This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft
File: uFvtmb90CrrVo5nJ31_plipt6PE.mft (raw, json)
Hash identifier: nAU7rICzzfTy5Z8AC0PAPL5eMOH/UNmNKVPiGDqqzjA=
Subject key identifier: 8B:03:58:91:1D:5C:2D:66:5D:62:1A:16:E3:22:6D:F5:61:29:00:52
Authority key identifier: B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1
Certificate issuer: /CN=A9195DE5/serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1
Certificate serial: 0862
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft
Manifest number: 084A
Signing time: Mon 26 Jan 2026 20:10:02 +0000
Manifest this update: Mon 26 Jan 2026 20:10:01 +0000
Manifest next update: Mon 02 Feb 2026 20:10:01 +0000
Files and hashes: 1: uFvtmb90CrrVo5nJ31_plipt6PE.crl (hash: NPKySfEOgLdgoipDzh8QpiRSd5JhC+SQnwjeNb3H0Kc=)
2: C6EDD52EF4C011EAA7B25986C4F9AE02.roa (hash: qyqw3i3GL6h/SgQPPtxyHJkhrm/uWWSr5nGAKt/Qapg=)
3: C8633DEAF4C011EAA7B25986C4F9AE02.roa (hash: ux6FaGhfWyv2H1NDOSXEk7LrVXGwR7MCaj2E49kXMHg=)
4: 709F917AF74111EF98C99938C4F9AE02.roa (hash: 1qf+iawoit0ys+iUAf7LEY7HtRnvUIOTI+MZhHCWuYU=)
5: C7ADA138F4C011EAA7B25986C4F9AE02.roa (hash: G5UBtJsfZQZ4SV+yPTNK/ejUFIGmrip9sZG7FP0b4Cg=)
6: 70017B5CF74111EF98C99938C4F9AE02.roa (hash: 2qfdADfdo36JxITYdf4pd34OcKO4BbP5IH9WNGohmvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl
rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Feb 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2146 (0x862)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195DE5, serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1
Validity
Not Before: Jan 26 20:10:01 2026 GMT
Not After : Feb 2 20:10:01 2026 GMT
Subject: CN=6977ca1a-9507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ee:0b:24:59:96:ca:ba:7c:e8:04:d6:72:46:
7d:7b:47:84:5d:d0:1b:cb:88:83:15:65:7d:9d:5e:
83:eb:3a:53:5f:af:47:40:ab:bb:8c:3f:cd:15:98:
dc:13:3b:77:8e:67:5e:63:76:45:42:65:2f:5b:68:
ea:71:4f:b4:61:ca:66:67:68:85:23:06:dd:81:d7:
18:1a:52:fc:6d:fb:d9:28:8e:0d:16:32:6d:e5:6b:
f1:58:f0:a2:b6:38:91:6a:e3:1e:b6:f3:eb:21:07:
da:34:f0:80:ed:ed:9b:3b:a7:86:ee:21:cd:dc:7f:
82:c6:c9:d9:c0:a6:fc:b7:3b:51:55:59:3a:b9:a8:
89:76:d9:00:ff:06:90:77:6a:e3:94:41:24:36:44:
ec:b4:3d:c0:42:bf:0e:f9:d5:6a:ed:7b:09:bb:26:
22:1d:8b:67:1f:4b:1a:ac:cb:56:82:94:7e:69:cc:
89:e5:4e:79:40:f1:0c:32:5f:b9:68:08:0d:3f:b2:
c1:85:c5:9a:69:3c:c1:e2:c3:b3:48:e8:78:85:ea:
81:cf:61:53:d7:5e:d2:51:da:7c:7a:4c:e5:9d:3d:
3e:32:cf:dc:96:19:de:16:57:85:9e:9a:0d:f0:59:
e3:54:e4:24:58:32:2f:5a:c8:0f:94:2e:91:7a:20:
a6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:03:58:91:1D:5C:2D:66:5D:62:1A:16:E3:22:6D:F5:61:29:00:52
X509v3 Authority Key Identifier:
keyid:B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6d:09:9a:c8:4c:ec:d0:e0:ea:97:ca:2f:ab:43:f8:25:ba:
5b:8d:69:f0:9a:27:5c:24:36:16:30:0b:19:3d:59:fc:90:f9:
ef:e2:5b:d0:a0:0a:03:7b:fc:55:96:74:7b:fa:7b:54:52:65:
2d:a8:25:d2:e9:16:66:78:7b:96:d2:4e:64:e8:4f:ca:8c:2f:
82:14:a0:ba:ea:ac:f1:a0:7b:5c:d7:e9:f0:1c:0c:45:ce:a1:
f5:16:06:4b:72:07:44:1a:36:79:01:17:59:29:d6:75:d3:cd:
01:bd:ba:0d:7f:ef:98:32:04:46:22:f3:46:c2:fa:69:44:c9:
d6:e7:dc:cd:5c:bb:96:a1:29:67:86:16:5d:4e:ef:cf:a6:80:
98:97:2e:28:a4:d7:c0:93:17:5f:71:3a:b6:ba:18:30:9b:68:
f6:05:73:e5:ed:11:7f:1b:6b:24:14:15:40:60:e8:b4:6f:7a:
4d:36:b2:86:c7:66:bd:04:a7:74:8c:d0:b5:95:c7:f8:a6:85:
b5:2a:f0:a5:7b:ca:45:af:67:d9:e4:5b:bf:07:77:f8:75:3e:
2c:13:00:67:17:71:cc:cf:18:a1:97:37:d3:da:f7:f0:0e:a1:
a2:27:01:d3:16:77:97:8c:e5:d7:61:69:01:ec:aa:17:48:86:
84:1b:0a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:39:54 2026 by rpki-client