This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
File: UTbgDQPR84UAq2cpty7T1yzWoQU.mft (raw, json)
Hash identifier: iblYhg9fsiF/ayTja918EZ5WgIYiy3yvy0FCe2iKGTQ=
Subject key identifier: F2:9A:B1:BD:20:6A:78:7C:70:C3:26:FE:47:22:2B:08:0D:B9:A2:7B
Authority key identifier: 51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05
Certificate issuer: /CN=A919B3BC/serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105
Certificate serial: 1E86
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
Manifest number: 1E70
Signing time: Thu 08 Jan 2026 15:54:23 +0000
Manifest this update: Thu 08 Jan 2026 15:54:22 +0000
Manifest next update: Thu 15 Jan 2026 15:54:22 +0000
Files and hashes: 1: UTbgDQPR84UAq2cpty7T1yzWoQU.crl (hash: T7xVH1f8Idng9nD1BQUeVdQnV9RIgwkmXClNcc5X+04=)
2: 03D29A521AD611F0BC67FC1CC4F9AE02.roa (hash: 1U6J+6Id+mf2w4NcxMra67o7UyeEGu3wuhpl6ihE5eM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl
rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Jan 2026 15:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7814 (0x1e86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B3BC, serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105
Validity
Not Before: Jan 8 15:54:22 2026 GMT
Not After : Jan 15 15:54:22 2026 GMT
Subject: CN=695fd32f-4317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:22:a0:8a:cb:1b:bb:a1:28:67:86:20:5c:82:
fa:fd:d3:dc:58:bc:74:34:07:be:33:e1:f0:ae:69:
05:86:6e:9c:46:85:47:d8:23:a2:a0:39:c3:d0:bf:
bd:3f:43:72:33:cb:b9:16:d4:6b:fb:c0:60:4e:3e:
0a:98:d6:c7:47:40:83:48:53:76:df:b8:0b:ff:af:
98:76:08:94:0f:1c:56:05:16:f3:bc:9f:17:88:72:
b6:5e:70:4e:d6:c2:aa:7a:55:02:8d:f2:92:e1:02:
6a:04:cc:12:fb:4c:6c:0a:c2:fd:d6:89:18:60:47:
d7:93:0d:a8:96:71:a2:99:ae:8a:ef:39:be:0c:79:
c5:fc:a9:de:5f:16:18:06:63:9f:d8:36:03:a1:a4:
66:cc:2b:bf:2d:ce:e5:47:b5:b6:e9:87:30:42:45:
03:c9:cc:fb:c4:a4:d3:36:a6:f1:83:ec:ce:25:85:
6d:70:5f:24:3e:6d:9d:9a:24:34:66:03:39:ac:cb:
e0:91:5c:de:ab:e1:96:04:9b:a4:17:3a:f0:63:40:
c0:87:3d:55:5c:65:b6:17:85:4b:00:50:72:04:3b:
de:a1:b1:8f:f3:3a:4b:56:0f:91:98:8a:6e:20:89:
5d:04:ae:b4:d1:c9:9c:24:86:fe:72:e9:6b:00:81:
64:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9A:B1:BD:20:6A:78:7C:70:C3:26:FE:47:22:2B:08:0D:B9:A2:7B
X509v3 Authority Key Identifier:
keyid:51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1b:98:dc:09:66:4c:fa:75:c9:5e:a3:1b:07:b7:5f:c8:df:
f8:4d:10:de:b7:70:57:b2:e7:8b:10:31:eb:60:8e:50:19:4b:
9a:a8:da:7a:ce:6c:5d:6f:b2:6b:17:5c:9c:0a:79:d4:d5:3a:
62:29:d5:31:a6:d1:ef:43:8f:ce:99:44:ad:95:40:92:f0:bd:
9f:80:a3:dd:f8:41:69:51:90:8d:9c:81:f7:20:42:34:23:36:
8b:4d:94:85:3f:04:3a:7a:9e:e4:e5:3a:d7:d4:6d:4c:07:1c:
57:a5:98:26:75:97:e7:6a:56:57:78:10:37:6b:5b:14:27:57:
19:24:e8:70:2c:c5:16:46:16:85:de:f6:db:81:a9:c5:f6:e3:
97:9d:bd:ae:2f:6a:62:36:d6:4b:92:de:9c:d8:5a:fa:c9:b1:
cd:d5:f8:50:56:45:37:d5:72:44:b4:5c:88:80:8c:51:df:e4:
f2:21:f9:96:53:a0:3f:6e:9c:66:8f:0a:09:f9:58:76:ba:d1:
d1:04:9a:a3:8b:03:6a:11:45:e5:49:66:9e:88:a5:9e:a5:7a:
1c:6d:fc:47:e6:f3:ef:97:b6:7d:1d:00:09:6e:9e:98:9d:75:
51:3a:27:f4:5f:5b:45:2c:77:b0:ed:42:61:91:9c:0d:f9:84:
0c:15:0f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 23:50:26 2026 by rpki-client