This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
File: _uphQ5owmLhcyxg7WkGqEq9Fyh4.mft (raw, json)
Hash identifier: 1ZchFO3OYBARqADIkNR5DFWptjHGoaJSiCXDAWtkjyA=
Subject key identifier: 7C:FD:D5:75:E7:DF:5B:F3:05:2E:07:8E:53:97:26:A2:D7:8F:3A:4A
Authority key identifier: FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
Certificate issuer: /CN=A91A19C8/serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
Certificate serial: 0847
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
Manifest number: 0837
Signing time: Sat 24 Jan 2026 20:16:16 +0000
Manifest this update: Sat 24 Jan 2026 20:16:15 +0000
Manifest next update: Sat 31 Jan 2026 20:16:15 +0000
Files and hashes: 1: _uphQ5owmLhcyxg7WkGqEq9Fyh4.crl (hash: yTYzogjIwJVdgmED/gVRpPOhWoseEofbYzWGjU89S/A=)
2: 2B219CDC1FE811EF96F54D5AC4F9AE02.roa (hash: Sj5dG6gkaXT4SUEh6ZNnO+di4MLVli4VB7cBIKCvXJs=)
3: 12C3076850E111F09D297C74C4F9AE02.roa (hash: VPPWSocLnuSKtcVnd5S6tAbC+12jEdjVyuRLBXg6FF0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl
rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:16:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2119 (0x847)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A19C8, serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
Validity
Not Before: Jan 24 20:16:15 2026 GMT
Not After : Jan 31 20:16:15 2026 GMT
Subject: CN=6975288f-71ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:89:df:98:bc:f9:fd:3a:62:95:dd:fb:52:f3:
16:e8:4f:04:89:1f:18:12:37:50:ad:18:3d:a3:86:
a3:70:a4:84:71:c8:54:49:fa:90:f4:93:b4:cf:7d:
0c:3b:1a:d4:71:fc:4a:64:b6:df:04:39:db:67:cc:
f9:9b:c8:91:9b:c2:71:71:50:59:11:9e:00:38:89:
0a:a2:52:f0:22:27:3b:35:9e:62:6d:ac:df:8c:2a:
4c:4e:77:07:13:cf:ff:6e:79:96:8d:63:c2:fe:d0:
71:dc:8f:40:90:d6:ec:2e:c6:4f:50:ce:97:81:2d:
7a:b8:17:57:52:cb:86:4b:b2:4c:5e:09:35:8b:eb:
65:50:8f:83:9d:c7:0d:a0:cf:35:70:b4:10:7b:8c:
b5:7e:a0:19:4a:a8:70:db:ed:48:01:6c:d6:36:97:
e2:20:95:a0:11:46:7b:99:55:ad:63:61:ba:fd:4b:
1e:43:1d:86:40:55:05:09:ac:b5:25:de:95:fc:39:
98:60:bf:1e:a3:77:6f:f6:3b:d5:ef:d0:1d:95:c1:
fd:cd:e7:67:38:5b:4e:90:b8:d6:c4:a7:f4:75:95:
02:18:c8:13:4a:dd:85:39:69:43:6f:11:67:8b:b8:
7b:da:93:24:e7:47:0f:fa:19:fc:94:8d:2d:cd:61:
2c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FD:D5:75:E7:DF:5B:F3:05:2E:07:8E:53:97:26:A2:D7:8F:3A:4A
X509v3 Authority Key Identifier:
keyid:FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:47:da:22:06:c2:7d:46:92:26:1d:3c:07:df:14:75:22:f6:
c2:93:b5:0a:37:61:e4:3a:f4:f1:2a:89:37:9c:ed:3d:23:2b:
aa:ef:2a:ab:95:78:11:f8:81:63:9c:8a:57:fa:6f:eb:7e:6f:
9f:38:00:06:0d:4b:db:d5:c6:30:25:99:6b:21:8a:95:cb:8c:
d9:5f:e5:ee:1c:c4:ee:60:85:8b:b5:49:15:4c:2e:c0:a9:6b:
68:05:4e:09:50:a5:3a:fb:54:f8:32:aa:8b:8d:90:09:1b:04:
2b:d9:2e:db:85:2a:63:6f:b2:1a:5e:55:46:d8:5d:7f:a7:c7:
c7:c1:d5:96:c7:ba:20:e8:d0:1f:d6:ef:56:fd:04:d1:2a:08:
59:85:84:42:04:a7:da:ef:49:2a:90:23:12:77:62:37:4a:92:
6d:36:7d:45:9c:df:b1:3f:d0:c4:52:f5:31:d9:18:5b:77:0d:
c8:37:71:45:c7:81:7d:1e:69:5f:bf:7c:00:98:9f:d7:e4:33:
2a:c8:42:4d:92:b4:36:66:b5:76:b7:b3:38:d4:dc:09:05:a1:
da:53:a0:39:c3:29:4c:dd:06:45:2e:c0:32:37:bd:f6:3d:09:
2c:31:59:18:44:b4:b2:b4:e1:19:5a:d4:94:67:e5:00:9c:24:
e0:1a:29:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:25:10 2026 by rpki-client