This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
File: PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft (raw, json)
Hash identifier: 469Clt/LRJisJ1FOz8Q6dsN9O+6pelf6qz3utha36jA=
Subject key identifier: F7:D5:59:20:4A:5F:D3:1E:88:F3:4B:7F:AB:70:D9:AD:68:A3:63:13
Authority key identifier: 3F:1A:8E:A3:D2:AD:C6:EC:B2:36:0E:0C:37:6C:E5:59:B9:FF:71:F2
Certificate issuer: /CN=A9173FAC/serialNumber=3F1A8EA3D2ADC6ECB2360E0C376CE559B9FF71F2
Certificate serial: 96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
Manifest number: 96
Signing time: Fri 23 Jan 2026 05:32:26 +0000
Manifest this update: Fri 23 Jan 2026 05:32:26 +0000
Manifest next update: Fri 30 Jan 2026 05:32:26 +0000
Files and hashes: 1: PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl (hash: BpfDo0z22Q9z1RCzEfWaaUxpwLdpVqTU1xY+9Lxwz+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl
rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 05:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173FAC, serialNumber=3F1A8EA3D2ADC6ECB2360E0C376CE559B9FF71F2
Validity
Not Before: Jan 23 05:32:26 2026 GMT
Not After : Jan 30 05:32:26 2026 GMT
Subject: CN=697307ea-86b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c1:62:a7:be:22:39:3d:33:97:dd:46:4a:10:
98:95:c9:b2:7d:ca:65:71:33:85:59:f0:26:1c:63:
e4:36:f2:1b:1b:31:d9:80:68:fe:8d:aa:78:36:60:
53:82:02:09:5e:73:bb:34:f0:c0:01:e4:0b:30:a4:
13:ce:48:fc:54:05:65:a7:96:e7:a6:9a:b7:9d:5b:
ad:12:fe:31:95:5c:53:fd:32:da:2d:48:b3:27:75:
24:7f:05:4a:37:62:c4:38:b7:c5:17:bd:57:35:57:
00:d9:33:fc:78:88:34:73:d1:86:cd:2b:c8:d8:19:
f3:b7:72:89:88:95:13:21:ed:3a:83:43:a5:8e:df:
a6:56:c8:0a:a6:0c:59:ce:7a:c6:80:f7:28:47:55:
44:32:df:96:d9:3a:29:a9:44:f2:96:53:a4:92:bb:
78:a6:2d:9a:67:8a:0e:0f:14:ec:f0:52:fc:ca:2b:
b3:cb:76:76:9f:da:c2:6c:04:04:97:f5:a2:2d:03:
19:38:0d:f2:ad:07:f5:10:e0:3f:b5:4b:1b:42:fc:
de:75:d7:3d:25:3a:86:2c:31:bc:fc:6d:b3:2b:6a:
3d:6f:2b:57:83:4d:9c:f7:d6:d8:da:63:58:fd:f2:
30:46:c3:57:dc:4f:e4:d3:f5:32:66:d2:16:49:8c:
a8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D5:59:20:4A:5F:D3:1E:88:F3:4B:7F:AB:70:D9:AD:68:A3:63:13
X509v3 Authority Key Identifier:
keyid:3F:1A:8E:A3:D2:AD:C6:EC:B2:36:0E:0C:37:6C:E5:59:B9:FF:71:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f3:7e:7f:31:8b:bf:2f:c0:8c:8d:45:bd:97:9e:30:fa:06:
ae:f4:f9:98:64:44:48:0e:f1:e7:f4:a7:94:7e:83:78:96:29:
e0:34:69:08:8c:89:08:fe:27:c4:48:0c:ca:af:75:7d:16:06:
9f:3a:4c:75:ab:a0:ad:c8:2c:be:ac:51:46:d2:d3:3a:e4:9f:
d4:b9:c5:da:6b:f0:89:18:3e:cb:32:12:8d:b6:4d:a7:da:98:
04:c7:e2:a3:cd:ed:9c:d3:df:c2:1a:7e:37:b7:8b:a5:c0:12:
7b:23:94:5c:47:06:ca:d1:e5:e5:5f:b9:7c:30:b0:09:cb:a1:
bc:d1:1f:28:7e:64:b2:25:af:a7:33:f5:a1:c0:6d:25:13:b8:
30:8d:c2:61:93:98:20:b4:d5:b1:e0:74:2b:7b:6e:d8:81:d7:
15:6a:67:16:c1:50:0f:df:98:8a:3c:5a:7b:7d:0a:81:87:21:
80:63:8c:87:aa:46:c6:c4:0b:47:6e:08:9f:4b:04:e1:13:ea:
90:07:90:8c:49:00:6c:b2:62:93:16:e5:8e:b1:f5:9e:d1:69:
e8:3a:17:15:8f:f9:c7:2e:5b:67:67:15:e9:b9:4b:90:9e:f5:
78:9a:9d:2d:78:d1:6f:02:7d:ab:9c:1b:b2:ea:32:5a:54:09:
6e:6c:d8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:15 2026 by rpki-client