This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft
File: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft (raw, json)
Hash identifier: ps+CiUQ0Aksl8019nx+9d7pHFEAHvF37nach5fQ3rpc=
Subject key identifier: B7:32:96:58:39:AC:0F:74:18:5B:8B:C1:45:21:41:20:7B:4B:14:4B
Authority key identifier: B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62
Certificate issuer: /CN=A91D1149/serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762
Certificate serial: 0ED3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft
Manifest number: 0EC9
Signing time: Sat 24 Jan 2026 17:20:27 +0000
Manifest this update: Sat 24 Jan 2026 17:20:27 +0000
Manifest next update: Sat 31 Jan 2026 17:20:27 +0000
Files and hashes: 1: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl (hash: 8K0GwOhFNe9AIgDCiuSaCJ4YDJcq1kCyCmpuxvFQKUA=)
2: BD22841E9E4911E9A136D25AC4F9AE02.roa (hash: Gdmjy4eOm23bZo0u+QNI+KYIouesOlIiUyP5E+hvG08=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl
rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:20:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3795 (0xed3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1149, serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762
Validity
Not Before: Jan 24 17:20:27 2026 GMT
Not After : Jan 31 17:20:27 2026 GMT
Subject: CN=6974ff5b-0674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:b1:d7:27:2e:a8:7a:8a:f4:f9:71:09:5c:
f1:bb:18:e1:d6:7e:d9:a4:07:50:e1:05:bb:95:3d:
54:50:c0:85:3c:db:80:96:18:22:ec:ca:a1:b0:11:
94:f5:96:3d:b4:77:e2:ac:91:e2:20:4b:fe:f6:b3:
d4:ff:48:3c:63:62:3e:be:a5:1d:43:c0:36:df:83:
44:f6:41:47:ac:5a:a8:c9:58:78:d0:5e:8f:55:54:
dc:d2:ca:00:fb:4e:ee:d4:3c:b1:db:eb:c6:e4:57:
ad:d8:5d:75:84:ec:ae:7c:2d:0f:ef:fc:92:10:3f:
7d:a5:60:57:5b:2e:29:7c:23:5d:8c:24:3c:06:99:
f1:b0:87:ab:54:2d:76:c1:fe:64:ae:a7:29:f2:10:
55:4b:e2:dd:fc:73:60:e7:7e:5f:a6:0c:aa:76:05:
01:63:4a:02:8a:4d:b5:2f:b8:2b:24:d2:11:06:2e:
16:f6:ce:d8:6c:a6:b2:ba:ea:81:64:84:b2:a3:4d:
d1:fd:7d:f0:f5:69:82:b3:0a:10:87:4f:e7:81:a4:
23:f5:00:43:95:84:a7:92:ea:f9:44:8b:da:86:32:
3e:43:41:15:eb:2a:90:91:29:4f:5c:8b:da:92:80:
39:fb:3f:c9:e3:bb:c2:2a:11:08:16:d8:18:c0:e8:
48:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:32:96:58:39:AC:0F:74:18:5B:8B:C1:45:21:41:20:7B:4B:14:4B
X509v3 Authority Key Identifier:
keyid:B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:86:1a:9c:59:3f:92:36:63:ee:5d:5d:87:c0:b8:75:06:98:
89:75:89:a4:a1:b3:90:f0:eb:c0:de:db:47:c9:9d:3f:b6:8d:
09:cf:1f:7f:1e:ea:69:6d:25:9c:be:5a:2e:9f:03:fb:70:8f:
8e:6c:26:71:28:4a:b2:34:99:49:76:55:dc:0b:12:1d:3c:86:
27:9a:2b:16:b7:ed:04:b7:b4:d1:23:5d:3d:ed:91:9d:18:96:
7e:f9:5b:62:8a:b4:ae:49:4e:ef:54:76:aa:1f:26:ff:bb:1d:
83:e7:f2:59:f7:72:9e:f8:3d:d0:ff:b2:9f:77:3c:47:c6:d6:
e0:e7:33:e7:56:74:08:2f:cd:60:53:76:f6:39:4b:21:f5:f4:
77:17:e1:f5:1d:a6:b7:ac:25:ec:24:76:79:f0:45:a6:b1:17:
17:24:90:57:f1:a9:9d:5f:7d:bf:81:a1:32:ca:d1:c1:5c:80:
bf:70:d0:26:04:ff:8e:02:98:55:ae:75:7b:7d:0a:1a:01:0f:
18:9d:1c:5a:3b:13:13:c8:08:ad:40:64:5e:e7:48:0b:d9:32:
35:6c:0a:5b:f3:6e:ab:68:7c:df:83:83:5a:ed:c0:eb:96:92:
06:60:88:a6:ff:55:d0:ee:c1:93:4f:c1:3e:9f:ee:b3:6a:24:
16:c8:4d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:10:55 2026 by rpki-client