This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft
File: xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft (raw, json)
Hash identifier: nZJwTYNfzDARWTVleu92UBqOseAGPNGkj6TnUAYagXw=
Subject key identifier: 83:FD:7C:B0:6D:D9:5E:A7:25:DE:57:FA:64:14:B6:C3:16:7D:1C:0E
Authority key identifier: C4:A4:C3:54:35:8F:D4:82:3F:6E:C5:31:32:76:74:85:4C:86:C6:DF
Certificate issuer: /CN=A918FD04/serialNumber=C4A4C354358FD4823F6EC531327674854C86C6DF
Certificate serial: 090B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft
Manifest number: 158B
Signing time: Sat 24 Jan 2026 18:06:09 +0000
Manifest this update: Sat 24 Jan 2026 18:06:09 +0000
Manifest next update: Sat 31 Jan 2026 18:06:09 +0000
Files and hashes: 1: xKTDVDWP1II_bsUxMnZ0hUyGxt8.crl (hash: CLvwFhYqArLWT69J4wfAzousSezdyMbU22IYIT02nes=)
2: 7BBC1DD2040611EF909F6C3EC4F9AE02.roa (hash: PO0AZ1fTp3S5+kMx+XcNpi0qfLQExWGMHCA4bw3dxVs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.crl
rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2315 (0x90b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FD04, serialNumber=C4A4C354358FD4823F6EC531327674854C86C6DF
Validity
Not Before: Jan 24 18:06:09 2026 GMT
Not After : Jan 31 18:06:09 2026 GMT
Subject: CN=69750a11-ef96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b0:dd:4a:7f:c4:6c:4f:1c:0c:cd:31:66:f9:
20:7b:95:20:1d:22:6b:19:9a:a6:ee:1f:83:bf:97:
37:d9:2c:01:26:ce:80:28:8e:a7:76:1b:27:40:20:
77:c4:8a:8d:61:46:1b:b4:9a:5f:71:e6:f8:03:5a:
29:ed:dc:a4:27:8d:e3:c1:40:96:bf:09:de:4c:23:
8f:93:65:50:f4:4a:d9:5f:2f:c1:22:05:8a:48:32:
07:9c:b3:a0:3c:df:26:c8:2b:f9:02:00:50:5a:2d:
ca:5a:53:cc:6a:50:02:af:0c:f4:07:fc:b1:00:0b:
4f:fb:5c:b9:82:bd:c1:17:4f:f1:1d:bb:bf:5b:16:
bc:21:81:4d:1f:c8:29:24:e4:a2:4b:78:89:f5:9c:
a3:62:20:e0:12:ad:51:96:21:e5:a4:26:1b:04:cd:
bf:ae:6d:cf:7e:70:c0:8c:23:35:35:47:69:2c:77:
3c:a2:fd:f2:38:70:58:f7:87:24:51:93:5d:43:68:
f2:89:89:32:a7:ed:d6:ed:11:85:ff:0e:81:5a:43:
86:ea:e7:79:cd:05:09:16:32:a0:c0:a0:d2:5b:d1:
6d:e7:be:3c:9c:63:e6:b6:90:c8:f8:08:6d:82:7f:
ef:96:0a:58:51:52:b5:1d:9d:43:3f:1b:cd:6e:b3:
aa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FD:7C:B0:6D:D9:5E:A7:25:DE:57:FA:64:14:B6:C3:16:7D:1C:0E
X509v3 Authority Key Identifier:
keyid:C4:A4:C3:54:35:8F:D4:82:3F:6E:C5:31:32:76:74:85:4C:86:C6:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:83:72:49:37:3b:28:88:ad:20:08:a7:b9:0d:83:ed:cc:bc:
8c:94:03:69:fd:bb:2b:bf:89:0f:9a:03:b1:19:de:c4:78:89:
d8:5f:d3:91:b7:00:d7:29:b1:66:04:a2:05:e1:c9:7c:4e:df:
26:a2:a1:9c:64:16:8b:9b:d2:ca:e0:97:93:1f:20:b5:4c:c5:
f3:54:e0:7a:98:dc:17:c1:32:71:ca:0c:6f:c0:71:d1:63:4f:
1e:c3:5c:a1:9e:b2:51:60:b6:a5:80:d9:97:7e:fc:11:ff:8a:
58:3c:b6:f5:83:bc:4f:5e:7d:7c:e7:86:38:66:ac:2d:84:07:
cc:7e:7c:6b:80:45:d0:7f:0d:50:d7:8a:7a:f1:b6:b9:4c:6a:
ec:e9:b1:ab:15:a5:04:6e:9c:92:90:7d:7e:14:f3:6e:88:84:
34:7d:27:aa:f1:df:ea:9e:c8:78:04:f0:e1:fa:69:84:a2:85:
d1:7c:a3:20:3d:41:82:38:a4:33:97:07:e9:a8:c5:38:9a:ea:
00:c8:c9:8e:2f:c6:5b:7d:4f:8e:ce:dc:15:9f:5e:5b:ab:22:
ae:10:5a:32:14:54:b4:2a:fd:7d:cb:06:42:6c:10:e4:b9:14:
c3:c1:9c:6e:e0:b3:4e:9d:05:bc:9a:38:7e:28:d9:b7:47:62:
57:2e:38:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:05:53 2026 by rpki-client