This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft
File: CO_XGTj3-dyHpp9cs_hMektyoAo.mft (raw, json)
Hash identifier: D1Bd5X+WKQzD3v+TL+KMB9W6fX4sa4+0MBFrXvCYS0A=
Subject key identifier: 24:63:23:BA:DC:89:83:FB:DA:46:A7:7C:30:DA:0F:09:CB:AD:F5:4E
Authority key identifier: 08:EF:D7:19:38:F7:F9:DC:87:A6:9F:5C:B3:F8:4C:7A:4B:72:A0:0A
Certificate issuer: /CN=A91218BB/serialNumber=08EFD71938F7F9DC87A69F5CB3F84C7A4B72A00A
Certificate serial: C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO_XGTj3-dyHpp9cs_hMektyoAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft
Manifest number: C8
Signing time: Sun 25 Jan 2026 05:00:42 +0000
Manifest this update: Sun 25 Jan 2026 05:00:41 +0000
Manifest next update: Sun 01 Feb 2026 05:00:41 +0000
Files and hashes: 1: CO_XGTj3-dyHpp9cs_hMektyoAo.crl (hash: kV3OfpX24jyTxRuIR5gTZKT2Fl0fD5GwPIZq1IFMRWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.crl
rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO_XGTj3-dyHpp9cs_hMektyoAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91218BB, serialNumber=08EFD71938F7F9DC87A69F5CB3F84C7A4B72A00A
Validity
Not Before: Jan 25 05:00:41 2026 GMT
Not After : Feb 1 05:00:41 2026 GMT
Subject: CN=6975a37a-53f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:21:19:85:4c:28:dd:05:8b:96:10:97:db:22:
76:6a:25:8e:f2:6c:0b:9c:7a:71:8c:15:42:56:c4:
e3:d5:24:43:ec:11:da:76:05:c6:9c:14:94:2f:6b:
a4:45:27:e1:0d:e7:9c:86:3d:22:43:43:ac:2e:92:
12:9a:e6:d4:a5:95:18:08:29:62:80:33:f5:be:e9:
7f:02:87:5f:01:5c:a9:cd:d9:0b:c9:d6:b8:01:0e:
19:bc:01:04:98:5d:6d:3c:62:cd:96:b4:95:43:05:
be:b0:3c:94:5d:55:1e:2f:8c:b9:f8:15:3d:47:b1:
1b:37:94:08:66:54:0a:bd:aa:22:79:95:70:dc:52:
67:20:15:7b:b0:05:c2:4d:e8:3d:4f:5b:a9:5b:b9:
49:d8:37:69:54:51:0c:7a:02:88:66:24:e4:77:1b:
b9:56:cd:fc:bd:dd:5b:1b:4c:16:75:7d:b8:85:2b:
3f:26:bd:c6:51:88:94:60:dc:f3:70:97:a9:cb:a2:
4c:26:28:bb:dd:57:89:cb:a8:d7:73:c5:95:de:76:
30:cd:b5:26:5a:42:60:9a:91:ac:76:e2:51:78:ae:
94:3a:18:72:fa:8c:f7:c2:1d:2a:6e:77:21:0b:dc:
97:2b:e2:fa:c0:dd:06:59:52:c2:fa:1e:8f:5c:e0:
d2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:63:23:BA:DC:89:83:FB:DA:46:A7:7C:30:DA:0F:09:CB:AD:F5:4E
X509v3 Authority Key Identifier:
keyid:08:EF:D7:19:38:F7:F9:DC:87:A6:9F:5C:B3:F8:4C:7A:4B:72:A0:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO_XGTj3-dyHpp9cs_hMektyoAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:fa:c9:50:4f:c6:80:92:0e:4e:d0:f1:20:bd:87:77:05:ed:
8a:39:34:c9:45:ef:4b:7e:bc:74:d3:90:3e:04:40:c8:ae:2e:
5d:31:9a:f1:f7:0e:59:06:91:01:d7:4d:20:2c:0f:bf:ef:ab:
03:53:33:bf:be:2f:df:24:7d:90:37:05:b9:6f:15:b9:6e:a3:
87:ff:af:fe:5f:63:db:36:32:e3:10:e5:af:27:d1:f1:7d:f8:
fe:f5:17:f2:69:3a:c4:87:84:f1:fd:16:2e:ef:4c:6c:6e:97:
7c:4b:f3:82:5a:9f:39:6c:18:ce:ae:d0:63:5f:41:29:da:ea:
19:4d:6b:c8:ed:81:7a:c3:10:2b:35:d9:4b:60:75:00:24:98:
8f:d4:b8:c5:9c:f3:06:f6:bf:87:99:6b:3d:78:9c:64:b9:e9:
33:56:1b:d4:70:28:6a:64:f1:ef:94:d3:99:b8:9a:31:fd:a4:
6a:42:ab:c2:4f:3e:0b:ba:16:4b:ef:49:9e:b4:84:70:22:24:
06:2b:27:ab:81:19:50:83:bf:22:2e:54:79:be:d3:75:2c:02:
1c:2a:6a:64:15:04:6b:eb:ed:6e:be:5a:fd:b3:8c:d9:89:e9:
a2:74:2a:21:46:af:2c:31:4d:9d:e5:8e:8d:ea:ee:54:f2:07:
a8:55:b8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:41:47 2026 by rpki-client