This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft
File: 1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft (raw, json)
Hash identifier: 81QRhYaVQraj29JxY02UGZd7j/divLB7X9vl8toshWk=
Subject key identifier: A7:A4:AF:40:60:A6:74:17:45:57:BC:AE:F8:39:FF:EA:70:06:D6:32
Authority key identifier: D5:4B:F3:99:BE:1B:65:9B:13:23:14:B8:21:93:3A:20:BA:38:B9:6A
Certificate issuer: /CN=A9123E38/serialNumber=D54BF399BE1B659B132314B821933A20BA38B96A
Certificate serial: 1750
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft
Manifest number: 1727
Signing time: Sat 24 Jan 2026 16:23:51 +0000
Manifest this update: Sat 24 Jan 2026 16:23:51 +0000
Manifest next update: Sat 31 Jan 2026 16:23:51 +0000
Files and hashes: 1: 1Uvzmb4bZZsTIxS4IZM6ILo4uWo.crl (hash: P7sa2tx8VFiPncYZGUA25OfhrMQEgoVrwVrVc7b/GWI=)
2: 0F2AF0F0AFDA11EAAED1C066C4F9AE02.roa (hash: FZkT4Kxe1dq9738R7EN3qc8IS8Q1dJKnESpThw2bzlo=)
3: 24CFDABE00EC11E8AAC4DD6EC4F9AE02.roa (hash: ecERzKe4aH7s8rjg9Kt6Wo+1pU9CBduLgX3EVStj1rs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.crl
rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:23:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5968 (0x1750)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123E38, serialNumber=D54BF399BE1B659B132314B821933A20BA38B96A
Validity
Not Before: Jan 24 16:23:51 2026 GMT
Not After : Jan 31 16:23:51 2026 GMT
Subject: CN=6974f217-c227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e2:68:ca:20:06:a6:f9:42:16:da:90:17:fa:
ab:42:b8:1b:61:d1:88:31:fb:62:f3:d2:5a:b5:be:
40:6f:81:9e:e3:31:61:7f:53:0f:8d:35:16:f5:fa:
2b:40:a0:50:6f:43:bf:9f:a9:98:a4:b0:19:7b:bf:
46:2d:93:9c:11:5f:80:52:19:c9:ed:9c:0a:8e:21:
52:32:c4:5c:c7:61:06:58:62:f7:6e:99:b1:92:ef:
fe:94:58:bf:64:09:d0:6f:7d:83:aa:b9:7e:bc:17:
7e:ce:5d:54:81:cb:fa:6b:66:d4:e1:62:90:b2:ba:
7b:99:62:8e:54:e9:4c:4f:f5:cf:47:b3:66:ed:ef:
c5:da:a4:a5:5d:bd:56:89:c1:29:40:1e:f4:57:0c:
e6:57:45:52:b1:0b:d6:3f:44:41:53:ff:dc:46:4a:
76:cc:e1:d1:22:ac:87:d9:e1:6d:68:04:06:e1:5d:
12:0d:17:c1:1e:ff:78:bb:62:37:41:86:53:49:d0:
4b:fe:81:24:a5:b7:0a:23:7d:9c:e9:98:9e:da:7c:
4f:2c:3e:8e:dc:27:73:0c:77:d1:13:d9:b9:21:24:
1b:0f:7d:4b:44:32:45:9b:fa:73:46:83:b9:01:0e:
65:9e:bd:42:19:90:19:b4:a4:39:25:0c:0b:fe:59:
ec:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A4:AF:40:60:A6:74:17:45:57:BC:AE:F8:39:FF:EA:70:06:D6:32
X509v3 Authority Key Identifier:
keyid:D5:4B:F3:99:BE:1B:65:9B:13:23:14:B8:21:93:3A:20:BA:38:B9:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:f9:d2:11:73:c9:50:68:d1:0e:21:ae:f9:88:e8:16:1b:c1:
5d:4a:59:d4:a1:a1:74:34:6c:b0:c1:d7:36:95:f5:67:94:eb:
4c:2d:0b:4d:7a:aa:63:10:48:27:16:15:97:bb:6e:66:e4:7d:
bf:91:7c:59:90:34:4d:33:73:6f:ce:e4:40:8c:e6:b0:39:9f:
da:67:a6:b6:e6:e2:7a:64:21:47:dd:20:42:da:ab:7c:06:8b:
f0:b2:5e:07:08:21:8d:8a:a3:00:e2:9f:2c:74:3d:2e:a1:01:
dc:f9:82:f3:09:19:d0:c7:b4:45:df:56:8c:8d:62:1e:85:8c:
70:99:36:c7:2b:ee:74:f9:06:64:16:f9:bf:5b:c5:45:aa:df:
79:b7:c5:e8:24:70:85:41:4e:6b:b8:c5:09:8b:46:68:42:b1:
f2:d3:24:50:79:a7:52:b0:23:02:69:28:b0:1f:c0:b3:6f:24:
66:22:fd:f1:c7:02:25:4b:95:41:e8:c5:2f:17:89:c0:fa:59:
0d:59:93:75:3e:64:6a:db:31:5d:19:f0:b5:a4:87:86:97:9f:
ed:02:3c:1c:f3:d2:92:35:d6:87:d5:b9:8f:c9:8b:a0:0a:dc:
76:1b:50:ad:32:9c:76:e5:eb:ce:09:67:f0:fe:82:6b:fe:2a:
4f:de:79:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:39:14 2026 by rpki-client