This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
File: xVZN7BAWY79D0_LjQDlMAHZqY-M.mft (raw, json)
Hash identifier: IRG+vRkXSU+C/8QuxCXcf3eZqDe3ac65N+q2NDJONZA=
Subject key identifier: 62:75:99:CD:20:A7:6D:35:D3:20:4D:33:6D:51:8E:1C:D5:44:A4:34
Authority key identifier: C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3
Certificate issuer: /CN=A9122B85/serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
Manifest number: E8
Signing time: Sun 25 Jan 2026 02:44:24 +0000
Manifest this update: Sun 25 Jan 2026 02:44:23 +0000
Manifest next update: Sun 01 Feb 2026 02:44:23 +0000
Files and hashes: 1: xVZN7BAWY79D0_LjQDlMAHZqY-M.crl (hash: lG1/1FLTfEK3Q89qu95IfUeR6D5otMjC65GbXWkCa9I=)
2: 21D32B1EC54211EFBA442C85C4F9AE02.roa (hash: y1ejSb3Ui6WWLhIOKDxs6rE/6EeyadugtEscfLGg2TA=)
3: 42582BE6C54211EFBC189185C4F9AE02.roa (hash: YaUW/0ZAsRFfZgw93YJE+B/9hvEdVp3XhFrHHT5/CDg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl
rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122B85, serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3
Validity
Not Before: Jan 25 02:44:23 2026 GMT
Not After : Feb 1 02:44:23 2026 GMT
Subject: CN=69758387-d704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:05:81:0f:48:54:9e:d1:76:8e:ee:90:22:
46:fd:b6:80:4d:a7:0f:a9:05:b0:c0:fe:08:7c:95:
be:e8:54:ef:3d:b3:96:eb:a3:69:34:97:96:c9:6a:
33:94:13:c9:53:36:3b:51:4f:92:5e:d7:b1:26:52:
0c:e8:54:a9:4d:18:a0:ca:ae:f8:ac:0e:2a:6c:6d:
8b:21:e2:12:d5:1f:d8:33:ed:82:75:09:e3:5e:00:
f0:48:8e:0a:98:d6:50:e2:86:a8:4a:89:21:f0:0f:
de:d1:0f:b7:6d:b3:44:96:72:82:d3:00:00:c5:09:
70:ac:2b:9d:df:b1:7d:04:67:93:8d:39:a2:71:8b:
63:05:88:18:51:73:02:85:21:cf:a6:26:20:97:5b:
b3:cd:96:99:8a:1f:a6:89:61:fb:54:d0:27:96:c2:
4c:07:51:62:3d:b4:d4:c9:ba:4a:ae:31:16:2c:f7:
91:03:9b:67:9f:4b:04:e8:7b:7c:95:67:e2:25:77:
08:7a:86:70:9e:34:c3:b7:99:3f:e6:bc:9c:1c:48:
e8:57:e1:0b:8a:6c:c4:01:29:f8:ee:50:49:a1:3e:
8c:65:ea:b1:5d:e4:bb:cf:16:8b:63:10:0b:8d:06:
c0:82:24:9c:4a:2c:14:e8:ef:ff:88:10:35:f4:db:
96:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:75:99:CD:20:A7:6D:35:D3:20:4D:33:6D:51:8E:1C:D5:44:A4:34
X509v3 Authority Key Identifier:
keyid:C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3b:6d:8b:2b:a2:11:9b:ab:12:2c:11:23:48:6f:05:b8:e7:
