This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
File: Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft (raw, json)
Hash identifier: DYnvZ16nNM3UC+d1jwjujVlPv5Eo088sZQMvAbmkfh0=
Subject key identifier: F8:7A:6F:18:D2:4D:36:92:6D:AD:68:24:78:E4:E3:AB:BF:25:02:7D
Authority key identifier: 52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4
Certificate issuer: /CN=A918549C/serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
Manifest number: 0122
Signing time: Fri 23 Jan 2026 04:00:23 +0000
Manifest this update: Fri 23 Jan 2026 04:00:22 +0000
Manifest next update: Fri 30 Jan 2026 04:00:22 +0000
Files and hashes: 1: Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl (hash: hXKqmHaCJYrf/qrhalT+B3EZOmuGU2c9K7fNc8F9e4A=)
2: 627CDAE66FE011EF937A9931C4F9AE02.roa (hash: sF1oxR3P0INbgPwkH87j+/9/A1n7qBr9P83Zm+8FV2A=)
3: 4C7FE6802C7711F084452D84C4F9AE02.roa (hash: DoSA6UaERiqEdMCY3op+YtVmTlaoSDMgolhw801td7c=)
4: D5C6712C2BF811F0A209EF6DC4F9AE02.roa (hash: 8rr+Ae0hpqDQA95PGvgN3goNJqA35l83x4zl3ssPb/c=)
5: AC038F18740611F0B304387CC4F9AE02.roa (hash: Odj1pliiYQRq/sR/Y5HzPODQczZMdgtZfqLJSE59i+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl
rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918549C, serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
Validity
Not Before: Jan 23 04:00:22 2026 GMT
Not After : Jan 30 04:00:22 2026 GMT
Subject: CN=6972f257-8597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:82:04:ea:ea:9b:bd:b3:13:60:a5:00:1a:94:
d8:55:7d:6c:aa:a6:f8:0f:7a:6b:a8:d5:99:e1:7c:
54:b7:6d:14:49:49:78:79:1b:f6:33:7c:be:2e:20:
3e:39:c9:a5:2f:97:f6:95:c9:4b:19:c6:87:35:07:
52:0d:1f:84:b5:d7:80:63:fc:fb:7c:d4:1d:eb:65:
76:da:8d:d8:98:f0:09:c6:9f:4b:04:39:ae:a6:3b:
2e:29:92:bb:4d:08:f9:8b:87:97:ba:f9:3b:79:c5:
98:4f:7b:ae:48:01:83:81:37:74:df:ab:76:42:81:
4d:50:bc:a9:96:2e:de:34:0a:de:a2:77:09:89:ff:
74:29:6f:2f:42:d2:ca:95:34:06:de:b8:89:40:17:
0b:99:41:a5:3c:1c:52:3a:a1:b2:83:8f:a1:83:2e:
54:b8:8e:25:aa:96:fe:d0:e4:6e:ae:79:a4:c2:7b:
3c:1f:65:93:d6:78:fd:5c:43:2e:b7:5c:c6:88:bb:
ed:bc:d4:c1:c6:cb:e2:b9:0c:5a:a6:fa:a6:90:d7:
3b:50:45:84:65:ee:e2:b4:87:af:2c:ab:bd:b2:9c:
35:a0:6b:fc:20:3a:49:a9:41:8f:cd:c2:76:85:ec:
1a:4c:bf:e8:65:ff:f2:be:57:9b:12:b1:c5:c1:48:
07:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7A:6F:18:D2:4D:36:92:6D:AD:68:24:78:E4:E3:AB:BF:25:02:7D
X509v3 Authority Key Identifier:
keyid:52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ae:f4:3e:27:ad:45:53:f6:7c:f8:65:46:5a:02:fd:6a:7d:
85:ad:65:c5:b0:b9:11:99:5f:2b:74:29:7d:4b:46:38:66:44:
6f:02:3e:82:04:ba:2c:ec:12:4b:43:e3:a3:3e:00:05:6b:54:
17:3a:2f:72:d1:27:2f:f7:7f:95:55:d7:8a:da:8a:29:81:ae:
aa:33:e6:2f:b3:d5:46:e0:bd:2e:83:76:f1:1e:78:8d:f7:33:
f4:20:d6:8b:40:5a:3e:a3:3e:18:93:ed:5c:9f:55:15:bf:a1:
26:a4:de:b4:36:f7:a7:36:fb:ec:ea:12:8c:c4:1c:49:73:b2:
1e:5e:47:11:8d:80:72:eb:fe:e2:99:24:5d:0b:8e:d1:0c:d0:
53:0c:f5:5d:98:0e:39:f4:e3:e8:38:16:9d:dc:f1:f6:d8:73:
de:5a:cf:e3:a8:49:2b:d0:00:da:d4:96:e9:76:00:1e:c9:6a:
a6:7c:4f:40:cf:19:bf:ff:a3:3a:39:ab:ac:87:87:50:ee:51:
ac:f5:26:63:d3:77:95:c0:9b:d2:7f:04:e6:ff:b5:28:24:12:
06:58:e4:44:58:5e:f8:c2:02:9c:78:0b:ad:6a:d9:2d:42:35:
f7:b7:75:b8:82:8f:9a:7e:1c:b7:77:cf:e5:e5:3e:19:88:a5:
30:69:1d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:03:43 2026 by rpki-client