This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft
File: UHztrU5Y_M0K4JOTmGWG21g_B6I.mft (raw, json)
Hash identifier: +4YHzgXGdZtq8BWxqaEXntKK9BZHqahAWuNZ1FMiihw=
Subject key identifier: 84:A1:BB:87:FF:11:59:48:03:79:83:41:E5:7A:27:6E:B4:50:F3:36
Authority key identifier: 50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2
Certificate issuer: /CN=A912C8FD/serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2
Certificate serial: 0C24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft
Manifest number: 0C24
Signing time: Sat 24 Jan 2026 18:20:07 +0000
Manifest this update: Sat 24 Jan 2026 18:20:06 +0000
Manifest next update: Sat 31 Jan 2026 18:20:06 +0000
Files and hashes: 1: UHztrU5Y_M0K4JOTmGWG21g_B6I.crl (hash: PCkw0eYIpFZJo5E0iG/iJHhu6LsIjyaEhRNnCxZxqUI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl
rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3108 (0xc24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8FD, serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2
Validity
Not Before: Jan 24 18:20:06 2026 GMT
Not After : Jan 31 18:20:06 2026 GMT
Subject: CN=69750d57-c475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:77:7f:8c:78:00:bc:1d:52:ea:e6:8b:b0:1f:
1a:a3:8a:71:9a:1a:32:63:6a:22:71:fc:fb:6d:89:
0f:c4:c8:45:d2:77:ea:9f:85:3f:a0:cd:b4:6d:4b:
d7:ff:5d:b3:7e:a4:3e:d4:83:0f:f8:bb:c4:8c:b6:
8f:e5:6d:f6:8b:07:41:37:0a:96:01:f9:eb:a8:24:
d9:cd:bb:09:fe:d8:04:97:b1:94:e9:02:bb:1a:2b:
0a:a2:54:a1:b1:c2:9e:99:a8:55:b5:c3:bf:8b:d0:
6b:7f:6c:c8:79:24:00:99:ff:07:de:fa:0e:7f:d4:
7e:fa:2c:c1:a8:33:80:3d:b0:14:a7:97:3a:8c:35:
62:0e:1b:ef:cf:b5:56:56:a8:8c:ab:88:e1:69:ed:
e9:03:e8:1a:99:05:03:47:03:ae:f8:d1:46:e1:89:
a6:7b:2b:da:66:1b:6d:ae:2b:0d:51:b9:7d:f3:91:
aa:2f:f9:2b:18:59:f7:9d:e7:b5:e7:2d:e3:39:54:
cf:7c:64:a6:e8:c8:ac:bd:82:04:10:e1:f5:90:99:
41:b5:be:cb:eb:b8:a2:7b:94:4f:a7:f8:cb:e6:93:
1d:c3:21:4d:a5:43:4f:c7:aa:84:b3:d5:b1:68:f7:
f3:1d:99:3e:4a:aa:a3:96:86:13:e0:1f:f5:a2:23:
fa:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A1:BB:87:FF:11:59:48:03:79:83:41:E5:7A:27:6E:B4:50:F3:36
X509v3 Authority Key Identifier:
keyid:50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:4b:87:ec:d4:a3:f0:32:d7:31:82:4a:ca:d4:e8:88:ac:3f:
1e:42:6c:c3:19:13:1a:6c:15:a1:0a:84:7a:76:19:85:da:0d:
b7:55:50:0f:5f:7e:0e:f2:0c:ae:41:63:3f:88:45:b8:44:b6:
a3:ab:08:2e:cd:c0:97:57:a8:d4:2d:cf:42:8a:21:5c:77:9c:
4a:7c:49:b9:2a:52:24:d0:87:47:da:cb:fd:a9:b3:a4:86:27:
0c:97:2b:bc:d0:c2:eb:0a:77:71:5c:11:e9:e9:20:9a:91:1a:
ab:1f:00:1a:2f:53:52:d9:27:ec:db:bb:59:ba:3e:ef:af:24:
2e:0e:7c:e4:ea:d6:31:cb:cd:0a:6c:dd:f6:c0:dd:c1:3e:23:
74:86:8c:e1:0d:a9:ef:ac:37:0e:71:14:c5:98:62:90:de:02:
25:8a:fa:29:0a:f4:81:55:33:5a:84:8b:53:85:61:6f:22:25:
32:76:69:fb:27:39:a7:f2:fc:5b:9d:d6:0c:a2:b9:44:f5:4c:
28:8d:7b:51:1c:2f:ba:bb:44:ef:b3:44:5e:f6:71:f3:7c:12:
7b:43:d9:4f:6b:fa:10:14:2f:ab:1b:eb:41:de:45:dc:f2:10:
fc:14:46:4b:c1:5b:c0:52:4b:3b:40:81:df:aa:c4:ac:f4:a3:
f9:22:7c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:10:20 2026 by rpki-client