This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft
File: ujgt6jovW4xMIgXskp9gG-NP538.mft (raw, json)
Hash identifier: sbIa1yXofpTenNOdrqWCmLLiJ2PVwt13JT9gT3Yhmdo=
Subject key identifier: 4E:06:78:C1:43:0D:68:B4:1D:FC:76:44:84:3C:FE:A8:45:A6:C2:3F
Authority key identifier: BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F
Certificate issuer: /CN=A91B7B34/serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F
Certificate serial: 0CC1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft
Manifest number: 0CB7
Signing time: Sat 24 Jan 2026 17:57:30 +0000
Manifest this update: Sat 24 Jan 2026 17:57:29 +0000
Manifest next update: Sat 31 Jan 2026 17:57:29 +0000
Files and hashes: 1: ujgt6jovW4xMIgXskp9gG-NP538.crl (hash: hRaHrrLmZeydYDjXEwEm/Y/oBjKu2kvzrkOpLMm/N8A=)
2: 52E56FA806C711EA84978821C4F9AE02.roa (hash: pC6YASmlOW3gbC5Njuzzo1yhASqi/WroinaiHpfVYXQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl
rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:57:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3265 (0xcc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7B34, serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F
Validity
Not Before: Jan 24 17:57:29 2026 GMT
Not After : Jan 31 17:57:29 2026 GMT
Subject: CN=69750809-e794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:eb:be:23:1a:c6:7e:e8:9f:a3:7d:d5:65:
39:24:ac:b9:84:03:67:3f:92:98:db:f6:f5:dd:19:
2b:1b:1c:a0:fe:e1:a0:77:14:bb:37:89:8a:a8:6c:
9f:72:87:b3:e7:d7:94:ac:3c:dd:bf:60:cb:99:78:
3a:4b:26:d8:4a:af:ee:1b:21:39:b2:e7:27:e3:21:
fc:3d:9b:25:48:36:52:08:75:73:9b:af:ed:5b:16:
d9:9b:59:b1:17:5d:a4:cc:68:40:19:be:99:0b:92:
d9:c9:fb:81:36:ea:a2:66:c9:3a:6f:55:27:9d:ed:
09:37:f6:27:fc:3a:74:c6:aa:eb:ae:2e:1a:f9:de:
a8:2d:43:a5:f5:2c:9b:06:63:82:b7:d9:55:80:81:
c9:7b:dc:eb:f2:5f:c6:d6:64:dc:0c:f3:db:70:f2:
6f:14:1c:91:a0:c2:e2:44:84:8b:8f:66:1a:7d:bd:
9c:0e:7b:4a:47:e5:58:31:cc:74:2b:89:b4:70:24:
f7:87:22:3e:83:17:b1:5b:47:e2:fe:c1:ec:e9:81:
50:f5:1c:f9:cd:fb:d7:d0:65:a2:dd:f7:56:4b:1b:
42:24:68:0d:d1:e4:c5:9d:33:85:56:8c:1a:f7:d4:
6c:cc:a5:27:a5:39:6d:9b:d3:be:0e:29:e3:e0:4c:
86:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:06:78:C1:43:0D:68:B4:1D:FC:76:44:84:3C:FE:A8:45:A6:C2:3F
X509v3 Authority Key Identifier:
keyid:BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:e1:d3:66:57:49:d3:61:b5:b3:e1:59:6f:e0:62:16:c8:75:
62:52:a8:f4:8e:90:89:03:26:29:72:9f:87:4c:70:cc:ae:1e:
f4:d5:ff:be:07:70:b0:f0:d2:b4:fe:ea:96:d3:4f:b4:ae:58:
ad:0c:9a:f0:2f:7f:01:36:77:b5:82:60:c4:e7:69:f6:8e:22:
02:5f:53:32:96:15:ed:a2:91:ff:47:be:3d:0f:2e:3b:81:db:
16:49:b6:48:27:3b:a4:f7:c6:34:b9:e5:2e:6a:86:6a:da:21:
30:0e:4c:57:f0:83:f3:4d:41:8f:de:3d:b6:e9:06:7e:1c:a4:
f8:71:35:42:81:28:69:65:eb:d9:81:84:9b:3d:e3:98:f0:c0:
45:dc:ef:83:72:44:97:aa:cb:ad:62:72:80:58:c4:34:63:b1:
89:ef:17:d2:94:f0:47:a7:40:04:e7:2f:99:63:56:3b:23:c1:
b3:e7:5b:ae:2a:27:3e:a1:f2:ea:34:e2:73:44:bc:e8:bf:c7:
8f:b7:06:83:84:24:39:47:28:5e:c5:c1:c8:2c:f2:94:8b:97:
cc:10:bc:c0:21:58:39:67:ac:35:a0:04:52:7a:af:24:d7:c2:
22:74:23:2e:b0:5c:6d:b4:3b:63:b0:f1:5b:f4:d5:10:a8:e0:
58:0b:5f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:20:52 2026 by rpki-client