This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft
File: uftCI-sDug7mzge0ZgIXr69xbV0.mft (raw, json)
Hash identifier: XV0cEOhXrlAdPWcI7buv7PYZ7WMr6sMgXkUxSoBdiO4=
Subject key identifier: 45:CB:D0:A9:D6:41:C4:B5:67:F3:98:28:11:5F:A2:BB:D8:22:78:F2
Authority key identifier: B9:FB:42:23:EB:03:BA:0E:E6:CE:07:B4:66:02:17:AF:AF:71:6D:5D
Certificate issuer: /CN=A916D5A2/serialNumber=B9FB4223EB03BA0EE6CE07B4660217AFAF716D5D
Certificate serial: 06E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft
Manifest number: 06E0
Signing time: Sat 24 Jan 2026 21:23:21 +0000
Manifest this update: Sat 24 Jan 2026 21:23:21 +0000
Manifest next update: Sat 31 Jan 2026 21:23:21 +0000
Files and hashes: 1: uftCI-sDug7mzge0ZgIXr69xbV0.crl (hash: 7O+6GDvvvyHa6BX5aY6X6TxDkydkwpwQ8izlozAZ2d4=)
2: F5250AEAB57011F0A97B9E77C4F9AE02.roa (hash: 7MZHUJH95TcyRd7ME/hVxnITTbrFzvEBCqxuhjcdwaM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.crl
rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1767 (0x6e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D5A2, serialNumber=B9FB4223EB03BA0EE6CE07B4660217AFAF716D5D
Validity
Not Before: Jan 24 21:23:21 2026 GMT
Not After : Jan 31 21:23:21 2026 GMT
Subject: CN=69753849-1912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:93:e6:ca:19:17:65:23:ee:18:35:52:eb:
d4:aa:61:c7:7e:c9:1e:e2:55:20:ac:7f:21:44:cd:
5e:c2:5f:1e:8c:c3:3f:1d:7a:b0:8a:86:66:c9:fa:
c8:ec:22:cd:aa:a5:de:90:b1:f2:54:0f:4d:e4:73:
21:ca:c6:77:2d:5f:c1:07:e8:59:04:4e:31:bc:93:
6a:8c:4d:b7:a5:50:ee:12:70:1f:93:09:5f:c1:4c:
a5:1a:95:bf:a8:00:a2:dd:1f:44:99:ea:17:09:cb:
a9:fa:3c:f0:55:de:5a:6d:7d:9f:d2:b4:75:cb:87:
97:aa:d8:c8:80:00:1e:ac:3e:05:a0:7f:0a:a8:d0:
77:67:42:23:21:94:cb:bf:d2:31:77:b2:04:6a:fc:
89:e3:bb:47:b4:7a:f3:83:03:b7:66:09:96:04:e2:
74:1c:3e:fa:6e:c8:b1:95:54:56:59:2e:81:76:14:
82:5c:57:d6:c8:34:5d:8f:eb:2a:f4:f9:d2:7b:e8:
0d:07:b8:96:37:10:ff:c2:fe:eb:02:34:56:1e:4b:
a1:09:3e:66:81:57:40:60:71:85:8f:54:bb:11:8b:
7f:27:5c:da:bc:43:f2:01:d0:ac:98:cd:f8:ed:d2:
ca:26:e9:55:17:8a:28:a3:64:34:45:35:05:2c:ef:
79:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CB:D0:A9:D6:41:C4:B5:67:F3:98:28:11:5F:A2:BB:D8:22:78:F2
X509v3 Authority Key Identifier:
keyid:B9:FB:42:23:EB:03:BA:0E:E6:CE:07:B4:66:02:17:AF:AF:71:6D:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:3b:b8:bd:24:b6:07:04:ea:5f:df:e2:9e:b6:23:4f:50:97:
cf:2a:6e:05:9c:ec:90:4c:ae:22:0e:1c:65:49:62:e6:d9:ec:
7a:f3:48:4e:2f:c7:41:e5:5b:a6:67:06:6d:bc:7b:15:1f:d6:
14:c3:33:cf:1f:70:af:e8:a1:c7:2a:c3:81:de:19:13:d5:d5:
c8:3c:0e:e1:b7:c9:e9:88:f7:4c:f2:8e:9e:f3:11:56:ef:26:
36:39:6d:b5:f2:ee:95:ac:20:19:f8:e8:b9:69:4c:a8:52:35:
8b:77:e6:8f:4a:52:eb:16:e4:bd:81:d4:e2:76:6c:4e:d0:77:
4f:24:a3:41:e8:1e:2b:8f:b8:49:f4:08:40:e5:4a:d7:4f:08:
a7:df:9d:f8:52:4e:2b:61:a0:06:7c:50:0c:28:a0:19:6f:2e:
7f:bf:03:ea:26:55:64:70:71:97:be:db:a2:f0:cd:92:6b:33:
e0:62:7d:5b:9a:21:4e:b9:b3:0b:02:ee:37:3b:20:2d:4a:37:
24:a7:86:ad:cd:54:08:1e:5d:ca:3b:d3:ea:1d:48:e7:1e:ca:
ea:41:d0:39:eb:6a:0e:5a:5a:69:84:c5:24:bc:d5:5f:0c:df:
44:29:f7:a0:1d:f3:e3:0d:11:73:27:20:09:84:d3:b0:f9:6c:
19:7c:7e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:29:52 2026 by rpki-client