This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
File: XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft (raw, json)
Hash identifier: BSiRAMd0P3D0xPpCSbMyCcYEEIz5uQW/C32pQznQJqU=
Subject key identifier: 58:B3:C9:70:12:3A:9A:59:60:7A:D0:ED:C4:3A:54:97:19:A1:DA:F5
Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
Certificate issuer: /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
Certificate serial: 06EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
Manifest number: 06DF
Signing time: Sat 24 Jan 2026 21:22:46 +0000
Manifest this update: Sat 24 Jan 2026 21:22:46 +0000
Manifest next update: Sat 31 Jan 2026 21:22:46 +0000
Files and hashes: 1: XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl (hash: tVeRvHDjU6ngCzIbILsXxy/7J5vhiKALx4PDdGp0CSo=)
2: 9ADBEC30DA6411EF95F32A7FC4F9AE02.roa (hash: Ode9C1rjZZ48xy/QuIzg9S8zoYsoG2CKnN/yX25u2gs=)
3: 9BE20420DA6411EF95F32A7FC4F9AE02.roa (hash: p4MgzG+OXWtv9vZOtFXE4K9GjNanwMoHoivstYkkSaU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl
rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1771 (0x6eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142812, serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
Validity
Not Before: Jan 24 21:22:46 2026 GMT
Not After : Jan 31 21:22:46 2026 GMT
Subject: CN=69753826-021d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:84:a8:69:6b:43:da:e4:fd:a6:cb:e3:88:d3:
9d:df:61:2b:c6:dc:97:a0:eb:ba:32:ae:7e:3c:9c:
b6:b3:32:2d:15:46:82:9f:fe:2b:87:18:4b:cd:31:
99:7e:47:49:59:dd:62:95:01:11:26:7f:5b:af:cf:
8b:f1:39:d1:f8:2d:17:a0:7b:2f:21:12:8b:72:c8:
9a:5a:d9:47:ae:b7:e3:6e:e9:c6:ab:b1:98:07:08:
74:42:26:f3:38:df:52:21:a3:90:e0:c0:01:2e:b3:
70:07:05:bc:0e:70:f4:e7:c8:b6:06:f3:11:52:d5:
17:fb:c0:4b:0a:a4:97:30:06:e1:26:ad:99:ce:37:
61:76:05:f5:3c:d2:cf:8d:6f:b0:c7:a0:97:0e:04:
5e:e4:8c:b4:1a:a2:d8:a4:12:96:6d:6c:52:a3:70:
fc:90:78:b3:2a:c9:e8:d4:31:e8:b0:a1:7a:80:2a:
fe:fd:bf:55:7d:1c:4a:b5:32:f5:2e:71:03:e4:96:
01:4d:a3:a2:bf:85:e0:3b:86:fc:b6:e9:05:46:91:
42:59:6b:aa:f9:fb:3b:10:e7:27:e4:26:fe:7d:dd:
fc:a2:62:ff:2c:19:80:8a:96:10:e1:45:d3:e9:4e:
95:76:bd:83:49:26:33:ee:58:33:e4:95:9e:d1:11:
68:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B3:C9:70:12:3A:9A:59:60:7A:D0:ED:C4:3A:54:97:19:A1:DA:F5
X509v3 Authority Key Identifier:
keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:dd:99:a1:12:49:1c:d3:f6:9c:51:a4:11:79:2e:b3:e3:8e:
77:ad:7d:c6:01:03:21:79:8d:12:82:f1:64:2f:00:73:c1:8f:
c9:42:40:cc:9e:f6:05:bd:48:30:2c:fc:cf:32:d4:dd:53:eb:
04:cb:14:c4:2b:c3:10:54:66:ce:1d:ee:83:c1:86:43:29:68:
dd:1c:19:1c:b1:9b:61:d0:58:01:c3:d6:39:1d:40:14:18:77:
d1:52:3d:d0:26:e1:d8:27:c9:a1:fb:8d:20:fe:a0:0b:30:63:
72:da:65:c8:1e:7d:f0:c7:c1:2b:bf:7c:b3:a0:2d:ac:be:17:
df:80:ac:5f:6c:1e:bb:9d:ca:8d:c9:18:4d:12:71:4e:19:de:
1b:47:a6:4d:79:00:c9:b3:27:c6:26:61:ce:cf:5c:67:e6:b7:
e3:3f:2c:c5:1e:ac:81:bc:29:72:44:d5:69:a2:07:54:58:79:
70:40:49:74:4c:37:dc:2e:5d:b6:40:ed:b1:7c:b4:ae:ef:c1:
d0:9f:26:27:49:b9:de:22:f0:4d:3a:bf:50:b0:24:b4:db:9e:
39:71:ab:7d:49:09:5b:41:d9:8e:1d:b8:05:97:4d:e0:89:99:
5e:30:18:84:40:03:dc:f0:f6:c4:6d:dd:95:97:55:e7:93:64:
af:f7:5f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:10:38 2026 by rpki-client