This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
File: Cr_XemhpLv60MkAP_d3XrhsjvCc.mft (raw, json)
Hash identifier: /VtRKkNNaFk1So9lKbkiR4Ed8oRiG++SXO85vkIBkvY=
Subject key identifier: 36:E2:26:A2:53:AF:D3:58:BF:7D:0F:C2:E8:9A:55:53:E3:E8:03:DB
Authority key identifier: 0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27
Certificate issuer: /CN=A9194A8C/serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27
Certificate serial: 0539
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
Manifest number: 0705
Signing time: Sat 24 Jan 2026 22:43:02 +0000
Manifest this update: Sat 24 Jan 2026 22:43:02 +0000
Manifest next update: Sat 31 Jan 2026 22:43:02 +0000
Files and hashes: 1: Cr_XemhpLv60MkAP_d3XrhsjvCc.crl (hash: we5PxY7HPFt3QKd51aywlYoGYEB75n+UaSTFxUFh6ns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl
rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:43:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1337 (0x539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194A8C, serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27
Validity
Not Before: Jan 24 22:43:02 2026 GMT
Not After : Jan 31 22:43:02 2026 GMT
Subject: CN=69754af6-19af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5e:5f:1c:f8:82:a8:3b:7a:85:23:7b:b0:2d:
ec:35:51:5c:55:a9:e7:65:db:dd:77:19:81:74:06:
d9:0b:64:8e:73:90:cd:29:4d:7e:8b:36:ea:26:03:
c8:71:2f:7a:f3:85:35:fa:35:de:b8:8a:cc:e6:00:
f8:f9:a9:61:2b:5c:46:8d:cb:c6:cd:38:1c:60:3c:
f9:d5:fa:ad:cc:3f:21:49:87:b4:6c:8b:42:ea:c5:
de:11:f6:3a:83:f5:0b:0f:71:cd:ce:92:49:a8:3b:
94:35:b3:a4:90:de:9d:3b:77:a2:d1:69:b0:95:d7:
db:ff:37:8f:09:49:db:2e:58:f2:8c:11:fb:21:03:
e2:a0:ef:29:44:b0:fd:f2:4d:44:5d:93:8f:8f:12:
99:be:15:a3:95:ce:eb:f4:13:1c:91:26:eb:fc:d5:
62:9c:89:22:a5:89:69:7d:2a:01:51:a6:29:22:91:
ce:35:35:1a:4f:5c:40:f1:95:fa:5a:a1:99:e8:dd:
db:d8:c3:3c:f9:be:37:4d:97:1b:f0:62:15:fa:95:
2e:8b:ef:6f:2f:01:52:00:e3:d8:3d:b6:10:18:11:
8c:54:e6:c0:13:0f:00:4a:8b:d4:1d:e8:9f:f4:c9:
1c:48:e0:52:67:f4:39:f1:26:25:1f:25:51:32:13:
b8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E2:26:A2:53:AF:D3:58:BF:7D:0F:C2:E8:9A:55:53:E3:E8:03:DB
X509v3 Authority Key Identifier:
keyid:0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:56:6e:c0:17:7e:86:42:7c:19:26:57:73:e6:cf:ef:a6:9c:
59:c5:0c:12:77:52:57:b4:03:76:24:51:09:2c:29:ea:64:5e:
64:5b:b0:88:07:5f:a1:19:93:0f:f7:2e:4a:63:a7:8a:dc:18:
4c:0a:1f:63:83:23:5d:c4:a4:43:d2:ca:59:c0:9f:ae:92:86:
00:d5:23:b3:e2:cb:30:05:db:4d:70:6a:63:f8:c5:31:66:6f:
cc:b9:8d:25:f3:d0:a4:79:0d:58:2d:68:65:c0:b8:df:98:a5:
92:cf:f0:b6:a6:7e:92:39:76:a0:31:50:a5:2b:91:9f:7a:ae:
6b:40:8b:bc:ea:73:70:5e:dc:66:d7:5a:95:ae:bb:f3:45:f3:
af:f3:5d:98:71:a6:de:79:9d:40:48:f9:4f:21:cf:3f:f2:ae:
0a:1c:65:2d:4f:cb:f1:db:ff:20:9b:03:73:01:a8:ee:93:d6:
d2:ca:5d:30:03:13:8d:70:01:8f:b3:86:01:8c:11:41:fe:41:
6d:75:f5:10:67:a4:c4:5a:67:3c:e8:81:1f:35:da:f3:1d:b1:
11:cf:7f:d0:ca:08:b3:29:c9:fc:c8:f6:d0:6e:7d:50:16:3e:
52:6f:1e:2a:8c:6a:7a:41:8a:79:5c:db:26:1d:63:cb:e2:6c:
14:71:bf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:14:47 2026 by rpki-client