This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft
File: cxr37OuNcapcrpOXPuGmWXYUwkQ.mft (raw, json)
Hash identifier: 3MxB4kt1aRvR2ksMopDCwbXLY3wDzDeVskUKXOmrrZE=
Subject key identifier: 39:08:E9:96:F1:40:CB:E9:78:FD:67:D4:D5:C7:75:42:23:CF:89:CF
Authority key identifier: 73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44
Certificate issuer: /CN=A9169E68/serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244
Certificate serial: 084F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft
Manifest number: 0849
Signing time: Sat 24 Jan 2026 20:08:44 +0000
Manifest this update: Sat 24 Jan 2026 20:08:44 +0000
Manifest next update: Sat 31 Jan 2026 20:08:44 +0000
Files and hashes: 1: cxr37OuNcapcrpOXPuGmWXYUwkQ.crl (hash: wwOqZqmNHiTrgwzafgVCtxpkX+RW+VgzmZ+aHS9E540=)
2: 6A23B8EAF25411EA9DE4FF2DC4F9AE02.roa (hash: cQ3kSdVpmJNxckwfYojLBqgPBczRQd1WG2pNa7wN9U0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl
rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:08:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2127 (0x84f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169E68, serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244
Validity
Not Before: Jan 24 20:08:44 2026 GMT
Not After : Jan 31 20:08:44 2026 GMT
Subject: CN=697526cc-7f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4e:49:d6:2b:c7:a8:94:fd:80:4e:69:78:38:
54:a1:12:7f:fd:c2:cf:9b:65:f2:79:0e:90:b2:ee:
6c:0a:63:24:34:00:5b:03:99:50:74:1b:9d:6d:95:
a9:fb:4f:8a:02:75:e7:fe:1b:dc:c3:fd:49:a9:29:
72:71:0e:94:68:19:13:82:7c:7d:e2:a4:22:46:ee:
6a:bf:a5:90:19:04:f4:15:67:17:8d:47:b1:aa:a2:
1b:3d:0f:94:ab:39:a0:9a:7f:6c:c3:9b:f8:5f:8f:
a2:d2:b9:66:3d:8d:e4:4d:da:57:fa:e2:e8:7d:c9:
b3:aa:c2:ad:39:ed:c3:3e:b9:b7:ab:04:f7:28:61:
a5:7a:60:99:af:bf:7c:b0:d7:eb:d8:fe:47:60:05:
1c:47:08:86:5b:9a:9c:59:1a:28:cf:fb:33:3c:19:
de:42:29:6b:63:2e:f1:fc:f5:f3:84:e2:45:bc:ff:
54:76:c4:d7:48:ef:8e:68:20:e9:ca:7e:71:de:8a:
16:b8:7a:80:7b:d5:d3:e8:f9:81:cb:b4:fb:71:e6:
cd:92:54:55:77:40:ba:f5:3c:b7:a4:b8:99:ac:de:
91:6b:06:d3:e4:a4:f8:c6:83:c1:14:e4:6c:c3:f4:
25:cc:2d:22:c9:f5:2e:c5:34:d4:df:4d:1b:a9:4e:
c0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:08:E9:96:F1:40:CB:E9:78:FD:67:D4:D5:C7:75:42:23:CF:89:CF
X509v3 Authority Key Identifier:
keyid:73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:47:d1:26:50:05:f5:33:1c:e0:e3:31:81:84:d0:2f:a3:d6:
46:1a:4c:d7:21:0d:2c:73:c7:67:5b:db:ae:04:f8:fc:00:9f:
d4:d3:cf:e6:f9:4a:81:d6:0e:0f:ba:ac:23:c8:22:28:db:51:
f4:5b:aa:91:29:b1:16:ca:12:be:d1:be:0f:3c:37:1c:61:e8:
04:83:f0:44:5b:00:57:ab:43:8d:e6:b8:0a:9c:09:c3:b6:58:
b6:81:42:46:04:70:4b:05:bf:de:0e:9c:01:67:9d:91:05:eb:
89:99:dd:6b:35:57:06:c9:8c:aa:37:96:71:3d:51:e5:4f:01:
de:0f:9e:a5:67:5c:1c:fa:fc:6d:47:34:4e:b6:88:9a:a1:68:
6d:ab:83:5e:d2:a4:31:87:03:b8:cb:dd:d6:9a:b3:ba:4f:f1:
db:d2:b6:b5:06:33:b5:14:b3:66:e0:af:9c:e6:05:6c:ce:19:
95:62:21:7d:a8:31:ed:4e:6e:34:14:bb:ea:27:93:02:6e:f3:
10:ad:f3:24:99:35:c4:88:78:f3:27:9e:e5:d3:a8:af:75:48:
9a:a3:fd:7e:12:b7:7e:27:4f:0b:3d:15:b5:4a:60:60:bf:a4:
8f:5a:6d:be:98:99:61:93:95:08:55:e6:59:ca:16:ba:9e:7e:
8b:0d:26:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:32:42 2026 by rpki-client