This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft
File: Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft (raw, json)
Hash identifier: ar1JR1Gz+z73cxZNGv+edIq8ITJl6JRT0pQamj/ca5o=
Subject key identifier: B7:E8:6C:FC:D1:63:0A:04:36:5C:1A:40:46:7D:EF:CE:F3:EE:3B:38
Authority key identifier: 51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB
Certificate issuer: /CN=A91E9509/serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB
Certificate serial: 0265
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft
Manifest number: 025D
Signing time: Sun 25 Jan 2026 00:55:16 +0000
Manifest this update: Sun 25 Jan 2026 00:55:15 +0000
Manifest next update: Sun 01 Feb 2026 00:55:15 +0000
Files and hashes: 1: Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl (hash: UVkhIt5YYiJI5VyqE+Cm1HlX97i4E6wsCeaKaK6/FX8=)
2: F23AE0AE632D11ED8C102087C4F9AE02.roa (hash: Bi2+TUUi9KjDZhYC/bMb0EhL81rd7MZoY9SFjv5WPeY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl
rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:55:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 613 (0x265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9509, serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB
Validity
Not Before: Jan 25 00:55:15 2026 GMT
Not After : Feb 1 00:55:15 2026 GMT
Subject: CN=697569f4-d855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:25:7c:6f:d9:4b:22:2f:23:36:15:c2:ca:12:
e0:a3:3f:bb:7e:56:b9:f2:0b:6a:f9:01:1d:b9:1b:
9d:02:17:c1:d7:b3:f4:90:c9:fc:5d:d4:b7:3a:e7:
1b:08:ba:28:e7:50:a6:36:77:77:5c:c0:e7:b7:b5:
cf:08:18:60:c3:42:61:70:e7:bf:77:a2:2b:58:82:
92:e9:0a:b0:a1:70:ca:07:01:79:ee:7a:72:9e:41:
26:b4:df:0d:6a:eb:3a:d2:c1:99:74:b8:66:22:af:
08:ef:ab:08:f3:ab:3f:07:9c:30:8c:d5:43:5c:c3:
da:d1:62:c4:4e:a5:58:fc:c6:83:c6:6f:b0:5c:a7:
26:d4:e2:d4:74:ef:7a:ea:10:ce:3a:d5:b7:37:28:
4c:c3:17:22:5b:58:75:30:78:bf:26:23:8a:b5:63:
90:b9:68:4b:3a:95:b9:e4:8c:26:1b:07:4d:c0:64:
6e:4b:03:dc:5d:10:97:2e:1e:88:50:22:e7:ad:3c:
28:20:69:c9:c1:6a:55:13:ea:41:2f:5c:34:66:df:
58:78:10:d4:fe:05:7b:eb:f8:6d:9e:a0:a7:c7:3f:
a8:a5:be:ce:17:84:cc:82:2c:ad:a2:76:af:ac:df:
42:6d:15:62:cd:09:74:5b:65:85:c5:d4:1f:c0:4e:
3d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E8:6C:FC:D1:63:0A:04:36:5C:1A:40:46:7D:EF:CE:F3:EE:3B:38
X509v3 Authority Key Identifier:
keyid:51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:3f:c5:76:81:0d:88:d9:f8:46:2f:9e:47:24:47:17:45:22:
ce:e3:9f:5c:9d:15:1b:69:7b:7f:8f:9b:87:01:43:83:ac:36:
2a:18:18:a4:e9:59:32:a1:45:8e:92:35:57:26:56:09:6b:0b:
35:f9:ba:32:b2:d1:a3:ae:d5:2f:5a:17:39:9d:68:99:42:60:
4b:89:c7:91:e6:4f:fc:6b:88:50:c7:7f:44:23:b6:92:dc:cf:
93:29:bd:c4:a7:d8:63:59:9f:35:ec:e7:ec:73:42:67:12:ef:
46:9e:53:e6:ad:78:14:ca:19:fe:32:56:87:f3:9a:83:8c:07:
27:50:96:d7:f1:0d:da:82:1c:b3:5d:bf:ee:ee:32:9b:2e:8f:
5b:d6:91:d9:14:e6:e0:62:ed:a7:3d:73:8c:90:f2:f9:40:f7:
e3:4b:3d:b4:9e:ff:af:7d:a4:f0:7e:55:f8:55:93:41:82:41:
4b:6e:df:a1:4d:fa:84:a6:f2:24:94:7e:54:50:df:9d:5a:2f:
00:34:9f:63:97:d6:8a:f4:0d:f8:1c:97:1d:b4:a0:d1:2d:99:
01:44:d8:08:41:9e:79:58:ca:45:eb:d9:d4:dc:81:8b:97:d5:
51:d6:c1:52:91:76:64:31:e3:22:d4:4e:fc:d0:5a:9e:44:86:
90:3d:f9:90
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTk1MDkxMTAvBgNVBAUTKDUxQkVBMzYwOTQyOUQ5MUIxQzRFNDAyMkRBNjhCRDY0
M0MzM0MzRkIwHhcNMjYwMTI1MDA1NTE1WhcNMjYwMjAxMDA1NTE1WjAYMRYwFAYD
VQQDDA02OTc1NjlmNC1kODU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7iV8b9lLIi8jNhXCyhLgoz+7fla58gtq+QEduRudAhfB17P0kMn8XdS3Oucb
CLoo51CmNnd3XMDnt7XPCBhgw0JhcOe/d6IrWIKS6QqwoXDKBwF57npynkEmtN8N
aus60sGZdLhmIq8I76sI86s/B5wwjNVDXMPa0WLETqVY/MaDxm+wXKcm1OLUdO96
6hDOOtW3NyhMwxciW1h1MHi/JiOKtWOQuWhLOpW55IwmGwdNwGRuSwPcXRCXLh6I
UCLnrTwoIGnJwWpVE+pBL1w0Zt9YeBDU/gV76/htnqCnxz+opb7OF4TMgiytonav
rN9CbRVizQl0W2WFxdQfwE49zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfobPzR
YwoENlwaQEZ9787z7js4MB8GA1UdIwQYMBaAFFG+o2CUKdkbHE5AItpovWQ8M8P7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTUwOS8yNzRFRDE1RTYw
MUExMUVEQjc0MTZCNkNDNEY5QUUwMi9VYjZqWUpRcDJSc2NUa0FpMm1pOVpEd3p3
X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ViNmpZSlFwMlJzY1RrQWkybWk5WkR3endfcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OTUwOS8yNzRFRDE1RTYwMUExMUVEQjc0MTZCNkNDNEY5QUUwMi9VYjZqWUpRcDJS
c2NUa0FpMm1pOVpEd3p3X3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBjP8V2gQ2I2fhGL55HJEcXRSLO459cnRUbaXt/j5uHAUODrDYqGBik
6VkyoUWOkjVXJlYJaws1+boystGjrtUvWhc5nWiZQmBLiceR5k/8a4hQx39EI7aS
3M+TKb3Ep9hjWZ817Ofsc0JnEu9GnlPmrXgUyhn+MlaH85qDjAcnUJbX8Q3aghyz
Xb/u7jKbLo9b1pHZFObgYu2nPXOMkPL5QPfjSz20nv+vfaTwflX4VZNBgkFLbt+h
TfqEpvIklH5UUN+dWi8ANJ9jl9aK9A34HJcdtKDRLZkBRNgIQZ55WMpF69nU3IGL
l9VR1sFSkXZkMeMi1E780FqeRIaQPfmQ
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:19:49 2026 by rpki-client