This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
File: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft (raw, json)
Hash identifier: fDCI1mEMqjUsX97sNcD2j1Ixy1ZawUFHNk3PSpJfCgU=
Subject key identifier: E8:EB:7D:54:C4:F4:90:20:99:26:BF:94:39:C0:FB:61:55:0E:B2:75
Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84
Certificate issuer: /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684
Certificate serial: 073E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
Manifest number: 072F
Signing time: Sat 24 Jan 2026 21:08:36 +0000
Manifest this update: Sat 24 Jan 2026 21:08:35 +0000
Manifest next update: Sat 31 Jan 2026 21:08:35 +0000
Files and hashes: 1: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl (hash: PlZQ5ZI4In3Pv1oo8eRKoGlBkbsRJmdEVmwmtiVeqEw=)
2: 79520888650611EBA9BB2882C4F9AE02.roa (hash: SQlrc6PCUPjaaBm+jKtjnbQxZYJxO/Vi8PJnTLD4+DE=)
3: 801F61DCC1E111EBB27A0812C4F9AE02.roa (hash: ez5zyisrlhzGt4msn6K1G9iNl7wli7TiUZuA1FWHYm8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl
rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1854 (0x73e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91308E4, serialNumber=C63892FDAD943F25FA396841BB773DA15F700684
Validity
Not Before: Jan 24 21:08:35 2026 GMT
Not After : Jan 31 21:08:35 2026 GMT
Subject: CN=697534d4-2cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:80:fd:6f:a3:76:01:08:d6:b5:01:d3:40:
c5:4c:22:4d:68:fa:62:4d:26:c8:e1:5e:58:b2:04:
a6:b9:1b:13:42:cb:7e:cf:a8:fa:35:3d:79:d5:dd:
19:0a:cb:a5:a9:c2:96:25:16:15:66:83:74:de:20:
b1:01:ff:73:00:05:bf:36:15:2a:b9:7f:1f:7a:cd:
65:70:32:1d:ce:55:68:0b:e0:54:39:66:a1:fe:a2:
13:6c:c3:63:cc:d2:f0:5e:e3:dd:68:8e:6e:0d:1f:
a5:48:3a:56:b6:70:9c:2b:32:4a:52:28:38:3a:40:
b9:bf:1c:ee:57:ae:38:e1:13:00:18:0c:dd:90:11:
f1:68:45:32:9b:9f:fb:c4:27:36:de:f9:a1:60:1b:
c9:54:9b:60:aa:f6:b9:d5:59:d3:c7:e2:c6:14:6b:
54:31:b6:9f:1e:17:92:2e:f8:88:fd:40:61:7f:2e:
63:36:2e:f1:f1:d4:60:10:c3:22:64:99:88:ce:04:
4e:0c:8d:7c:e8:a8:d1:98:81:a4:a2:51:94:a6:a9:
22:e8:7a:8c:67:aa:7d:66:41:92:60:70:34:1c:70:
01:d4:23:fe:5f:5a:44:af:8f:ad:78:b1:fc:4d:0d:
05:c6:1c:15:42:f8:d6:4e:ca:e4:71:47:bb:2a:ea:
2c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EB:7D:54:C4:F4:90:20:99:26:BF:94:39:C0:FB:61:55:0E:B2:75
X509v3 Authority Key Identifier:
keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:cc:ad:3b:63:e3:3a:68:bf:23:46:6f:61:53:16:00:47:96:
2d:55:d6:21:d9:83:9d:92:c9:6f:fb:b9:91:e5:a8:e3:6f:42:
cb:45:71:37:15:e1:5b:07:33:c8:b7:20:cf:d8:99:ec:96:c3:
84:00:88:46:90:db:28:66:52:75:dc:99:82:1a:f0:24:bf:34:
73:6f:04:fc:54:13:30:c5:1d:8d:f0:fb:6c:ce:00:c6:c6:74:
bc:21:b9:ea:ba:00:83:dc:db:0f:b8:47:f9:8d:7e:ca:55:f8:
48:b3:cd:ee:0b:30:a1:ae:9f:1d:d9:fb:b5:fa:16:88:e4:45:
80:e1:59:3e:aa:d7:fd:60:c5:7c:97:eb:c3:ad:a5:cd:3e:17:
8a:86:58:11:7e:21:8e:39:68:cd:f9:10:c8:08:a4:57:01:ae:
e5:3e:23:ca:39:d3:fa:9a:31:ef:00:94:dd:a9:c9:7b:32:dd:
53:d4:6c:04:9d:b9:da:a4:32:45:66:5d:61:42:dd:80:57:c5:
3d:36:bc:06:b3:bf:b0:d1:f4:a7:c0:5d:40:b4:c8:76:46:38:
96:ed:f1:22:d0:a0:a1:2d:fc:eb:8c:b7:11:4d:36:5d:b5:3b:
e7:2a:9d:31:4c:69:11:b4:c9:fb:27:5b:ea:f9:5b:94:36:45:
1a:a6:65:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:01:28 2026 by rpki-client