This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
File: Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft (raw, json)
Hash identifier: w7hYqrCZIbxTfCx/UplCu5y3wYG76AzjZk9tCbSuhFo=
Subject key identifier: 44:2A:14:C5:B5:5B:AC:EB:34:53:09:17:69:C6:EE:2B:C9:0B:67:65
Authority key identifier: 5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60
Certificate issuer: /CN=A9199CFF/serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
Manifest number: C2
Signing time: Sun 25 Jan 2026 05:09:40 +0000
Manifest this update: Sun 25 Jan 2026 05:09:40 +0000
Manifest next update: Sun 01 Feb 2026 05:09:40 +0000
Files and hashes: 1: Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl (hash: M5p6LQxKju6MeB0ew+THlG547Tv2HRnbz9fsOSihlIQ=)
2: 8A941156D7E211EFBF26DA72C4F9AE02.roa (hash: FgsY1MtMlyj+3nDMzS9PcoGRIrCVLECWASa2XdKp8fU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl
rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199CFF, serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160
Validity
Not Before: Jan 25 05:09:40 2026 GMT
Not After : Feb 1 05:09:40 2026 GMT
Subject: CN=6975a594-b744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:86:21:fb:94:51:53:5f:b3:47:1b:9f:1d:5e:
f6:6a:13:6a:d3:b9:3c:13:00:66:74:5a:87:9f:df:
8f:c4:e6:a5:84:a5:c3:eb:8d:89:f1:60:73:a9:be:
ca:9d:e0:63:98:a6:0d:a6:59:91:eb:d5:72:11:2f:
b5:fb:15:70:92:ca:f2:d3:ec:b0:d4:cd:f5:0c:ef:
8d:a1:58:76:a3:6a:66:da:84:f9:ab:ce:3b:7c:bd:
21:6d:5a:2f:88:b9:34:c3:fb:22:ff:0a:4f:1f:c2:
01:98:ae:19:fd:f9:cf:28:b9:27:88:a3:66:45:0b:
44:db:8b:0e:66:4d:df:08:ea:fe:28:9c:5d:d6:62:
88:5f:70:72:5d:25:fc:71:46:7b:58:38:4d:df:69:
f5:fc:36:55:31:b1:78:c9:f7:f3:40:6f:cd:d5:79:
42:5f:74:5e:86:28:ea:3f:60:0f:09:33:d0:cb:d5:
2f:1a:f3:b4:2e:19:c8:a0:ce:e7:b4:a1:76:50:8e:
cc:b1:71:89:75:c3:68:d5:72:af:f0:44:80:e4:2f:
a2:80:d6:d6:b0:6f:ab:a7:76:97:0c:b9:6d:8e:59:
7b:14:73:17:24:f0:b9:58:0f:94:01:9d:87:7f:1b:
09:74:83:51:77:62:d4:46:b2:a6:39:60:bb:da:a2:
e2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2A:14:C5:B5:5B:AC:EB:34:53:09:17:69:C6:EE:2B:C9:0B:67:65
X509v3 Authority Key Identifier:
keyid:5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:7d:1d:16:aa:f6:35:40:98:d5:5c:0c:f7:11:03:b4:a1:5b:
98:61:e9:21:f9:7a:eb:d6:40:da:ff:e6:f1:9d:cc:db:82:14:
60:eb:51:08:10:b9:87:25:d2:1d:93:6f:07:21:0b:d2:f3:76:
b5:73:9f:57:64:fe:68:45:41:28:4f:ee:6f:03:91:c1:24:24:
ec:61:c8:c6:b0:a5:16:28:fc:15:86:50:05:1e:16:6a:17:5b:
80:ce:5f:8e:c7:bf:66:1d:af:e7:61:14:26:72:0a:cb:b6:22:
fc:ff:38:5a:63:13:7e:33:94:89:48:c9:e6:dd:e3:ac:04:dc:
ac:54:c2:6d:35:62:7c:ba:9e:e6:fb:1f:0a:ae:60:10:d8:2c:
6d:33:fd:cb:97:88:d2:96:03:04:32:fa:be:ed:8c:3a:bc:03:
d0:ca:49:92:74:db:45:fa:d6:45:41:50:58:49:a2:2d:eb:ed:
bb:aa:47:eb:28:74:c4:5a:88:1a:ad:ee:c3:0e:29:7a:85:25:
24:6f:0f:81:06:f7:69:ec:27:86:8f:38:4c:37:48:e9:1e:79:
63:aa:aa:ec:4f:15:1f:54:19:3c:9b:2a:4d:fc:db:c1:01:84:
bf:fe:ec:9d:5d:c7:d6:74:eb:70:a5:ed:a5:ca:36:b1:5e:72:
fd:d0:c9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:59:25 2026 by rpki-client