This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
File: Ul6ia2phflqvwFQjzOWI3hnsWEc.mft (raw, json)
Hash identifier: kDMzLPOjcuDzyjKYjFXuGkHHhNv6sBLCNorEPodP4Tw=
Subject key identifier: 11:91:45:C4:92:69:BB:EA:1D:48:FC:A0:F0:FD:E3:C8:53:F2:DB:3A
Authority key identifier: 52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47
Certificate issuer: /CN=A91975F1/serialNumber=525EA26B6A617E5AAFC05423CCE588DE19EC5847
Certificate serial: 0343
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
Manifest number: 0340
Signing time: Sun 25 Jan 2026 00:11:00 +0000
Manifest this update: Sun 25 Jan 2026 00:11:00 +0000
Manifest next update: Sun 01 Feb 2026 00:11:00 +0000
Files and hashes: 1: Ul6ia2phflqvwFQjzOWI3hnsWEc.crl (hash: UXU9PFuHHizgiUwnWj8C8txZJPfhCIjcE8zQAFqwBKE=)
2: 412DD396EE3B11EC8EE6DA63C4F9AE02.roa (hash: E4JlmSxgf5/1+dN+C7clJrcgIOSoxnaAMP6CuZCG7yc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.crl
rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:10:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 835 (0x343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91975F1, serialNumber=525EA26B6A617E5AAFC05423CCE588DE19EC5847
Validity
Not Before: Jan 25 00:11:00 2026 GMT
Not After : Feb 1 00:11:00 2026 GMT
Subject: CN=69755f94-b8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:7c:22:1a:15:6b:0b:4f:c5:b2:d0:1f:74:
27:42:ef:ed:09:10:88:16:f3:1a:f6:f8:6c:ce:b0:
c7:c2:71:bf:98:5d:d0:f0:47:85:78:27:81:88:21:
37:ec:3b:1d:d7:a5:90:d7:a0:43:d9:30:9e:f3:34:
28:69:e1:11:ed:61:bd:85:bb:0f:d0:b6:a2:6c:52:
a1:18:00:72:93:ed:60:d1:fa:e9:a2:83:7c:fd:5f:
61:e0:4d:ee:cc:de:67:34:68:0f:7b:2a:46:93:dd:
2c:9e:61:60:b3:d8:85:cd:a0:2d:6c:5b:37:a8:c6:
81:27:6c:3f:f6:a6:ce:1a:f1:68:23:37:cd:01:0f:
54:0c:1f:33:54:18:8b:ac:8d:f2:a9:d1:59:c0:ba:
bc:b1:48:6f:21:d2:88:cd:c6:3f:da:cc:fd:0b:23:
69:37:1d:39:dc:2f:65:7b:a1:ed:b6:f5:a9:91:87:
80:41:98:6e:ec:7f:c7:f4:1c:ce:f5:c1:2a:6e:5a:
33:e8:28:6c:77:9b:59:03:1f:51:ca:93:de:45:10:
c3:40:e3:46:ad:50:f3:2b:cf:64:54:6f:fe:fa:29:
57:c8:ce:0b:a0:16:13:74:1e:99:01:87:f8:ed:b1:
e6:63:e4:12:73:b3:72:82:07:13:d7:9b:23:0a:37:
31:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:91:45:C4:92:69:BB:EA:1D:48:FC:A0:F0:FD:E3:C8:53:F2:DB:3A
X509v3 Authority Key Identifier:
keyid:52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:48:1f:94:e0:cb:2a:9d:17:a3:37:f4:cd:d5:50:1a:81:c2:
