This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
File: 9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft (raw, json)
Hash identifier: kpPFvuU2OLZGeqiIHmze8z6iGZpdO028ctvK/C6bzuE=
Subject key identifier: 88:D5:4C:0B:D3:0B:24:67:A6:04:EE:C8:05:A7:FC:E0:03:05:4A:57
Authority key identifier: F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1
Certificate issuer: /CN=A9149BFB/serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1
Certificate serial: 06B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
Manifest number: 06AE
Signing time: Mon 26 Jan 2026 21:38:24 +0000
Manifest this update: Mon 26 Jan 2026 21:38:23 +0000
Manifest next update: Mon 02 Feb 2026 21:38:23 +0000
Files and hashes: 1: 9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl (hash: a3HIuGGNaRAcWl7WuMHOuOKiX3pzA1HYyu0qC835hms=)
2: 613CF60638D211EF88A7B370C4F9AE02.roa (hash: 1/vF949GbK+OG3Z/P4BA3CvZ9C9A8c3eyhSNg3p4hZ0=)
3: 948A2714980211EB82357D6CC4F9AE02.roa (hash: 74FNJ7o4TVn1NClkrq7IveC/njESqBKp93SgAkTbR9E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl
rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Feb 2026 21:38:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1721 (0x6b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149BFB, serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1
Validity
Not Before: Jan 26 21:38:23 2026 GMT
Not After : Feb 2 21:38:23 2026 GMT
Subject: CN=6977decf-4778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d3:39:6c:d3:85:8a:08:9c:f7:32:13:f0:e6:
a5:92:60:a0:14:6d:29:d8:05:35:96:41:20:ce:33:
42:d5:e2:63:6b:a1:3f:db:da:e3:66:03:08:17:89:
16:b5:07:95:e3:9e:8d:19:ef:d8:85:d5:5d:ec:6c:
0b:52:86:4d:e1:c2:bc:2e:49:fa:49:71:60:cc:bd:
7a:d2:21:2f:13:39:47:4f:d1:5a:8d:53:3f:4c:b5:
f1:89:b7:a8:46:fa:16:07:27:85:c9:14:51:96:d8:
4b:26:e7:68:77:f8:6b:a0:29:f3:3e:8f:03:b1:7c:
3b:af:4f:f6:81:67:b7:3d:0b:fb:ff:c7:85:01:96:
e5:ef:2e:99:9d:30:a6:4a:1e:1e:6d:8c:ba:67:7d:
64:64:9d:39:8b:6d:a6:05:46:5f:96:1c:2a:ab:cb:
1c:a5:8b:da:fc:9f:6a:be:b9:96:4c:fd:96:c3:74:
e8:9c:ec:b4:e1:2f:12:fa:ab:a9:dd:15:c9:58:92:
21:9e:6e:56:31:98:a2:d8:35:3d:2b:1a:30:c6:07:
aa:91:b2:68:24:97:70:a7:e9:ac:29:0d:a2:01:42:
a8:7d:8f:72:7c:82:02:12:97:5c:c9:e6:1a:2a:87:
bc:7f:3e:f7:aa:0f:3b:a3:c1:18:c9:a2:f2:3d:70:
f3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D5:4C:0B:D3:0B:24:67:A6:04:EE:C8:05:A7:FC:E0:03:05:4A:57
X509v3 Authority Key Identifier:
