This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft
File: jX4wWDULuN_v_Od3C7yMhrdioeQ.mft (raw, json)
Hash identifier: yPE5cxWUderttvf4If6ZtmH6XNkNjMip0Q+y1w9uumU=
Subject key identifier: 06:E7:06:4A:9C:18:AE:E2:BB:CA:26:5A:81:3D:35:84:16:1C:11:2D
Authority key identifier: 8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4
Certificate issuer: /CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4
Certificate serial: 0AA0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft
Manifest number: 0A7D
Signing time: Sat 24 Jan 2026 19:07:08 +0000
Manifest this update: Sat 24 Jan 2026 19:07:08 +0000
Manifest next update: Sat 31 Jan 2026 19:07:08 +0000
Files and hashes: 1: jX4wWDULuN_v_Od3C7yMhrdioeQ.crl (hash: AvJ+tSFTidTHHH0Qcpn27TRrVx2/KcGCZDOkZhCZ56c=)
2: 1043B2347BBD11EA8356C986C4F9AE02.roa (hash: k/0kDlmg7N7i1Ou2JihALEcA81/MswC1kB9cQskoL3k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl
rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2720 (0xaa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110C51, serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4
Validity
Not Before: Jan 24 19:07:08 2026 GMT
Not After : Jan 31 19:07:08 2026 GMT
Subject: CN=6975185c-91fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:b9:df:7b:39:ef:d6:12:70:1c:1a:3f:9d:
ca:36:2e:4e:7e:2e:15:17:6e:36:ed:a1:ef:32:92:
b1:0a:1d:f0:d5:44:e9:29:d4:28:48:9f:2e:4b:b4:
3f:a0:63:46:7e:62:68:ae:cb:0d:5b:5d:17:95:da:
1d:3d:aa:cd:38:a6:b4:ce:9e:32:e0:d5:6b:1b:b2:
7d:f7:c4:17:e2:80:57:f5:b7:60:83:de:d8:43:da:
fe:9b:ee:31:1c:48:be:7c:fb:7a:91:e4:97:02:b1:
42:18:67:83:05:b7:da:c1:a1:53:b7:f7:54:4f:8e:
2f:21:ea:14:c9:e4:85:ca:52:33:ce:de:c8:1b:7d:
43:ed:c4:6e:0b:38:0c:0b:b5:01:f1:65:28:cf:e7:
20:53:45:ae:91:e4:44:2c:69:a1:76:6f:6e:e0:86:
0e:11:7e:f2:8f:2a:17:10:90:1a:f3:1d:3e:e8:86:
91:af:0c:24:84:91:20:b9:b0:4e:90:84:e0:f2:cb:
71:eb:0f:de:07:1a:73:49:f0:88:96:92:0e:1b:9d:
c3:23:e0:27:7a:15:e1:fe:c0:b7:a9:85:5d:30:51:
53:49:cf:39:6d:1c:27:57:08:b9:98:3c:49:61:91:
bd:36:3d:7d:10:ff:da:8f:aa:c8:48:cd:15:1c:2b:
37:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E7:06:4A:9C:18:AE:E2:BB:CA:26:5A:81:3D:35:84:16:1C:11:2D
X509v3 Authority Key Identifier:
keyid:8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:80:0f:1e:41:75:f1:d6:c1:88:77:c0:73:80:ef:8e:26:ef:
c4:8f:24:0a:97:48:20:7f:f7:87:e3:ac:04:52:fc:b5:8f:3f:
d3:2d:18:66:ff:4c:8c:4e:18:e0:b5:e1:35:ef:6c:48:d2:26:
29:b4:87:73:30:78:34:f2:68:64:71:53:8c:45:e3:ce:f0:4a:
1c:5b:48:1b:c6:6b:fa:c5:fc:88:92:ea:e7:7d:70:7f:7c:33:
2a:aa:84:1e:b8:f4:69:00:b6:6a:fb:54:8d:99:e6:e5:8d:0b:
77:ff:25:d4:60:40:bc:0f:74:56:ea:b4:0d:62:c5:19:5a:f0:
88:06:58:2f:df:0b:38:cf:d7:98:3e:c2:42:81:0a:42:a8:bf:
2b:5e:94:80:65:58:00:ec:e4:37:2d:5f:b3:c4:9b:e4:19:41:
9e:ec:c4:1b:48:66:0a:58:fe:40:3a:d3:d8:64:fc:0f:1c:8b:
01:43:20:44:25:51:ec:33:be:c2:91:07:90:18:a5:f5:a3:9d:
3e:d9:65:01:b0:ba:75:0f:7c:30:21:07:3f:3e:fe:c3:d7:20:
b2:99:80:9a:01:b5:f8:d9:14:3d:48:af:9c:42:b2:b7:90:db:
b5:94:2e:40:b5:a7:c6:d0:16:0b:fa:4b:ce:5f:da:03:68:1e:
d8:07:e4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:21:36 2026 by rpki-client