This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
File: AflcxfCmuelnxvjzbH9k1CRLrHI.mft (raw, json)
Hash identifier: r3tRkm0x306K5/OKUm9bDUMjlq+EHfGujmripS6C1kk=
Subject key identifier: C7:61:CE:A4:06:D0:4F:5D:5E:2B:54:05:4B:1F:07:57:CD:E7:FA:EF
Authority key identifier: 01:F9:5C:C5:F0:A6:B9:E9:67:C6:F8:F3:6C:7F:64:D4:24:4B:AC:72
Certificate issuer: /CN=A9169451/serialNumber=01F95CC5F0A6B9E967C6F8F36C7F64D4244BAC72
Certificate serial: 0284
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
Manifest number: 0280
Signing time: Sun 25 Jan 2026 00:44:25 +0000
Manifest this update: Sun 25 Jan 2026 00:44:25 +0000
Manifest next update: Sun 01 Feb 2026 00:44:25 +0000
Files and hashes: 1: AflcxfCmuelnxvjzbH9k1CRLrHI.crl (hash: J8XcHrQKs0Cf7qqv+Z0qUKSKx1FEY2YKV/nzzenXPC0=)
2: 0C1EB10A3A5011ED8B4A2570C4F9AE02.roa (hash: R3jRDvm0E8vyU2n+jY+lrRNs85d0z5lzmVh9QqpC5jI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.crl
rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 644 (0x284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169451, serialNumber=01F95CC5F0A6B9E967C6F8F36C7F64D4244BAC72
Validity
Not Before: Jan 25 00:44:25 2026 GMT
Not After : Feb 1 00:44:25 2026 GMT
Subject: CN=69756769-d5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8b:e0:5e:da:b9:80:48:95:62:70:19:44:4f:
7b:62:54:6a:f8:c1:18:51:67:a8:08:61:ad:07:d6:
ae:6a:6b:fa:e9:b5:81:2c:f1:f2:db:7b:2d:ca:d7:
0c:b5:9a:82:6f:1c:c0:81:c9:16:ad:09:7b:be:95:
c0:54:36:2b:85:f5:94:d6:95:f6:57:7d:0e:d7:f2:
2b:42:09:9a:81:fe:ed:2f:2f:99:f1:26:7e:0d:7d:
2b:ea:84:95:6f:fb:18:3e:ad:cc:ff:66:d0:37:75:
5e:8a:78:52:d7:df:76:53:aa:60:b9:4c:b8:31:0f:
b8:6c:a6:4d:e0:36:e1:a7:91:1e:22:3e:65:fe:ea:
1f:cd:62:63:f6:e5:b3:60:0c:2e:9f:9d:07:fd:17:
8e:e0:5c:fe:64:8a:4d:5d:c5:12:32:cb:75:5e:bf:
58:9c:ff:26:d3:cf:e5:f1:85:d0:3c:92:55:44:0c:
c7:e3:08:63:28:94:1c:b0:b0:8c:e8:b4:72:01:05:
7a:51:f8:14:e6:f1:60:57:e7:df:d5:ae:21:98:c4:
7e:40:c5:be:41:15:66:ab:32:18:e8:68:7a:1e:cc:
6d:5c:06:b9:94:b8:91:a8:c7:5f:97:48:fc:c5:a6:
fd:c6:5b:28:a5:bc:e5:f1:c4:e0:ae:1d:dc:3b:f5:
19:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:61:CE:A4:06:D0:4F:5D:5E:2B:54:05:4B:1F:07:57:CD:E7:FA:EF
X509v3 Authority Key Identifier:
keyid:01:F9:5C:C5:F0:A6:B9:E9:67:C6:F8:F3:6C:7F:64:D4:24:4B:AC:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:df:21:db:f7:32:06:dc:ce:9e:f6:aa:d7:da:d8:68:9a:d8:
87:8a:10:50:8e:99:2d:b5:b3:40:b3:86:31:b8:1b:4d:40:4e:
79:f7:95:98:dd:09:fa:bc:78:10:a8:29:8e:32:32:d7:21:2c:
ea:54:2c:b8:28:13:ff:da:73:71:a8:88:e3:4a:48:d6:02:50:
07:31:b0:a5:57:dc:c9:12:69:06:d4:3f:19:7c:18:2f:c5:95:
35:05:74:9e:8f:74:88:ca:18:2b:e0:0f:91:7e:0c:1c:05:50:
b4:5f:de:9b:4c:87:ac:02:8c:80:09:a3:e5:67:c6:ee:f4:cd:
11:a0:fb:fe:c8:2a:8a:1e:0b:f7:f4:18:dc:59:73:2c:9e:2c:
aa:8b:38:03:ac:74:62:ac:d8:2a:40:3c:0b:31:c6:ad:b9:d1:
08:c8:e9:47:91:c3:12:50:01:30:6b:6a:ca:17:81:65:82:d5:
41:8b:91:37:9b:79:cc:b5:2b:e9:bb:94:ab:55:6d:78:ad:6d:
87:9e:8d:0b:07:ef:9c:d1:f9:f4:9e:99:7a:1a:d3:74:e8:70:
1a:24:9c:84:e7:c8:fb:0e:71:38:3d:29:55:bd:90:19:0e:ff:
46:ee:9d:56:1b:ad:6a:ff:3e:76:ca:e9:86:3b:08:96:bc:20:
6d:62:86:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:01:44 2026 by rpki-client