This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft
File: uRokzwRxERfIw7omSjM5Xad_kbQ.mft (raw, json)
Hash identifier: YTbPp+q/nhx6hRESFCg10GBpyjPlDFvx2XHdaJ3GpXU=
Subject key identifier: 65:74:64:B1:1F:7B:00:CE:9E:8C:F4:37:FA:D6:D4:44:5A:D8:B7:E1
Authority key identifier: B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4
Certificate issuer: /CN=A9133BB0/serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4
Certificate serial: 0114
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft
Manifest number: 0112
Signing time: Sun 25 Jan 2026 04:06:07 +0000
Manifest this update: Sun 25 Jan 2026 04:06:06 +0000
Manifest next update: Sun 01 Feb 2026 04:06:06 +0000
Files and hashes: 1: uRokzwRxERfIw7omSjM5Xad_kbQ.crl (hash: 8dxQxoNeGt1A9M5angU4aesdV2bCQZfx9GQ9680okNU=)
2: 27995372566911EF9D53B517C4F9AE02.roa (hash: a77iAc4lVu+0oRkHBvhrQbh2JlrG7+YjIwHwoF/sfB0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl
rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276 (0x114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133BB0, serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4
Validity
Not Before: Jan 25 04:06:06 2026 GMT
Not After : Feb 1 04:06:06 2026 GMT
Subject: CN=697596af-f74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4f:af:6c:7e:98:ee:4f:b5:c3:c1:0a:05:18:
8c:99:eb:4c:92:5a:fc:17:c7:7a:d2:23:78:ab:bc:
76:14:67:be:b0:83:83:df:a0:c5:87:42:e9:dc:cd:
93:5f:1f:85:15:14:a6:3e:1a:8c:d2:02:58:b4:69:
5e:55:f8:1b:a6:0d:76:f2:51:4b:fc:a8:af:a9:d5:
58:b5:e3:67:eb:ea:51:0e:ba:93:90:e2:13:95:52:
e7:eb:72:53:b3:0a:c9:cc:e2:55:17:0d:b2:ac:90:
d9:a7:d7:48:a7:e7:1d:37:2e:a4:1e:d0:52:b6:da:
ac:9e:a6:6a:2b:3b:d5:5f:da:32:9c:2b:73:16:6c:
6d:59:1e:ae:6a:c7:0b:cd:bc:2a:bd:bf:35:8e:8e:
c3:09:b6:e8:3d:8c:10:91:03:41:7e:9d:5f:db:08:
5b:81:d9:86:79:c5:a6:f0:20:84:ee:42:1c:ff:4e:
f0:45:8f:c6:f8:c5:3b:43:ec:5f:bf:73:bf:71:13:
69:7b:7e:af:6b:43:87:3e:ac:90:f8:3d:78:d5:a8:
54:fe:d9:fc:c8:4d:86:0a:19:70:2c:90:59:a2:3c:
dc:85:1a:86:35:22:d5:52:99:cd:9b:09:da:14:b6:
39:af:2c:c7:4e:65:5d:1f:cc:77:e6:b2:30:1a:f7:
3c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:74:64:B1:1F:7B:00:CE:9E:8C:F4:37:FA:D6:D4:44:5A:D8:B7:E1
X509v3 Authority Key Identifier:
keyid:B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ed:87:0a:62:66:90:66:09:15:2a:20:b8:cb:40:3c:7c:21:
14:6d:70:e6:68:78:b0:fb:14:0d:fe:85:91:c7:dc:96:fe:6b:
13:9f:a0:1d:aa:d0:b8:e9:6e:a7:15:12:43:e7:7c:d4:81:a7:
f2:b6:7f:c4:bb:28:d2:01:bd:0d:6e:f5:44:6a:90:5d:fe:0a:
b8:01:6a:d1:a0:9b:6c:2b:75:46:d1:66:de:39:2c:fd:82:9a:
49:a5:a3:db:3b:72:75:6f:67:11:ae:20:bc:79:3e:af:34:ab:
93:d1:a1:4b:ba:40:dc:87:ec:7f:f3:8f:3a:c6:54:c1:06:71:
1a:c4:11:f5:de:98:12:05:c2:ef:0c:c2:e8:60:d2:de:03:58:
de:4c:61:13:6b:a9:ab:62:38:b8:81:02:8b:fe:f6:dd:c2:9d:
7e:09:b8:47:6e:a0:e0:c3:eb:5e:31:78:e7:f5:37:c6:69:af:
3c:c0:57:16:4e:ed:2c:4a:13:01:a9:c8:39:a7:c6:d9:bc:9b:
5e:b9:34:53:1f:87:8c:3e:b4:74:93:ac:48:68:9c:bf:b2:da:
aa:fb:1a:07:7a:5e:a0:11:93:b7:ba:1d:b6:f1:d1:cc:94:55:
99:46:12:13:2d:2e:5f:73:b1:c4:2f:4e:ac:c0:a5:d1:86:40:
12:24:a1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:01:59 2026 by rpki-client