28:64:a0:47:8f:df:77:39:83:00:e6:19:21:1d:28:15:36:93:
fe:49:16:a1:45:a1:6f:77:dd:44:c3:43:43:ad:98:bc:59:51:
64:d7:ee:10:d8:c1:bc:43:3c:84:34:a2:11:2e:5b:fd:5a:dd:
e4:00:81:c6:d9:cb:21:14:06:bf:4f:2a:04:55:4b:79:e8:81:
c1:f2:dc:4e:01:a9:b0:f5:b7:86:70:84:e7:b1:3d:46:db:b1:
2b:4f:b1:8e:7b:e9:0a:3d:b1:00:58:dc:ba:ee:29:51:04:48:
e4:83:0e:b0:8f:af:80:9f:fc:dd:d3:cc:73:28:10:5b:48:ca:
b0:8a:61:7a:08:c7:4b:c4:0e:93:b3:92:1f:d3:98:30:f3:a6:
26:59:15:97:e8:08:5e:01:e3:05:e8:0f:82:3f:8e:99:fc:e9:
18:9a:ab:96:cc:47:a2:72:92:9f:0f:7a:72:1a:5c:7c:24:b9:
11:18:93:c3:a7:a3:17:62:17:9a:4d:86:71:06:43:79:00:5d:
5f:ee:cf:4f:e1:f8:b2:61:38:b2:c0:71:3a:e4:4e:5c:45:1c:
69:48:1c:3a:45:b8:73:b0:79:60:ad:d7:82:6b:72:00:9e:ae:
11:05:95:5a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
OTc1RjExMTAvBgNVBAUTKDUyNUVBMjZCNkE2MTdFNUFBRkMwNTQyM0NDRTU4OERF
MTlFQzU4NDcwHhcNMjYwMTI1MDAxMTAwWhcNMjYwMjAxMDAxMTAwWjAYMRYwFAYD
VQQDDA02OTc1NWY5NC1iOGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAty18IhoVawtPxbLQH3QnQu/tCRCIFvMa9vhszrDHwnG/mF3Q8EeFeCeBiCE3
7Dsd16WQ16BD2TCe8zQoaeER7WG9hbsP0LaibFKhGAByk+1g0frpooN8/V9h4E3u
zN5nNGgPeypGk90snmFgs9iFzaAtbFs3qMaBJ2w/9qbOGvFoIzfNAQ9UDB8zVBiL
rI3yqdFZwLq8sUhvIdKIzcY/2sz9CyNpNx053C9le6HttvWpkYeAQZhu7H/H9BzO
9cEqbloz6Chsd5tZAx9RypPeRRDDQONGrVDzK89kVG/++ilXyM4LoBYTdB6ZAYf4
7bHmY+QSc7NyggcT15sjCjcxkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGRRcSS
abvqHUj8oPD948hT8ts6MB8GA1UdIwQYMBaAFFJeomtqYX5ar8BUI8zliN4Z7FhH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzVGMS9DQjY2MzMwQUVF
MkMxMUVDOTU2QjJDNEZDNEY5QUUwMi9VbDZpYTJwaGZscXZ3RlFqek9XSTNobnNX
RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VsNmlhMnBoZmxxdndGUWp6T1dJM2huc1dFYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzVGMS9DQjY2MzMwQUVFMkMxMUVDOTU2QjJDNEZDNEY5QUUwMi9VbDZpYTJwaGZs
cXZ3RlFqek9XSTNobnNXRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCgSB+U4MsqnRejN/TN1VAagcIoZKBHj993OYMA5hkhHSgVNpP+SRah
RaFvd91Ew0NDrZi8WVFk1+4Q2MG8QzyENKIRLlv9Wt3kAIHG2cshFAa/TyoEVUt5
6IHB8txOAamw9beGcITnsT1G27ErT7GOe+kKPbEAWNy67ilRBEjkgw6wj6+An/zd
08xzKBBbSMqwimF6CMdLxA6Ts5If05gw86YmWRWX6AheAeMF6A+CP46Z/OkYmquW
zEeicpKfD3pyGlx8JLkRGJPDp6MXYheaTYZxBkN5AF1f7s9P4fiyYTiywHE65E5c
RRxpSBw6RbhzsHlgrdeCa3IAnq4RBZVa
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:31:30 2026 by rpki-client