This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
File: tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft (raw, json)
Hash identifier: xHCOk1+BjuLBk/lxnb7gE1kxwk/4P5Ii3vMZVt8TPDo=
Subject key identifier: 5C:6D:24:88:3C:8C:09:FE:20:B1:10:44:94:EC:4C:EA:5A:52:B5:C6
Authority key identifier: B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C
Certificate issuer: /CN=A9131711/serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C
Certificate serial: 0176
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
Manifest number: 0171
Signing time: Sun 25 Jan 2026 03:10:39 +0000
Manifest this update: Sun 25 Jan 2026 03:10:39 +0000
Manifest next update: Sun 01 Feb 2026 03:10:39 +0000
Files and hashes: 1: tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl (hash: Qu6XwlGh+ROFVtL++AstL8xmOhyLVmVhCEy6bfbuXrw=)
2: B2B006BAE3E911EEB845B268C4F9AE02.roa (hash: fj5an6uMsWFMPTZr6PrKep91XRX3rQER6UmH0deptJM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl
rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:10:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374 (0x176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131711, serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C
Validity
Not Before: Jan 25 03:10:39 2026 GMT
Not After : Feb 1 03:10:39 2026 GMT
Subject: CN=697589af-3a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:98:d2:d4:89:2d:2d:e6:e8:b6:3a:ea:66:31:
6a:d6:72:5b:f5:1e:1c:cc:31:4b:e5:3d:01:7a:f9:
5c:65:0c:0b:f1:8a:4f:70:ed:de:b7:e3:fe:42:a2:
ee:a0:f2:86:26:8b:36:8a:27:b5:4c:1c:93:ab:59:
47:e0:37:19:93:a9:ad:3d:03:fb:82:79:80:ca:82:
3c:20:92:8a:08:14:cd:05:8d:79:a3:57:7e:63:d5:
e7:da:88:6f:4e:40:42:15:1c:97:b8:11:f8:4e:5b:
6e:40:50:93:31:b0:1e:3a:6c:58:1e:2d:bb:cf:ce:
25:10:89:64:bb:d1:20:78:0b:94:f0:40:63:27:14:
e7:bc:51:c4:2f:be:04:48:c4:45:43:aa:aa:84:47:
2f:2e:16:6b:cf:29:86:6e:f6:3c:80:1d:31:c2:ff:
64:f8:30:a3:23:70:98:74:6e:d4:f0:45:39:90:da:
e3:b2:fd:95:09:85:c8:af:6d:0c:f3:03:76:cb:a0:
c1:2f:dc:66:6b:75:1a:bc:57:23:48:c2:a3:92:3b:
d7:fd:b9:0a:a9:5a:c1:12:ab:ae:a5:bc:4b:49:ad:
f0:10:56:52:df:21:a2:f4:c1:ea:c0:5f:03:b0:71:
96:64:f3:ee:e3:93:1e:99:0f:3b:be:2a:99:17:27:
ac:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6D:24:88:3C:8C:09:FE:20:B1:10:44:94:EC:4C:EA:5A:52:B5:C6
X509v3 Authority Key Identifier:
keyid:B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:f0:4e:26:fa:ee:52:b2:2e:56:e5:78:a5:c6:6d:3f:c3:45:
6f:f3:c6:74:b2:7e:80:a9:59:09:c1:54:e6:92:92:d5:c1:76:
0a:da:69:d2:fc:c0:9f:b5:11:b1:ef:fb:4f:a9:f1:c7:5b:66:
ca:e0:02:2d:7b:95:18:79:1b:75:75:7e:8e:43:f8:01:fd:47:
1e:90:73:19:bb:50:fd:5a:d3:db:90:6a:d4:af:bb:16:08:82:
4f:25:04:1a:ba:a8:73:74:53:cf:79:7c:05:a5:a0:dc:c4:a0:
54:6f:c8:7d:c6:44:21:2e:e5:6b:91:2b:3a:7d:a8:58:3b:fb:
04:69:81:6c:8f:53:15:cc:b1:a6:3e:a6:b7:c5:14:59:77:12:
6a:aa:b4:d2:72:43:08:99:53:7b:a6:75:62:05:67:d8:5b:80:
ae:bb:c1:ee:6a:4f:d7:e7:18:da:cc:9f:46:d0:9e:0d:8a:12:
c7:81:d2:40:ad:1a:f7:18:b9:55:f6:67:86:0a:cf:b3:0e:57:
09:70:f1:ed:13:67:0a:20:a8:8b:f4:11:b3:dc:d2:74:60:81:
db:69:2c:29:56:69:24:b9:5c:e4:23:d7:58:c5:25:b3:66:e9:
67:bf:fb:69:7a:29:f2:55:03:43:64:63:e1:6b:06:61:ad:72:
ab:c2:e1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:13:19 2026 by rpki-client