This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft
File: xDm8101kBSuyA1McRgSa1ANYj8c.mft (raw, json)
Hash identifier: zo7kjLeEyGdZLSnv0vUZSbqipa9V7uJsPEsXPJiDKqQ=
Subject key identifier: 10:E0:2F:97:E8:43:F8:AD:92:4C:B2:13:29:14:9F:80:B9:AC:B3:36
Authority key identifier: C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7
Certificate issuer: /CN=A91775D8/serialNumber=C439BCD74D64052BB203531C46049AD403588FC7
Certificate serial: 0716
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft
Manifest number: 070E
Signing time: Sat 24 Jan 2026 21:13:07 +0000
Manifest this update: Sat 24 Jan 2026 21:13:06 +0000
Manifest next update: Sat 31 Jan 2026 21:13:06 +0000
Files and hashes: 1: xDm8101kBSuyA1McRgSa1ANYj8c.crl (hash: 9YRSMHZNSz0rChB80f5iO8g7Xj9ehmhRYeTPcM6IMAs=)
2: 18D9E13C5CE611EC80EC7E76C4F9AE02.roa (hash: FREW3BYIhAyr82gwSpG+aXABGrdd/q2DunYmdFOCRY4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl
rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1814 (0x716)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91775D8, serialNumber=C439BCD74D64052BB203531C46049AD403588FC7
Validity
Not Before: Jan 24 21:13:06 2026 GMT
Not After : Jan 31 21:13:06 2026 GMT
Subject: CN=697535e3-95f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:49:5b:07:3a:b2:f8:c5:27:e7:04:99:34:8e:
eb:1a:0d:0d:24:3e:ec:fe:f6:1c:e0:ba:32:13:75:
f0:52:62:e2:90:b4:12:ae:fa:2d:b7:b1:3a:b5:b9:
dd:51:87:27:78:36:cd:97:a6:ca:f2:8a:3a:2d:ea:
dd:dc:c9:9f:63:b1:74:0d:cb:cb:1f:31:c4:47:be:
78:02:9b:46:b7:de:06:26:3e:ee:3d:d5:23:b4:4c:
8a:74:46:ee:d5:94:c2:1c:09:9d:4e:58:b0:4f:c2:
42:a2:f3:55:5c:b9:2d:42:b9:91:79:a8:61:b4:69:
95:0d:8f:e8:94:5f:3b:25:5e:50:49:7d:6c:92:d4:
68:98:06:2d:b9:b9:7e:a6:1c:5f:f9:1c:ca:d4:8c:
5f:c3:2a:30:8b:a1:ac:98:1b:0e:a3:95:2c:87:61:
dd:3c:bf:6e:be:f2:c5:28:93:00:39:c6:ce:64:42:
65:d2:a6:cc:7e:15:68:b8:c8:fa:95:0d:c4:d5:66:
1f:51:09:48:8c:4c:10:b8:8f:1f:d8:bd:2e:c2:70:
a3:48:12:a3:89:57:b1:d4:a7:c7:8c:5f:c2:b2:a4:
bf:54:f1:c3:e1:c8:bc:0b:2c:a4:c2:6c:bd:2f:86:
c0:28:96:0b:94:c9:7f:cf:c1:ad:85:eb:4b:bd:47:
2e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E0:2F:97:E8:43:F8:AD:92:4C:B2:13:29:14:9F:80:B9:AC:B3:36
X509v3 Authority Key Identifier:
keyid:C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:05:cd:c9:3b:53:ea:50:3d:0b:d3:6d:53:07:18:72:ca:38:
5e:21:ed:d9:b8:fe:12:c4:79:80:b9:78:e9:77:0d:23:d4:b2:
65:fe:a5:9f:e1:ea:b6:d1:be:d1:7c:c4:b5:32:5f:93:91:3b:
72:01:80:4c:ba:0a:d9:66:a2:c2:9f:79:5b:c8:37:b2:56:de:
e1:8d:73:5d:38:63:3d:7d:01:35:e9:5e:a4:24:17:26:e2:1a:
01:8e:f1:b2:5c:99:5b:1e:31:59:0a:7f:a4:89:e6:c9:91:48:
9d:19:5f:e7:a4:64:45:89:30:ee:08:03:b7:28:5a:81:ba:2b:
91:71:95:b1:b0:1b:2b:ce:7a:2e:41:b2:1e:09:e0:16:8d:62:
9d:a1:d9:c2:35:01:e5:77:20:ba:ec:07:2d:1f:3e:cd:6d:f5:
c9:e0:ed:c2:f8:3e:60:b7:cd:c3:52:54:bb:86:2c:88:f4:79:
e1:17:8f:6c:bb:bb:1e:04:47:64:e3:f9:d0:d8:95:3b:59:a7:
ee:bb:48:35:97:8c:45:0e:6e:9e:61:4d:f5:40:35:9e:34:0e:
9b:1d:01:b0:fc:96:5b:07:b2:89:29:da:e9:93:f0:e6:cc:86:
e1:82:8f:4d:23:c3:e0:44:18:9f:5b:c6:6c:38:6f:c1:27:04:
e1:4c:de:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:43:12 2026 by rpki-client