This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
File: UK8aopMCL3bNH1G6DdWKW4lmkVo.mft (raw, json)
Hash identifier: Jw3j4Rrzg5S7xlaLN+dFDvBy77DK/15es3h4zqkhBqk=
Subject key identifier: B2:3E:DF:43:3E:2D:0E:55:BC:D4:2A:19:8A:15:DC:1C:7F:F0:D9:98
Authority key identifier: 50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A
Certificate issuer: /CN=A915AC36/serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
Manifest number: 23
Signing time: Thu 29 Jan 2026 07:02:07 +0000
Manifest this update: Thu 29 Jan 2026 07:02:07 +0000
Manifest next update: Thu 05 Feb 2026 07:02:07 +0000
Files and hashes: 1: UK8aopMCL3bNH1G6DdWKW4lmkVo.crl (hash: hAY0oM7Ndo2SWv/3X6eIjhudP+vOBxWPE4LagDDR2DE=)
2: 7D88011ACF4011F08FF1FE52C4F9AE02.roa (hash: /IHW3aHM/SUsb9kiCoK1jZIm/hDv2f3qYZbCqQZYAZs=)
3: BBD396F8CC1D11F09B362031C4F9AE02.roa (hash: gh8+qv3MhaUl1O19jg6tnVa+KoQIkfYNDiOkghKWIjk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl
rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 07:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AC36, serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A
Validity
Not Before: Jan 29 07:02:07 2026 GMT
Not After : Feb 5 07:02:07 2026 GMT
Subject: CN=697b05ef-27da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ba:1e:0d:b8:f5:f2:aa:f9:13:ef:d4:05:ca:
0d:08:7d:a1:ae:b2:0a:d5:51:25:fc:18:ea:58:13:
e6:96:0d:46:66:53:27:7f:23:b3:44:98:d9:15:b2:
d9:a9:7e:74:c6:d9:37:87:6c:aa:5d:60:2c:bc:21:
e6:2d:b9:c7:ad:20:93:08:23:f4:91:5c:2d:2f:af:
95:6a:ef:fc:b4:f9:93:09:cc:e2:59:6c:26:58:13:
8d:38:28:ac:9d:2e:a4:ec:45:51:7c:13:0a:9b:f6:
f1:11:c6:63:38:5e:93:2b:72:9b:c1:fc:74:77:32:
09:94:b3:f2:ca:ee:41:67:b4:ca:18:2a:e0:44:b3:
a4:f7:5c:c5:bc:12:ae:82:df:81:f8:e5:75:1b:07:
d6:d8:39:1a:10:cd:d8:f4:82:5b:ae:08:16:9f:2c:
de:8d:a6:a8:5d:a9:a9:74:dc:3b:b0:4f:bb:89:c0:
6c:3b:2b:4b:8b:b5:c7:62:a0:a5:20:8d:f6:a3:3e:
ad:b4:6d:e5:b0:90:99:49:a2:bb:7e:a2:f2:b9:f0:
ea:bd:de:21:39:ac:d3:57:0f:a4:78:12:cb:4e:31:
d6:d5:a7:37:4d:75:88:d2:08:56:26:a5:c3:88:ec:
62:b6:78:5a:83:a3:c3:61:7c:59:29:4a:04:3c:ab:
37:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3E:DF:43:3E:2D:0E:55:BC:D4:2A:19:8A:15:DC:1C:7F:F0:D9:98
X509v3 Authority Key Identifier:
keyid:50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:cd:58:88:a3:ba:47:71:26:35:72:46:40:ea:5a:be:c6:5e:
55:30:c0:ac:fa:2e:10:bb:4e:bc:de:3a:7e:fe:31:4d:af:87:
46:ef:32:72:06:83:d4:e4:0e:2a:ec:07:8d:7f:d4:98:cc:cd:
22:e8:60:c2:98:10:71:0f:67:f3:66:52:bc:23:8c:2f:9f:39:
54:11:1b:8c:0a:f6:9d:54:7c:38:8c:8a:b2:3d:4c:bb:e6:a9:
0e:38:b5:d7:32:bc:35:97:78:4a:0d:14:01:7e:b2:a3:4e:be:
85:3f:9a:e9:b7:4a:09:74:6c:43:ac:18:d4:5a:17:7b:08:19:
11:4d:a6:5f:34:01:83:82:da:5a:db:bc:0f:8a:9a:b1:a8:37:
16:91:bc:0e:95:f7:41:08:6f:2a:37:fa:7b:e6:84:48:2c:1e:
75:15:5e:31:47:96:6e:4e:3b:9f:3a:bb:9f:53:8b:03:ef:0b:
7a:c6:c7:a8:c2:be:66:89:6f:f8:68:7b:b0:5f:be:d2:a1:67:
3b:5d:31:5a:7e:a0:e0:f5:aa:27:84:49:ff:5a:b7:f3:22:e9:
d4:c7:8a:71:ef:6b:49:36:f7:3e:e7:f9:13:b2:34:98:a3:3d:
cd:4a:bc:a0:ca:2c:a9:a0:52:9c:1a:de:91:f1:e0:26:4e:86:
86:1e:16:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 30 14:11:56 2026 by rpki-client