This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
File: xA63gWRRh1SG2mQ_j5Nht337IaM.mft (raw, json)
Hash identifier: IiOIu0o9Ut6sF6nwb/EHbcTBqGhovnRByPbFMZK7kxk=
Subject key identifier: 64:57:3A:E7:69:33:0C:13:CB:8C:2E:BD:06:46:F5:48:89:41:D9:F6
Authority key identifier: C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3
Certificate issuer: /CN=A9125590/serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3
Certificate serial: 3537
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
Manifest number: 351E
Signing time: Sat 24 Jan 2026 14:19:07 +0000
Manifest this update: Sat 24 Jan 2026 14:19:06 +0000
Manifest next update: Sat 31 Jan 2026 14:19:06 +0000
Files and hashes: 1: xA63gWRRh1SG2mQ_j5Nht337IaM.crl (hash: g0Z6w4Y8uzdBEx7e1e5wDYqL0ds45EINYiUABZLAViM=)
2: 26E02598562F11EB94FD0463C4F9AE02.roa (hash: yi83MC4bGsYsYYIO3cLCV7chmo/rO1rwAJjntq4bNoU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl
rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:19:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13623 (0x3537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125590, serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3
Validity
Not Before: Jan 24 14:19:06 2026 GMT
Not After : Jan 31 14:19:06 2026 GMT
Subject: CN=6974d4db-55c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:37:ec:b5:dd:a9:b5:6d:78:9e:15:7a:18:
cd:31:63:c9:42:e8:b3:c6:84:20:97:ec:8c:59:cf:
4c:4b:19:c9:06:c6:96:11:45:75:ec:97:12:33:16:
88:a4:26:97:b9:05:49:bf:cc:7b:1d:d9:26:8e:5f:
ff:37:7b:de:60:0a:6c:23:51:e3:b4:8e:89:be:43:
f1:c2:d5:c2:1b:41:36:ef:54:b3:96:ea:05:69:ba:
92:c7:91:9a:41:ef:2c:64:db:fe:43:08:68:d8:d0:
df:0f:20:a4:15:35:cd:ee:f1:7a:a6:1f:6b:f4:bf:
b9:d1:66:86:d9:98:13:42:82:c8:bc:1e:fc:1e:e9:
f5:3d:75:34:3d:b0:c9:ed:7e:07:0b:a0:d4:e6:bd:
c0:1c:59:c8:56:a0:e2:6f:2b:0d:52:a6:4b:f9:08:
6d:6a:e6:2a:e1:22:2c:f4:05:2c:94:f2:2c:bb:a9:
4a:3d:05:77:cd:17:f2:b4:8f:82:3a:a7:dd:80:cf:
79:b6:1a:ae:f1:88:2f:10:ec:9f:cf:44:8f:56:88:
08:7d:c6:5e:a8:c0:02:b0:9b:9f:ba:1c:1a:3f:8d:
59:18:ae:4e:39:d0:f6:2d:c3:27:a2:2d:7a:28:a5:
97:b2:dc:15:4b:17:3d:71:79:28:4a:80:57:21:5b:
1f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:57:3A:E7:69:33:0C:13:CB:8C:2E:BD:06:46:F5:48:89:41:D9:F6
X509v3 Authority Key Identifier:
keyid:C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:dc:32:02:e4:cf:78:28:12:db:c9:db:5e:fb:c2:d0:ee:a1:
e7:ba:e9:bd:7a:31:f2:ba:5d:a2:bf:60:d8:58:38:1c:4a:c3:
93:13:6d:6e:83:e7:a1:67:10:fd:8c:98:5e:50:6c:99:fc:a9:
21:78:96:b9:39:a2:da:ad:00:62:2c:46:90:c7:fc:67:5f:5c:
2f:a8:fc:c4:2b:e2:5a:dd:6e:07:5d:5a:17:d4:32:a4:a8:89:
58:cc:eb:fe:94:06:c9:99:7a:8a:2b:8a:21:85:a8:2e:44:e2:
33:9c:cc:c1:a3:44:f8:dc:10:5d:5d:b6:f2:94:f2:7e:83:9b:
d1:2d:a8:7c:b9:50:42:ea:f4:93:8b:30:9b:d2:af:61:5b:3a:
94:52:84:0d:bb:f7:ca:8a:6f:d5:f8:21:f9:6d:f5:b4:b5:46:
86:cf:9c:70:1f:86:d1:6e:f2:39:2a:33:69:16:6b:48:0c:7c:
c6:5a:f7:64:44:9c:7a:ff:03:d5:5e:ea:6e:ef:02:be:d1:7a:
3d:7d:ff:b6:ec:fb:b6:bf:81:c0:38:ae:95:ae:af:a8:68:75:
e3:84:1a:6c:db:d4:7c:ae:46:af:b7:01:bf:e5:1f:b6:78:28:
b4:54:45:79:8a:68:a8:42:3f:93:27:6c:96:bb:48:b8:e3:ab:
bc:d5:a2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:50:38 2026 by rpki-client