This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
File: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft (raw, json)
Hash identifier: J6s2UShXZK0DhuA/XUere9wEIyPCZvRRXuZJZWGmJHA=
Subject key identifier: 91:5A:6B:FB:6F:3E:66:6A:33:7C:05:4F:45:56:DE:C6:3E:FE:98:3D
Authority key identifier: BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34
Certificate issuer: /CN=A91836DB/serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734
Certificate serial: B5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
Manifest number: B4
Signing time: Sun 25 Jan 2026 05:14:08 +0000
Manifest this update: Sun 25 Jan 2026 05:14:08 +0000
Manifest next update: Sun 01 Feb 2026 05:14:08 +0000
Files and hashes: 1: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl (hash: DcMh8B2Fzna7r7Fc3IRAWkF/aoI2ndw3mgkvkycCdg8=)
2: C7001B70E45E11EFA2243E47C4F9AE02.roa (hash: wGQDHFlAfYrGUZehEya3kdO0mpkCJUDStwU2YZOiDKI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl
rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:14:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91836DB, serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734
Validity
Not Before: Jan 25 05:14:08 2026 GMT
Not After : Feb 1 05:14:08 2026 GMT
Subject: CN=6975a6a0-9bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:29:e8:20:be:ea:c8:a9:8c:2b:6f:e1:7a:
02:c4:b1:7b:5c:09:d2:0b:17:21:bd:df:84:f7:fb:
29:bf:bb:77:c2:9e:3b:df:4b:b9:ae:fb:29:5a:a2:
49:26:d3:35:68:be:52:2b:a0:f7:b9:3e:ac:eb:32:
2a:23:36:29:f9:09:7a:4e:d5:63:35:27:0c:b1:a2:
66:e0:7f:f0:1c:8e:64:79:f4:72:b7:17:b4:5a:4d:
16:57:05:89:5b:14:da:6b:25:14:81:93:45:e2:c9:
35:66:1d:9b:f3:8f:be:92:ac:76:74:31:ad:42:a6:
70:36:25:f9:42:fc:77:1c:dc:fc:a0:56:36:77:d7:
99:24:ee:13:43:aa:32:96:57:3a:40:1b:79:78:b6:
01:91:cf:57:73:d2:a2:1c:c9:05:09:ba:23:8a:3a:
30:f2:98:79:d1:cc:fb:08:23:3e:bc:13:32:8a:35:
de:cf:b8:45:e5:35:d4:5b:24:62:74:df:ae:af:db:
27:b2:e0:b0:fe:f7:f2:4c:5b:0e:43:27:10:d2:a5:
bd:3e:01:d7:7b:7f:00:02:aa:ff:f7:b5:27:46:4b:
61:6e:9f:66:09:ea:62:f0:62:40:e7:99:53:d1:08:
b9:61:d0:08:37:2a:ed:3e:f0:a1:da:bf:8c:39:e4:
1d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5A:6B:FB:6F:3E:66:6A:33:7C:05:4F:45:56:DE:C6:3E:FE:98:3D
X509v3 Authority Key Identifier:
keyid:BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ab:d1:42:04:1f:45:42:23:f8:01:d1:a4:c3:aa:68:20:47:
4b:6a:65:14:0f:9e:2a:b9:cf:c6:39:89:2f:fc:10:3c:d9:b2:
19:a7:c6:6d:93:12:41:37:8e:23:14:be:1c:d1:ac:3f:f2:79:
92:80:f2:52:6a:bf:eb:5a:e9:72:9a:c3:61:30:3a:ab:c0:12:
e6:7b:ee:7f:20:65:cc:a6:c1:27:56:12:32:2a:ca:21:53:fb:
cf:49:f8:f6:f2:51:69:98:3e:87:16:b5:1d:c5:d2:36:8f:54:
70:6a:b1:50:eb:73:59:1d:53:56:56:31:5d:bc:38:53:65:ee:
78:ff:78:f7:9a:07:04:5c:75:04:b7:da:a5:b0:2b:07:e9:73:
e5:33:71:d6:d4:6b:73:4e:b2:5c:cf:2d:90:4e:1c:fc:dd:15:
a4:14:3d:f1:37:e0:9a:de:90:24:41:c9:84:46:52:ad:1f:c1:
ce:db:e5:56:48:17:f0:a9:21:c9:f0:79:05:41:15:07:00:8b:
ca:66:95:5d:ff:8d:7d:90:0d:75:e3:67:5b:2a:48:66:08:15:
0b:6b:17:be:a2:5b:60:a3:dd:42:c9:a6:10:0f:f2:1a:fe:b5:
75:f7:46:2b:b0:8a:51:3d:f6:83:cc:57:36:10:fc:b3:9e:61:
46:f5:24:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:53:21 2026 by rpki-client