This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
File: ujlCdcT_j47yNHSaNvKhkTknlVs.mft (raw, json)
Hash identifier: RleVWLPIJNkNS8voa/Pdd/SMzFwdJCRsyzhMLtd844g=
Subject key identifier: F1:D4:F6:0E:94:6E:DE:70:32:87:85:CA:BD:22:CA:4B:7E:A1:29:76
Authority key identifier: BA:39:42:75:C4:FF:8F:8E:F2:34:74:9A:36:F2:A1:91:39:27:95:5B
Certificate issuer: /CN=A9158E7B/serialNumber=BA394275C4FF8F8EF234749A36F2A1913927955B
Certificate serial: 19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
Manifest number: 17
Signing time: Fri 23 Jan 2026 06:57:50 +0000
Manifest this update: Fri 23 Jan 2026 06:57:50 +0000
Manifest next update: Fri 30 Jan 2026 06:57:50 +0000
Files and hashes: 1: ujlCdcT_j47yNHSaNvKhkTknlVs.crl (hash: pjjLWgxdsVS0mWqnPpKfO34z6hg4wvFYhk8yY0RuEOo=)
2: 5BCC0548D99B11F09EC1D6B265D3641D.roa (hash: ns7eTHStxfQNLhyWTvt0z1m0cdRciLzTPm7YQhUzhwM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.crl
rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E7B, serialNumber=BA394275C4FF8F8EF234749A36F2A1913927955B
Validity
Not Before: Jan 23 06:57:50 2026 GMT
Not After : Jan 30 06:57:50 2026 GMT
Subject: CN=69731bee-48c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d1:45:6e:d2:41:cc:17:1e:28:92:40:5b:b5:
bb:b3:66:a1:45:ee:93:10:78:a5:d1:2d:79:18:f3:
53:1a:ff:6c:93:ec:50:e2:32:77:00:36:79:38:f1:
f3:4a:ca:e6:ae:d1:86:53:59:21:b3:35:89:7c:8a:
d4:90:a2:3e:77:86:f1:83:a6:99:b6:b7:77:ee:4c:
f2:39:2b:e1:e8:e3:70:36:99:d0:0d:92:01:1d:d9:
bb:70:d6:35:95:58:ce:b5:45:42:f5:90:ab:b3:5a:
ec:e1:ce:32:73:a2:ae:70:ec:42:b7:e9:2c:39:e0:
0c:e9:5f:f3:96:c3:50:f7:cf:39:c4:c3:2e:de:13:
0f:c1:b9:75:e3:d0:1a:c7:b8:d0:43:9c:72:a5:1f:
b9:06:82:7e:7b:af:98:e2:14:df:48:7e:f7:6f:17:
e3:2e:91:dc:34:4f:94:79:62:c2:e3:b2:15:79:09:
d8:da:cf:99:e8:a5:38:24:01:8b:e2:9e:f8:bf:5e:
56:7d:7b:9d:bb:d4:cf:12:ee:1a:c7:44:27:1e:43:
76:80:d7:44:3f:9d:52:b1:c1:0c:56:32:cb:57:23:
11:53:46:73:93:ba:cf:71:74:7d:78:a2:7d:82:66:
7c:45:82:18:01:0f:98:ed:90:85:66:f7:f4:48:74:
53:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D4:F6:0E:94:6E:DE:70:32:87:85:CA:BD:22:CA:4B:7E:A1:29:76
X509v3 Authority Key Identifier:
keyid:BA:39:42:75:C4:FF:8F:8E:F2:34:74:9A:36:F2:A1:91:39:27:95:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:ab:94:fe:7f:d9:4d:9c:74:2a:6f:55:4f:92:bc:2f:c3:c0:
b5:ee:c1:ec:6f:ca:4d:12:49:a1:d1:32:4b:35:9b:fa:e6:de:
95:07:b8:89:32:3e:17:17:3d:d8:c8:63:68:10:bf:99:06:94:
48:4d:fb:d7:16:cf:38:6a:e3:19:e4:52:09:8b:73:25:05:03:
a2:d5:d3:65:9f:81:7e:2a:7f:2d:1a:58:d8:e6:7c:5c:20:72:
17:4b:f3:90:19:e5:0c:3d:0d:94:f3:96:db:1c:e3:13:bd:d4:
07:ec:a6:27:03:84:e5:93:b3:9c:20:59:fa:20:a1:c3:56:46:
c0:de:9d:7c:a7:67:84:76:18:34:c8:26:33:e8:01:be:d6:9f:
aa:7e:26:d6:1f:ef:fb:a2:c0:b5:44:9c:42:b8:aa:e0:f3:8a:
c8:e6:69:af:f8:74:e1:3e:9b:2e:61:83:f3:49:27:12:9e:ab:
72:a7:56:3d:ec:2f:38:c8:13:93:b7:a0:83:74:56:ca:56:60:
a9:27:9d:d1:ae:28:f9:ba:1e:ff:83:24:95:b2:41:ee:35:e8:
eb:10:1e:b6:17:63:17:dd:d1:a9:8e:91:44:26:b9:e0:75:b4:
fa:05:73:ac:33:42:d7:ae:3c:a3:11:04:2c:b5:e0:fe:a8:dd:
b5:0b:c5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:48:17 2026 by rpki-client