This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
File: UN4cYHM-ori3boQDYJGOHyXEbkM.mft (raw, json)
Hash identifier: IhO8UT7sf+3lOSeNUWGrh7QG1aBCtSExWy2dZ6sszbI=
Subject key identifier: C0:B7:B1:98:5D:89:FA:6B:98:0E:73:B5:66:64:A3:AF:3A:39:51:E9
Authority key identifier: 50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
Certificate issuer: /CN=A916701E/serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Certificate serial: 0C6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
Manifest number: 0C57
Signing time: Sat 10 Jan 2026 18:15:33 +0000
Manifest this update: Sat 10 Jan 2026 18:15:33 +0000
Manifest next update: Sat 17 Jan 2026 18:15:33 +0000
Files and hashes: 1: UN4cYHM-ori3boQDYJGOHyXEbkM.crl (hash: zB3JHp786FbSyIZJff6+Ctc48PYfRlNVe3l5j+peF84=)
2: 46C5452E0DD711EF85707821C4F9AE02.roa (hash: vHCE8Xl5BDP1uHkO7u1AQeNIYeGBlOPuRbaiEEaJ7/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 18:15:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3180 (0xc6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916701E, serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Validity
Not Before: Jan 10 18:15:33 2026 GMT
Not After : Jan 17 18:15:33 2026 GMT
Subject: CN=69629745-097b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:b4:d8:3e:8e:8a:33:ac:95:25:58:d7:56:
f6:94:1f:b4:4a:b6:1b:02:93:53:42:65:85:4e:d5:
01:8b:3e:47:15:05:cf:17:5f:54:ae:72:5b:7d:e6:
33:2b:f2:9c:a4:96:c4:0c:45:d4:03:8d:7b:46:a7:
ac:fc:20:f5:7c:84:84:f8:94:8e:3e:81:33:b0:06:
fb:de:7c:ab:1f:6a:fd:e3:87:fc:17:e6:80:12:95:
43:5d:c5:41:01:5c:6c:6a:b3:db:74:f7:01:c6:5f:
0f:9e:ef:c1:43:2f:01:97:4d:44:1e:b0:1f:d3:4b:
3d:38:1f:47:8a:5b:e3:fe:01:8c:fb:5f:0e:26:c1:
62:77:61:88:e2:aa:c4:6a:62:f7:21:b1:ae:c6:16:
fe:58:14:07:7c:d2:31:f9:55:78:81:44:56:f5:f3:
55:d9:b3:1d:30:26:b1:91:d0:22:56:ca:05:93:15:
62:b0:09:bd:02:aa:71:89:5b:5c:f7:66:4d:7b:43:
c7:45:96:be:32:3a:55:f5:36:7e:d1:e8:71:b3:4f:
1b:de:76:dc:4b:2d:85:47:94:6d:93:82:93:85:cc:
72:7e:8e:c8:15:c8:45:43:08:3f:0d:27:ce:0d:2a:
49:fb:25:0c:9a:36:51:6b:70:dc:01:4f:86:44:62:
85:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B7:B1:98:5D:89:FA:6B:98:0E:73:B5:66:64:A3:AF:3A:39:51:E9
X509v3 Authority Key Identifier:
keyid:50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:d7:74:32:8c:3e:9c:69:8e:2a:93:f3:51:fb:71:3d:f7:41:
a6:52:fd:fe:51:3a:8e:42:91:bb:94:96:6f:24:9c:20:3e:03:
cd:63:ff:c1:42:c1:5b:80:b7:3d:25:ac:75:71:ae:b4:6b:18:
22:a8:67:fc:f6:d2:bd:6c:3e:6e:17:31:ab:a3:8e:79:42:3f:
7b:e2:24:87:7b:88:b1:61:46:d0:21:ef:66:cc:bf:5d:c8:63:
90:92:5e:c2:65:4e:18:04:25:51:ad:0e:bf:ff:32:33:61:3b:
b4:46:e7:6f:30:d7:a8:16:95:0c:f6:42:50:7d:8b:63:b3:b1:
ea:35:95:55:61:97:5a:a6:08:30:4f:b9:49:55:15:31:f5:6c:
73:5b:c4:8f:ff:96:dd:e3:9c:3f:cb:97:83:f1:45:8f:09:45:
57:60:c0:5c:cd:ed:c0:86:7c:ac:b9:bd:50:94:df:99:99:20:
c2:94:e5:32:17:d6:c0:14:ab:61:3b:90:f0:e4:f9:b5:29:a7:
50:b0:56:41:a7:e7:79:cd:dc:ee:b5:c2:d9:c3:e3:18:16:b6:
c5:df:fe:c1:b4:a2:a5:8b:a5:32:44:cf:5c:6f:99:f1:0a:6a:
be:e7:eb:90:32:90:ef:69:47:89:12:f5:ff:4b:1d:47:cf:cf:
6c:c4:13:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 11:34:42 2026 by rpki-client