This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
File: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft (raw, json)
Hash identifier: JLPVGJl5v+JBOkXzaW8Gjqs9ZJavZGaTdvsmVeW99no=
Subject key identifier: D7:76:CC:F3:0B:D5:0B:5C:AE:D9:7A:F9:B5:2C:5E:9F:E2:3F:F4:0E
Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Certificate serial: 0688
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
Manifest number: 0661
Signing time: Sat 24 Jan 2026 21:57:55 +0000
Manifest this update: Sat 24 Jan 2026 21:57:55 +0000
Manifest next update: Sat 31 Jan 2026 21:57:55 +0000
Files and hashes: 1: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl (hash: ekMfMGMbohwf9rVbjSQJG5Uvoq1WrdDFg2R0aXq5sf8=)
2: F4C73FCACD8411EF88CD1464C4F9AE02.roa (hash: EkzwfsPvhq1FP6pm5CT4LDCnqWr4szU6ESASOp0o6DU=)
3: 3FE8CD1051B111F0932E1173C4F9AE02.roa (hash: RB6HB76Hd37I1Qyua/UNLhe473Y5QaFhWKPCNvGT+Jc=)
4: 044C4ED6A26711ED8095F74DC4F9AE02.roa (hash: ehyJGIeBDK390bSFLx2HamOEcgKmw6zu6VhcLaVRD/0=)
5: F44E1EECCD8411EF88CD1464C4F9AE02.roa (hash: RAzhHtW1VH/eUjgZQiEsm0Ej6j+0F6PlwpjTpjOi8Jo=)
6: E37129F0F50311F0BCFB4C27526F56BC.roa (hash: 6iFxLqXtKq3X5Gr76L/mfjAmbAjgXpI7ErS9fAZ4SMI=)
7: E28853A6F50311F0BCFB4C27526F56BC.roa (hash: hIF91WYADD0NDzWFP0B7zg9tu8JXTk7eFvXNE8YVqdA=)
8: F559B7E2CD8411EF88CD1464C4F9AE02.roa (hash: 1YFs0Zqq59OdTTfQ9TRBhg+ye+627iyYVeuBlex3Kfk=)
9: B6116DBEC9C811F0931CA339C4F9AE02.roa (hash: mpDokGSx8dS0Rov34wArgaejqPAfetY5gGpqf+We+RE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:57:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1672 (0x688)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Validity
Not Before: Jan 24 21:57:55 2026 GMT
Not After : Jan 31 21:57:55 2026 GMT
Subject: CN=69754063-dc81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f8:6c:41:9b:79:f8:d5:fd:96:56:78:ea:1b:
6b:36:29:21:ed:1b:23:16:08:e4:af:18:76:e7:97:
9a:93:2b:44:9f:96:bb:6f:50:41:6c:69:7a:2f:75:
76:46:bc:a4:cc:36:0b:79:c1:b0:d8:af:67:3c:ac:
40:65:87:61:e7:e4:05:00:ab:8d:53:9a:b3:a2:5a:
1b:91:cf:b9:30:04:d8:78:79:3b:eb:ff:7b:d5:49:
99:dd:b3:da:59:3a:20:aa:2b:7b:6a:e1:ed:32:10:
cb:c8:f1:f6:52:a7:f0:0b:17:03:92:65:79:d3:11:
91:60:67:1d:05:82:68:d1:6d:ac:e5:7c:1d:64:b9:
b2:ba:66:eb:4b:52:45:c6:f1:4b:0b:40:f4:92:77:
4c:34:e8:30:81:d6:bd:24:43:84:21:ec:f7:78:1b:
bd:52:41:be:fe:6f:fd:d6:13:f8:f3:c0:c8:c6:6a:
6f:37:6a:74:1c:9c:81:fd:15:ab:34:66:4d:15:45:
ce:79:fc:da:69:81:64:6e:e0:e5:4b:70:3c:66:9b:
eb:fb:38:bd:80:55:e0:3a:54:cb:de:69:47:c2:be:
85:24:51:61:e1:99:e8:2a:ee:91:bd:69:25:2f:45:
0f:8c:3c:33:a9:25:4c:7a:d0:b2:b5:3d:ed:7c:b4:
13:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:76:CC:F3:0B:D5:0B:5C:AE:D9:7A:F9:B5:2C:5E:9F:E2:3F:F4:0E
X509v3 Authority Key Identifier:
keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:0f:ac:e0:2f:18:7e:1c:c1:39:bf:ea:44:c5:8d:59:a5:eb:
67:e5:9d:d7:a2:aa:13:7a:e7:3b:6d:2a:11:46:cc:11:f3:79:
c8:c0:17:e7:a0:b2:49:6b:19:19:75:a6:c0:ea:a0:a8:e9:cb:
8a:a1:d6:03:a6:29:dc:bb:0c:f0:7c:17:58:44:c1:ae:41:33:
0f:ac:9f:b4:4d:5c:64:d5:a9:a3:1c:f7:30:56:be:66:7f:4f:
3c:b8:d7:8e:66:02:6b:0f:22:ab:1f:bb:16:76:d2:22:d6:ce:
b1:a5:45:44:61:53:3f:7d:88:22:b4:fc:fc:ba:2c:ab:ec:ec:
43:1c:0f:22:86:25:5b:4f:d1:be:44:16:42:4a:f1:0c:ae:f4:
74:40:b1:9f:e7:f4:68:40:bc:a5:3e:c9:07:6a:69:3f:77:28:
04:3a:03:0a:8f:a5:e7:3d:3f:20:d7:6f:96:d5:b4:72:08:a0:
9e:c0:43:6e:9a:60:ef:fd:f8:8e:e0:6b:96:ae:d4:ec:98:ad:
17:fa:19:64:65:78:3e:c2:f4:78:83:05:d8:95:cc:02:b0:f6:
e6:6f:4a:cd:87:5d:2c:7e:4e:27:5c:de:db:ef:8b:22:20:7a:
02:a0:ce:b1:84:28:06:87:bd:c9:35:4d:fd:fc:0c:d1:40:57:
8b:58:69:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:02:43 2026 by rpki-client