This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
File: xeslRrtzrOaT4ZqxB9g_JmYyzug.mft (raw, json)
Hash identifier: eauEmFAAKXUr5Zl9HDqMGlRK9RTJ38CdEIVklpMlHYA=
Subject key identifier: 6F:C5:0B:05:42:CC:71:66:C1:9F:2C:E9:BF:7F:FD:81:AB:CA:78:9A
Authority key identifier: C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8
Certificate issuer: /CN=A9197A55/serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8
Certificate serial: 09
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
Manifest number: 06
Signing time: Sun 25 Jan 2026 07:12:40 +0000
Manifest this update: Sun 25 Jan 2026 07:12:40 +0000
Manifest next update: Sun 01 Feb 2026 07:12:40 +0000
Files and hashes: 1: xeslRrtzrOaT4ZqxB9g_JmYyzug.crl (hash: QBgpB8TJKoIbkKcYuvkK8v+g8y7/sV5uVZicb//0OS0=)
2: 3B09C758F7A711F0A3A0479F556F56BC.roa (hash: N8AFj1uLePJhdyFATB5QcAI5x0zly4OdJrXLB0l1VLY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl
rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 07:12:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197A55, serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8
Validity
Not Before: Jan 25 07:12:40 2026 GMT
Not After : Feb 1 07:12:40 2026 GMT
Subject: CN=6975c268-92bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e0:72:74:0d:12:ed:40:f5:6c:4e:2d:3e:41:
7f:fe:bf:26:71:c3:ed:9e:08:fc:92:4d:b5:f8:f6:
89:3b:e6:2a:dd:23:42:57:09:b4:7d:3e:50:93:b9:
f3:06:97:48:8d:3c:2e:ee:b4:b5:ef:9d:c9:c6:4c:
b8:61:71:e7:c0:33:b0:3a:4f:08:e0:05:e0:51:6b:
74:85:a7:2e:d6:2a:48:f7:59:57:1f:f4:5e:3f:c7:
57:59:95:42:a2:bc:cb:fa:fd:15:59:60:f3:3b:13:
be:09:d3:b1:66:8d:f1:0e:1e:18:92:da:45:81:1e:
fe:a6:ec:28:69:25:0c:1d:4d:09:44:2f:2d:75:91:
f3:34:dd:1a:2b:6f:3b:f9:e3:32:98:28:35:0c:34:
37:e5:01:a0:6e:4b:0d:40:a4:71:1c:20:37:d6:11:
7f:ca:9c:f1:22:57:b5:b9:6c:86:a1:11:82:11:cc:
8a:81:77:8e:36:b4:d9:3d:81:e5:ab:8b:cb:6c:ed:
9f:52:f8:da:37:87:22:ff:71:40:a6:7a:36:bb:b5:
b3:9c:90:5c:09:d1:1e:50:4d:8a:16:10:6d:f5:76:
d3:3a:3c:cb:f4:aa:82:c1:23:5c:71:da:f5:3e:2a:
14:14:b4:de:51:81:ba:11:74:d1:b2:09:a2:37:2f:
85:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C5:0B:05:42:CC:71:66:C1:9F:2C:E9:BF:7F:FD:81:AB:CA:78:9A
X509v3 Authority Key Identifier:
keyid:C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8f:a5:2b:3f:c9:00:4f:67:78:7c:0e:c9:e6:0a:d6:2f:9f:
e7:cb:6c:41:a5:5a:6c:f4:c0:e9:1e:7d:a8:61:b7:12:55:fb:
04:39:7b:74:89:45:66:4f:0b:cb:2e:07:e7:73:07:06:fb:0b:
b8:5f:ac:0b:5c:94:03:82:7c:84:48:b1:b0:57:5d:e0:f9:e9:
4b:7d:23:04:12:95:3c:ba:96:e6:3f:44:37:5e:42:a6:d5:22:
d2:24:85:64:0f:e9:36:b9:46:cc:29:d3:4b:9d:da:24:ed:ee:
bc:c0:0b:f7:52:de:ad:8d:57:b4:e2:bb:b2:bc:f9:86:0f:40:
bf:68:25:b8:8a:b7:b6:e8:29:d6:3d:47:1f:b1:04:52:40:db:
85:a7:5b:3b:80:df:14:64:fe:c1:ae:69:97:47:33:b3:09:63:
10:bf:67:6d:27:96:9a:db:ab:35:38:5f:05:13:c9:0a:de:cb:
c4:9b:45:41:c4:e5:78:5e:a4:56:90:56:46:97:a3:fe:53:3e:
86:f5:cd:37:31:b4:1e:fe:ad:3f:3f:c0:0b:29:bb:eb:81:6e:
17:b0:15:d2:62:f5:10:6a:96:5e:b1:8d:a5:40:68:04:e3:60:
50:ef:d6:7b:4f:ad:1d:68:8a:21:5c:b4:67:31:7f:0d:2f:55:
f8:32:99:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:38:49 2026 by rpki-client