This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft
File: XSeFtU0WPtAepUGLz6NPG3RWtxM.mft (raw, json)
Hash identifier: S4HUUu6+swWEKhx6k6RiW/2Xb4ZHNKn9EozKAeYzj/o=
Subject key identifier: E1:C5:7B:69:EF:6B:B4:42:57:DC:B8:D3:29:D2:B4:1F:CC:32:4E:E7
Authority key identifier: 5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13
Certificate issuer: /CN=A9167CC5/serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713
Certificate serial: 0512
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft
Manifest number: 04F7
Signing time: Sat 24 Jan 2026 22:57:33 +0000
Manifest this update: Sat 24 Jan 2026 22:57:33 +0000
Manifest next update: Sat 31 Jan 2026 22:57:33 +0000
Files and hashes: 1: XSeFtU0WPtAepUGLz6NPG3RWtxM.crl (hash: Di82rwB4rRyefeO2ilWOkaDKqQoLZpNSE7vBGyZaKZk=)
2: ACE844F047AA11ECA0F05026C4F9AE02.roa (hash: rDIISPx2Jw6kCtly/sr/saYDXZ1Vwq2i5nDputMMqM0=)
3: 1F77EFA44C4011EC952D5A23C4F9AE02.roa (hash: 8xg5MTXXpBnfX0/pQTijWkIRf1MFFgkaGBEoo218ZXc=)
4: 6337963E4C3D11ECB5FF844FC4F9AE02.roa (hash: aTXEi1LzXTl0g2LyujQDHdlXFvir0+qlzsPxrUIKoNA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl
rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:57:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1298 (0x512)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167CC5, serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713
Validity
Not Before: Jan 24 22:57:33 2026 GMT
Not After : Jan 31 22:57:33 2026 GMT
Subject: CN=69754e5d-6e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d9:64:67:5f:2d:44:2d:24:bb:10:10:d7:c1:
50:3a:2a:a8:98:e6:ad:8d:04:16:59:cf:2d:e1:cb:
01:dc:70:27:02:ea:14:f8:1c:b1:86:05:29:4e:9a:
a8:4a:50:ec:5d:85:3c:c6:a1:b8:27:25:18:f3:2e:
10:3d:19:46:ce:b1:3e:cb:31:d8:37:ed:8f:12:46:
8d:50:0d:ef:e0:81:21:6b:12:b7:9f:2e:9b:72:a9:
8f:ae:c8:1c:45:4f:a4:d3:cc:6a:2a:9b:2b:ce:19:
ab:27:ea:8f:fa:f0:cd:81:34:c2:1e:d4:ce:a0:2c:
e5:2b:22:78:f2:d9:da:91:16:4c:a0:9d:c9:b4:04:
c8:ce:9f:c9:e0:7c:78:06:0b:c5:d4:04:d1:09:7d:
5c:c8:15:41:6e:c8:f7:78:b2:d2:65:71:26:1b:4d:
d1:0a:c6:16:53:b2:0f:ec:7d:36:7c:a6:e0:51:fb:
26:5a:c0:4d:a1:73:90:44:96:60:22:2d:ac:82:5e:
a8:06:a4:9a:8a:14:c0:b4:ea:ea:87:85:63:88:eb:
30:b7:1a:7a:37:d0:22:79:f2:ac:da:12:0f:be:29:
dd:0b:45:24:68:98:ae:1e:a1:4d:8b:3d:e4:61:0b:
ea:23:4b:be:14:03:fb:f4:6d:10:2b:a3:6d:3f:71:
99:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C5:7B:69:EF:6B:B4:42:57:DC:B8:D3:29:D2:B4:1F:CC:32:4E:E7
X509v3 Authority Key Identifier:
keyid:5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:03:e2:81:f2:d6:47:c8:13:01:51:07:f6:f1:78:80:96:77:
17:d2:0b:09:a7:78:98:c1:5a:8c:b5:40:08:a8:ad:2e:36:31:
cb:0d:39:e6:e6:c1:ea:3f:dc:d2:e3:1f:91:7a:f3:c7:da:64:
4a:76:95:ad:46:d2:ed:94:32:6f:bb:fe:5e:33:aa:2d:f3:00:
e8:ef:54:ed:e6:91:35:cc:ed:6e:10:a8:00:d6:5f:83:f1:31:
f5:ed:c3:8e:a2:13:71:e3:c6:14:ed:24:98:48:7c:f2:70:d8:
c6:85:b3:c8:2c:53:c8:d7:76:41:8b:af:38:37:14:36:e2:53:
2c:91:16:4d:96:56:55:3e:5f:e7:20:13:3d:82:44:6e:da:57:
54:a0:d2:d9:94:c2:78:e3:d7:20:e5:7c:21:cf:f3:a8:ed:65:
1b:1b:3d:54:45:24:a3:10:cb:6a:8f:54:33:94:f9:96:f2:1b:
6c:d0:42:05:be:5f:0d:80:c4:c7:9b:8b:6e:02:76:d5:05:1e:
4d:a3:52:e8:89:ae:8f:a5:27:f2:57:c2:4e:78:e9:f6:4e:ff:
d0:56:2f:07:23:cb:a9:be:26:12:10:63:7b:18:f0:f2:76:99:
da:c1:a2:39:f1:f2:25:60:3d:0f:bb:78:b7:a9:f6:7a:d0:a0:
5b:9b:9b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:09:24 2026 by rpki-client