This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
File: Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft (raw, json)
Hash identifier: Lrmxqz9tOH+qHDNjOsg4zw3BMG4wLLqmidcW9kfk8vc=
Subject key identifier: 93:FC:DB:E4:53:F9:00:E5:00:67:33:D8:F9:D2:C0:69:2C:F6:87:FD
Authority key identifier: 52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B
Certificate issuer: /CN=A91F9C95/serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B
Certificate serial: 0C30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
Manifest number: 0C29
Signing time: Sat 24 Jan 2026 18:20:13 +0000
Manifest this update: Sat 24 Jan 2026 18:20:13 +0000
Manifest next update: Sat 31 Jan 2026 18:20:13 +0000
Files and hashes: 1: Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl (hash: umHUzR4dSsD6gNqyfFUilMZEljwobeJQbmSNnVhaukY=)
2: C7F8C83C217311EA93A29F82C4F9AE02.roa (hash: Jvoa2wjsCRH9WrHhsgTUNGCatVDEZjWYoT6a8W58UDs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl
rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3120 (0xc30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9C95, serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B
Validity
Not Before: Jan 24 18:20:13 2026 GMT
Not After : Jan 31 18:20:13 2026 GMT
Subject: CN=69750d5d-cfac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:46:91:b9:00:df:57:12:c7:5f:8e:11:13:d6:
41:6d:49:d6:1e:10:9c:16:5a:f7:e3:94:ff:6c:f0:
ff:6b:2a:8e:66:60:8c:6f:b0:9d:31:46:c1:db:09:
42:20:af:21:87:ff:ae:03:91:ae:4c:2f:a6:0d:f2:
eb:94:b3:e2:95:c7:83:0b:53:12:1b:94:d9:28:d6:
a4:58:fa:3a:81:6f:2a:75:95:04:26:7d:db:46:d5:
57:43:e8:7c:7e:5a:4b:f1:0f:7f:f2:ab:d9:5c:4d:
8c:1e:71:ec:e3:20:47:57:e2:87:3f:8b:b3:f9:60:
e0:00:3a:c6:c7:c0:05:9b:b7:ad:fd:48:4e:43:de:
af:9d:0d:cb:61:c9:2b:46:ab:b4:8d:0d:95:82:fa:
cb:4d:f3:19:a7:de:3d:a6:55:d3:02:6b:42:18:d4:
ef:c4:8f:25:70:8e:29:48:06:47:9b:53:dc:48:03:
0e:87:98:1c:25:40:c2:1a:ac:62:34:ad:ab:54:7b:
3e:d7:d6:47:12:47:e8:ea:5a:d3:48:55:63:9f:39:
0a:c0:fc:63:92:40:c0:8e:22:79:5c:e5:b2:ae:df:
38:57:f8:69:c2:bc:f5:9f:6d:66:6a:17:76:cc:c1:
0f:6f:ac:50:2e:03:93:02:45:5f:18:74:8c:67:1c:
1c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FC:DB:E4:53:F9:00:E5:00:67:33:D8:F9:D2:C0:69:2C:F6:87:FD
X509v3 Authority Key Identifier:
keyid:52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:34:8a:1c:ab:14:d2:11:35:89:12:80:ca:5c:12:e2:7e:16:
cb:3f:95:06:05:8d:5d:d8:b8:e2:ec:f3:a1:ea:9e:fe:7c:ea:
21:05:6c:5f:53:46:fe:b1:56:24:b2:77:29:80:f8:75:8b:65:
03:bf:d8:4e:8d:5e:90:dc:98:8e:7e:b2:10:8f:b8:43:62:73:
32:0a:8a:81:c2:18:94:88:a4:2b:c0:28:0c:dc:6c:82:32:ea:
95:84:fd:74:f7:f7:71:39:ed:f1:cd:28:1a:e9:21:db:48:b4:
f5:d4:88:6a:79:a2:f2:fb:39:e1:99:7e:cb:c7:d0:ff:c7:2f:
cd:24:27:60:4f:2f:d8:37:c5:3c:f9:b4:2b:94:b9:4e:21:0b:
d2:29:4a:52:f6:89:4c:4c:f0:76:cc:6c:b4:6f:96:3e:db:5e:
3f:f0:1a:04:0c:eb:85:92:87:a0:00:5e:2b:db:8a:7e:12:ed:
91:cc:81:a3:8b:6c:60:28:a6:7d:f2:cc:24:fe:33:aa:d7:6e:
bc:b9:f7:29:c5:a9:17:13:5c:99:60:db:09:f0:19:49:23:d8:
ec:eb:5b:37:82:ea:cb:72:7d:9c:8f:8b:2d:02:b1:1f:a5:69:
47:ab:31:b7:a3:ff:63:76:f9:67:f7:be:ef:47:c1:34:5c:07:
ee:be:8d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:36:28 2026 by rpki-client