This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
File: u-KUkERtaHB2W05h1-ubIsYARjg.mft (raw, json)
Hash identifier: tvf4Cu/ff5a25mIoMbb++xgoTVkaB3R1dS7/XFnDSEI=
Subject key identifier: 98:A2:A9:C2:2F:16:6F:AB:39:9E:21:8E:EA:46:7C:FD:49:9B:E6:6F
Authority key identifier: BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38
Certificate issuer: /CN=A9186D83/serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638
Certificate serial: 0CE4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
Manifest number: 0CCB
Signing time: Sun 04 Jan 2026 17:54:20 +0000
Manifest this update: Sun 04 Jan 2026 17:54:19 +0000
Manifest next update: Sun 11 Jan 2026 17:54:19 +0000
Files and hashes: 1: u-KUkERtaHB2W05h1-ubIsYARjg.crl (hash: vL0V7bUVh3ID+1+8ExCMGlrZ9w0ovn5P+qYEdITlMlM=)
2: 8BA504FCB27911EB978CE10AC4F9AE02.roa (hash: n01/3EIjRvyLbA9XmobgbcsSzY3lQa7SmWy3AZPr1nQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl
rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Jan 2026 17:54:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3300 (0xce4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186D83, serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638
Validity
Not Before: Jan 4 17:54:19 2026 GMT
Not After : Jan 11 17:54:19 2026 GMT
Subject: CN=695aa94b-6ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ab:5e:25:8d:df:4d:ba:ed:47:0c:61:d2:9d:
9f:99:28:4b:d6:f2:40:2f:90:32:4a:9f:17:8e:85:
ef:ee:30:48:ea:81:b6:4e:b6:16:0f:f8:f2:83:4f:
da:04:bc:e2:23:7a:3a:a4:cd:01:5b:d9:77:d4:dd:
6f:ca:ae:73:71:45:53:ad:3e:32:c3:9c:a0:2f:ac:
1a:b4:f1:d7:f9:0c:a1:49:ef:09:2d:f7:98:67:9b:
23:d5:e7:e0:27:40:cb:bd:07:82:c9:dd:31:a2:ef:
7b:f2:ab:62:03:58:88:44:c0:2f:ef:5d:7f:83:2f:
02:b3:a3:24:9b:1b:8a:69:be:f5:87:da:89:f7:fa:
8a:f8:08:ea:94:97:83:3f:7e:10:3c:bc:e7:fe:e1:
83:8e:6d:5d:2b:26:29:ce:03:bd:81:7f:6e:74:ea:
52:a0:a0:be:d3:84:7d:b4:40:db:6c:33:fb:df:bc:
88:6f:fd:73:4b:aa:3d:20:5a:75:88:85:25:fa:04:
1e:37:67:2a:8a:a8:25:94:3f:ce:40:3d:38:a1:ad:
96:93:6e:d1:16:22:0f:22:8c:a4:85:55:f3:5d:f7:
69:b9:43:eb:aa:b5:b8:6a:45:57:a1:e3:d2:8b:2f:
80:d1:1f:70:a5:07:06:6c:40:97:06:49:ad:1b:b9:
ef:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A2:A9:C2:2F:16:6F:AB:39:9E:21:8E:EA:46:7C:FD:49:9B:E6:6F
X509v3 Authority Key Identifier:
keyid:BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:5c:0e:f4:b5:aa:ba:d4:7a:05:65:c9:9f:5c:a7:ed:82:ce:
c1:6e:68:15:24:b9:65:c1:9e:43:74:4a:d6:ef:e6:d9:e5:50:
9d:e7:3e:cb:31:13:3a:58:ef:c5:9e:6e:6a:12:77:26:08:ad:
ae:bc:95:85:de:83:5e:24:dd:d7:45:43:6d:85:21:01:ef:7c:
51:a2:b5:18:0c:65:9a:3e:bd:67:08:ed:61:0f:d9:70:9f:6a:
8e:81:f6:64:8f:64:ca:7d:d5:69:28:d7:24:29:bf:34:18:2a:
a4:a7:f7:cb:e0:b5:ba:f1:6a:6b:92:5e:ff:66:f7:a2:2e:22:
12:2d:cd:59:a9:c2:6a:d3:06:9e:5d:86:d7:67:47:16:e6:b9:
36:25:a9:06:d3:0d:3c:ed:20:b3:c1:57:f1:2f:8f:df:19:f4:
48:65:5e:25:47:e8:c9:63:a9:23:99:c7:be:3d:6d:66:78:96:
ef:30:bd:df:51:93:4f:c4:1f:36:9a:b7:c9:b0:0d:fb:2a:f1:
30:35:5d:26:69:e3:da:e1:86:af:98:26:55:6f:2e:8a:1b:d6:
8d:28:3a:f0:a5:00:ed:1f:b5:c0:82:57:b1:e3:66:a1:c8:ff:
3f:7b:c5:f9:a1:40:27:aa:10:5f:f2:2c:be:34:15:73:ec:3c:
e7:31:b6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 01:47:51 2026 by rpki-client