This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
File: xG1ZE_bCUMau4vMnRTXOhmKVufo.mft (raw, json)
Hash identifier: vVQPFTcYv0Uv0KBnYyNIrGjQstvS6wIUtIijMBCgwh0=
Subject key identifier: 39:18:D2:2D:57:7D:C2:F5:C2:DD:66:CF:1C:72:15:6A:7E:70:6E:A1
Authority key identifier: C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA
Certificate issuer: /CN=A9148B83/serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA
Certificate serial: 06DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
Manifest number: 06CE
Signing time: Sat 24 Jan 2026 21:29:15 +0000
Manifest this update: Sat 24 Jan 2026 21:29:15 +0000
Manifest next update: Sat 31 Jan 2026 21:29:15 +0000
Files and hashes: 1: xG1ZE_bCUMau4vMnRTXOhmKVufo.crl (hash: hWmCPnsc95N1fyGK3H9RriMGaXhTSLc12sq5YiSYmJc=)
2: 65FE79B8885D11EB81454E41C4F9AE02.roa (hash: jIcmISVPA5DP2aVKanXlgtnTLpIc4xkMqPcAMV4fzi0=)
3: 009E969E885C11EB88A7723DC4F9AE02.roa (hash: K6g4QgChsxgzRfHFt3YwGm0Ei1HU3rEHfJ2P36tg9XM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl
rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:29:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1755 (0x6db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148B83, serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA
Validity
Not Before: Jan 24 21:29:15 2026 GMT
Not After : Jan 31 21:29:15 2026 GMT
Subject: CN=697539ab-7fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:e3:d9:0b:39:09:9e:5c:88:91:7c:0e:c2:
2b:fc:ca:3c:96:55:e9:df:13:57:c7:48:ac:df:21:
84:7b:76:d6:62:18:e9:22:e6:7e:2a:ca:a7:0a:1d:
91:88:78:89:d1:37:5d:62:63:25:ac:b3:ca:51:6e:
4e:d3:d9:ac:2a:0b:45:11:23:b5:92:59:b3:98:cf:
72:12:b7:ec:f0:9f:b1:ca:13:44:06:b0:fd:c4:9e:
e9:22:ea:39:63:c4:5b:2b:98:80:1e:9c:e7:39:12:
39:67:f2:74:94:01:4b:1e:36:92:9c:2e:8c:72:53:
3a:a4:88:52:1f:77:21:50:49:32:7a:fa:fb:3f:b8:
a6:0f:f8:19:53:0c:34:22:a1:87:d5:02:b4:6a:81:
93:38:54:7f:79:06:13:16:6e:8f:2f:f6:ec:e4:a8:
83:ee:24:e7:94:01:b8:89:08:b4:84:bb:ad:94:d4:
a3:87:d5:3b:ee:b9:59:13:a7:01:6e:fd:b8:3c:4d:
e2:13:6f:14:52:bc:2f:75:c6:c7:fd:e5:e7:82:e1:
5e:83:59:c3:19:d5:c2:f4:bf:d2:61:07:67:77:0c:
43:ef:8a:60:5f:31:7f:e8:3a:0c:4c:6d:6b:98:74:
27:6d:c7:db:54:fa:58:3a:b4:f0:d2:b6:fb:33:96:
a1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:18:D2:2D:57:7D:C2:F5:C2:DD:66:CF:1C:72:15:6A:7E:70:6E:A1
X509v3 Authority Key Identifier:
keyid:C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:8c:8d:37:3e:5f:59:5e:31:4f:74:59:b1:41:ad:3c:2b:ad:
f2:0c:13:32:37:b7:a8:80:56:06:f8:9e:38:ea:a2:7c:7b:26:
e5:7f:c9:38:e4:92:31:26:22:36:bb:04:04:8d:35:87:20:5d:
a9:9c:de:5b:64:6d:9e:cd:4c:07:c9:3c:17:b6:dc:9a:27:1e:
41:f3:64:f2:91:74:f9:1f:f1:47:1b:30:e7:43:4d:36:15:5d:
d4:2d:f4:15:c2:a7:20:c4:d8:f2:d0:76:fb:e4:f6:16:27:1b:
fc:96:93:c9:5c:53:99:e1:0d:7b:66:14:ce:6f:7d:44:94:34:
37:d0:d7:2b:8b:0f:1b:9b:cf:22:04:38:87:8e:8c:38:8d:39:
ff:7e:0c:de:e2:78:d1:aa:08:e0:49:02:a2:6c:45:34:2d:c2:
ea:06:64:25:1f:37:0d:ea:98:d4:ae:ed:34:9c:e1:8b:9b:a4:
c0:e1:b5:ac:1b:f2:67:1c:1c:cf:c1:55:d8:be:5c:64:e3:59:
c7:41:40:33:80:7b:27:25:76:1f:9f:47:5f:b9:b5:27:90:74:
98:1f:35:5e:b9:43:57:42:4c:fa:67:00:9d:44:5f:50:30:2a:
1f:6f:4f:d9:bf:a1:7a:24:cc:52:f4:07:9d:b1:9b:61:c8:e3:
2e:ea:dc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:14:49 2026 by rpki-client