This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
File: aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft (raw, json)
Hash identifier: 3EEaalzwZWEtqmwbJPZ5j89GsXyLvWTkNvK1fwd8uE0=
Subject key identifier: 89:CF:27:DD:15:C8:7B:E7:F5:47:A4:40:CC:EF:79:F2:6E:AE:64:AD
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Certificate issuer: /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial: 0921
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
Manifest number: 08C0
Signing time: Sat 24 Jan 2026 20:08:57 +0000
Manifest this update: Sat 24 Jan 2026 20:08:57 +0000
Manifest next update: Sat 31 Jan 2026 20:08:57 +0000
Files and hashes: 1: aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl (hash: YLREMchTkXBuukPO46uhIefJ3A1qUFWDBghHXxoRfEQ=)
2: 70F51BEE4B0D11EF94975151C4F9AE02.roa (hash: 5OJq3TQL6UcD1e0FTm6+f4tFRojNv3dxN2hOmwh/XMU=)
3: 18F343922A5711EBB59D6526C4F9AE02.roa (hash: 67FA0fogoOEO8ZhRY0Z7X/jNdUDR2kpHHHAZ7zc0DNU=)
4: 14C388C2114311F0B3944E67C4F9AE02.roa (hash: mTf8cQmCDCOr2IAAbGwT5DT/HAjoFjlHGakTn87Xya0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:08:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2337 (0x921)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Validity
Not Before: Jan 24 20:08:57 2026 GMT
Not After : Jan 31 20:08:57 2026 GMT
Subject: CN=697526d9-4584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ca:b3:73:e0:ac:33:74:52:16:b6:d3:55:e7:
c6:74:5b:9f:d6:19:a8:39:a7:8f:8c:b6:01:7f:49:
28:ec:60:5f:d6:ed:e4:5d:7f:96:41:f9:7e:e7:fd:
af:1c:0c:ee:ab:6b:f3:ff:41:d5:fc:0e:38:b2:9b:
8c:c2:4e:44:af:76:93:3d:ba:e6:20:78:1b:9a:47:
76:30:69:b2:fd:2c:90:89:07:14:6b:cd:0f:3b:cc:
6a:7d:5c:1e:79:f5:22:9a:eb:3c:ed:f4:45:38:4f:
16:4e:cc:b2:74:69:43:6f:d9:b3:72:d6:3a:db:2a:
4e:7f:a3:81:52:7f:1c:12:4a:99:41:b3:d5:60:9d:
d9:13:c1:d2:b2:46:73:c8:9f:23:d3:af:1c:bf:e3:
2e:cf:81:6c:3f:d2:4f:ea:43:da:ab:0c:a5:00:ad:
ed:d4:42:b9:d5:88:81:58:87:e0:60:10:90:d7:6e:
3f:14:db:be:26:6c:18:a8:14:72:9e:0e:05:ad:77:
4c:9d:cf:9f:cb:61:44:79:70:92:4f:f2:58:a9:0f:
ae:00:0f:1b:cb:fd:03:c4:20:6c:0e:56:9f:ca:4c:
1d:7b:e6:82:a5:ea:53:13:3e:47:77:95:31:9a:29:
5b:4d:c3:06:41:f0:0e:6c:c0:9f:91:4c:5a:26:86:
ca:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CF:27:DD:15:C8:7B:E7:F5:47:A4:40:CC:EF:79:F2:6E:AE:64:AD
X509v3 Authority Key Identifier:
keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:45:60:05:b0:f8:f5:b6:7b:a6:e6:cb:61:23:3b:a6:e7:c4:
7a:03:49:e0:95:da:d4:46:21:dc:78:cf:a6:c7:02:1d:57:1b:
a5:e3:58:22:79:77:ee:e2:3a:67:1f:0e:ca:9e:e6:6d:96:77:
c5:4b:8d:e1:ae:35:71:15:7e:1a:3f:38:a1:41:0a:88:7e:51:
e3:85:70:93:c6:e4:91:3a:07:01:aa:86:23:77:8b:3d:36:bb:
1e:c1:bb:12:2d:52:f8:e5:9a:f8:11:75:52:47:0d:87:7c:f2:
75:c7:5c:e2:ca:28:e5:6b:45:7f:06:12:62:d5:52:b0:2b:df:
c5:09:85:a0:8a:3d:90:d2:3e:80:59:f2:da:dc:a3:7f:9c:f8:
de:98:ae:c1:c1:03:2e:d2:59:30:ec:b0:55:cd:b8:76:20:74:
69:8b:aa:d7:d4:73:4f:29:65:b9:99:4f:09:ec:e5:02:9e:dc:
87:ff:42:47:3b:09:b1:27:74:c1:73:b6:01:52:c4:8d:0f:0b:
1e:0a:6e:37:b0:02:77:c6:85:74:80:ec:cb:10:17:85:a2:f5:
21:aa:05:c3:51:49:79:17:09:ef:2f:58:3a:04:bf:c1:dc:89:
65:a8:56:52:54:63:96:2a:37:ad:dd:25:95:a7:84:75:03:ed:
7e:80:08:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:51:36 2026 by rpki-client