This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
File: uc1X4v9PWLuVmpVBoxz99ml2GLI.mft (raw, json)
Hash identifier: GiorJ5Qs5cFGE3jVq6ZlVZdJc6FgZbFcs/kdjELlqfI=
Subject key identifier: F8:7C:28:5F:64:51:40:C4:C0:2D:0F:FA:79:2C:ED:F4:BB:70:EA:01
Authority key identifier: B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2
Certificate issuer: /CN=A918E023/serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
Manifest number: 96
Signing time: Sun 25 Jan 2026 05:35:22 +0000
Manifest this update: Sun 25 Jan 2026 05:35:21 +0000
Manifest next update: Sun 01 Feb 2026 05:35:21 +0000
Files and hashes: 1: uc1X4v9PWLuVmpVBoxz99ml2GLI.crl (hash: kgfrp1K4kdPqkAD39g7F7zyzThI9R+lkcjtPp1UrVP0=)
2: C420B2B6111D11F0BE9ABA7AC4F9AE02.roa (hash: BmMWgtMQ3PCdQlZ5TlrzvWUUVUt35N0MZwh0nPjZPiY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl
rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:35:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E023, serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
Validity
Not Before: Jan 25 05:35:21 2026 GMT
Not After : Feb 1 05:35:21 2026 GMT
Subject: CN=6975ab9a-cdd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:81:5e:84:bd:9c:31:f3:57:84:8e:53:94:35:
38:f0:f4:73:f1:4a:48:6d:9d:d2:f4:64:91:3d:06:
94:54:91:01:9f:46:36:02:4d:c2:85:28:7f:65:24:
ae:3a:a1:fb:59:d1:9d:6a:5d:36:b3:ec:1d:6c:ab:
44:70:85:00:cf:41:46:6e:57:1f:0a:68:3c:c6:c3:
92:1b:0c:5d:bb:c6:08:7c:a5:93:cf:04:46:b5:c6:
51:74:1f:55:a2:99:26:a7:79:c5:ee:d8:f0:fc:34:
33:67:d6:0e:69:12:e8:10:09:49:7f:b2:2c:ef:3b:
69:40:97:41:c6:b0:36:02:e7:fd:fa:33:13:82:57:
5c:eb:96:32:2a:ac:64:e9:f1:8c:b9:f3:ea:c7:05:
41:ba:85:0c:23:84:0a:6d:70:25:b5:97:ea:39:84:
c5:75:32:ee:e8:68:4f:bd:6a:0c:1a:94:2e:b6:d9:
27:65:1d:71:cb:af:46:f9:31:ab:a0:03:03:f9:51:
dc:fe:0b:10:5f:cd:fb:b8:2f:67:58:f8:f5:6c:39:
62:fe:dc:01:27:29:e2:02:32:12:70:b6:b1:58:25:
bb:68:42:ea:f1:11:c7:5b:a7:5a:b7:7b:60:94:9f:
c2:68:05:0f:b9:15:ed:0b:37:12:cc:4b:3f:6b:ee:
72:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7C:28:5F:64:51:40:C4:C0:2D:0F:FA:79:2C:ED:F4:BB:70:EA:01
X509v3 Authority Key Identifier:
keyid:B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a6:ef:14:0e:60:4b:7f:8c:1f:1a:3e:b5:c1:16:0f:68:6f:
71:82:9c:42:c0:6a:0b:de:05:d3:ff:8d:a1:d1:ca:7e:38:72:
ce:b2:84:84:6d:5f:b3:69:68:ae:a6:af:11:87:e4:4e:84:6b:
56:ed:8f:ed:f5:2e:6e:e2:7e:c2:28:eb:21:e0:5a:bd:4c:bd:
db:c6:87:1b:3a:0f:17:80:38:73:5e:85:75:b7:01:7b:63:36:
cd:e4:2e:c1:a7:de:98:6f:4a:c7:ac:84:15:07:74:70:db:50:
dc:ab:9c:4f:ca:4b:d7:03:cf:da:c5:64:e6:0d:09:08:3f:4d:
b7:62:81:44:f3:9b:85:79:25:41:a0:3c:a4:e7:d7:1f:5d:f0:
0b:56:9f:ef:30:89:cc:3a:c8:54:64:a2:80:c3:e1:36:e9:16:
ff:19:e8:9c:59:33:2c:59:4c:8d:a9:30:43:a3:aa:3c:ee:c8:
35:79:95:cd:c1:04:f8:b8:75:d7:96:39:35:15:4f:3e:49:af:
1e:7e:21:7e:d0:83:5c:00:5a:0c:34:ab:60:9e:31:0b:25:5b:
0f:d3:8e:22:a5:21:89:0d:d2:8a:4f:b8:e9:4e:2e:b9:0e:ef:
4b:82:bf:8e:96:be:21:1c:10:82:d0:dc:08:65:c5:be:12:39:
ac:19:2c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:10:33 2026 by rpki-client