This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft
File: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft (raw, json)
Hash identifier: LfRt78dTUPp6nncmgWux4VxArw1jXdb1D7cJ32dE/II=
Subject key identifier: C5:AD:F0:71:2E:1C:9C:6A:57:38:20:D8:F1:16:81:C0:16:A1:A1:49
Authority key identifier: C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE
Certificate issuer: /CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE
Certificate serial: 0833
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft
Manifest number: 082D
Signing time: Sat 24 Jan 2026 20:14:45 +0000
Manifest this update: Sat 24 Jan 2026 20:14:44 +0000
Manifest next update: Sat 31 Jan 2026 20:14:44 +0000
Files and hashes: 1: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl (hash: 0r5JqrQUXwZqXFys4I+k9uge/OGo07Wb4b/rOKX6PP4=)
2: 6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa (hash: d9YDBLOSLP/FYANr6D5ENZatQDGA2KDEhAgJYQsuAaw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl
rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2099 (0x833)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118166, serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE
Validity
Not Before: Jan 24 20:14:44 2026 GMT
Not After : Jan 31 20:14:44 2026 GMT
Subject: CN=69752835-4db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:7b:db:01:3f:54:65:16:6d:f9:98:30:96:
6a:c4:a7:82:e3:87:76:ef:8a:4f:2b:b7:6b:d3:7b:
f2:a8:45:cd:75:a3:25:3d:6d:e5:d3:0e:b7:31:1d:
fb:5b:db:e4:b2:51:5a:cc:c9:7e:80:6a:b3:61:13:
a9:c3:5f:b4:34:77:08:1b:e6:2e:2c:71:5b:ef:41:
f7:78:97:68:1f:1a:40:fa:83:8d:84:48:90:a9:f7:
90:ec:d2:39:89:66:04:d2:06:98:7c:25:9f:3a:50:
45:35:90:83:22:c7:5a:56:bb:0f:f8:e5:56:60:c9:
17:1d:c8:2c:8d:a9:a6:d4:aa:e9:a5:7a:42:2c:e6:
b1:1d:e1:0a:54:7d:4d:02:b2:8d:e6:2a:bd:1d:14:
03:42:40:e7:ce:cc:be:9b:63:20:16:b5:9a:93:b1:
2f:ef:dc:98:72:57:84:1b:93:50:ad:ad:8e:9f:df:
c7:4f:88:ca:b8:6f:1b:4b:2f:a8:80:14:ce:5f:3d:
f1:e0:e4:e8:c8:3f:e0:62:2c:cb:52:00:8f:a3:47:
86:01:be:b0:f9:c4:d3:d1:80:2d:12:e9:ad:5a:ca:
59:9b:5c:98:13:d8:eb:81:da:63:40:92:4a:91:e1:
c5:28:9a:bb:b4:97:57:52:66:65:eb:f3:61:c3:79:
bc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AD:F0:71:2E:1C:9C:6A:57:38:20:D8:F1:16:81:C0:16:A1:A1:49
X509v3 Authority Key Identifier:
keyid:C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:e7:cb:e4:dc:03:2e:50:37:71:62:e3:64:3c:34:de:82:18:
bb:4d:e0:c1:99:a0:d3:06:d0:97:4f:e4:7c:c6:b3:37:9c:ba:
25:2a:ef:5e:3a:8d:bb:07:be:7c:e2:08:3e:a2:cd:ca:9c:58:
f2:63:21:7c:1c:70:67:75:aa:7f:83:ad:92:a3:be:aa:d3:82:
ba:6c:98:87:42:d1:24:4d:5f:05:1b:f7:d7:bf:6f:0a:33:ad:
f7:80:64:ba:89:8a:f7:94:da:e6:28:89:98:ef:1b:16:8c:05:
72:c4:ff:ca:01:c9:6f:64:ec:a2:2e:d4:20:47:ed:64:53:92:
c7:f2:9e:48:d7:ea:5e:c3:0f:b9:e2:8b:73:22:d5:b2:fa:87:
c9:00:70:38:19:94:30:63:33:c1:74:fe:26:9a:d9:89:db:bf:
1c:48:90:54:50:01:2a:46:db:5d:f0:8d:11:f7:55:77:ca:a8:
29:c7:23:d1:7d:cd:51:28:f3:59:9c:56:b8:fc:38:7a:cd:ba:
3f:06:dc:d6:ae:03:b4:d1:37:5f:77:53:a7:2a:f4:5c:6e:d5:
36:42:fd:9b:b2:10:e7:fe:02:fd:da:42:38:12:1d:e0:5f:1b:
11:57:5c:8c:a1:00:7c:a4:58:22:be:a4:50:a0:bc:54:24:c0:
83:ca:64:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:37:26 2026 by rpki-client