This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft
File: uf67oJzxCyh-7SzlZyKzyaDvEv8.mft (raw, json)
Hash identifier: C5zGDBKy0sDW2Pi+tXG0KfdNABemdu8uyX5hteYdVG4=
Subject key identifier: 39:19:B7:83:CE:23:F7:5C:3B:83:43:48:C4:53:17:E0:90:A6:34:B7
Authority key identifier: B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF
Certificate issuer: /CN=A918BB7A/serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF
Certificate serial: 0A03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft
Manifest number: 09FC
Signing time: Sat 24 Jan 2026 19:18:43 +0000
Manifest this update: Sat 24 Jan 2026 19:18:42 +0000
Manifest next update: Sat 31 Jan 2026 19:18:42 +0000
Files and hashes: 1: uf67oJzxCyh-7SzlZyKzyaDvEv8.crl (hash: Ngjhncr2DKeF+xPAF33MNdzDwE6VjTWE63QEid/vbsc=)
2: 27030ADA8EB211EA9D09090FC4F9AE02.roa (hash: EoTAnAdbaycX4KXCkuvokN4LFeCdZ2YBduzBWIBavtE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl
rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2563 (0xa03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BB7A, serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF
Validity
Not Before: Jan 24 19:18:42 2026 GMT
Not After : Jan 31 19:18:42 2026 GMT
Subject: CN=69751b13-28b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:19:61:0a:bd:b4:29:36:9b:d8:16:03:e7:22:
5a:13:78:bf:b6:14:ad:a6:2b:fa:30:40:01:fa:fa:
75:35:ff:99:be:26:13:46:78:6d:1f:70:8f:d3:75:
ef:a9:14:b7:e3:02:cc:07:9c:c2:d3:b5:9d:c4:a4:
07:ab:c7:8a:5c:4a:28:5f:e2:a0:7d:f9:bd:6b:e4:
1d:d4:42:05:22:8a:2c:69:12:e8:03:a0:d5:95:fa:
71:a1:37:75:b7:6c:ca:f0:f4:a9:89:b3:6f:e7:c2:
5b:3b:85:14:74:38:62:ab:7c:c0:7f:bf:37:e8:20:
3f:4e:4d:8d:8f:ee:db:c1:4f:97:4c:c6:41:cf:61:
b7:8d:54:c0:14:81:27:64:6d:66:05:31:97:38:b0:
68:b8:c9:34:28:6b:aa:d6:c6:94:c4:58:10:ec:85:
1a:8c:da:86:d9:d9:c4:76:b3:4f:78:b2:11:47:17:
91:7f:09:d7:57:34:a7:58:9a:4f:0c:7d:0a:d4:78:
c5:36:d2:97:a0:e8:d3:f4:69:27:87:1b:38:a1:4f:
83:27:30:7d:4f:9d:47:61:ae:91:3e:c5:b8:eb:de:
67:87:d7:a8:ed:0e:f7:4a:27:da:58:94:58:1c:f7:
88:05:18:db:d6:e9:e7:e0:d4:62:b6:f3:da:47:0a:
65:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:19:B7:83:CE:23:F7:5C:3B:83:43:48:C4:53:17:E0:90:A6:34:B7
X509v3 Authority Key Identifier:
keyid:B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:d1:1f:bc:73:21:65:ff:73:1a:ff:ec:3c:49:c9:5c:dd:a2:
dc:83:15:7b:ff:b8:7e:c8:62:52:38:69:9c:7a:5b:0f:e4:aa:
f1:77:28:c0:15:2e:75:f3:a9:c8:47:8e:be:66:cb:88:81:4f:
da:89:8f:07:0b:0a:df:f4:fa:43:fc:a2:d3:a7:dd:5a:97:f6:
41:9b:39:59:47:4f:5d:61:6a:82:96:4b:0e:cc:6e:57:93:7d:
bb:eb:4c:1c:1a:73:05:dd:d1:29:01:a2:77:10:32:40:b9:a2:
a7:2d:cf:2a:6e:20:d6:78:4f:75:44:fb:89:92:08:ac:2e:73:
2c:42:74:1d:10:e2:aa:26:72:0a:83:5d:03:df:e5:b9:20:d9:
d3:7a:1d:af:30:1c:01:b3:17:0b:42:77:f2:33:a6:0c:a4:44:
25:6c:70:20:a9:65:9a:80:e2:cb:aa:d8:4a:63:b4:c7:3c:f5:
b8:74:54:10:65:08:ac:b2:4b:fb:d5:93:23:ed:b9:13:ed:ad:
a0:c1:34:67:f1:cb:32:db:ee:2a:2a:ef:57:d2:73:24:19:2f:
02:f5:d3:02:bd:92:64:7b:09:9f:64:13:a1:cb:f6:e0:79:28:
cc:30:4e:a8:31:77:c2:df:d9:4e:02:96:e2:7d:f1:cb:dd:91:
b1:fb:51:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:03:45 2026 by rpki-client