This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
File: UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft (raw, json)
Hash identifier: xyKip9c7id72/4QxXz5btV9pOYvEPopKJu09BwEbHeY=
Subject key identifier: 67:96:94:0E:9C:1A:45:6A:22:F0:36:FA:8F:DB:9C:A4:1E:1B:7C:F1
Authority key identifier: 50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74
Certificate issuer: /CN=A91AF2D9/serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74
Certificate serial: 0110
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
Manifest number: 010B
Signing time: Sun 25 Jan 2026 04:16:27 +0000
Manifest this update: Sun 25 Jan 2026 04:16:27 +0000
Manifest next update: Sun 01 Feb 2026 04:16:27 +0000
Files and hashes: 1: UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl (hash: cVIS0DA9s6IRMlnRjnvlVAfC+QuEG1xBNHC5laJQ0N0=)
2: D48472829E9011EF84D96F7DC4F9AE02.roa (hash: nCdw/pdOq9y5TEkGVX9N7sYIIziw8hJRZc9PdeGmDU0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl
rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF2D9, serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74
Validity
Not Before: Jan 25 04:16:27 2026 GMT
Not After : Feb 1 04:16:27 2026 GMT
Subject: CN=6975991b-cd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:7d:50:32:9a:06:d9:95:ef:8c:a1:71:8b:
7a:78:8a:89:80:6f:cd:c1:c1:21:d5:90:60:18:36:
7e:31:5f:b4:61:0d:e2:03:d9:f7:2b:f6:19:d7:b4:
76:8d:f0:96:61:4a:b1:38:d5:74:cf:3e:8c:0c:52:
e1:2e:0a:89:e8:cb:87:5f:e7:5f:98:15:5a:ca:cf:
3a:b4:de:e9:df:92:1c:79:26:55:92:74:42:44:6b:
06:76:a8:d6:8f:d2:79:27:c7:d3:8c:07:34:28:e7:
5a:62:38:67:05:c2:1f:35:db:e5:a2:20:7d:65:8b:
63:3b:fe:d5:29:83:17:68:2c:97:fd:9f:b1:85:04:
22:ef:5c:28:38:09:c9:31:7e:b7:e2:43:9b:fe:e0:
5c:6e:9f:8a:ca:8e:e3:76:d2:6f:f6:ad:b6:bc:f6:
09:a7:79:1a:1d:4f:89:4d:c7:37:23:09:4c:cd:f3:
84:d8:a6:ec:22:d4:89:7a:09:7b:2c:f6:a3:67:64:
6d:b3:4e:f6:98:a7:d6:b9:10:4e:83:60:e7:01:b2:
41:1f:38:91:e4:1c:1e:73:5f:bd:c4:1a:f4:13:80:
6d:be:73:8c:a0:d0:c9:04:ce:a5:6c:06:fe:fe:a3:
55:05:e2:32:b1:6d:40:6d:71:a1:2f:1c:df:48:f0:
fa:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:96:94:0E:9C:1A:45:6A:22:F0:36:FA:8F:DB:9C:A4:1E:1B:7C:F1
X509v3 Authority Key Identifier:
keyid:50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:84:74:89:8f:1c:14:dd:07:ad:f8:5d:08:16:3d:74:48:23:
1b:0f:27:34:65:3b:30:1f:4f:49:cc:4f:7e:8c:8e:19:18:c4:
ad:07:86:d9:32:58:5a:f9:f2:fc:91:39:a6:63:2c:d6:93:63:
ef:1f:09:b2:a8:e6:2d:b1:51:61:bf:7f:4a:e3:fd:dd:cd:4e:
f1:42:0a:82:b2:ed:29:f8:dc:e2:44:23:94:c7:e9:2c:69:42:
d7:52:0b:e9:fa:67:f7:68:15:eb:69:3d:8b:18:8d:5e:f1:df:
44:b5:ee:02:bb:02:35:08:a9:0e:a9:01:1b:b4:c7:38:6d:5b:
e0:04:d5:cb:05:97:71:6b:26:18:e8:cc:e0:59:6a:5a:10:34:
d9:b3:e4:a2:5a:49:fe:b7:df:1f:ce:e2:35:ab:98:aa:9f:98:
eb:0f:86:fe:81:9f:52:54:22:78:32:6e:11:45:24:a3:46:ef:
2f:cc:49:9b:f9:31:1f:39:f7:40:4f:36:bd:1f:a7:ab:e3:4c:
2c:e6:b4:13:e5:07:0b:cd:28:8b:54:9f:e1:f3:5d:92:74:cc:
45:ad:95:63:7a:62:7b:7d:32:50:f8:62:12:46:98:45:14:c4:
13:d8:66:bd:a0:b5:39:a3:40:07:a0:1c:b9:0e:c9:2f:28:f5:
33:3d:83:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:02:04 2026 by rpki-client