This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
File: UN4cYHM-ori3boQDYJGOHyXEbkM.mft (raw, json)
Hash identifier: GOhPtnysUdcTaBhT6TLbWdMNLVkfVVN6hDtRyRZ1xvI=
Subject key identifier: 2B:5C:C3:7F:81:7E:19:E4:61:A9:58:9B:98:01:D2:66:7C:29:F7:FB
Authority key identifier: 50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
Certificate issuer: /CN=A916701E/serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Certificate serial: 0C73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
Manifest number: 0C5E
Signing time: Sat 24 Jan 2026 18:15:36 +0000
Manifest this update: Sat 24 Jan 2026 18:15:35 +0000
Manifest next update: Sat 31 Jan 2026 18:15:35 +0000
Files and hashes: 1: UN4cYHM-ori3boQDYJGOHyXEbkM.crl (hash: xm1Xaph7MNYk63sbdAAx6lQEv8WQFm3oMCsrcpuzR6E=)
2: 46C5452E0DD711EF85707821C4F9AE02.roa (hash: vHCE8Xl5BDP1uHkO7u1AQeNIYeGBlOPuRbaiEEaJ7/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:15:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3187 (0xc73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916701E, serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Validity
Not Before: Jan 24 18:15:35 2026 GMT
Not After : Jan 31 18:15:35 2026 GMT
Subject: CN=69750c48-9b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:06:fc:ee:17:b1:cb:f1:42:46:0e:f5:00:46:
98:4a:24:c8:b0:93:e1:34:dd:13:3a:64:6c:54:67:
15:8c:7e:50:62:4f:45:06:24:ad:34:fa:82:d1:3b:
26:7b:12:2f:d1:f2:16:e1:67:05:e4:9a:4e:9e:d9:
ce:d8:9a:11:3e:5f:95:7b:51:db:6a:b3:11:b7:c5:
1f:74:0f:9a:1f:62:08:a9:e6:6c:60:e5:38:42:8c:
c4:2d:a1:dc:f7:9e:19:b0:8a:64:53:f8:96:40:fa:
e3:58:eb:cb:30:13:ad:4e:a4:c8:2a:54:58:51:02:
d2:54:14:17:0d:f9:23:5a:89:e7:3f:96:28:29:ed:
46:2d:2a:5e:09:27:30:0d:5c:f5:7d:45:f7:cb:df:
be:a8:a2:69:6f:9c:19:1b:00:e5:9e:ee:84:0c:58:
0e:ad:b9:2e:e3:d9:75:44:7d:dc:70:36:7a:9b:89:
00:15:e5:ea:10:e8:fd:de:95:14:44:d6:17:9f:50:
6f:95:fa:c9:19:34:3f:82:fd:0c:85:ea:32:d8:61:
ac:13:ff:ab:fa:7b:18:94:7c:f3:b0:c0:cd:6b:b4:
52:0c:68:eb:cf:13:c9:1b:b4:3d:b7:d9:2c:78:39:
5d:05:ac:da:31:f6:ae:86:1f:2f:fa:81:d4:cb:90:
71:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5C:C3:7F:81:7E:19:E4:61:A9:58:9B:98:01:D2:66:7C:29:F7:FB
X509v3 Authority Key Identifier:
keyid:50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5c:c7:9f:3d:54:f4:c0:92:f2:29:15:f7:e4:19:03:cb:d4:
9b:f6:44:1a:4e:4c:11:95:c0:7f:2b:24:5e:03:cb:b6:b6:ed:
03:19:a1:60:f7:d2:be:4e:b7:9a:d5:a7:dd:68:f4:d1:e1:a7:
7f:62:d1:38:ee:e6:14:b7:b0:09:5c:27:ab:be:49:94:b3:a2:
ec:3a:d4:4a:20:59:28:fb:7f:fc:ff:ba:95:82:8e:e5:59:61:
de:7a:12:ba:fd:a0:d3:8a:cf:d9:c9:9c:8f:c8:cd:17:4e:b1:
2b:19:73:e4:49:c4:48:76:3e:d8:b2:a6:70:27:bf:78:e7:77:
b8:95:94:83:ee:25:f7:55:f3:bc:62:8f:21:f1:ed:d3:20:f4:
9c:d5:87:1d:42:54:9d:5c:02:7d:06:dc:65:f3:30:e1:f7:73:
18:2f:62:aa:43:d2:92:59:3d:50:3f:16:e2:24:65:57:44:f4:
73:ad:d2:00:09:4f:21:55:0c:46:b1:73:3f:df:e4:f9:98:cc:
07:8d:a4:35:c5:16:c6:f9:e0:f6:2c:09:74:99:b5:c8:ad:36:
77:2b:f8:fe:c3:0f:42:cd:3f:06:36:cb:48:04:9c:87:6e:36:
02:73:ff:98:f0:bf:8f:1b:ae:52:94:62:3e:8d:9d:35:26:d7:
b9:e2:29:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:12:26 2026 by rpki-client