This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
File: Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft (raw, json)
Hash identifier: TifR2UcB8BidnWt6w9SSwkybncJz4vPr8eIhkFNTTHM=
Subject key identifier: 83:54:C7:5D:20:77:EC:03:CB:E8:B8:99:04:7A:9B:8E:DF:0A:8A:F0
Authority key identifier: 5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED
Certificate issuer: /CN=A91275FD/serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED
Certificate serial: 25AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
Manifest number: 259B
Signing time: Sat 24 Jan 2026 15:31:20 +0000
Manifest this update: Sat 24 Jan 2026 15:31:20 +0000
Manifest next update: Sat 31 Jan 2026 15:31:20 +0000
Files and hashes: 1: Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl (hash: jlAMUAVf25lct84xEC/uXV0IGhQdOQWnsu9qdXQajZQ=)
2: 9461B15C144611EBA5418244C4F9AE02.roa (hash: f2BKC0SfvfCVZzewNCyKNQgaDwalvIHM6ibs4HCHEDg=)
3: C5218598F91711EDBB78FE3CC4F9AE02.roa (hash: xnMX5X2YJrVvWA8Z+ilrknMulrMIGU6wGg57HKZlkt0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl
rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9643 (0x25ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FD, serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED
Validity
Not Before: Jan 24 15:31:20 2026 GMT
Not After : Jan 31 15:31:20 2026 GMT
Subject: CN=6974e5c8-93f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:26:0b:0b:58:08:c1:98:24:d9:b4:8a:95:bb:
0e:7f:f0:e0:5f:99:9b:df:c6:ae:97:da:74:dd:68:
2c:5d:25:1f:b6:d6:a1:f0:35:fc:d4:78:4d:ee:7b:
b5:65:e9:1a:4d:f3:e9:c5:4b:73:94:52:b8:22:b9:
2c:bb:a8:d0:fa:38:4f:04:0a:2d:d6:db:b6:98:56:
f4:d2:32:eb:27:5e:89:78:c4:8e:79:0b:6d:fa:5a:
b0:5b:09:4e:2a:95:be:5a:35:bd:c3:32:df:49:e0:
db:e1:09:2a:69:6a:8f:8d:02:26:93:c0:95:38:5e:
30:5c:3c:be:67:fa:bc:bb:4b:3a:14:fb:59:85:3b:
69:fb:0f:d9:15:8b:15:67:59:9d:8d:e7:7e:19:3f:
ed:b7:38:63:a9:ed:3a:74:b3:7b:cf:9a:1b:51:76:
8d:38:6d:8c:5c:22:e6:41:3d:c8:0e:6b:31:4f:39:
06:90:a4:dd:ef:67:4c:69:a3:56:8d:cf:df:74:19:
fe:7a:df:9f:91:62:44:71:30:ff:7c:61:8c:58:8a:
bc:f9:1e:8c:cc:70:cf:10:95:5d:6a:21:e5:02:63:
00:17:50:22:7c:28:50:d7:82:c8:78:13:31:63:c9:
41:30:6e:7d:48:94:e1:bf:e6:e0:b1:60:95:00:01:
29:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:54:C7:5D:20:77:EC:03:CB:E8:B8:99:04:7A:9B:8E:DF:0A:8A:F0
X509v3 Authority Key Identifier:
keyid:5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:59:57:06:e4:d5:64:67:0f:1a:11:c9:75:f7:04:80:16:df:
50:34:c4:a9:a3:39:b1:3c:98:3f:db:21:0d:34:8f:82:d4:6c:
bf:df:a5:46:91:7a:ce:0d:2d:24:99:0f:46:73:ff:29:de:14:
6c:f4:4a:b0:7b:8c:65:7b:3a:2c:bc:f4:1f:ca:6a:45:8a:29:
01:44:f8:f7:f2:71:ea:d9:eb:3d:29:c3:6e:51:8a:0a:38:89:
29:49:63:37:aa:3f:25:11:9a:65:52:46:c0:7d:cc:b3:ee:43:
ff:96:97:59:70:3a:66:9e:98:09:37:ca:9b:4a:2d:c5:a6:ee:
4f:36:63:e9:1a:75:39:5f:cc:a2:d3:c5:b1:63:e9:29:9f:27:
be:c9:06:9f:71:53:03:bf:54:d1:6a:87:e9:eb:b4:98:6a:3a:
33:58:ce:d2:8c:47:16:a3:b0:a1:de:22:6e:cf:a5:5e:fd:84:
f1:85:07:3f:53:53:9c:d9:4f:1a:e2:31:f4:b7:9e:e5:6e:09:
aa:28:aa:47:7a:4a:84:89:51:c8:72:8e:9d:51:da:37:2f:98:
e3:dd:c6:2d:d7:0e:30:e3:76:aa:06:ee:dc:ba:d8:58:b4:0a:
4c:74:68:f9:1b:1f:fa:89:0d:f1:8a:e6:17:c0:c2:44:92:99:
aa:7e:60:f8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc1RkQxMTAvBgNVBAUTKDVFQkRENEQ1RjM2QzZBQTU5QjAxMkM5RTg5OUFBRDND
MjdFQUQ4RUQwHhcNMjYwMTI0MTUzMTIwWhcNMjYwMTMxMTUzMTIwWjAYMRYwFAYD
VQQDDA02OTc0ZTVjOC05M2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvCYLC1gIwZgk2bSKlbsOf/DgX5mb38aul9p03WgsXSUfttah8DX81HhN7nu1
ZekaTfPpxUtzlFK4Irksu6jQ+jhPBAot1tu2mFb00jLrJ16JeMSOeQtt+lqwWwlO
KpW+WjW9wzLfSeDb4QkqaWqPjQImk8CVOF4wXDy+Z/q8u0s6FPtZhTtp+w/ZFYsV
Z1mdjed+GT/ttzhjqe06dLN7z5obUXaNOG2MXCLmQT3IDmsxTzkGkKTd72dMaaNW
jc/fdBn+et+fkWJEcTD/fGGMWIq8+R6MzHDPEJVdaiHlAmMAF1AifChQ14LIeBMx
Y8lBMG59SJThv+bgsWCVAAEpzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINUx10g
d+wDy+i4mQR6m47fCorwMB8GA1UdIwQYMBaAFF691NXzbGqlmwEsnomarTwn6tjt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9GNDhBRDEyMjI2
RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2FxV2JBU3llaVpxdFBDZnEy
TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1hyM1UxZk5zYXFXYkFTeWVpWnF0UENmcTJPMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzVGRC9GNDhBRDEyMjI2RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2Fx
V2JBU3llaVpxdFBDZnEyTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDDWVcG5NVkZw8aEcl19wSAFt9QNMSpozmxPJg/2yENNI+C1Gy/36VG
kXrODS0kmQ9Gc/8p3hRs9Eqwe4xlezosvPQfympFiikBRPj38nHq2es9KcNuUYoK
OIkpSWM3qj8lEZplUkbAfcyz7kP/lpdZcDpmnpgJN8qbSi3Fpu5PNmPpGnU5X8yi
08WxY+kpnye+yQafcVMDv1TRaofp67SYajozWM7SjEcWo7Ch3iJuz6Ve/YTxhQc/
U1Oc2U8a4jH0t57lbgmqKKpHekqEiVHIco6dUdo3L5jj3cYt1w4w43aqBu7cuthY
tApMdGj5Gx/6iQ3xiuYXwMJEkpmqfmD4
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:11:49 2026 by rpki-client