This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft
File: uG8rXtaXoSH08p1YIDcs8UBVEgs.mft (raw, json)
Hash identifier: 2eV2xxNHUfgLlmlLt4ZZD4s2m+sAHqWMSqi9R2uXce4=
Subject key identifier: F9:E7:7E:3E:FD:5F:95:72:40:00:D5:F2:56:91:34:14:F1:AA:4B:00
Authority key identifier: B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B
Certificate issuer: /CN=A91AF0C6/serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B
Certificate serial: 01CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft
Manifest number: 01CA
Signing time: Sun 25 Jan 2026 02:13:29 +0000
Manifest this update: Sun 25 Jan 2026 02:13:29 +0000
Manifest next update: Sun 01 Feb 2026 02:13:29 +0000
Files and hashes: 1: uG8rXtaXoSH08p1YIDcs8UBVEgs.crl (hash: T+7dQqDIbnJofOgJoL8RfXgfB2BgQ5bxTAt5w84sEUE=)
2: A915A3543FEC11EE99AC0F43C4F9AE02.roa (hash: GStxXDpLNAyrWojxGnePR9AnSIRyNnzZz6qC/jLrshI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl
rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:13:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463 (0x1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF0C6, serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B
Validity
Not Before: Jan 25 02:13:29 2026 GMT
Not After : Feb 1 02:13:29 2026 GMT
Subject: CN=69757c49-0dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:27:fb:50:e9:37:c0:94:5d:59:32:8a:f7:57:
d5:31:ed:32:07:a2:84:55:09:79:01:a2:1d:23:b4:
5c:92:d0:f9:10:38:48:45:9f:30:99:02:11:c7:ee:
9e:90:a1:35:0b:84:ff:64:a2:40:05:f8:0c:11:5f:
4a:ee:04:78:46:26:76:76:cf:f8:7f:ad:e5:59:41:
d6:32:f8:f5:77:c0:24:4f:96:3e:26:89:27:7e:ab:
0f:56:5e:cb:ce:11:d8:71:71:1a:62:08:f0:74:eb:
5b:b8:cc:96:50:de:aa:e9:e2:fc:c6:74:d7:27:24:
81:91:fe:b1:53:2a:95:38:06:60:42:44:34:d5:32:
96:4a:f2:55:38:a1:19:8f:4b:73:2c:3c:c5:28:7f:
85:5e:46:eb:fb:33:c2:05:5d:c7:94:b9:ea:24:0b:
e0:bc:2a:86:ba:a8:83:aa:ed:4b:06:92:9e:91:c5:
5d:c5:b3:fb:ae:f6:e0:47:73:d2:d5:b7:3a:04:3f:
95:55:99:08:f4:72:54:6f:2b:14:2d:77:01:de:40:
eb:01:c7:30:c8:b6:ce:d0:2e:a7:27:fc:b5:dc:14:
33:4f:89:c9:96:17:77:b7:1d:9d:73:aa:17:14:96:
27:e5:84:ab:08:c5:76:c7:50:74:b9:56:62:29:d1:
9e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E7:7E:3E:FD:5F:95:72:40:00:D5:F2:56:91:34:14:F1:AA:4B:00
X509v3 Authority Key Identifier:
keyid:B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a9:f5:12:61:12:08:2e:4f:a3:57:3b:e0:a3:0a:6a:61:e0:
25:84:ee:9f:6d:5f:57:ad:46:a6:23:4a:7a:c2:a4:80:b1:2f:
70:b9:13:c4:f9:67:8f:d4:4f:62:98:3b:61:9e:aa:e1:31:ae:
45:45:aa:ce:c3:e8:2a:89:ee:7b:80:36:f9:5e:3a:05:e6:79:
66:fc:0b:e3:51:d9:17:fc:92:e8:36:44:d5:0e:cf:32:09:43:
89:c4:5c:36:fe:11:3f:f5:1f:ce:23:33:c8:51:07:a4:c6:ed:
a8:bf:e9:3f:ac:33:25:a7:d0:e5:f5:95:ee:bb:57:d7:87:af:
f8:10:cc:17:d3:7d:b7:8e:b3:e7:fb:d0:f3:16:66:79:62:27:
f3:b3:08:be:27:cb:ea:c1:3e:f3:bc:78:47:c9:f3:cc:2e:86:
fb:3f:68:f6:72:05:d3:11:b6:51:82:62:49:a3:6a:c4:62:7f:
4f:98:71:73:0c:67:c7:10:6b:22:33:7a:2d:38:66:86:ed:f3:
75:c4:cc:d4:1f:15:ff:a2:74:e7:23:24:db:c7:06:d5:a6:c2:
27:bb:27:f7:bd:62:c9:49:1b:8b:c2:5c:c7:1c:a0:64:71:fb:
2e:06:b2:50:10:5b:ff:83:43:ee:72:d7:24:ae:7f:b8:a6:91:
1f:33:59:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:00:54 2026 by rpki-client