This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
File: uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft (raw, json)
Hash identifier: WVdBjoPRffGkYTqjziBExlbWJVRwJ9wR7acd6xYx820=
Subject key identifier: C0:99:36:B4:2A:3C:5C:BD:35:EE:5D:92:8F:D9:00:E0:EC:24:6E:BE
Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
Certificate issuer: /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Certificate serial: 087F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
Manifest number: 085E
Signing time: Sat 24 Jan 2026 20:09:11 +0000
Manifest this update: Sat 24 Jan 2026 20:09:10 +0000
Manifest next update: Sat 31 Jan 2026 20:09:10 +0000
Files and hashes: 1: uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl (hash: iGUnMW+YskpyPs/abXUAuUqGoDPQX3s+gkW+n3iDlW8=)
2: 115A3CD2E3D711F08C30CEA1566F56BC.roa (hash: EcRkwHB8WUli+qj1Kw4DFuoY0lbe6laWFR9Z5FFOq48=)
3: 2DCC2988982711ED9D75C85AC4F9AE02.roa (hash: cXIuMnEWUiuT4kupzUNHJo4zj/W45Qb9cwkr7yvw0vc=)
4: E68BF368DD9911EF85614A53C4F9AE02.roa (hash: RcdkSPfjnAmz3uVP4FBhLTQ0GFBSdezmu4kQPa/+yaY=)
5: F89E68D6982911ED90F8C877C4F9AE02.roa (hash: XTLM9Il3d4SVArTDp/CLgDo1h6RlBLONdep9WAa5H5I=)
6: 8BB3088E982F11ED9D647578C4F9AE02.roa (hash: A1w8tHzqGX+jD/ISNBe9aPcQuL2J3HJQzhH/YAzCdq0=)
7: 13EFC134D76A11F0B167783877D3641D.roa (hash: 0IxIHAg7V0ECmWbcPSWt26zbtuoCWzLzrVMQCmg7qKw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2175 (0x87f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E83B, serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Validity
Not Before: Jan 24 20:09:10 2026 GMT
Not After : Jan 31 20:09:10 2026 GMT
Subject: CN=697526e7-f293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d2:39:d6:dc:6d:2b:18:00:59:77:2d:f3:5f:
ba:1b:15:2e:f7:6c:0f:0e:c7:fd:20:0e:5a:e5:3c:
e5:11:95:b5:98:b5:53:b8:a5:16:c5:fa:7d:a0:d9:
30:31:6c:e6:1a:2c:4b:7b:9b:a9:4f:21:64:6b:9c:
2d:cd:ce:59:64:27:e4:11:e5:5b:4e:31:e9:2c:b0:
90:07:1a:11:16:91:56:6e:2a:f6:58:28:f0:74:f6:
df:74:8a:92:b4:30:31:99:7f:3e:da:31:82:66:49:
10:b4:e1:7b:91:85:b9:f1:00:91:86:65:fd:54:c1:
f8:a8:1d:a7:a7:3e:15:5d:32:04:6b:07:99:48:b5:
95:57:cb:fd:92:ae:58:1a:a4:8d:53:a8:c6:bf:fe:
6f:e4:d7:92:1c:07:5a:1b:e7:54:fa:b5:51:2c:2f:
d7:e9:e5:6c:51:c3:8f:6e:9b:a5:ee:b8:9b:c3:2a:
ff:59:4e:aa:f0:8a:3b:88:57:66:9a:6b:3b:4a:44:
59:a8:35:c1:24:93:fb:d2:5e:41:1b:88:7d:90:6a:
28:46:35:eb:47:b3:f3:cb:26:64:3f:e5:b8:2a:31:
93:7c:c0:68:0d:10:6a:08:ca:86:05:ed:ec:6d:4a:
50:e3:bf:03:19:11:05:89:25:d6:fa:19:08:7c:11:
83:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:99:36:B4:2A:3C:5C:BD:35:EE:5D:92:8F:D9:00:E0:EC:24:6E:BE
X509v3 Authority Key Identifier:
keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:af:f8:81:15:98:96:1a:62:6a:53:27:22:17:e6:f1:d3:86:
90:a1:3a:f3:bf:f0:85:f8:e1:91:b6:54:6e:2a:1e:b2:cc:b0:
64:a7:e1:09:f1:ac:50:cf:d5:c3:d7:b1:e7:5c:94:5a:66:e8:
fd:00:3e:16:7a:26:95:50:74:bf:98:33:9f:c9:0c:73:86:ba:
62:b9:7f:87:66:4f:94:8d:79:ae:92:3a:7f:22:c2:6f:c2:ce:
a1:62:b6:7e:4f:43:cc:82:18:ad:7c:0b:7c:58:05:b6:3c:65:
e0:c3:00:32:04:16:b2:0b:e6:2c:09:0f:7b:21:ca:b7:25:48:
9a:e1:89:ef:fb:b5:a6:b8:13:a7:d0:2b:00:50:da:76:08:a3:
fa:eb:c8:48:81:3f:62:a5:51:58:a4:e6:3a:d7:e8:3b:ad:ed:
6c:d0:08:b5:7c:53:92:ad:0d:96:77:d7:22:57:87:ba:6f:cd:
d6:71:b1:a0:ed:02:bb:47:7a:61:24:70:72:5a:b1:73:2d:e0:
b5:eb:53:8c:b1:1b:3e:7d:ad:e8:49:65:99:73:4c:2c:35:c4:
be:79:ae:fa:50:4f:cf:ce:86:99:c1:b7:59:92:48:86:14:84:
ce:e1:03:f0:30:ae:94:66:26:e2:5c:c5:71:bf:86:29:d1:a5:
30:13:55:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:34:55 2026 by rpki-client