9e:5d:84:90:b7:89:17:b5:34:0e:8e:22:bc:13:78:11:af:51:
51:83:aa:4e:8d:1c:4a:be:86:3c:18:99:fb:5a:ba:f0:fa:99:
45:19:97:88:f4:f1:8c:cb:67:9e:6f:cb:b7:fd:8a:ed:b9:c9:
9a:ad:ee:10:29:dd:ab:09:66:b6:12:3c:8c:b9:96:dc:1b:7c:
be:b8:76:7a:83:55:0d:30:34:11:a8:67:fb:14:2c:ef:24:84:
f4:bd:fa:93:6b:40:74:2b:97:5c:1b:95:67:fb:d3:d7:df:16:
23:16:0a:df:20:32:c7:25:df:2a:30:3d:95:5e:59:f9:59:50:
88:f4:9f:b7:2f:a0:1e:cc:d6:0a:15:40:8c:d6:7b:57:ce:01:
fd:69:7f:93:46:bb:fd:f0:8b:9d:6f:a4:74:d6:e0:5a:85:fa:
c0:50:f7:d5:6c:b9:30:74:90:9d:77:b1:38:6e:91:f1:f4:72:
7a:69:c7:e4:38:ac:93:7f:42:81:7b:77:4c:67:bd:69:8e:d7:
17:4a:37:5c:ec:01:b1:34:cb:97:8c:2f:36:04:f8:30:66:e7:
a8:19:3b:92:d2:b4:df:29:71:05:a0:be:b5:9d:8c:3e:6b:80:
2f:45:5d:5d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MjJCODUxMTAvBgNVBAUTKEM1NTY0REVDMTAxNjYzQkY0M0QzRjJFMzQwMzk0QzAw
NzY2QTYzRTMwHhcNMjYwMTI1MDI0NDIzWhcNMjYwMjAxMDI0NDIzWjAYMRYwFAYD
VQQDDA02OTc1ODM4Ny1kNzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqXcFgQ9IVJ7Rdo7ukCJG/baATacPqQWwwP4IfJW+6FTvPbOW66NpNJeWyWoz
lBPJUzY7UU+SXtexJlIM6FSpTRigyq74rA4qbG2LIeIS1R/YM+2CdQnjXgDwSI4K
mNZQ4oaoSokh8A/e0Q+3bbNElnKC0wAAxQlwrCud37F9BGeTjTmicYtjBYgYUXMC
hSHPpiYgl1uzzZaZih+miWH7VNAnlsJMB1FiPbTUybpKrjEWLPeRA5tnn0sE6Ht8
lWfiJXcIeoZwnjTDt5k/5rycHEjoV+ELimzEASn47lBJoT6MZeqxXeS7zxaLYxAL
jQbAgiScSiwU6O//iBA19NuWhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJ1mc0g
p2010yBNM21RjhzVRKQ0MB8GA1UdIwQYMBaAFMVWTewQFmO/Q9Py40A5TAB2amPj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkI4NS9DQ0JCQUJFQTlG
NjQxMUVGQTkzMTQ3M0NDNEY5QUUwMi94VlpON0JBV1k3OUQwX0xqUURsTUFIWnFZ
LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3hWWk43QkFXWTc5RDBfTGpRRGxNQUhacVktTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MkI4NS9DQ0JCQUJFQTlGNjQxMUVGQTkzMTQ3M0NDNEY5QUUwMi94VlpON0JBV1k3
OUQwX0xqUURsTUFIWnFZLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBuO22LK6IRm6sSLBEjSG8FuOeeXYSQt4kXtTQOjiK8E3gRr1FRg6pO
jRxKvoY8GJn7Wrrw+plFGZeI9PGMy2eeb8u3/Yrtucmare4QKd2rCWa2EjyMuZbc
G3y+uHZ6g1UNMDQRqGf7FCzvJIT0vfqTa0B0K5dcG5Vn+9PX3xYjFgrfIDLHJd8q
MD2VXln5WVCI9J+3L6AezNYKFUCM1ntXzgH9aX+TRrv98Iudb6R01uBahfrAUPfV
bLkwdJCdd7E4bpHx9HJ6acfkOKyTf0KBe3dMZ71pjtcXSjdc7AGxNMuXjC82BPgw
ZueoGTuS0rTfKXEFoL61nYw+a4AvRV1d
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:43:44 2026 by rpki-client