:df:e4:ea:75:dd:18:1d:44:f8:f2:01:b0:4a:ed:a1:
2b:06:4a:78
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkE4NTExMTAvBgNVBAUTKEI5MjUwRkRFM0ZBQkQ1OUZBNTYwODIzMEZFQTdBMjND
NEI0Qzg5NjgwHhcNMjUxMjE5MDMwOTU4WhcNMjUxMjI2MDMwOTU4WjAYMRYwFAYD
VQQDDA02OTQ0YzIwNi04MzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw+1yO4WobBeovOdMUcz9hs2FC4iS3a2wzInJds84KHLOHth41rSwWdWYtJ51
Qiy40bflqV3/g3vmbPOteW+EvwNi/fC5XjNoKfHk7sooAniLVoyRzmqmZ6OTe2lj
UqwykiEWgDOLoQKx5mBu5OTf/0Q1iCGYr9NdKC8066FgPpaJAKoapSkJ8pqoTIGi
w3uQ5g48XE436TkNqmw1jwNtGh+rRV6a2AuoF4WGb27F6qcpnCTANPGHgxHf6CnE
ISJgXgjZIT9uB1/3u3Pjui0VDLag4PYoA2qh/H6hjGuSyuNKq7XVrlDhcfXWgpGd
UdmNWVhHDmVOclEwA8MAPKheGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxUfCPH
b+6UJRtI/TNPv1kYpAVlMB8GA1UdIwQYMBaAFLklD94/q9WfpWCCMP6nojxLTIlo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTg1MS85NUE2MTE5Q0I5
REYxMUVFOTRCNDI0MkFDNEY5QUUwMi91U1VQM2otcjFaLWxZSUl3X3FlaVBFdE1p
V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VTVVAzai1yMVotbFlJSXdfcWVpUEV0TWlXZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QTg1MS85NUE2MTE5Q0I5REYxMUVFOTRCNDI0MkFDNEY5QUUwMi91U1VQM2otcjFa
LWxZSUl3X3FlaVBFdE1pV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCFeHY6q2+Nlv60GZd+qQBSI0v7yXhTjb/RYEbnWTVTd5jpJ8Sg6AgB
QFEOcB3px/6hDQkmsMrPZI1+ba2NKewLkrhSFC3Klb4ZPyoCJTS2lhXQppYkj/aP
auA5/CYo60GZtvx01tOuDdh8arpb+H8TgmtBL3uUkJJgLecbpePK5GlDVo9yJo8d
jiKcDkwaIvPxd8rzE5k50Alsj1b0Bj4gI5RzrSAWC/xrpWG+AqNxgJHvLcM/Hoyi
e+aP2V75BTN9uOybmphs8Ae0LZ5dyC59Oj+Tq3rSZW7eMJbdR4EdOvlLnC1femlP
GxUXkmzf5Op13RgdRPjyAbBK7aErBkp4
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:55:58 2025 by rpki-client