This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft
File: xq-SXz6kP06O56MUIYIWk7Gt9qE.mft (raw, json)
Hash identifier: 0rRpi6yBe5Oa80A6anPAVtBsgapk/DD5lVujmM7gITU=
Subject key identifier: 5E:F5:4C:1E:BB:6E:EE:59:D7:3E:C5:F3:CB:A3:4F:C9:6D:C7:BB:6A
Authority key identifier: C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1
Certificate issuer: /CN=A911E807/serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1
Certificate serial: 06F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft
Manifest number: 06EF
Signing time: Sat 24 Jan 2026 21:17:38 +0000
Manifest this update: Sat 24 Jan 2026 21:17:38 +0000
Manifest next update: Sat 31 Jan 2026 21:17:38 +0000
Files and hashes: 1: xq-SXz6kP06O56MUIYIWk7Gt9qE.crl (hash: plBsMLOhslb8NfRNfbeL91tfFAFvVFd865Zu6wE/6Tc=)
2: 1A20AAF27BD311EBA6617987C4F9AE02.roa (hash: ayNr4tR/Sfu0YrCAQZrJZu7BfQ9IzQFCs/VABD0dmLE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl
rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1784 (0x6f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E807, serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1
Validity
Not Before: Jan 24 21:17:38 2026 GMT
Not After : Jan 31 21:17:38 2026 GMT
Subject: CN=697536f2-15aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:33:c2:2c:0a:22:0d:ae:86:53:bd:29:cb:
c1:b7:47:64:6f:60:37:f1:1b:08:99:fe:28:71:81:
a0:9a:ad:af:43:2e:7c:7d:e6:80:83:fa:e6:05:90:
d2:77:9c:2b:5f:ff:dc:4c:ae:eb:dd:1a:d2:1e:11:
7e:13:92:8b:8a:83:4c:f2:cd:4f:5a:35:e7:dc:f3:
fa:04:0d:ec:84:6a:4c:38:4d:2b:e5:ca:bc:59:9a:
72:7d:4a:37:a4:ba:db:b4:30:b2:1b:40:af:37:c1:
d8:ea:6b:4b:ca:e8:d4:88:8d:d3:98:10:50:66:2b:
8c:6a:3d:84:cd:b6:e8:29:10:9f:72:f8:08:c9:f4:
21:64:aa:4a:44:22:d9:1c:31:25:82:67:50:ab:71:
ec:a5:a6:fb:96:4f:b3:ea:90:a0:4d:42:a2:0a:a3:
48:de:a9:29:73:b9:97:bd:ff:5a:80:6a:f8:ac:e7:
de:8e:a8:5f:91:64:a2:91:54:d3:85:5b:7b:3f:49:
38:7f:ed:28:3e:7a:ac:74:06:43:d3:20:a1:a0:d5:
8a:0c:b5:d2:f7:0f:49:fd:b3:c6:10:d9:f0:55:d2:
3b:fa:8d:cb:f4:45:7e:a3:92:11:04:7f:5e:d6:5d:
0f:f0:11:bf:43:37:46:02:3a:5e:35:fc:bf:53:fc:
c3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F5:4C:1E:BB:6E:EE:59:D7:3E:C5:F3:CB:A3:4F:C9:6D:C7:BB:6A
X509v3 Authority Key Identifier:
keyid:C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:e4:2b:e0:ca:70:f3:ea:18:a3:b2:b7:f1:0d:8d:5b:9b:91:
