This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
File: exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft (raw, json)
Hash identifier: ps7hvwckypDHKqPs05rONrFgsSOwK0AxLhqlrr/TlJE=
Subject key identifier: 3A:79:69:2A:FB:A2:B0:68:3B:4D:8E:3D:F1:BE:18:51:F4:03:22:69
Authority key identifier: 7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C
Certificate issuer: /CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
Certificate serial: 0273
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
Manifest number: 0268
Signing time: Sun 25 Jan 2026 00:50:00 +0000
Manifest this update: Sun 25 Jan 2026 00:49:59 +0000
Manifest next update: Sun 01 Feb 2026 00:49:59 +0000
Files and hashes: 1: exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl (hash: WZrSl43gMjr+9QdXHY7F/BNInu0px8sJUNFerihbEnU=)
2: D9A5C1BA4DFE11EDBF00BA6BC4F9AE02.roa (hash: G6Wgfmuf7isN39qtMPKHSSoxC3J+volHlymr2bVvLnQ=)
3: 35D174F2C7DF11EDAEC8CE40C4F9AE02.roa (hash: uCYT4lQMur/tG8/It9xxnzgoilgSXb5cLxgwmOVEMs8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl
rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 627 (0x273)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D937, serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
Validity
Not Before: Jan 25 00:49:59 2026 GMT
Not After : Feb 1 00:49:59 2026 GMT
Subject: CN=697568b8-04c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:67:13:fd:19:c0:50:df:db:e3:f5:70:0b:d5:
f9:02:6e:40:50:66:d6:37:ee:90:99:9a:46:c6:a4:
4d:23:77:8e:5a:89:22:a5:d0:71:f1:27:1f:b5:86:
80:2a:b0:cb:fb:bd:e6:89:ff:29:e7:86:10:a9:b1:
fc:6e:ab:57:26:11:60:45:64:fd:6d:31:7f:55:ca:
a8:c1:d7:8d:70:af:d3:8a:a9:e4:ac:d2:63:fd:a9:
2d:ed:90:ac:21:a2:0b:d0:15:5a:27:4d:31:23:de:
c5:78:c6:f9:ec:cd:c4:f7:d0:01:79:91:44:40:3f:
d7:85:3c:10:53:4e:44:68:37:2d:fd:d4:bd:b3:00:
4e:fc:5b:00:37:c9:e5:59:5d:87:5b:f7:ec:e0:57:
d0:be:03:68:56:be:50:96:c0:e5:44:2e:c6:3f:1e:
55:f5:30:92:4a:60:4c:4f:d1:8e:c0:19:1e:77:36:
86:10:a2:03:32:73:3f:51:60:97:39:33:ca:61:9e:
3c:e0:e9:c4:e1:20:d1:86:ac:2b:d5:20:5c:73:bb:
37:44:f1:b7:b8:24:60:43:6d:f0:84:d3:8d:10:85:
db:94:05:55:58:f1:4f:a9:b5:c8:ff:7f:45:0e:cd:
14:d1:72:ff:4c:ec:65:7a:f4:b5:88:31:d9:ee:36:
fe:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:79:69:2A:FB:A2:B0:68:3B:4D:8E:3D:F1:BE:18:51:F4:03:22:69
X509v3 Authority Key Identifier:
keyid:7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:4c:46:8c:fa:cd:86:36:cc:77:55:d8:e8:5f:fd:03:56:75:
1f:fe:96:e0:e4:96:a9:f6:42:bf:a1:ee:7b:66:2a:f4:c0:08:
2f:14:ef:ce:e7:0a:18:90:e9:a5:0d:c4:f1:b8:8e:51:85:5f:
f5:c5:60:78:bb:e5:f0:88:d4:6c:99:f1:a6:fb:58:b5:54:19:
bd:af:a8:32:ba:e6:e1:e0:f2:54:bd:a1:eb:76:6c:dc:bd:b3:
79:78:eb:d8:c8:93:b7:89:d5:9f:2c:63:a4:54:5c:12:eb:c8:
52:6b:54:19:df:5d:4b:68:b3:1d:3e:75:4c:52:af:a7:65:85:
c6:a7:03:26:03:0d:1f:b3:4c:85:3e:0c:86:22:dc:08:72:04:
51:3b:a1:98:86:ca:be:64:3c:6f:9c:f1:09:43:c9:93:88:0e:
72:37:eb:e0:53:66:18:72:d0:e0:7a:68:cb:30:34:e3:8f:75:
3a:3e:bf:ae:45:24:f9:34:ae:35:c1:5a:33:a7:46:99:78:12:
75:73:a3:04:0a:8f:ca:8c:3e:88:bf:20:11:6a:36:99:3e:24:
68:ff:15:e0:73:2a:6d:17:e0:49:76:17:a3:c8:1a:3a:41:59:
55:75:00:03:41:51:6e:ba:a6:60:0f:47:95:c5:a7:9d:8b:3f:
bf:8b:e6:f3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQ5MzcxMTAvBgNVBAUTKDdCMUM2RTJGNDQyRDJEMERERUZBNDk5NDAyODBDMkQ3
MEVGMkIxNEMwHhcNMjYwMTI1MDA0OTU5WhcNMjYwMjAxMDA0OTU5WjAYMRYwFAYD
VQQDDA02OTc1NjhiOC0wNGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxGcT/RnAUN/b4/VwC9X5Am5AUGbWN+6QmZpGxqRNI3eOWokipdBx8ScftYaA
KrDL+73mif8p54YQqbH8bqtXJhFgRWT9bTF/VcqowdeNcK/TiqnkrNJj/akt7ZCs
IaIL0BVaJ00xI97FeMb57M3E99ABeZFEQD/XhTwQU05EaDct/dS9swBO/FsAN8nl
WV2HW/fs4FfQvgNoVr5QlsDlRC7GPx5V9TCSSmBMT9GOwBkedzaGEKIDMnM/UWCX
OTPKYZ484OnE4SDRhqwr1SBcc7s3RPG3uCRgQ23whNONEIXblAVVWPFPqbXI/39F
Ds0U0XL/TOxlevS1iDHZ7jb+nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDp5aSr7
orBoO02OPfG+GFH0AyJpMB8GA1UdIwQYMBaAFHscbi9ELS0N3vpJlAKAwtcO8rFM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDkzNy9CRjJEQUI2QTRE
RkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExRM2Uta21VQW9EQzF3N3lz
VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V4eHVMMFF0TFEzZS1rbVVBb0RDMXc3eXNVdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDkzNy9CRjJEQUI2QTRERkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExR
M2Uta21VQW9EQzF3N3lzVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAJTEaM+s2GNsx3VdjoX/0DVnUf/pbg5Jap9kK/oe57Zir0wAgvFO/O
5woYkOmlDcTxuI5RhV/1xWB4u+XwiNRsmfGm+1i1VBm9r6gyuubh4PJUvaHrdmzc
vbN5eOvYyJO3idWfLGOkVFwS68hSa1QZ311LaLMdPnVMUq+nZYXGpwMmAw0fs0yF
PgyGItwIcgRRO6GYhsq+ZDxvnPEJQ8mTiA5yN+vgU2YYctDgemjLMDTjj3U6Pr+u
RST5NK41wVozp0aZeBJ1c6MECo/KjD6IvyARajaZPiRo/xXgcyptF+BJdhejyBo6
QVlVdQADQVFuuqZgD0eVxaediz+/i+bz
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:18:48 2026 by rpki-client