This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
File: uesVSGZ3c32yc5_WVGKu55BhaMI.mft (raw, json)
Hash identifier: ixV19aKXLEs/P1prtmrCM8tUrmo8CnKMAXu0sTfvw14=
Subject key identifier: CC:C6:0D:E8:AF:B2:5E:D1:CD:14:E5:DF:89:2A:F3:D8:E6:0C:F9:4C
Authority key identifier: B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2
Certificate issuer: /CN=A91DA649/serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2
Certificate serial: 0C95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
Manifest number: 0C8C
Signing time: Sat 24 Jan 2026 18:06:49 +0000
Manifest this update: Sat 24 Jan 2026 18:06:48 +0000
Manifest next update: Sat 31 Jan 2026 18:06:48 +0000
Files and hashes: 1: uesVSGZ3c32yc5_WVGKu55BhaMI.crl (hash: sSUpI6pu9apPw34nYpn7mRCp/iCfWci3rJOWAvMKyHs=)
2: C4391160305611EABE7DF272C4F9AE02.roa (hash: ShWNoWlK1A1y7tJIOL2NddDhqDzgH2F/9l1o2jwcmL0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl
rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3221 (0xc95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA649, serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2
Validity
Not Before: Jan 24 18:06:48 2026 GMT
Not After : Jan 31 18:06:48 2026 GMT
Subject: CN=69750a39-02f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:26:c9:29:fc:ad:9c:c1:b7:fd:17:29:1d:d3:
9c:6c:10:f0:56:fc:ae:ca:9a:26:85:66:24:f3:59:
5d:98:a3:c3:21:69:b1:c7:d3:b5:6b:13:87:b5:59:
5a:7a:57:98:88:dd:24:de:f5:39:a0:d0:d3:64:69:
e1:cc:7b:a6:23:fe:e0:83:9c:db:22:d7:fc:05:a0:
61:69:6d:ab:29:77:23:be:f5:9c:1c:d0:bc:95:5a:
b6:db:57:63:bc:bc:14:11:aa:b7:ee:6c:a2:0a:12:
5e:0d:60:83:75:81:a1:fc:4c:87:35:eb:de:62:e5:
4c:3c:1e:0c:b8:c3:3d:a5:69:60:de:a7:83:ea:1d:
ee:77:11:3a:01:dd:dc:4f:5c:4b:3e:95:9d:76:9b:
de:f9:b2:f8:e6:99:da:ec:57:0e:d7:df:d1:b0:e9:
2e:b8:71:fa:a8:11:8c:57:1b:44:70:d6:a2:f1:b9:
4a:87:fa:42:67:a1:83:72:d3:e3:b5:19:24:4e:09:
ba:d8:e5:50:39:ae:7c:4f:5a:96:40:9c:ba:5f:57:
11:90:9e:ed:56:10:82:de:e3:ab:03:26:17:90:00:
22:62:a2:5d:94:76:70:10:76:c6:81:59:09:b8:9a:
a1:75:82:f2:95:95:7d:0f:f7:9e:4f:3a:65:5c:75:
f2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C6:0D:E8:AF:B2:5E:D1:CD:14:E5:DF:89:2A:F3:D8:E6:0C:F9:4C
X509v3 Authority Key Identifier:
keyid:B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:0c:c3:f2:00:80:d5:fe:cb:1b:25:9f:f5:54:fb:be:3f:7d:
e7:56:b1:ff:03:1f:b5:a1:26:46:17:19:52:57:15:42:18:c2:
81:cb:e6:c0:37:c7:3d:2d:5c:84:48:a0:4c:45:49:a0:c7:ea:
ee:eb:82:30:ab:1b:16:5b:2f:61:64:02:3a:fa:1c:7c:61:98:
0b:df:c6:86:1f:3d:90:16:b1:ee:f2:e0:f3:a7:ae:1a:f2:8b:
81:89:a8:f7:12:5d:5f:06:28:bc:7e:ff:cc:66:b3:a0:8d:9a:
69:f6:99:d4:c4:67:38:6c:fd:70:22:d4:68:60:66:ba:80:0c:
b0:eb:ac:f8:51:5a:b1:47:39:23:90:36:67:09:20:31:36:ae:
f9:c8:02:9f:1d:62:ee:ec:50:37:e9:9b:4f:e6:ef:5d:e5:6f:
d7:0e:56:26:85:a5:ee:b8:b9:da:b2:e1:30:25:d2:6d:48:ce:
e6:f0:5e:15:cb:54:16:c6:a1:e9:9e:be:94:a5:2b:7c:85:33:
1e:a8:9d:1a:b4:90:2d:65:d9:f8:6b:7e:ea:6e:f2:de:fc:08:
e7:f1:b0:b2:9c:f4:24:cd:8c:02:f1:54:69:bf:8b:1e:ec:fc:
3c:c7:21:5f:b6:f2:e2:98:6d:62:a9:71:3e:96:55:6c:a0:b6:
0f:51:f4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:10:35 2026 by rpki-client