This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
File: MxlflsRtTShdW95LCwMOODFOj8s.mft (raw, json)
Hash identifier: G6izmU69oGsjTJbu1MvaOc+QjPocsRanDgiIGhhfQvM=
Subject key identifier: 2F:B1:EF:4A:32:81:37:D6:BF:F6:23:E6:81:A3:B0:88:E4:DF:40:7F
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Certificate issuer: /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial: 072E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
Manifest number: 070B
Signing time: Sat 24 Jan 2026 21:18:08 +0000
Manifest this update: Sat 24 Jan 2026 21:18:08 +0000
Manifest next update: Sat 31 Jan 2026 21:18:08 +0000
Files and hashes: 1: MxlflsRtTShdW95LCwMOODFOj8s.crl (hash: 3g4ARt83IAm5aZbegB/xQhfZkYmcazeCUFTYAZO9WTY=)
2: 7A180DFACEB611ED8850A727C4F9AE02.roa (hash: ecb64YVTHrU3z12q4OTbq4blJYoHWP6/Sh6BnZVtvcQ=)
3: E99C5D78999011F09D326581C4F9AE02.roa (hash: KRc5l8wxQAY0kmCFWdslvfP8E+810yOkcCnLCwPkREQ=)
4: C4E57D9EE55A11ED98D38780C4F9AE02.roa (hash: FFJCcbR2xaawUKSL+usbkIr74Y7s8fy0PX5AM1LQSnQ=)
5: D9D6FFE098E311F08722B635C4F9AE02.roa (hash: 4B3XONtyer/LI/a650TjjRxsYwxE3yzyQKK0hCYJdog=)
6: 7AC60C48CEB611ED8850A727C4F9AE02.roa (hash: Ng5tUT5XtWth/UeVCj9UP+U8A5SqwEGWBOOoygGvFMc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:18:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1838 (0x72e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Validity
Not Before: Jan 24 21:18:08 2026 GMT
Not After : Jan 31 21:18:08 2026 GMT
Subject: CN=69753710-58b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:82:97:fb:c8:44:3f:5e:d9:94:95:a2:16:e1:
e7:47:6e:b5:4e:d1:99:64:e8:68:91:dc:c3:2a:28:
f0:41:c8:71:8a:28:8c:dd:9b:59:cc:2d:9a:ac:00:
c2:21:fe:49:24:1d:1c:8e:a9:81:c1:1a:22:19:df:
65:4c:7d:20:8e:71:ea:7e:4b:b8:e9:c5:e3:78:38:
71:fb:c4:14:16:21:8e:23:fd:23:06:71:dd:e7:4b:
7d:38:25:82:90:96:db:bd:35:c2:fd:71:69:d6:89:
fd:f1:94:c1:cc:02:e2:b0:5f:b2:b6:b4:7f:4c:e8:
cc:97:13:a4:9a:74:17:1c:77:da:85:f4:4c:56:be:
cc:aa:de:23:68:15:f6:a0:6f:7a:e5:6c:4a:dd:b4:
23:68:49:2d:e8:f3:94:e4:46:d9:53:37:12:ce:1f:
e5:7a:7f:6f:de:bc:25:df:55:cd:fd:59:24:be:f9:
6d:f7:0e:db:2e:47:51:e4:ac:d6:1d:91:6f:e8:6b:
6e:ab:34:b5:c6:d0:57:f3:a6:fa:1f:16:90:b9:0f:
25:81:a7:46:85:fb:d2:91:02:8a:54:76:41:79:d1:
5d:76:8e:a8:6e:9f:ee:bd:24:e2:fe:75:d5:ee:8b:
f0:22:54:a8:c4:72:39:ce:81:ad:00:17:88:12:27:
7e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B1:EF:4A:32:81:37:D6:BF:F6:23:E6:81:A3:B0:88:E4:DF:40:7F
X509v3 Authority Key Identifier:
keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b7:e0:cb:ef:2f:81:8c:8e:c6:3b:94:16:a3:d0:a5:01:c0:
54:0d:60:0f:ea:43:6c:dd:f0:db:86:09:59:72:21:7e:1d:c4:
ad:44:e9:90:ee:28:53:d9:12:5d:22:50:2b:49:c4:f2:52:40:
ed:c4:1d:60:1d:56:5e:ff:56:06:a5:b9:2e:80:6e:5a:5c:5c:
37:9d:c7:f8:4b:3f:39:d0:e8:13:0f:81:7a:e7:8c:20:e1:68:
77:81:df:0b:af:1f:d8:83:cb:88:41:eb:9e:68:07:af:1d:24:
ad:4e:ac:41:e7:52:7e:34:ab:f7:47:7b:3f:da:f6:81:83:65:
6e:a9:a1:54:4f:46:fc:b0:bb:35:05:d1:43:47:ca:b1:e3:b1:
76:3e:68:4d:6d:d9:da:e9:d9:f5:13:a5:3a:00:3a:14:fe:d4:
c4:43:23:fd:89:3f:e5:ba:fa:45:fb:f9:10:17:e6:26:99:0c:
43:18:ce:0b:a9:1e:97:a0:d4:d4:50:96:f8:5f:52:c3:87:00:
9b:7c:c4:b0:c3:d2:cf:5f:8a:1c:b7:f9:5f:62:75:15:70:9c:
4c:b0:a7:c1:8d:ad:6b:80:4d:16:0b:18:a2:c4:7c:8a:4b:27:
f3:6a:84:c7:b1:4c:7f:10:92:de:0d:e1:8a:c3:41:52:fd:24:
6c:59:c6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:27 2026 by rpki-client