This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
File: UhSSEEqxqLu-vYCplinU4uZjI3A.mft (raw, json)
Hash identifier: pTHYa875JU/3n4M0MZKGMuOgz86mmP2C9CimAAYwf1c=
Subject key identifier: DA:C0:C9:4F:D2:C5:A3:B2:4F:F1:2B:8E:B1:A1:4D:DE:A5:2D:69:4F
Authority key identifier: 52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70
Certificate issuer: /CN=A91C7409/serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370
Certificate serial: 52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
Manifest number: 51
Signing time: Sun 25 Jan 2026 06:17:55 +0000
Manifest this update: Sun 25 Jan 2026 06:17:54 +0000
Manifest next update: Sun 01 Feb 2026 06:17:54 +0000
Files and hashes: 1: UhSSEEqxqLu-vYCplinU4uZjI3A.crl (hash: X0Su24h74m2bA8DAxwbcByJOxh9lrUT02q+FfrEHqPo=)
2: E983DB547CB711F0AC8F9D6EC4F9AE02.roa (hash: E0HpiYi9oekDhMBwLHO28cWKce/Mgln+cFcKFRPDwlg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl
rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:17:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7409, serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370
Validity
Not Before: Jan 25 06:17:54 2026 GMT
Not After : Feb 1 06:17:54 2026 GMT
Subject: CN=6975b593-d0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e5:0e:84:50:c5:1d:67:c4:ea:87:7a:2a:26:
80:13:f0:74:a4:53:72:20:13:59:6f:ae:53:e1:a2:
4c:7b:a9:40:07:e4:8e:5f:58:f5:ef:e0:3d:ad:21:
16:07:34:1f:60:94:d3:c0:4b:4c:2b:7d:dc:74:83:
92:7f:76:9f:7f:1b:c6:97:b5:f0:a3:25:da:d9:3d:
d6:9a:5d:94:7c:9a:60:02:e1:0a:60:c6:1f:d8:69:
cb:47:78:d1:10:26:a5:cf:31:ca:dd:36:95:f9:1e:
31:14:4e:93:24:2d:7b:3e:49:ef:e9:0d:69:8b:e5:
d6:4e:87:86:81:e9:29:23:02:7c:3f:ca:bd:e4:30:
44:f5:59:c6:e7:54:2e:c4:c3:48:fa:29:04:a1:3e:
e4:e3:45:f6:2f:39:7c:98:31:5e:37:04:1b:a7:c4:
9b:24:de:9e:0c:85:b7:1f:e3:1e:1b:7c:9e:36:83:
a1:46:1a:09:bd:c9:09:4e:f1:14:81:aa:f7:04:30:
47:e0:4a:ec:62:39:fc:6d:5a:05:b2:57:c4:ec:f6:
18:18:41:c0:b7:c2:d5:f7:fe:db:5a:5c:81:f5:45:
4d:d7:06:90:7e:36:00:79:d6:d7:19:e8:c5:17:b2:
13:95:e8:7f:55:84:04:26:e4:54:13:f5:10:c8:1d:
38:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C0:C9:4F:D2:C5:A3:B2:4F:F1:2B:8E:B1:A1:4D:DE:A5:2D:69:4F
X509v3 Authority Key Identifier:
keyid:52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:aa:5b:92:19:45:70:e4:20:3f:96:28:19:fc:3c:56:f3:40:
68:4f:d1:65:44:f7:b7:8d:fa:95:d9:07:40:20:d5:4a:6f:4b:
c0:10:38:70:a7:a9:60:a6:b9:ca:b6:fb:bc:83:d4:42:3e:d3:
67:64:18:92:9b:b2:52:eb:93:1e:e7:ff:21:fc:53:3e:fc:53:
4e:c9:84:01:d3:bc:b1:f8:32:8e:3c:7b:b0:36:38:b7:55:b9:
89:96:25:e9:cb:07:7f:a2:96:df:03:85:92:bc:da:d0:53:c0:
77:d5:4e:24:8e:2c:87:6d:6b:2e:df:da:e2:3f:66:98:b7:eb:
4a:da:68:5f:54:bb:c0:f8:39:43:96:d7:d7:43:a8:1a:33:c4:
79:2b:4b:2f:26:b4:68:fd:3e:98:40:43:b8:ce:4d:b1:e9:44:
8b:79:b2:b5:21:30:59:8a:e0:02:8c:96:39:01:21:21:b7:92:
bd:1c:8c:df:3a:32:e5:1c:5e:f9:cb:e4:04:e0:06:f8:3e:bd:
2f:b1:f7:8b:83:df:5b:59:fc:df:22:d5:93:e6:d0:89:89:31:
da:5e:33:71:7b:54:47:1a:89:da:89:05:60:ea:89:2f:89:ae:
22:14:01:43:bf:9f:aa:f6:2e:90:5f:16:a1:6c:87:6a:1a:44:
8d:57:07:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:34:22 2026 by rpki-client