12:51:70:a2:e9:dd:e9:e3:01:83:98:f7:82:8f:79:d4:ca:95:
f1:24:9d:4d:14:60:37:e7:bc:c0:f4:b4:8b:9c:64:c9:57:1b:
0e:b8:e4:36:b8:79:3b:83:ab:37:c1:8f:6d:64:10:75:3b:1c:
42:6b:dd:31:44:39:59:e8:3e:90:0a:a2:fa:19:36:02:b1:8c:
f2:eb:a5:ed:1b:ca:88:cc:70:5e:7f:f3:83:bd:e5:bd:48:ed:
25:42:cc:92:42:60:7f:39:10:0e:bd:f9:03:ea:5e:33:92:ff:
e7:22:ff:11:bb:98:57:20:5b:65:23:5c:3a:ab:4c:f4:17:18:
7d:ac:e6:09:3e:b0:3a:6c:b1:5c:d8:d9:a8:91:e1:9a:d4:cc:
ae:57:18:f0:ad:98:20:31:9e:07:57:a7:b2:4e:04:26:08:28:
be:fb:98:17:58:f0:e0:3d:19:2c:a5:ff:52:26:4a:78:3e:94:
9b:b2:a2:ae:75:e7:64:42:64:1e:db:58:c1:ce:7f:bb:bf:d9:
c8:74:9b:00:28:85:ea:3d:a2:bc:01:78:d3:77:48:f7:5c:21:
e4:04:15:96:f7:26:b1:cf:6d:97:aa:f4:3f:6d:02:75:0e:70:
f9:64:1b:48
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUU4MDcxMTAvBgNVBAUTKEM2QUY5MjVGM0VBNDNGNEU4RUU3QTMxNDIxODIxNjkz
QjFBREY2QTEwHhcNMjYwMTI0MjExNzM4WhcNMjYwMTMxMjExNzM4WjAYMRYwFAYD
VQQDDA02OTc1MzZmMi0xNWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAri0zwiwKIg2uhlO9KcvBt0dkb2A38RsImf4ocYGgmq2vQy58feaAg/rmBZDS
d5wrX//cTK7r3RrSHhF+E5KLioNM8s1PWjXn3PP6BA3shGpMOE0r5cq8WZpyfUo3
pLrbtDCyG0CvN8HY6mtLyujUiI3TmBBQZiuMaj2EzbboKRCfcvgIyfQhZKpKRCLZ
HDElgmdQq3Hspab7lk+z6pCgTUKiCqNI3qkpc7mXvf9agGr4rOfejqhfkWSikVTT
hVt7P0k4f+0oPnqsdAZD0yChoNWKDLXS9w9J/bPGENnwVdI7+o3L9EV+o5IRBH9e
1l0P8BG/QzdGAjpeNfy/U/zD8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF71TB67
bu5Z1z7F88ujT8ltx7tqMB8GA1UdIwQYMBaAFMavkl8+pD9OjuejFCGCFpOxrfah
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTgwNy8yNjk2RjZDNjdC
MzYxMUVCQkU4NzY0NjFDNEY5QUUwMi94cS1TWHo2a1AwNk81Nk1VSVlJV2s3R3Q5
cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hxLVNYejZrUDA2TzU2TVVJWUlXazdHdDlxRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RTgwNy8yNjk2RjZDNjdCMzYxMUVCQkU4NzY0NjFDNEY5QUUwMi94cS1TWHo2a1Aw
Nk81Nk1VSVlJV2s3R3Q5cUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCS5CvgynDz6hijsrfxDY1bm5ESUXCi6d3p4wGDmPeCj3nUypXxJJ1N
FGA357zA9LSLnGTJVxsOuOQ2uHk7g6s3wY9tZBB1OxxCa90xRDlZ6D6QCqL6GTYC
sYzy66XtG8qIzHBef/ODveW9SO0lQsySQmB/ORAOvfkD6l4zkv/nIv8Ru5hXIFtl
I1w6q0z0Fxh9rOYJPrA6bLFc2NmokeGa1MyuVxjwrZggMZ4HV6eyTgQmCCi++5gX
WPDgPRkspf9SJkp4PpSbsqKudedkQmQe21jBzn+7v9nIdJsAKIXqPaK8AXjTd0j3
XCHkBBWW9yaxz22XqvQ/bQJ1DnD5ZBtI
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:33:58 2026 by rpki-client