This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.mft
File: U-LhNFJFffIe8ly6OyYQ0BKpBtI.mft (raw, json)
Hash identifier: wC/JePFJI8M92jO2t+C390S2V2wtG6HKa8Ci1TZIb1A=
Subject key identifier: 11:FA:E8:40:74:8B:0A:FB:07:D3:47:DA:B5:96:56:53:4B:4C:01:37
Authority key identifier: 53:E2:E1:34:52:45:7D:F2:1E:F2:5C:BA:3B:26:10:D0:12:A9:06:D2
Certificate issuer: /CN=A91736BD/serialNumber=53E2E13452457DF21EF25CBA3B2610D012A906D2
Certificate serial: 0252
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-LhNFJFffIe8ly6OyYQ0BKpBtI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.mft
Manifest number: 024E
Signing time: Sun 25 Jan 2026 01:01:44 +0000
Manifest this update: Sun 25 Jan 2026 01:01:44 +0000
Manifest next update: Sun 01 Feb 2026 01:01:44 +0000
Files and hashes: 1: U-LhNFJFffIe8ly6OyYQ0BKpBtI.crl (hash: AUpx30gfkTmqeuox7C/7bueX51OfPuAXeZ/gvsE73lE=)
2: EB8C9B546EE911ED8F07B022C4F9AE02.roa (hash: aHr48jg9C6XT7m5IpFV6+gOg/wu3/75OLv4ksFQsrBE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.crl
rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-LhNFJFffIe8ly6OyYQ0BKpBtI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91736BD, serialNumber=53E2E13452457DF21EF25CBA3B2610D012A906D2
Validity
Not Before: Jan 25 01:01:44 2026 GMT
Not After : Feb 1 01:01:44 2026 GMT
Subject: CN=69756b78-6ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e5:55:33:f6:d8:3e:02:ee:8e:4b:37:27:00:
80:68:b8:b3:2e:31:94:ac:55:36:07:5c:ed:f6:43:
eb:a5:f0:84:26:4e:12:95:e2:b1:f5:b3:32:33:ee:
5e:79:6b:dc:7f:f5:1c:b5:d4:8b:d8:b6:40:58:7b:
ca:58:17:52:7d:f2:58:36:1f:eb:f3:b9:65:fd:4b:
9a:4c:19:f3:57:b2:9b:e7:16:e9:6b:54:db:13:13:
58:d5:68:76:d7:fb:a9:c3:83:dc:f5:1c:f9:8b:51:
63:e2:0e:1b:a5:b4:af:ea:2e:b4:d5:46:c9:1d:a8:
33:c2:1a:50:a2:1c:d1:35:83:d8:cf:4b:f9:d0:e3:
69:86:8f:d8:ca:fd:36:a6:f4:b1:8d:6b:41:98:a6:
53:08:f1:1c:57:23:9e:0d:01:8a:9a:80:ea:7a:c2:
b1:63:a3:45:01:b6:3e:78:9d:20:26:ed:c4:f4:a6:
31:75:97:b4:9d:0f:9c:d3:46:c2:20:87:00:e9:85:
aa:3c:63:16:94:9f:f4:2a:4c:ef:af:be:5b:ef:99:
e4:67:83:1f:9c:93:ff:57:86:e5:14:79:16:a2:f1:
eb:c4:85:67:6d:68:14:73:5d:54:80:c4:65:1d:c9:
f2:92:16:fc:69:fe:d1:f4:a2:5d:e7:87:1b:0d:5e:
f0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FA:E8:40:74:8B:0A:FB:07:D3:47:DA:B5:96:56:53:4B:4C:01:37
X509v3 Authority Key Identifier:
keyid:53:E2:E1:34:52:45:7D:F2:1E:F2:5C:BA:3B:26:10:D0:12:A9:06:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-LhNFJFffIe8ly6OyYQ0BKpBtI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:43:06:76:69:03:5d:50:3c:64:af:67:76:e0:53:89:aa:28:
df:f6:20:3c:8d:38:25:d0:a8:fc:8b:02:ee:10:91:db:b9:17:
38:a7:db:af:17:a0:b1:d0:50:ba:a5:cf:3c:cf:c9:46:52:af:
9b:03:f2:57:c0:02:4e:30:58:ce:bf:0f:a6:3b:31:15:a7:d3:
ac:e0:48:8c:fa:fd:6c:09:11:a7:78:9a:6a:bd:60:dd:50:d6:
61:bc:04:82:66:d0:bd:98:00:c7:44:73:b1:6d:45:29:db:6a:
fe:b1:08:1d:35:0c:7b:50:9e:ff:46:60:00:af:e8:43:0a:b0:
08:9d:3b:77:c2:93:81:7f:de:f7:13:ad:61:55:6c:fa:d0:38:
db:a8:94:63:46:7f:7a:d8:2a:37:77:9e:d0:98:07:e8:cb:6a:
a2:61:3c:8b:9c:ef:9c:8e:ab:50:11:02:94:ff:7c:2a:ae:00:
b7:9b:a6:0d:10:7c:c7:27:9c:f3:9d:48:69:a4:5f:f3:7d:60:
1d:4b:10:a4:c9:1d:50:10:a2:83:7c:7b:c8:03:ba:57:c0:03:
ef:38:5c:86:96:71:9e:f4:94:82:ff:d3:93:3b:18:46:64:de:
83:fb:4e:f6:c4:fa:30:63:77:86:47:5e:8f:3c:1b:c7:e1:ea:
c1:07:20:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:00:18 2026 by rpki-client