This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
File: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft (raw, json)
Hash identifier: yEVmauOW8tff0z41FH5z96H9u60QnOFbFuGEdtS/cQg=
Subject key identifier: 25:5F:4D:C6:FB:59:BB:F5:45:3B:96:44:F4:27:02:53:1B:47:D6:01
Authority key identifier: 53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4
Certificate issuer: /CN=A91BA251/serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4
Certificate serial: 05BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
Manifest number: 05B3
Signing time: Sat 24 Jan 2026 22:21:30 +0000
Manifest this update: Sat 24 Jan 2026 22:21:29 +0000
Manifest next update: Sat 31 Jan 2026 22:21:29 +0000
Files and hashes: 1: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl (hash: VU2jyTt2QuYRlodVJToMNixYnLBs6NmqG2wWTJauKDo=)
2: 567C8DB8354111ECBCC05B63C4F9AE02.roa (hash: bYFWsdvkvj/YP0lWqT722iQHX6ldCjoCu3l/f+mKfk8=)
3: DEA2CCF8050511EEB4D8141FC4F9AE02.roa (hash: CWQZ2s8MFSjBmURLoXYowyPCs3y0c7wnZAfg2tROfa4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl
rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:21:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1469 (0x5bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA251, serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4
Validity
Not Before: Jan 24 22:21:29 2026 GMT
Not After : Jan 31 22:21:29 2026 GMT
Subject: CN=697545e9-2967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:14:c9:b0:ec:a7:92:bf:ff:af:0c:83:12:
9c:5e:42:97:ea:73:54:4f:f6:da:82:2f:32:d1:17:
19:d9:b0:d6:09:41:b7:9d:c6:a7:f5:80:f6:df:61:
0a:71:f6:59:7b:0b:6e:1a:8a:e8:43:90:41:7c:33:
1e:8e:66:0c:4a:71:a8:11:74:c9:e7:61:43:cd:56:
f5:6c:d0:0e:a2:5c:68:ab:bc:6a:5d:6c:00:db:61:
1c:a5:93:85:05:b0:d5:a7:c3:52:b8:81:06:a6:07:
11:60:b8:e2:9c:0b:27:b7:c6:1c:53:a0:af:02:5c:
fc:67:61:bd:cb:89:a5:23:f3:0a:8f:98:9b:e8:b0:
45:bd:14:0c:5a:71:4b:40:f3:6c:bd:9b:c3:cb:c0:
5d:4d:31:19:bd:7c:81:8c:bb:09:9b:17:58:ee:2a:
0f:d4:94:64:50:f3:75:ce:34:cd:8b:d6:f1:b7:fb:
2f:d3:5d:ba:c9:ff:8f:71:26:c3:5d:78:38:52:c9:
ef:1e:91:cc:a6:9c:34:24:bf:4e:18:12:33:88:2e:
ad:7e:e5:9a:37:49:a3:a8:b0:0a:45:69:ec:a5:14:
c1:e7:53:8c:a6:71:4e:fb:e4:a8:52:98:24:f4:90:
e6:5e:c2:91:52:95:27:5b:f5:05:8a:5a:57:88:f8:
6f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5F:4D:C6:FB:59:BB:F5:45:3B:96:44:F4:27:02:53:1B:47:D6:01
X509v3 Authority Key Identifier:
keyid:53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2c:b1:c0:a4:04:da:3b:bf:e9:5f:75:b8:a6:c0:5b:6b:70:
4e:ce:b8:c7:9d:71:f1:63:c6:03:f7:83:26:df:4b:33:0d:ae:
3e:bb:2a:a1:c1:de:dc:2c:d0:27:d2:a4:a2:60:e2:57:67:b7:
01:14:77:7a:f0:e3:05:9e:8c:46:84:86:57:67:0d:9c:4b:4d:
fe:fa:16:50:cf:bb:8b:df:7e:ca:9f:f6:a5:02:e6:b1:3b:e0:
91:b6:7b:bb:a2:ad:6f:14:51:2e:dc:76:1c:75:1e:b7:58:b4:
14:49:e3:aa:d5:5a:87:1a:6c:75:6a:4a:0a:4c:89:a5:3f:f1:
4e:94:8e:75:ba:00:4f:fa:15:89:3c:8b:8f:4e:0d:b1:8a:47:
11:24:f0:d0:eb:43:04:79:7f:82:bb:a1:1c:2c:b3:76:1a:4f:
84:99:97:f6:23:25:75:d5:2d:b4:65:13:dd:d3:c5:a1:b0:55:
d5:cd:33:ff:3c:7f:b0:fe:fe:2d:c1:ee:df:d7:2c:f8:68:a0:
96:e2:85:0b:e3:91:a3:fa:5e:0c:27:87:1d:ce:c5:a8:03:40:
2a:85:b9:82:82:d1:50:13:d1:ae:ec:6e:b3:02:7f:99:4b:7a:
0f:49:e4:ac:d0:4a:05:58:1f:27:bd:7e:b0:a8:fd:27:2f:62:
33:76:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:20:59 2026 by rpki-client