keyid:F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:4f:ae:ed:c9:52:b8:50:97:fa:b1:25:fb:d0:63:96:b5:68:
d6:74:e8:f5:26:40:37:2c:ad:74:45:5b:eb:fc:68:c6:6b:c8:
84:11:6e:62:73:5e:08:ca:d5:e4:1f:33:53:ef:82:af:79:8f:
6a:e5:16:09:74:5e:c4:59:8e:c6:69:9e:fa:60:ab:5f:ba:d8:
34:a6:d9:42:23:1c:e8:00:77:d3:35:49:af:70:75:ec:66:db:
46:d8:4b:9a:87:83:41:fa:6c:a8:42:0c:c4:67:7e:f3:2e:a9:
c2:5e:4e:26:95:e5:d5:9b:b5:0c:16:a7:a5:fb:f2:6c:df:02:
03:e4:03:ad:67:b6:6f:f3:cf:26:8b:60:7a:fe:5f:d8:d6:6a:
5a:ea:fb:e5:56:11:23:2e:1f:1e:33:46:66:74:ad:d0:ca:39:
5e:c6:ca:23:91:9f:06:55:fa:22:a2:fc:dd:ef:3c:a2:7c:28:
6e:d7:0f:b1:27:aa:a3:ee:7e:a5:6e:eb:28:df:86:c3:ef:76:
5c:5d:54:25:97:e4:0d:15:d2:b0:03:b0:76:8f:3a:26:07:ee:
99:a3:db:f2:0d:92:ad:7d:b0:d5:2e:3d:2f:1d:8e:45:63:d3:
aa:93:7d:a0:dc:20:72:e8:4f:02:88:27:eb:88:4f:31:49:75:
7d:31:f5:7f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlCRkIxMTAvBgNVBAUTKEY2RTcxMkZDNUM2OUU3MkY2OTM5NkU1RTExNDJDQzdG
NzhDNjhGRDEwHhcNMjYwMTI2MjEzODIzWhcNMjYwMjAyMjEzODIzWjAYMRYwFAYD
VQQDDA02OTc3ZGVjZi00Nzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu9M5bNOFigic9zIT8OalkmCgFG0p2AU1lkEgzjNC1eJja6E/29rjZgMIF4kW
tQeV456NGe/YhdVd7GwLUoZN4cK8Lkn6SXFgzL160iEvEzlHT9FajVM/TLXxibeo
RvoWByeFyRRRlthLJudod/hroCnzPo8DsXw7r0/2gWe3PQv7/8eFAZbl7y6ZnTCm
Sh4ebYy6Z31kZJ05i22mBUZflhwqq8scpYva/J9qvrmWTP2Ww3TonOy04S8S+qup
3RXJWJIhnm5WMZii2DU9KxowxgeqkbJoJJdwp+msKQ2iAUKofY9yfIICEpdcyeYa
Koe8fz73qg87o8EYyaLyPXDzCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjVTAvT
CyRnpgTuyAWn/OADBUpXMB8GA1UdIwQYMBaAFPbnEvxcaecvaTluXhFCzH94xo/R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUJGQi9ERTJERTY0Njk4
MDAxMUVCODA3MURENjhDNEY5QUUwMi85dWNTX0Z4cDV5OXBPVzVlRVVMTWYzakdq
OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzl1Y1NfRnhwNXk5cE9XNWVFVUxNZjNqR2o5RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OUJGQi9ERTJERTY0Njk4MDAxMUVCODA3MURENjhDNEY5QUUwMi85dWNTX0Z4cDV5
OXBPVzVlRVVMTWYzakdqOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAoT67tyVK4UJf6sSX70GOWtWjWdOj1JkA3LK10RVvr/GjGa8iEEW5i
c14IytXkHzNT74KveY9q5RYJdF7EWY7GaZ76YKtfutg0ptlCIxzoAHfTNUmvcHXs
ZttG2Euah4NB+myoQgzEZ37zLqnCXk4mleXVm7UMFqel+/Js3wID5AOtZ7Zv888m
i2B6/l/Y1mpa6vvlVhEjLh8eM0ZmdK3QyjlexsojkZ8GVfoiovzd7zyifChu1w+x
J6qj7n6lbuso34bD73ZcXVQll+QNFdKwA7B2jzomB+6Zo9vyDZKtfbDVLj0vHY5F
Y9Oqk32g3CBy6E8CiCfriE8xSXV9MfV/
-----END CERTIFICATE-----
Generated at Tue Jan 27 06:07:58 2026 by rpki-client