This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft
File: XW8me3qjzDZHyTE7nux9aaFnOVg.mft (raw, json)
Hash identifier: HuO8TPtYgvDLK1f+DMC49eAwDxQ984VQWy2AYxNFJmk=
Subject key identifier: F9:97:03:E7:0D:35:1C:98:CC:A2:A1:29:37:F9:1E:F4:7E:1D:3F:AB
Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58
Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958
Certificate serial: 83
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft
Manifest number: 7F
Signing time: Sun 25 Jan 2026 05:52:03 +0000
Manifest this update: Sun 25 Jan 2026 05:52:02 +0000
Manifest next update: Sun 01 Feb 2026 05:52:02 +0000
Files and hashes: 1: XW8me3qjzDZHyTE7nux9aaFnOVg.crl (hash: +O6HfkEU3KlKTFmu+dUbXGRhTf+cgaK/Vlbbjsuo1eA=)
2: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (hash: H/XGmOZJbxNUFS8Tcof2YjyntGMBezbzD9QlTVis80k=)
3: B05F386E3B9911F09DE90D79C4F9AE02.roa (hash: GIHBXBl2pD21pCNcWV3u/+IbfxIubhK1MF7gCF8syoI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl
rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:52:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958
Validity
Not Before: Jan 25 05:52:02 2026 GMT
Not After : Feb 1 05:52:02 2026 GMT
Subject: CN=6975af82-e901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:46:fa:6b:a6:1b:7a:a9:31:f4:69:b7:05:42:
73:cc:cd:f7:ce:c4:7e:9a:f1:f6:38:93:49:fb:61:
8f:a6:8b:f3:0f:d6:b8:1a:d4:12:ef:75:ab:b9:bf:
87:c7:d8:43:09:25:1c:94:78:b7:e4:9a:0d:0b:ec:
85:12:40:e1:f6:6e:96:8b:39:f8:88:e6:4e:d4:bc:
0e:26:c8:cf:17:af:fd:e8:4d:d7:f2:07:33:e7:0c:
d0:50:b2:77:7b:3a:c8:fc:5c:30:a0:df:47:09:01:
f3:4c:1f:df:7c:d7:40:95:79:3b:1f:13:30:5c:06:
44:73:45:28:d6:a1:1f:61:cf:e4:cd:82:02:ed:b6:
fc:bc:67:59:ac:19:e8:84:fc:1a:7e:29:32:85:6d:
e5:ef:dc:cd:32:76:82:6e:ef:4f:d4:00:94:93:57:
6d:c8:ab:fb:1d:b9:00:17:e5:91:aa:8f:07:47:5f:
7b:e8:55:c1:3d:a9:65:33:d0:99:de:55:10:0f:01:
d1:a6:9a:68:39:8a:20:f1:d2:c9:a5:60:2f:34:38:
4d:dc:cf:5a:29:f3:c9:90:ae:29:05:e0:9a:dd:fa:
75:28:8a:12:5c:ad:44:e9:fe:54:a1:5f:bf:22:84:
7a:5e:f7:7a:6d:d5:c2:c3:b4:c5:a5:53:5d:4d:b1:
fd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:97:03:E7:0D:35:1C:98:CC:A2:A1:29:37:F9:1E:F4:7E:1D:3F:AB
X509v3 Authority Key Identifier:
keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:e9:7e:15:1b:7a:0d:cc:88:04:71:0f:fd:d6:02:69:71:d8:
1f:03:21:8e:db:41:ef:89:74:42:df:d4:6b:71:5f:7f:d0:61:
3c:90:a1:d5:25:fd:79:29:8f:0b:6c:6b:6c:e9:80:21:79:77:
97:b4:5a:d9:db:ce:c6:7a:1c:20:92:ef:7c:24:04:1c:01:ae:
be:dc:29:18:45:03:b0:cd:29:d6:0e:e5:df:d8:55:ca:82:2b:
da:6e:2a:c3:9c:bb:1e:be:46:4f:23:33:df:a6:df:76:1f:7c:
71:be:e4:0a:3a:e9:a6:3e:ce:66:c0:b5:b9:ac:ef:07:2d:80:
f9:34:66:d7:93:e7:76:d4:da:de:bc:97:94:90:92:02:db:a1:
55:0e:24:1c:86:bc:77:d0:b6:86:57:b2:26:ce:99:09:5b:34:
16:2b:1c:47:1f:e9:84:a2:87:21:7d:b6:eb:e5:8b:b8:3e:9f:
23:75:2b:7d:62:28:3e:63:79:a1:5a:36:4b:fc:92:08:4b:ee:
f0:1e:55:ac:95:3e:95:21:cc:42:57:b9:46:64:67:42:ad:de:
6b:b8:c2:83:f5:4d:09:09:a0:9c:8c:eb:0d:7f:1a:e3:94:6d:
b0:2b:c6:6f:d4:da:bb:f0:5b:e4:c2:40:60:b1:77:28:09:eb:
3b:a4:66:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:15:24 2026 by rpki-client