This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
File: XwTABfKMKFbHu_R2uRxioC8vxRw.mft (raw, json)
Hash identifier: MP242EYp7YfPcIdqxGgc5hlcV0kN7+aC3q0updg/EZU=
Subject key identifier: 1A:49:6A:93:A7:7D:43:DF:22:6B:21:FF:7A:EC:D5:F9:23:95:8E:59
Authority key identifier: 5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C
Certificate issuer: /CN=A915A0FB/serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
Manifest number: 0126
Signing time: Sun 25 Jan 2026 03:32:41 +0000
Manifest this update: Sun 25 Jan 2026 03:32:40 +0000
Manifest next update: Sun 01 Feb 2026 03:32:40 +0000
Files and hashes: 1: XwTABfKMKFbHu_R2uRxioC8vxRw.crl (hash: a8MxvcShylHNes0yiCVT6+7LxGlH+uJDp8g0Kmut1fc=)
2: 900F4ADA440611EF85166C30C4F9AE02.roa (hash: m0j5NYjPTDIJfmWKHuHfMjMZ9FBAfzwy/hGv/R4OYCo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl
rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:32:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0FB, serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
Validity
Not Before: Jan 25 03:32:40 2026 GMT
Not After : Feb 1 03:32:40 2026 GMT
Subject: CN=69758ed9-65cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4e:c8:dd:e4:d0:34:72:16:2c:a2:01:e0:d9:
bc:f6:74:09:85:63:47:d8:c6:33:fd:d1:c9:c4:57:
08:b6:3c:e1:ca:0a:69:ed:39:c6:c7:b3:0f:7d:75:
3c:92:b9:b0:55:72:9e:07:ab:fe:30:de:a8:4a:33:
ac:cb:00:d3:6e:79:84:8f:c4:16:09:a5:3e:6e:b7:
ce:f6:bb:62:93:33:49:55:14:7f:d1:63:2e:96:80:
16:d9:a7:e5:ef:61:e3:6c:0e:f4:a1:fa:66:26:dd:
97:6b:67:8b:34:36:54:f1:4a:b2:60:95:bb:f5:b4:
27:32:65:88:15:8d:7d:58:68:1e:cc:8d:1a:33:66:
0a:44:c3:a5:f8:19:f2:da:93:47:a8:93:3a:08:40:
f2:b5:4f:e9:d6:8b:96:3a:1d:f3:44:23:1e:cb:30:
fc:76:57:e4:71:18:81:b5:56:7b:b4:a1:a6:1d:0e:
bf:a8:80:5a:c5:2c:c1:9f:e5:cd:71:f6:d6:26:8a:
b3:46:ee:eb:2b:3c:d7:5b:84:08:8e:0a:af:0d:32:
7f:7c:11:12:ec:4d:7d:b3:1a:38:9f:fd:89:17:19:
1e:1a:3a:61:ba:b2:8b:fa:a7:ae:92:e5:d1:e8:7a:
56:67:cd:e0:9c:88:50:2b:33:f8:e7:a4:fa:1b:4f:
f3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:49:6A:93:A7:7D:43:DF:22:6B:21:FF:7A:EC:D5:F9:23:95:8E:59
X509v3 Authority Key Identifier:
keyid:5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:24:63:97:9c:f0:ae:fd:e1:ce:8b:01:e0:c6:91:e7:98:0d:
f6:94:5b:8c:60:3d:5c:a5:88:62:c6:4a:26:6e:fa:58:b6:00:
bb:34:e6:9f:90:39:11:31:f0:d2:ba:6d:f1:91:ee:93:c2:14:
de:15:94:7e:eb:0e:75:7c:0d:fb:a5:b6:94:5a:88:9b:a2:59:
42:8c:19:8f:9a:05:ce:4e:bf:91:23:85:7e:dc:63:04:60:5f:
82:b2:e3:c3:ea:2c:3b:36:b1:1f:b0:38:8d:ab:13:a3:43:81:
f1:75:95:37:ce:bd:c2:a0:b4:72:37:60:75:8c:2a:36:93:2d:
35:97:60:0d:85:5d:e7:c4:a0:ef:74:7f:d8:44:41:28:53:ca:
96:e5:80:8e:e4:8c:d0:76:c7:33:1e:46:55:57:09:d0:f1:f5:
71:6a:59:d5:ad:3b:a9:c2:3a:7e:33:d1:18:3e:2c:c5:17:5d:
54:f1:39:89:3b:76:7c:d7:a5:8b:ec:f8:1e:cf:58:3a:e9:41:
99:02:d5:07:ef:35:05:07:de:b4:11:41:b0:ea:67:e6:89:47:
7f:25:dc:b0:1c:c9:00:1a:af:20:ac:37:3c:b5:74:8f:c0:43:
cb:1d:df:47:09:17:fe:58:73:db:0e:29:da:51:75:c1:20:e9:
db:f5:0f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:50 2026 by rpki-client