This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft
File: CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft (raw, json)
Hash identifier: teGkZWMjXiMq9UOMu9XfUheyQNbdpkei6IMAm0wgUjk=
Subject key identifier: 49:07:AE:F3:01:BA:24:74:F0:5F:90:1D:9F:B0:08:E5:8B:BA:F2:27
Authority key identifier: 09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30
Certificate issuer: /CN=A912559E/serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30
Certificate serial: 0190
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft
Manifest number: 0188
Signing time: Sun 25 Jan 2026 02:55:03 +0000
Manifest this update: Sun 25 Jan 2026 02:55:02 +0000
Manifest next update: Sun 01 Feb 2026 02:55:02 +0000
Files and hashes: 1: CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl (hash: z44p9+vjetRrIO0uXDRGWCmppUmf3vFPALL3AfqakNc=)
2: AB501A702CDE11EFBC062E74C4F9AE02.roa (hash: oNFEmYACURX8AL5CKdRsG7Ba4gG8bP0+lhNlBuOmVKY=)
3: AC218F2E2CDE11EFBC062E74C4F9AE02.roa (hash: lEc4QJGwk5bvYmoYAomdEIkxOdB1PEJOkUqud1Iy0CI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl
rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:55:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912559E, serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30
Validity
Not Before: Jan 25 02:55:02 2026 GMT
Not After : Feb 1 02:55:02 2026 GMT
Subject: CN=69758606-28c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:11:65:dc:8f:fb:ec:8b:e8:80:da:cb:6e:f2:
93:4f:e6:80:cc:3c:e4:7c:8f:0f:53:c0:0a:81:cb:
10:43:a6:ca:4a:85:44:69:04:ea:c7:e7:b1:e6:22:
7b:e0:0a:5c:30:e4:4c:b5:2e:7e:e6:28:89:9e:b7:
45:d0:6b:54:e7:3f:3a:9b:2d:f7:7d:ee:72:49:ea:
2a:76:1f:7f:88:4a:ee:c2:29:86:84:c8:14:42:a9:
e8:c6:ff:a7:da:73:1d:97:c2:93:20:24:f9:74:20:
49:76:73:db:8f:30:a0:01:fc:0c:eb:28:fa:28:55:
bb:f5:65:c0:ce:16:64:8d:d2:dd:78:ba:d9:fb:a4:
92:4e:e1:d5:5a:9c:7a:d9:11:dc:8b:1e:1d:6e:71:
8f:9a:d6:fe:bc:ae:73:6d:c9:35:06:ad:92:43:a6:
a9:3f:fd:ac:9a:0f:d8:97:2a:45:03:a2:89:59:02:
e6:34:56:8f:cc:6d:36:d4:85:08:88:ec:9b:13:53:
ee:0c:4d:dd:66:26:ef:25:0f:eb:c3:3f:c4:ce:b1:
6d:80:a4:5a:8e:41:99:df:f0:30:ad:9d:18:bf:ce:
4f:75:7e:67:53:f1:df:52:c7:23:4b:90:ed:02:a3:
5d:85:94:89:a2:c8:4c:f7:91:8e:b3:22:94:ab:5c:
e6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:07:AE:F3:01:BA:24:74:F0:5F:90:1D:9F:B0:08:E5:8B:BA:F2:27
X509v3 Authority Key Identifier:
keyid:09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:e1:b2:b7:ce:52:d0:1b:e1:0a:06:9c:e9:98:44:41:3f:47:
38:da:f4:cb:74:c0:e7:f7:68:6c:81:fe:40:ad:1a:82:20:f3:
d4:a6:d9:03:10:24:aa:fc:7a:de:ef:ca:27:a6:93:71:1c:6c:
bf:22:3c:85:2c:2d:b5:c6:74:24:e0:a0:37:bd:9e:5d:0e:63:
92:ab:c6:61:48:70:73:3b:85:0b:28:9c:56:35:47:3b:f6:9a:
38:1e:8d:f5:35:57:8a:6e:a8:b8:e6:43:61:b4:a4:44:b2:e4:
e4:c5:83:2b:96:a7:28:ab:58:f7:3e:5a:ad:f9:ff:4b:ce:3e:
56:22:ef:b8:af:b2:47:a4:9c:17:47:50:9f:90:78:b5:89:84:
af:89:b6:93:05:2a:d9:e8:20:30:43:67:a0:bc:86:5d:b5:fb:
37:5b:4f:25:f2:bd:22:7f:7e:a6:48:64:ad:15:8c:67:e0:1d:
9c:00:e8:35:8a:86:73:cd:c8:59:c9:28:ab:62:0c:24:25:ab:
b0:c6:eb:31:32:04:2f:b4:ee:4d:7c:7c:e5:5a:9f:4d:84:eb:
17:4b:a2:5a:b6:b6:16:17:4c:c9:ac:5b:82:f0:7b:34:c8:ed:
65:7f:49:d1:a3:69:f2:30:67:3a:f2:6a:64:5f:f4:82:45:d7:
25:35:51:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:20:20 2026 by rpki-client