This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft
File: UkWN1qz9QNreWs3IL01ZLaUp58c.mft (raw, json)
Hash identifier: TD0/gqA8q+UrtMjHHVtxLv3+lW12gm2Ao1F+KxugqQk=
Subject key identifier: A4:86:74:4E:6E:1D:F3:B5:28:41:7D:02:18:DE:00:2B:BD:07:F7:59
Authority key identifier: 52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7
Certificate issuer: /CN=A91DDDA7/serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7
Certificate serial: 0987
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft
Manifest number: 0987
Signing time: Sat 24 Jan 2026 19:28:19 +0000
Manifest this update: Sat 24 Jan 2026 19:28:19 +0000
Manifest next update: Sat 31 Jan 2026 19:28:19 +0000
Files and hashes: 1: UkWN1qz9QNreWs3IL01ZLaUp58c.crl (hash: J7YJ0EKf96dVa2pBacL6Lyo2JJjCFOwFTbAR8/RBzn8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl
rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:28:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2439 (0x987)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDDA7, serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7
Validity
Not Before: Jan 24 19:28:19 2026 GMT
Not After : Jan 31 19:28:19 2026 GMT
Subject: CN=69751d53-0eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:18:04:a2:34:fb:8c:da:bf:26:0c:ee:90:97:
f6:a9:25:d4:f9:82:ce:b1:c3:24:d2:77:88:87:01:
24:69:ab:33:23:6c:99:c6:4c:1d:f8:6f:09:78:80:
3b:f1:ac:49:33:2c:1c:d2:87:db:74:12:1b:28:7b:
a7:51:26:84:3b:25:53:32:54:d4:d7:0f:5f:ca:6d:
8a:5a:38:f8:7c:d1:ff:92:57:03:8d:ef:dd:7d:7a:
4e:26:07:69:10:01:8e:8f:11:17:a2:13:81:99:d7:
f3:11:9c:b4:de:9e:82:64:1c:20:5a:ac:3b:0f:fb:
ff:1a:5c:f2:1d:fc:4d:fa:2f:c1:07:b1:d6:f3:8c:
6e:cc:af:bf:8c:b6:c7:e6:76:37:54:3f:7a:72:0b:
dd:bd:3c:cf:64:c8:19:1a:5f:c0:9d:04:8a:22:dd:
39:b5:e6:16:61:1c:af:79:5b:bb:48:31:0b:ce:b1:
e7:01:70:e6:b0:fe:5f:67:ff:bf:fb:a0:82:82:4e:
9f:76:15:25:9f:66:d1:fe:18:9a:f2:77:eb:77:5b:
7d:7f:59:cc:3d:fd:d2:38:19:4f:17:04:c5:ec:59:
93:3b:9d:ac:cf:3d:3a:c0:0d:24:f7:d8:a9:a9:75:
3f:13:8d:35:10:97:9f:db:63:46:7f:60:0b:7a:b9:
08:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:86:74:4E:6E:1D:F3:B5:28:41:7D:02:18:DE:00:2B:BD:07:F7:59
X509v3 Authority Key Identifier:
keyid:52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f8:cd:57:b7:98:0a:82:c7:2a:1c:26:be:01:80:8a:dd:d3:
7f:04:cb:07:93:b4:1b:b0:ce:33:2f:54:d1:b9:48:15:5d:0e:
eb:fc:a7:33:0f:3e:4f:a7:ff:8c:a5:9c:46:16:8f:b5:6f:e4:
84:5a:16:30:98:1f:57:94:dd:11:49:67:f8:79:b6:48:47:e3:
f8:32:16:33:9a:cc:00:17:06:99:b9:83:31:ac:58:49:44:d5:
6c:3a:b2:2d:fd:16:aa:d8:33:57:7a:ca:5e:ec:2a:bd:18:e3:
b3:9d:0b:4a:52:1e:5e:f4:43:ce:5f:34:24:d6:9a:ec:89:15:
20:a5:11:bc:6a:2b:23:2b:97:b7:9b:cf:c0:11:cf:33:a9:1d:
89:36:84:e6:2d:48:85:7e:66:e9:f7:f6:d1:1d:52:4c:0f:28:
66:48:74:81:e2:6c:24:f6:a4:b8:ea:10:7a:60:93:40:f7:44:
39:e0:bc:65:a4:b0:7f:c4:56:98:7a:56:70:d6:25:f8:7d:80:
1a:b7:c2:0e:55:b8:6c:ad:89:1a:bf:e2:07:2f:43:77:b3:32:
75:10:4b:06:65:86:cb:3c:7f:2c:eb:7d:b1:26:fc:48:bd:d5:
e6:3e:f0:11:74:f0:27:d6:e3:f8:d1:b4:4b:c0:e4:74:cf:78:
09:b7:b3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:18:40 2026 by rpki-client