This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
File: UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft (raw, json)
Hash identifier: mm5OY0i2x2RWsc5iHJrRGarTkBlVGJUUoW2y2wTT8so=
Subject key identifier: D3:90:3B:68:CA:05:54:67:07:30:C7:B6:18:06:18:39:A0:8D:4F:83
Authority key identifier: 50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
Certificate issuer: /CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
Certificate serial: 0508
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
Manifest number: 04D4
Signing time: Mon 26 Jan 2026 23:04:17 +0000
Manifest this update: Mon 26 Jan 2026 23:04:17 +0000
Manifest next update: Mon 02 Feb 2026 23:04:17 +0000
Files and hashes: 1: UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl (hash: rf02iPebGNoUIpVJGlItl4cP0A/qZquxk7WZ5bIh61M=)
2: 0294E1EADB0D11EE88489759C4F9AE02.roa (hash: LFGX/jVfbWAISfHlUtm9x1tFR24hTnDvuTIOnrEtJuY=)
3: DEBDCECAC2CF11EFA805380FC4F9AE02.roa (hash: 7TAaE/8fhVJTw/M9q10IxoBr1ZsLCV+PEces+u8jYss=)
4: 71A1BB74759711EFA89BA96BC4F9AE02.roa (hash: OehIWzlmpLn+tHX2OGp9aRhBba8Lt99w8j7PUJDnUtU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl
rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Feb 2026 23:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1288 (0x508)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEE06, serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
Validity
Not Before: Jan 26 23:04:17 2026 GMT
Not After : Feb 2 23:04:17 2026 GMT
Subject: CN=6977f2f1-e79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7e:36:11:3a:e8:c8:3d:da:6f:5b:2a:c3:7b:
46:97:18:a7:15:0a:93:5b:9f:1b:ca:fa:69:2d:b4:
1c:20:1d:66:31:f3:b6:06:4c:91:db:f7:67:97:61:
8f:b5:65:8e:a9:20:ec:d9:dc:c5:d5:c4:eb:31:78:
41:6b:c9:77:6f:4b:7f:64:d1:ff:fe:87:92:14:70:
93:02:ad:e2:2c:3c:66:e4:d6:f6:96:38:81:be:53:
9b:7d:2c:74:be:2d:11:42:d7:b2:db:3d:72:71:e5:
ba:c7:44:c8:d6:d6:a5:4f:ea:70:d1:06:82:e1:2f:
da:bc:7b:41:58:b1:d7:bb:6f:eb:1d:4b:f3:aa:57:
28:5e:72:07:e8:32:2e:80:7c:98:2b:e3:e8:10:d6:
35:d9:19:c5:80:d6:44:07:74:b8:96:3a:39:d1:d0:
56:d6:f9:61:92:1a:a0:16:07:63:75:86:b7:b4:bb:
4f:21:b6:2f:4f:bc:94:b3:0b:bf:d7:35:95:ef:b5:
98:10:e1:9f:42:51:7d:af:6b:21:23:a0:2b:3b:9e:
ce:92:35:1d:ad:0e:da:07:e2:9e:d5:f8:c1:6f:37:
a5:35:7d:08:01:9a:c2:89:d3:c1:3d:79:95:a7:25:
2c:63:d8:d8:43:af:9a:b2:d7:42:6e:e5:d9:21:54:
03:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:90:3B:68:CA:05:54:67:07:30:C7:B6:18:06:18:39:A0:8D:4F:83
X509v3 Authority Key Identifier:
keyid:50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fb:eb:8c:37:b9:cd:a1:c5:e8:d3:ba:e0:29:6e:4a:c5:f0:
74:0d:d1:65:18:a4:f4:de:a1:84:59:b3:fb:8a:68:4d:2a:67:
a4:b3:90:4c:f2:0f:50:fb:93:73:c8:b3:cc:40:61:f3:97:71:
82:1f:83:ee:9b:35:81:57:da:84:e5:71:f9:4e:13:14:e9:28:
8c:ad:20:4a:2d:cc:9b:92:25:2a:58:51:74:a2:a1:8c:09:cd:
d3:e9:fa:10:bc:81:69:1a:69:dc:8e:e8:bd:2f:08:73:d7:2d:
27:8b:7c:a8:72:e8:c3:8f:9e:7a:69:b0:b1:71:38:5b:c6:8b:
1d:23:28:02:28:bc:bc:76:87:32:c0:4f:7f:0a:72:7a:5c:41:
12:42:67:67:4e:b6:47:1f:d2:62:c2:40:ed:40:0d:17:7e:44:
5c:17:5a:bc:f9:c0:97:97:9e:78:27:fa:e8:3a:9a:c5:35:b7:
55:26:38:b5:11:d7:94:36:c5:9c:37:66:28:3f:2e:f0:36:e1:
82:51:1d:0a:55:67:42:f4:a3:8e:1e:07:4d:c9:8a:a4:b5:94:
21:49:e3:26:22:e1:29:5b:59:c3:b5:ea:7d:c9:e5:78:df:16:
a5:a9:5a:6f:06:7e:8f:97:8c:89:a0:47:19:d2:56:7e:a8:7e:
86:5c:94:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 19:38:27 2026 by rpki-client