This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
File: UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft (raw, json)
Hash identifier: fRgNdTzE2B1UB3vdW3m8QqpqIiZCtgm3CXxnV7McciM=
Subject key identifier: 39:5D:09:E0:3A:AA:37:79:1C:05:D5:84:06:A3:29:CD:ED:C4:C2:56
Authority key identifier: 51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2
Certificate issuer: /CN=A9139A90/serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
Certificate serial: 012D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
Manifest number: 0129
Signing time: Fri 23 Jan 2026 03:48:16 +0000
Manifest this update: Fri 23 Jan 2026 03:48:15 +0000
Manifest next update: Fri 30 Jan 2026 03:48:15 +0000
Files and hashes: 1: UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl (hash: 3P9wOOAv5Fg0WFN1acRrN9n2tNB/eD0EHumG62BCTUI=)
2: 8B584EC2337D11EF9D71B72DC4F9AE02.roa (hash: yZ1LidZrlFrNTxapIhIsCTEZZK7lTYC0s/4RKHkPEsg=)
3: AE977DF8337E11EFB3CCD72FC4F9AE02.roa (hash: OJdZE6RjgM3Hz2T07Mg2BJv0nC0BL01Q/08oABlyEMA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl
rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 03:48:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139A90, serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
Validity
Not Before: Jan 23 03:48:15 2026 GMT
Not After : Jan 30 03:48:15 2026 GMT
Subject: CN=6972ef7f-b65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:bf:33:ec:4b:f9:a2:c2:5b:e8:77:b7:b8:
6a:c6:82:20:c6:b3:aa:43:b8:00:14:4f:a1:01:46:
00:8e:f1:3e:76:91:bf:e8:05:22:67:b6:8b:63:3e:
be:62:ed:5f:9f:14:40:a3:b6:ab:47:40:bd:65:e6:
57:6f:0f:75:82:b6:2f:48:28:94:d4:10:5a:cf:b2:
1f:6c:78:c7:3b:65:52:58:22:5a:91:79:e4:79:91:
8a:07:e8:43:27:c7:0b:60:50:ac:a1:08:e7:0a:be:
19:0f:67:61:2b:2c:11:7e:c7:12:d9:c5:7f:bf:3c:
c2:6b:cb:2d:1c:78:86:f9:ee:c8:c3:eb:0d:47:ed:
d4:83:02:3e:e7:7e:81:51:de:d8:f9:0e:ca:fb:96:
01:f9:bc:d4:cc:55:39:58:a7:9f:3a:ee:5a:95:8e:
f9:59:a6:70:a9:52:46:1c:c5:2d:c8:e9:c5:91:85:
db:1f:bb:43:dd:05:c5:cd:bb:21:c7:a9:9e:67:c5:
41:a3:26:b9:91:ed:fa:60:21:0b:2b:56:3f:30:6d:
7a:48:49:8f:a0:32:ef:a9:94:9e:80:92:ad:c3:93:
9a:78:00:82:e9:e6:6e:2f:ad:ed:99:80:4b:63:d3:
b7:5f:8c:a4:a8:cc:59:3e:f2:f7:61:07:0e:d7:65:
47:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5D:09:E0:3A:AA:37:79:1C:05:D5:84:06:A3:29:CD:ED:C4:C2:56
X509v3 Authority Key Identifier:
keyid:51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:db:c0:1c:2e:cd:b8:9e:2b:55:3a:cf:e8:c5:7b:0c:56:fd:
6d:30:ce:ef:43:b6:76:f7:d7:f8:45:99:9c:25:44:34:e3:c9:
be:e5:ca:82:49:10:53:55:09:3a:6a:e5:98:ff:9e:86:b7:ed:
7d:f3:c9:d0:90:af:18:5f:d4:c1:d3:89:3c:2a:b1:08:02:ed:
14:7c:b5:b0:59:cc:6a:1d:94:52:0d:7e:20:15:eb:06:f9:88:
70:a7:68:c2:82:42:0c:83:97:77:08:4b:30:30:6e:2e:b7:4a:
49:b5:d3:18:92:75:0d:98:f7:db:25:f7:be:0a:95:25:c1:1e:
c6:dc:22:68:f6:48:c8:21:8a:b9:0a:cf:f7:84:58:a6:83:07:
fc:32:91:d4:36:1d:03:72:e6:13:d9:32:ab:47:66:08:07:93:
26:4e:2c:95:69:e1:92:f0:61:70:10:c0:22:a7:2d:af:32:2c:
cf:97:5f:e0:ad:1c:8c:82:3e:bc:c1:fe:e9:92:a7:9a:67:51:
c2:3c:82:c4:2b:0d:93:10:79:0b:b7:fd:a5:20:d3:aa:ae:8a:
cb:ae:df:ec:43:66:ce:a0:6b:f1:43:99:86:fd:63:d2:62:28:
ee:59:ae:1a:69:57:29:d9:c5:f2:05:19:b6:f3:c5:70:65:75:
e5:02:74:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:53:12 2026 by rpki-client