This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft
File: XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft (raw, json)
Hash identifier: nolao5L8OUP4ExKlxMoytkZiGN6b8CZIgQbAyo0rM8E=
Subject key identifier: 40:D0:FB:DD:28:9C:A2:D0:53:55:EE:D3:79:DE:94:B0:F5:EC:D0:CB
Authority key identifier: 5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6
Certificate issuer: /CN=A9153F9E/serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6
Certificate serial: 074B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft
Manifest number: 074B
Signing time: Sat 24 Jan 2026 21:00:03 +0000
Manifest this update: Sat 24 Jan 2026 21:00:02 +0000
Manifest next update: Sat 31 Jan 2026 21:00:02 +0000
Files and hashes: 1: XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl (hash: PJsMPH0Jj6r21mojJBfwVd8fph7IvBprhYYd5e8KpQU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl
rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1867 (0x74b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153F9E, serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6
Validity
Not Before: Jan 24 21:00:02 2026 GMT
Not After : Jan 31 21:00:02 2026 GMT
Subject: CN=697532d3-3375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:48:fa:df:ba:eb:59:35:79:ff:19:51:15:06:
11:d0:20:9c:28:c5:6e:e8:2e:c3:9f:14:b3:d5:8b:
64:13:a0:6e:7a:fe:b2:ed:63:a9:d9:75:07:d9:51:
ab:04:d7:8e:63:f6:c5:46:98:94:2d:0d:46:6e:53:
ea:6f:33:16:76:50:3c:1d:db:4d:05:32:94:a2:fb:
3d:49:cf:c6:64:db:69:f4:ae:69:16:76:fb:d1:0c:
b9:1e:f1:2f:bc:20:cb:49:1c:75:7f:90:67:c2:aa:
a2:6f:ca:41:fa:3e:8c:cf:8a:ab:c4:18:dd:70:b4:
46:b5:0c:e1:54:a0:19:d6:07:5e:cb:3d:e6:34:ef:
49:3f:35:bc:22:90:a3:83:3e:71:b0:99:e2:6b:40:
3e:4f:d0:5c:e3:26:d1:62:0e:66:b2:d1:15:6f:a0:
6d:08:b0:cc:16:51:cd:d7:d0:38:02:ae:2a:7f:46:
bc:73:38:ca:1c:d2:23:0a:ee:78:1e:59:06:0e:f4:
8c:53:37:8c:2d:cc:52:bc:d4:75:e8:57:f0:de:9d:
77:fd:67:dd:43:d7:18:cb:e4:e1:d5:9c:cd:d0:bb:
85:0f:70:44:8d:9c:9b:ad:21:55:97:d5:c6:86:36:
30:fd:aa:61:bd:4d:3d:e2:ee:7c:8c:6d:7b:6f:71:
c6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D0:FB:DD:28:9C:A2:D0:53:55:EE:D3:79:DE:94:B0:F5:EC:D0:CB
X509v3 Authority Key Identifier:
keyid:5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:ea:ab:34:d6:27:36:d0:24:56:09:d8:ca:bd:29:49:41:24:
84:a6:95:37:e1:7a:b0:59:be:36:91:57:79:03:ee:56:8d:88:
37:6d:62:36:16:69:34:55:55:e6:24:00:77:a9:89:3b:8a:0d:
ab:51:ea:c1:98:d2:67:8e:5d:4d:4d:ba:76:3a:6c:5d:ec:b9:
44:6a:20:c7:6c:43:e2:7a:39:2a:f5:27:07:70:da:d8:fb:14:
72:95:a4:ce:99:9e:7e:1e:69:2e:66:b5:b1:7b:1a:85:99:87:
e8:6d:95:3c:10:7d:b7:ef:b5:54:53:f6:49:ad:d1:7d:48:46:
9a:1d:8f:75:bf:fb:9f:2c:73:fe:af:df:5e:96:8a:4b:0a:e3:
1c:5f:d2:19:25:e2:fb:aa:f0:93:c0:6c:22:88:61:6e:35:49:
73:72:d6:5a:03:a5:53:60:7c:72:3c:0e:b5:61:27:c8:7a:58:
99:90:7f:4d:8b:30:6c:09:c2:0f:5a:73:4a:1a:3a:16:87:7b:
b2:0f:3e:6c:38:a5:17:23:3c:a1:00:0c:d6:c0:09:bb:65:6f:
e5:c0:01:82:06:65:b2:5c:1d:9b:35:c9:ed:70:3b:f9:67:f8:
aa:9a:5b:8a:23:e2:31:d6:b1:a6:70:39:d3:43:95:26:14:61:
9c:8a:bf:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:00:18 2026 by rpki-client