This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
File: xC_x0v81KYG8X4IkDsk5TvqzEYY.mft (raw, json)
Hash identifier: Sme45Pcc7EVYXZnAGkihgawwj3YgGhyUSrJnHHz1EUs=
Subject key identifier: 77:94:D4:12:D1:A2:41:0F:C0:A2:F7:F3:8D:69:16:05:D2:30:E2:71
Authority key identifier: C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86
Certificate issuer: /CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
Certificate serial: 0822
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
Manifest number: 0815
Signing time: Sat 24 Jan 2026 20:22:01 +0000
Manifest this update: Sat 24 Jan 2026 20:22:01 +0000
Manifest next update: Sat 31 Jan 2026 20:22:01 +0000
Files and hashes: 1: xC_x0v81KYG8X4IkDsk5TvqzEYY.crl (hash: XFbY6FqCLghHTda1kGXiQ/JGDqRTTTfrsBXnhIkoXNM=)
2: 21EE9510083211EB81509633C4F9AE02.roa (hash: ZfvnXdczblwrDF4Ejj/73M+zlN7DQoj1HAdYgFet7TY=)
3: 24D4F9F0E61B11EBBAE35771C4F9AE02.roa (hash: odhqLjFi/gNl1kTD0Ic54V4mME2y8CTdKUAbvxdHwi4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl
rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:22:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2082 (0x822)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91814E9, serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
Validity
Not Before: Jan 24 20:22:01 2026 GMT
Not After : Jan 31 20:22:01 2026 GMT
Subject: CN=697529e9-ee24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:20:61:01:f2:74:52:9f:b8:e3:5e:cd:5c:30:
7c:97:9e:99:40:86:b5:bd:ec:e9:63:6f:cf:e2:5f:
ea:f1:50:b9:23:cb:f6:61:d2:7a:7e:e6:52:d9:c5:
e6:e7:f6:64:8a:c2:be:a4:1f:0c:0f:de:40:d2:3b:
06:c3:4d:7e:96:82:f8:de:67:55:0d:63:a4:2d:84:
fc:52:70:79:3f:cc:d4:6c:95:e3:7b:e8:d7:15:92:
67:d5:d1:85:57:88:33:e0:dd:01:e2:e0:18:c0:72:
86:0c:07:77:b2:a8:f7:b7:81:c2:4d:3f:e3:e7:a7:
38:5a:ac:bd:1d:13:fb:42:71:98:75:9a:01:43:d8:
a3:3d:8b:45:32:c5:97:bd:4f:78:41:3a:94:b8:83:
3d:44:2e:f5:84:90:db:a2:e6:c9:81:fb:78:69:5a:
32:20:54:0b:c8:7f:86:8b:88:51:9b:25:62:ef:d2:
0a:f8:47:2c:dd:c3:3a:10:e7:ab:8c:2c:f3:1d:c8:
2f:94:bf:55:9b:da:0b:c5:11:f9:3e:93:36:4c:5c:
5e:93:39:e8:7c:a9:46:35:09:f4:0b:d6:46:e3:ee:
43:2c:b8:3a:7a:62:e2:ac:67:77:e9:54:44:d6:70:
f5:55:2e:f7:8a:2d:c2:02:ef:07:08:ee:58:7e:93:
9e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:94:D4:12:D1:A2:41:0F:C0:A2:F7:F3:8D:69:16:05:D2:30:E2:71
X509v3 Authority Key Identifier:
keyid:C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:79:e8:60:c3:65:9b:f9:63:1f:0f:7c:cc:2a:cd:00:29:87:
c5:ca:9d:9b:4a:3f:a5:56:02:43:12:19:38:73:51:4b:8b:c5:
8d:f8:2d:fb:df:23:87:6d:b9:9e:6b:ec:fe:11:bb:6c:cd:96:
8e:8b:bb:2a:84:b9:f4:d7:e8:d0:30:b7:82:d6:e2:6b:20:13:
b4:f9:24:aa:1a:e2:5c:69:c2:79:49:21:81:7a:8a:94:3c:32:
5b:fb:22:fd:0d:a3:24:5d:14:f9:83:e4:c3:21:7f:7d:1c:6b:
ce:95:67:38:9b:4d:92:1e:60:39:ad:74:51:8d:c5:7b:0d:c5:
13:14:e3:89:60:f6:29:18:e5:f3:41:20:38:e8:11:71:bf:12:
22:31:7b:76:dc:10:77:fc:27:b8:c1:39:c6:0a:48:ae:6f:74:
d8:95:46:3e:f9:88:f0:35:52:3a:87:c4:da:54:9c:6c:20:41:
1c:6a:0d:8d:a0:b9:78:96:70:2a:ba:e0:e2:8c:0f:8e:f3:a7:
d6:bd:67:5a:d6:bb:49:07:89:a6:d8:10:79:88:ba:05:59:8e:
b5:c4:a2:0a:ab:c9:69:36:bd:5f:44:9a:ec:82:31:4f:02:7c:
dd:11:06:4f:60:e3:f3:25:4b:a7:33:86:0e:ca:60:4d:1b:cc:
9c:e6:be:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:03:44 2026 by rpki-client