This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
File: a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft (raw, json)
Hash identifier: 6j8kPEF5WdA3pm6CEmYXk8bZzRNfFXbxJDNHEAbiVpg=
Subject key identifier: F9:40:69:93:6F:46:32:A1:94:E1:A9:AA:11:2D:75:91:EB:E2:FF:8B
Authority key identifier: 6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E
Certificate issuer: /CN=A9165BD7/serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E
Certificate serial: 021A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
Manifest number: 0216
Signing time: Sun 25 Jan 2026 01:32:40 +0000
Manifest this update: Sun 25 Jan 2026 01:32:39 +0000
Manifest next update: Sun 01 Feb 2026 01:32:39 +0000
Files and hashes: 1: a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl (hash: 5Zej6MwBECjPnhORjcd7vJwyzy19y+6b79FkTxWC+Og=)
2: A92EC53AC95B11ED9ABE6935C4F9AE02.roa (hash: gnoiGXKkrmhYTwfXU41IB03BpkGU00B0FHz74SrCkdc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl
rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538 (0x21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165BD7, serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E
Validity
Not Before: Jan 25 01:32:39 2026 GMT
Not After : Feb 1 01:32:39 2026 GMT
Subject: CN=697572b8-ee82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:08:b7:23:80:04:b9:d5:84:f0:22:8d:a8:89:
29:61:b0:0f:57:bb:d3:1b:35:96:27:42:5c:7e:6d:
1a:65:26:08:47:87:04:19:e1:c8:d5:f9:c0:c0:f1:
7c:1c:15:07:1e:1b:79:06:16:29:77:7f:b0:4f:19:
31:bd:4e:32:55:c9:a8:2f:dd:a4:ca:fb:ce:dd:7d:
7e:7b:7c:4a:72:ee:e3:80:ee:95:38:f6:bb:fc:27:
2f:56:f1:64:3c:0e:f6:82:73:31:a6:d8:20:76:89:
4e:85:d5:42:79:8c:d6:4d:e3:57:71:4c:55:9f:d1:
41:d9:a1:81:cd:d2:0f:8b:3d:19:33:6d:cd:c6:e5:
22:c1:67:34:c9:b7:b0:0d:ab:e2:db:4c:60:13:d6:
c2:99:2b:57:ee:f8:0e:bd:1d:07:12:89:d7:4d:2a:
51:e8:b6:0a:b4:0a:a5:b3:0c:00:ce:aa:8b:a0:cd:
05:a7:ea:21:20:c4:a1:98:78:01:09:bd:c6:b6:95:
71:59:5b:18:98:a5:3d:c9:c5:3d:dc:de:6a:8a:77:
58:19:20:3f:82:39:a9:b4:9e:e5:be:ab:00:45:70:
6f:74:9b:96:4b:6e:2e:5d:75:c5:2b:83:b3:0f:f6:
f6:41:97:26:b7:cb:58:07:ad:c2:c5:ca:5f:a8:d6:
81:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:40:69:93:6F:46:32:A1:94:E1:A9:AA:11:2D:75:91:EB:E2:FF:8B
X509v3 Authority Key Identifier:
keyid:6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:51:46:65:33:51:9b:cf:39:87:02:7b:c7:dd:d7:2a:25:c5:
8d:d2:a3:ca:f6:87:21:13:a2:49:ba:11:ea:1b:7c:3f:9e:c6:
e0:68:3a:93:85:55:73:fd:bf:c1:0f:9d:8c:46:5b:0e:d2:37:
13:d4:20:0e:26:a3:87:cb:78:db:bb:f0:c8:15:01:60:ff:94:
fd:67:00:9c:63:dd:76:69:89:af:82:cf:37:2f:f9:0c:a3:b3:
d2:9c:5c:fc:0e:e4:3c:cf:71:b7:c2:37:d3:e5:e5:7e:4c:0f:
e6:f7:c4:a2:a8:70:a0:27:36:53:8a:12:87:87:91:15:9e:c4:
0a:06:fa:58:8e:7e:c7:33:ac:ca:97:ad:95:b6:7e:01:3b:b2:
fa:e0:e9:28:2d:17:f1:94:ba:03:5e:14:ab:49:19:52:17:e8:
5b:89:08:a6:38:9a:73:71:96:6a:55:5e:4c:57:fa:3a:da:32:
04:12:73:2e:19:bf:da:cd:03:ce:29:1e:16:c2:75:2d:f4:47:
88:2d:e8:e5:f6:70:94:49:d5:b7:ce:2b:5a:1d:76:da:d3:ff:
63:d4:71:df:cf:89:e5:64:01:f2:2f:42:70:21:6e:63:0b:d2:
b5:9e:c6:ab:7f:6a:6a:9c:e6:9d:b6:2c:8c:8b:0f:be:49:8d:
cc:e7:a4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:37:11 2026 by rpki-client