This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
File: XAVrgGGoYiwsBruFeG6dxhNhS8o.mft (raw, json)
Hash identifier: 6+28KsNrTTjLNcmcTSfttYfgtuErHQoJDvC2VeSuTK4=
Subject key identifier: F0:89:FC:F3:FA:29:F0:E5:D9:1F:CA:3A:62:90:D8:EF:39:73:3C:50
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial: 0296
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
Manifest number: 0271
Signing time: Sun 25 Jan 2026 01:04:17 +0000
Manifest this update: Sun 25 Jan 2026 01:04:17 +0000
Manifest next update: Sun 01 Feb 2026 01:04:17 +0000
Files and hashes: 1: XAVrgGGoYiwsBruFeG6dxhNhS8o.crl (hash: j9F0tXsP07XVUpfmi5yCluuakk7KV4qmw1FCEmq7/E8=)
2: 8A537D0CEB8811F09D1C7947556F56BC.roa (hash: lW2YwctCAoweBYNt0+PD17MjebPYE5IEwczeIwzefHs=)
3: 6121C23230AC11F08C150767C4F9AE02.roa (hash: fShyVa3rIna9iRvZNHAjyEZoQgutIuaEQEMpg+RXaTc=)
4: 71DFDF18890111EEB3F2581FC4F9AE02.roa (hash: 4uRsfI3UTikSBwFuE1LkYP4yx1HQPN2T4+sSHop7B54=)
5: 8C1315A8060611EFB7EFA66CC4F9AE02.roa (hash: D+g5jzuWcvphD1ps8jnw5QvvfxsQjGFWKglonqcWSi0=)
6: 01A55FE8EB8811F09418252C556F56BC.roa (hash: cc3W9FmIzzSNdIP86RaGXeVwpyhrc9hMYXXlcYdLtFY=)
7: 710A095EB62A11EF9D01E53DC4F9AE02.roa (hash: Kuncg/OKHO6KINevgnEgm8twmyohuTIV8xS8NsrR5Yw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662 (0x296)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Validity
Not Before: Jan 25 01:04:17 2026 GMT
Not After : Feb 1 01:04:17 2026 GMT
Subject: CN=69756c11-9e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:81:75:be:59:c9:7d:93:30:42:77:6f:80:26:
06:0a:5f:90:a8:91:1d:f8:66:44:fd:64:a5:b3:5c:
e1:f4:80:c5:4f:b5:ae:3f:52:bb:81:bc:bb:49:1f:
38:73:47:84:1f:46:1f:cb:09:8e:49:e8:5e:b5:c7:
00:8f:d3:51:4e:5c:93:b3:67:9c:59:10:c3:0e:82:
9c:7e:69:55:17:89:1e:87:a4:85:42:5c:4f:53:40:
41:f3:1f:bc:2a:99:0c:ef:b5:fe:aa:83:54:f8:32:
4d:dc:b1:b8:6b:c9:8a:61:8a:28:0d:e0:6d:b6:f0:
5d:2c:8f:e7:96:21:c4:fc:26:f8:76:3d:94:87:54:
18:b1:94:49:9d:ce:a7:51:62:42:ab:18:f1:a0:bc:
e0:dd:b8:96:09:15:a6:67:c7:0e:6b:3b:37:7e:b0:
7d:c8:6f:d9:0a:e6:d4:6c:3b:0f:e6:c2:c9:1b:67:
2e:dc:4d:b0:01:69:1b:ba:48:fb:32:be:9a:17:1c:
ce:e6:e1:2b:6d:b5:dc:8c:22:15:8f:0a:91:ff:8e:
d3:67:0e:35:3b:fe:18:b8:e3:0b:ed:9e:db:38:59:
b2:13:87:9d:5b:7e:97:c1:71:5f:73:d5:d8:4e:10:
d1:e9:63:14:e8:95:8b:0f:a8:8b:2c:25:39:1f:e4:
70:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:89:FC:F3:FA:29:F0:E5:D9:1F:CA:3A:62:90:D8:EF:39:73:3C:50
X509v3 Authority Key Identifier:
keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:cc:a1:35:16:1d:12:42:dd:13:8a:c5:7c:2c:a1:8c:49:23:
9d:d4:99:30:f0:a5:15:6e:13:09:2a:18:a6:b9:f1:56:86:72:
d2:ca:4a:46:cb:66:9d:c0:dc:a7:51:73:3e:1d:18:ac:07:46:
90:44:d5:be:78:20:bb:89:4e:c9:f4:ae:e8:a4:bf:66:3c:b8:
58:4a:63:6b:42:dd:c9:7f:f6:f1:31:17:5e:79:db:62:ae:55:
24:14:9b:90:3a:3b:75:06:24:21:1e:f2:b6:f3:b5:09:45:97:
6b:69:3e:7b:4f:56:75:bb:27:10:68:1b:e1:31:23:ce:18:9e:
f9:4f:ff:56:c3:8a:ef:4a:f8:1c:30:e8:34:72:be:60:72:af:
25:c0:5d:74:ea:1f:f4:1f:81:5c:9d:2f:1c:f3:3e:08:5d:8b:
f5:65:b0:61:b4:0e:71:c4:88:32:71:3d:79:d5:d3:1b:59:0f:
05:ff:cb:78:2a:10:95:f2:e8:7d:c1:90:db:1e:cf:d5:75:f4:
a4:95:21:cb:aa:58:2d:a3:ab:cf:58:cd:35:23:21:6f:ee:8f:
53:eb:c6:6b:ce:20:e2:b6:de:fd:d8:8d:40:95:ab:1d:6d:be:
97:20:6d:28:2a:67:ff:75:07:2a:31:2a:d4:18:9e:f9:b2:fb:
60:f9:83:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:08:45 2026 by rpki-client