This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.mft
File: xL9bEU_BXXDIgNvBbowaMCo6LyE.mft (raw, json)
Hash identifier: +EJCu4AdlgqikNpYm/j7aFHAV1xMB/j/MWuP63VMjag=
Subject key identifier: C8:9E:E2:AE:C5:02:4E:60:63:E3:00:D5:AE:DF:58:78:A2:FD:68:78
Authority key identifier: C4:BF:5B:11:4F:C1:5D:70:C8:80:DB:C1:6E:8C:1A:30:2A:3A:2F:21
Certificate issuer: /CN=A9192920/serialNumber=C4BF5B114FC15D70C880DBC16E8C1A302A3A2F21
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xL9bEU_BXXDIgNvBbowaMCo6LyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.mft
Manifest number: 07D9
Signing time: Sat 24 Jan 2026 20:41:05 +0000
Manifest this update: Sat 24 Jan 2026 20:41:04 +0000
Manifest next update: Sat 31 Jan 2026 20:41:04 +0000
Files and hashes: 1: xL9bEU_BXXDIgNvBbowaMCo6LyE.crl (hash: vCBoLmSx5wR47kiNFqkmbpdhGPl1SYDF+AgDhVorQ8o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.crl
rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xL9bEU_BXXDIgNvBbowaMCo6LyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192920, serialNumber=C4BF5B114FC15D70C880DBC16E8C1A302A3A2F21
Validity
Not Before: Jan 24 20:41:04 2026 GMT
Not After : Jan 31 20:41:04 2026 GMT
Subject: CN=69752e61-5f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b0:34:1f:f0:d8:cb:3a:13:42:fa:3b:0d:ba:
56:17:04:0f:3a:6d:ce:84:51:80:88:6f:3b:6f:ab:
df:63:ea:f9:76:6b:d6:fa:99:82:d3:ca:ed:f1:e8:
e6:e8:30:62:cd:3e:ae:27:10:20:4b:05:b9:da:3a:
33:c8:4c:23:7b:fd:52:3b:61:9d:97:c5:d3:0b:4a:
40:75:06:3a:ea:97:4a:ac:fa:d6:78:69:e0:93:fe:
36:52:ff:19:87:8e:72:fe:cc:4b:43:d1:63:53:2d:
5d:d8:20:a0:e2:66:43:e9:38:c0:73:45:2f:8f:58:
ed:81:0e:d2:7e:b3:43:ca:12:0c:f6:16:eb:04:06:
b7:2a:09:ff:77:59:6a:dc:4d:77:8f:d2:48:4b:6a:
74:e4:34:f8:a8:97:8b:88:e3:ce:26:63:00:31:06:
49:99:09:16:17:cf:81:2f:36:93:1e:7b:63:2c:50:
f4:ce:c5:fd:20:a7:9c:59:b4:b6:2e:88:8c:21:59:
8f:5c:70:1b:d1:ba:e7:bd:07:9c:c8:da:66:db:0d:
33:8e:d7:13:14:77:2f:21:d2:c0:58:30:36:8e:9d:
14:0e:08:a7:6d:ad:74:6a:24:52:19:fa:a4:a8:4e:
0a:f8:ef:7f:03:2d:de:45:10:91:75:ee:b5:e4:05:
7f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9E:E2:AE:C5:02:4E:60:63:E3:00:D5:AE:DF:58:78:A2:FD:68:78
X509v3 Authority Key Identifier:
keyid:C4:BF:5B:11:4F:C1:5D:70:C8:80:DB:C1:6E:8C:1A:30:2A:3A:2F:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xL9bEU_BXXDIgNvBbowaMCo6LyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:b6:6f:c9:bc:87:bb:1f:c9:70:6c:d1:a7:5b:e4:35:d8:e6:
a7:0c:07:69:f5:40:57:ef:09:4c:3c:d7:4b:f7:ba:19:d6:88:
83:e3:d8:c4:fe:5e:8a:95:30:b2:39:82:08:61:f2:57:59:ea:
94:4e:9d:68:3c:31:29:8f:94:32:13:ed:40:b7:c6:b8:f1:9e:
49:26:3a:ab:c0:02:7c:2a:0a:c1:34:31:7c:fa:3c:ca:5b:35:
1c:1c:0b:6c:61:97:78:53:d6:61:0a:f3:44:82:36:a4:2b:34:
37:75:32:1c:46:72:34:80:56:d6:ed:50:df:d8:e2:41:63:85:
91:25:7e:09:8a:ca:13:5a:39:fa:f9:36:06:23:e4:1b:bb:d6:
f8:4c:29:c6:ce:70:3c:19:98:21:fa:08:f5:97:4c:09:9d:5c:
ec:b2:0b:72:a6:8b:77:56:f1:80:0b:41:86:c6:65:ec:3a:57:
de:76:63:72:2d:37:af:45:ab:0b:14:7d:84:53:cf:df:08:e5:
47:ae:a9:aa:43:77:f6:88:7b:e0:27:36:38:f0:4a:0c:b2:b3:
fe:21:02:72:f2:0a:f0:ab:a4:ea:d4:00:2e:8a:0e:4a:37:56:
06:6a:91:3a:6e:2a:cf:29:f7:5d:05:b8:b0:83:25:ea:6e:37:
1a:e6:48:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:49:18 2026 by rpki-client