This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft
File: umn8tA4zSXV_ok-OM1eRxfAEXVg.mft (raw, json)
Hash identifier: Upw+qA/CeVFvw7jVbXNlrTuFr6OM8Ey4tAmQG5H1V2I=
Subject key identifier: 79:5B:90:73:D0:44:AB:55:78:A8:4D:FB:B7:0B:00:1E:56:9E:0B:96
Authority key identifier: BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58
Certificate issuer: /CN=A91EBA81/serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58
Certificate serial: 0493
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft
Manifest number: 0488
Signing time: Sat 24 Jan 2026 23:17:35 +0000
Manifest this update: Sat 24 Jan 2026 23:17:35 +0000
Manifest next update: Sat 31 Jan 2026 23:17:35 +0000
Files and hashes: 1: umn8tA4zSXV_ok-OM1eRxfAEXVg.crl (hash: K2nIhLsjjPndGODxrRJRlynfsi8h0qQtVe1nKsrBtI8=)
2: 159DA092E9B711EFB8454123C4F9AE02.roa (hash: tjoX2rKURmmp0SIpilUWla3AD/nRXhfocceVz0iL1og=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl
rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1171 (0x493)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBA81, serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58
Validity
Not Before: Jan 24 23:17:35 2026 GMT
Not After : Jan 31 23:17:35 2026 GMT
Subject: CN=6975530f-eb2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:6f:c6:19:05:45:69:34:13:34:85:2d:ef:
2f:5e:91:7a:9f:e1:c7:70:6d:c9:63:8a:51:5f:6e:
10:4b:5f:6a:0f:4d:2f:51:52:ea:74:1c:af:3a:e7:
49:14:0b:0c:b9:f1:da:67:9d:cb:dd:25:08:5f:6c:
be:9a:da:c4:c6:ec:57:9c:ca:b6:1d:6e:e7:0a:56:
de:91:08:c4:40:22:b5:bc:9e:f2:d1:93:c7:0f:44:
49:87:96:ca:76:b4:e8:60:57:b8:14:16:c8:da:9f:
2c:5c:28:47:47:2c:bb:f9:c3:10:6e:9e:54:b1:34:
16:67:36:77:57:86:b4:3d:06:a6:f9:22:f8:5d:01:
12:69:6f:29:9c:10:f7:19:a3:9f:1f:5f:63:c3:0c:
65:74:00:b3:fd:f8:00:43:d1:1a:db:1f:32:c4:21:
db:2f:6d:31:57:5f:8a:5f:05:19:04:15:72:56:65:
43:bf:60:c1:9b:0d:b0:b5:a3:77:6a:63:66:87:3b:
a7:bc:ab:ef:c2:9c:f2:33:36:22:7f:f5:ca:0a:e2:
2a:e8:c9:43:4d:9a:51:91:45:a2:e6:af:2c:91:43:
05:d4:58:fa:70:06:2c:3a:62:4a:eb:54:42:58:f7:
85:5f:27:4b:d4:6a:20:cf:61:d5:18:bf:e5:6c:c9:
73:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5B:90:73:D0:44:AB:55:78:A8:4D:FB:B7:0B:00:1E:56:9E:0B:96
X509v3 Authority Key Identifier:
keyid:BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:1c:a4:0d:c0:7a:8e:15:f3:e1:42:3b:08:be:3c:23:21:55:
ed:ba:ad:01:d9:1f:42:ca:e3:d6:33:03:25:4e:2e:38:0b:79:
de:da:4d:c3:08:96:6f:3d:6e:a1:57:1d:7b:cc:81:15:ce:78:
02:58:72:c2:2e:14:96:21:3c:5c:7d:bc:28:cb:99:1a:97:ff:
cf:b1:31:a3:e9:8c:75:03:0c:fd:96:17:a9:98:26:97:fb:28:
42:68:65:b5:59:82:8b:f7:e0:33:5b:88:a0:0e:d3:e1:11:20:
81:4e:14:a7:df:25:b2:ec:34:97:88:8b:b2:3d:54:4e:fc:b2:
6f:4e:f4:1a:99:8e:54:00:74:c1:b8:e7:c6:a2:15:5d:46:9a:
ca:0f:2f:2f:f0:a3:a9:d6:a3:49:5a:d4:c9:9e:e2:da:36:49:
a1:a4:df:2f:bc:9c:d2:ad:c5:e7:2f:3e:55:75:85:da:c9:64:
64:5a:fb:59:17:0c:0a:89:55:ce:b2:46:0b:39:bb:39:4f:67:
3d:cb:8d:5a:94:db:60:37:f8:73:2d:d2:fd:8f:a7:e0:e2:90:
52:b0:91:ee:f4:26:9e:ed:21:d3:dd:17:3b:61:54:5d:e2:6c:
46:4c:7a:a4:72:3d:0b:f2:51:ff:e2:22:b7:ec:85:da:44:bf:
1e:46:22:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJBODExMTAvBgNVBAUTKEJBNjlGQ0I0MEUzMzQ5NzU3RkEyNEY4RTMzNTc5MUM1
RjAwNDVENTgwHhcNMjYwMTI0MjMxNzM1WhcNMjYwMTMxMjMxNzM1WjAYMRYwFAYD
VQQDDA02OTc1NTMwZi1lYjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqBFvxhkFRWk0EzSFLe8vXpF6n+HHcG3JY4pRX24QS19qD00vUVLqdByvOudJ
FAsMufHaZ53L3SUIX2y+mtrExuxXnMq2HW7nClbekQjEQCK1vJ7y0ZPHD0RJh5bK
drToYFe4FBbI2p8sXChHRyy7+cMQbp5UsTQWZzZ3V4a0PQam+SL4XQESaW8pnBD3
GaOfH19jwwxldACz/fgAQ9Ea2x8yxCHbL20xV1+KXwUZBBVyVmVDv2DBmw2wtaN3
amNmhzunvKvvwpzyMzYif/XKCuIq6MlDTZpRkUWi5q8skUMF1Fj6cAYsOmJK61RC
WPeFXydL1Gogz2HVGL/lbMlz7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlbkHPQ
RKtVeKhN+7cLAB5WnguWMB8GA1UdIwQYMBaAFLpp/LQOM0l1f6JPjjNXkcXwBF1Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE4MS9DRTEzNkJEMDc0
NTcxMUVDQjM5ODc1MThDNEY5QUUwMi91bW44dEE0elNYVl9vay1PTTFlUnhmQUVY
VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Vtbjh0QTR6U1hWX29rLU9NMWVSeGZBRVhWZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QkE4MS9DRTEzNkJEMDc0NTcxMUVDQjM5ODc1MThDNEY5QUUwMi91bW44dEE0elNY
Vl9vay1PTTFlUnhmQUVYVmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAYHKQNwHqOFfPhQjsIvjwjIVXtuq0B2R9CyuPWMwMlTi44C3ne2k3D
CJZvPW6hVx17zIEVzngCWHLCLhSWITxcfbwoy5kal//PsTGj6Yx1Awz9lhepmCaX
+yhCaGW1WYKL9+AzW4igDtPhESCBThSn3yWy7DSXiIuyPVRO/LJvTvQamY5UAHTB
uOfGohVdRprKDy8v8KOp1qNJWtTJnuLaNkmhpN8vvJzSrcXnLz5VdYXayWRkWvtZ
FwwKiVXOskYLObs5T2c9y41alNtgN/hzLdL9j6fg4pBSsJHu9Cae7SHT3Rc7YVRd
4mxGTHqkcj0L8lH/4iK37IXaRL8eRiJP
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:38:05 2026 by rpki-client