This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
File: xVGHsAsaczdfhFaIX2oQfuHZNc8.mft (raw, json)
Hash identifier: +G9KmfmcjBccSle04eyto4Bx2VHHHyDoZ1qGQIj0mWw=
Subject key identifier: 0F:19:09:3B:00:F2:98:E6:E3:99:34:2B:1B:5D:7E:50:45:CF:61:9C
Authority key identifier: C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF
Certificate issuer: /CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF
Certificate serial: 0165
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
Manifest number: 015D
Signing time: Sun 25 Jan 2026 03:23:58 +0000
Manifest this update: Sun 25 Jan 2026 03:23:58 +0000
Manifest next update: Sun 01 Feb 2026 03:23:58 +0000
Files and hashes: 1: xVGHsAsaczdfhFaIX2oQfuHZNc8.crl (hash: BZ/Oud2LPDrkJ+Zi1vn2KK3eaPRrwFLNV6dualI3qOI=)
2: C9FDEC12E82411EE81065223C4F9AE02.roa (hash: AhOHyTR8Y1BKmfRUj0AuSJ2KJPys3xbmw5f4K4GCzjI=)
3: EF1E7F70E82411EE9005BA2DC4F9AE02.roa (hash: EKYVn1LnE/qYTW245x3NVrE53P336TlJMyIXtYLhWG4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl
rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357 (0x165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173B29, serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF
Validity
Not Before: Jan 25 03:23:58 2026 GMT
Not After : Feb 1 03:23:58 2026 GMT
Subject: CN=69758cce-4707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bb:ea:4a:67:93:85:75:d5:f9:56:48:1d:ef:
c8:b1:16:9e:ea:03:01:66:eb:5a:93:25:52:b5:69:
ea:c1:3a:4e:cc:a0:b0:62:bb:54:f6:d4:cd:98:3f:
9f:3b:8d:42:01:e1:2f:39:87:88:f7:d0:53:b3:12:
d5:65:14:2b:25:c6:82:15:87:0f:08:5c:28:55:37:
00:55:c2:0e:14:ef:12:e0:86:61:36:c2:f1:e0:97:
c7:a4:45:7b:b0:d8:34:d4:a9:cb:ec:4a:2a:03:8f:
06:79:6b:3e:af:aa:e0:3f:93:95:54:df:f8:2d:8c:
97:7c:6f:5f:53:a1:78:92:39:6a:c8:82:80:32:17:
ef:93:57:26:fc:a1:7e:99:b9:d2:2b:d6:19:83:e7:
7d:21:ef:53:80:64:94:71:ed:9c:89:cc:f4:5c:66:
1b:86:61:1a:22:9f:92:65:da:b7:59:90:b6:d3:96:
9b:e4:a1:59:e7:56:da:2b:de:c3:d2:4a:9e:e4:f5:
98:54:5c:2d:25:08:75:72:34:7e:f6:b9:32:05:3e:
ee:6a:1b:01:d0:9b:75:77:ce:32:50:58:13:a3:8b:
8e:7e:cb:33:9d:0f:7a:b2:97:b5:7f:ec:b6:6f:ce:
4b:04:01:9c:30:0b:1b:92:5d:bb:9b:b5:51:36:73:
0b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:19:09:3B:00:F2:98:E6:E3:99:34:2B:1B:5D:7E:50:45:CF:61:9C
X509v3 Authority Key Identifier:
keyid:C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:22:81:84:50:1c:ba:70:51:c1:84:5d:35:f0:f4:9d:2b:5e:
4f:23:3b:c2:cf:d4:3b:85:b9:4f:cb:99:05:34:36:82:cd:52:
dd:1e:92:ae:d9:36:c8:c3:1a:da:3e:92:18:93:61:98:f0:66:
12:80:ac:d1:97:ad:d0:03:02:de:d8:00:51:af:64:24:fe:46:
ed:0f:ae:11:5d:52:35:0c:b0:09:92:a3:73:df:f7:cc:33:2b:
aa:52:c9:69:b8:c7:22:5c:ab:f0:f4:02:1b:95:11:cc:dc:5e:
42:a6:86:c6:e7:b6:49:d5:d2:3e:79:2c:fd:25:9a:3d:84:83:
25:78:8f:8e:44:2c:f8:11:31:a5:ac:6f:6a:4e:7b:af:2a:2d:
72:a9:1c:37:79:ed:76:03:59:2a:7e:a5:37:da:1d:82:fe:71:
d3:40:bb:b3:cb:e9:9a:6d:fa:44:a5:22:9b:35:c0:a5:af:48:
38:3d:7f:85:49:65:a4:15:98:4f:28:d0:47:d4:1f:7c:bd:38:
14:d8:05:cc:34:bc:ae:8f:a5:fb:b0:f2:cc:a3:9f:d6:d9:db:
ae:b5:62:76:cc:25:70:35:e4:06:bd:e1:56:78:76:5e:ab:6c:
8c:ba:b9:db:f2:b8:87:9a:d2:11:05:fd:28:43:a7:be:be:d7:
4e:1e:82:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:27:12 2026 by rpki-client