This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
File: UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft (raw, json)
Hash identifier: 85F20fbQ1pbVhbhAZ95PyNWr4H2T12dtk2VvVXN0MSQ=
Subject key identifier: 52:9D:C8:61:15:12:B3:67:B7:6E:01:5C:5D:9A:35:60:BE:88:C6:71
Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
Certificate issuer: /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Certificate serial: 7A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
Manifest number: 79
Signing time: Sun 25 Jan 2026 05:55:04 +0000
Manifest this update: Sun 25 Jan 2026 05:55:04 +0000
Manifest next update: Sun 01 Feb 2026 05:55:04 +0000
Files and hashes: 1: UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl (hash: fTc2GI7p+TbRPXB9HcyQo26nZl2bEkiVQWilfHPaanI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Validity
Not Before: Jan 25 05:55:04 2026 GMT
Not After : Feb 1 05:55:04 2026 GMT
Subject: CN=6975b038-29f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:eb:9f:bc:cf:d1:94:e7:3e:84:83:b1:37:97:
fa:61:6a:40:47:8b:93:76:8d:fc:25:56:dc:29:35:
f8:12:dd:72:13:4c:a6:ed:ad:d6:d2:75:7e:4a:ea:
35:c2:27:e6:64:52:06:63:a4:72:b8:17:c2:e9:2e:
05:c6:10:40:fb:1e:a6:54:99:fb:71:a5:d9:aa:34:
1d:5e:04:80:e5:4d:af:7d:46:f4:39:57:40:35:b9:
d8:2d:2f:4c:20:ee:b0:6d:48:ba:52:8e:51:b1:c4:
b6:d0:b8:4d:22:da:b9:30:37:19:c3:35:14:fc:bd:
87:76:3d:9f:e8:df:1f:a8:77:1b:ed:e9:ad:92:5a:
db:46:54:fa:9d:8e:9e:10:68:9a:12:cf:e7:d8:34:
57:c4:1c:c7:5f:29:68:4a:79:2b:11:cc:e7:a4:e4:
9f:20:61:5a:7d:fa:98:08:e8:75:57:b5:25:64:5b:
31:bb:7d:de:17:a3:37:61:fb:6c:90:3d:db:87:77:
ae:c3:bd:99:6f:ee:47:28:1c:fd:0c:87:99:67:dc:
9f:f0:15:12:43:dd:66:74:7a:bf:56:80:9e:4d:f6:
80:49:68:e8:c9:50:1f:ab:75:95:58:ac:89:06:18:
f8:06:90:59:cf:62:3b:33:15:aa:e5:3b:ce:d2:23:
38:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9D:C8:61:15:12:B3:67:B7:6E:01:5C:5D:9A:35:60:BE:88:C6:71
X509v3 Authority Key Identifier:
keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:c9:c8:ea:7a:09:d9:8e:d4:e3:eb:a1:a1:f8:31:ef:71:78:
34:9a:a2:f6:ea:45:23:42:ef:0a:e2:4b:aa:7f:33:18:b3:65:
ea:96:97:7c:da:bd:82:ad:08:60:95:44:77:87:f3:1e:2a:f3:
8f:a5:c2:a2:5f:63:a3:0c:53:ad:7e:35:4c:f5:2a:bb:84:bf:
5b:d7:c5:7c:2f:5f:77:b6:43:12:76:92:36:94:d6:4d:42:a1:
d3:ff:5d:71:e5:03:9c:f8:4f:aa:c4:0d:84:2d:3c:5c:90:19:
ee:82:3e:6f:d1:7a:52:e9:f4:94:33:77:d1:8f:b1:6b:61:aa:
43:f0:3d:b5:9a:50:86:6b:41:1f:96:70:73:6c:c2:5a:ae:c6:
e9:e3:a1:3f:7d:90:b6:42:4c:3c:d3:2f:f9:b6:fd:f9:b8:c3:
27:74:23:ac:7a:c4:9c:d3:6d:50:39:e9:d4:2d:c4:b8:bc:6c:
c9:3b:01:18:91:35:1b:b3:fd:96:60:bf:ac:c7:4d:b8:28:85:
94:61:67:ef:76:b3:42:30:9c:dd:28:73:98:b0:84:57:98:1c:
b4:b1:7a:a4:c2:58:f5:3c:48:ef:01:40:9e:0c:f1:2e:52:a4:
04:66:c5:00:74:b7:3d:66:35:58:93:c2:a5:64:d1:f3:58:91:
f1:a6:04:4e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
REU2QzExMC8GA1UEBRMoNTBBQUZDNkEzRUY3NUIyMkI3NjgzQ0FCNjNEODRCRTQy
OTE5NTRCNDAeFw0yNjAxMjUwNTU1MDRaFw0yNjAyMDEwNTU1MDRaMBgxFjAUBgNV
BAMMDTY5NzViMDM4LTI5ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDk65+8z9GU5z6Eg7E3l/phakBHi5N2jfwlVtwpNfgS3XITTKbtrdbSdX5K6jXC
J+ZkUgZjpHK4F8LpLgXGEED7HqZUmftxpdmqNB1eBIDlTa99RvQ5V0A1udgtL0wg
7rBtSLpSjlGxxLbQuE0i2rkwNxnDNRT8vYd2PZ/o3x+odxvt6a2SWttGVPqdjp4Q
aJoSz+fYNFfEHMdfKWhKeSsRzOek5J8gYVp9+pgI6HVXtSVkWzG7fd4Xozdh+2yQ
PduHd67DvZlv7kcoHP0Mh5ln3J/wFRJD3WZ0er9WgJ5N9oBJaOjJUB+rdZVYrIkG
GPgGkFnPYjszFarlO87SIzjJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUp3IYRUS
s2e3bgFcXZo1YL6IxnEwHwYDVR0jBBgwFoAUUKr8aj73WyK3aDyrY9hL5CkZVLQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVERTZDLzZCQzM3NUIwNDNE
NDExRjA5MEI0NzY2OEM0RjlBRTAyL1VLcjhhajczV3lLM2FEeXJZOWhMNUNrWlZM
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvVUtyOGFqNzNXeUszYUR5clk5aEw1Q2taVkxRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVE
RTZDLzZCQzM3NUIwNDNENDExRjA5MEI0NzY2OEM0RjlBRTAyL1VLcjhhajczV3lL
M2FEeXJZOWhMNUNrWlZMUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBABTJyOp6CdmO1OProaH4Me9xeDSaovbqRSNC7wriS6p/MxizZeqWl3za
vYKtCGCVRHeH8x4q84+lwqJfY6MMU61+NUz1KruEv1vXxXwvX3e2QxJ2kjaU1k1C
odP/XXHlA5z4T6rEDYQtPFyQGe6CPm/RelLp9JQzd9GPsWthqkPwPbWaUIZrQR+W
cHNswlquxunjoT99kLZCTDzTL/m2/fm4wyd0I6x6xJzTbVA56dQtxLi8bMk7ARiR
NRuz/ZZgv6zHTbgohZRhZ+92s0IwnN0oc5iwhFeYHLSxeqTCWPU8SO8BQJ4M8S5S
pARmxQB0tz1mNViTwqVk0fNYkfGmBE4=
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:43:59 2026 by rpki-client