This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
File: xiZYMphXjR1K9yc-vXkccjCjdEk.mft (raw, json)
Hash identifier: WI2WWhkHKS66dfaQ2394KUZe1Axtnq7SN2c6ro1mMJ0=
Subject key identifier: 4B:80:9F:FA:28:AE:84:BF:08:59:2B:6A:09:4E:D4:C4:D9:70:AD:00
Authority key identifier: C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49
Certificate issuer: /CN=A91186C2/serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
Certificate serial: C4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
Manifest number: C2
Signing time: Sun 25 Jan 2026 05:06:09 +0000
Manifest this update: Sun 25 Jan 2026 05:06:09 +0000
Manifest next update: Sun 01 Feb 2026 05:06:09 +0000
Files and hashes: 1: xiZYMphXjR1K9yc-vXkccjCjdEk.crl (hash: aEVvy3AAimPumRgMTiigDNMK/po1AMMBY18pLwd2XmA=)
2: 7DFFCDA4D17F11EF8FAE452BC4F9AE02.roa (hash: yxYbVT0G3FIFNHaQq21RRd4odOx6/tGbrON4MVMOYMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl
rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91186C2, serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
Validity
Not Before: Jan 25 05:06:09 2026 GMT
Not After : Feb 1 05:06:09 2026 GMT
Subject: CN=6975a4c1-c112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:af:e0:29:1c:8a:82:1a:1d:79:59:80:05:87:
72:93:b7:4a:92:5b:0f:f1:6a:5c:70:ef:52:e1:14:
e8:e6:11:14:bf:ee:9d:68:b5:5a:6f:5e:f7:85:0c:
59:60:3c:5e:55:85:3f:4c:74:2a:ee:88:ec:04:81:
f7:af:94:7d:f1:29:c1:ef:3c:e8:7b:d3:8a:a9:30:
38:ed:4a:ad:f7:f4:54:7a:04:1a:39:6c:9d:ca:32:
fc:f8:a7:e1:8a:de:89:cb:70:30:7c:68:8e:8b:8c:
42:db:b8:a1:b6:7b:9a:1d:3b:ac:b9:ee:2a:ae:0a:
c0:b2:b8:f4:94:dc:dc:7e:79:d3:e5:80:ff:d2:d9:
1c:ca:96:f1:6f:ef:5a:bc:d7:88:04:54:20:eb:2c:
f2:80:51:f6:c7:86:58:95:c9:ca:d0:09:76:b3:fc:
da:f4:ca:ed:9a:03:21:8b:6e:50:33:72:0e:53:74:
5e:aa:07:52:cc:33:31:5a:36:d2:fc:33:4d:fa:d1:
ca:a2:7c:d4:b2:bf:a4:c3:ea:23:a9:39:ff:41:43:
f6:5f:fd:92:5d:10:6c:e2:b7:d3:44:71:3e:54:26:
67:f9:96:8c:42:c7:25:aa:35:14:b0:76:26:a7:cb:
08:cd:67:33:cd:21:c6:b3:eb:30:5b:b5:ed:15:77:
a4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:80:9F:FA:28:AE:84:BF:08:59:2B:6A:09:4E:D4:C4:D9:70:AD:00
X509v3 Authority Key Identifier:
keyid:C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:f7:ca:03:7d:e3:1a:ff:62:62:93:a1:5d:f7:20:0a:8d:67:
00:a0:a2:1f:f5:39:c6:17:4e:2e:90:45:b0:bf:a0:49:b2:8c:
65:a6:ad:0c:00:d7:c9:ab:d8:63:9f:43:82:e9:03:d4:8f:c5:
fc:fb:7f:2e:cb:81:95:b1:b8:f6:70:ee:f4:04:1f:4d:3e:f1:
64:7e:dc:ad:d7:66:f3:19:9c:76:57:71:3b:f4:d7:8e:70:b8:
be:04:83:0c:1d:c4:13:62:f6:e5:71:92:b5:29:d9:15:a1:cc:
d9:63:85:16:cd:e2:ac:72:73:18:a2:00:0d:61:9e:57:9d:17:
2e:a1:b7:11:d3:95:3c:78:b5:d0:d7:5a:f6:86:59:3f:0a:fe:
9a:90:72:62:26:46:03:97:67:fe:f4:3f:74:42:5c:c3:19:4a:
15:ce:c5:b8:d3:ed:52:6a:66:43:3a:3e:52:e1:d3:44:73:7d:
f9:d9:89:c1:ab:12:0f:4e:c0:5c:ad:d7:c5:17:cb:a4:f6:a7:
ba:2c:ac:fc:e6:5f:0c:2f:c3:6b:fb:6c:72:b0:09:bd:88:58:
04:eb:3e:f5:f2:7b:70:2a:d6:19:f8:29:a4:b9:ab:25:da:f0:
28:4e:d2:8a:38:4e:b4:6b:9f:48:bd:5e:e8:2e:4d:ce:d0:4f:
9e:c2:7b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:34:19 2026 by rpki-client