This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft
File: xzON8bdowFB0za7Q_bGkwUrfuLU.mft (raw, json)
Hash identifier: wa6jseEBqUgD5KhJbj665tBqQuCWM2hXqZhu7a7wj1k=
Subject key identifier: EA:DA:1F:FC:71:E9:45:64:20:9E:86:93:D6:D6:7E:2D:25:DA:BC:33
Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5
Certificate issuer: /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5
Certificate serial: 01B0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft
Manifest number: 0195
Signing time: Sun 25 Jan 2026 03:08:15 +0000
Manifest this update: Sun 25 Jan 2026 03:08:14 +0000
Manifest next update: Sun 01 Feb 2026 03:08:14 +0000
Files and hashes: 1: xzON8bdowFB0za7Q_bGkwUrfuLU.crl (hash: 9YuMcSSyp1P/2koG5FY0fzVGLufmCF8chymwPR1lgI4=)
2: 7DA50F9C3E0B11F09779DF13C4F9AE02.roa (hash: aOphwoAXL9FkkZUfHxiPd8GBXzpRzX5FSynk8bgMuYk=)
3: A2516E42DE4511EF8C37E320C4F9AE02.roa (hash: XfIHm/MhIPSh6jZecIK72twugLDWV563OBM4HVySVuo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl
rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:08:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C167F, serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5
Validity
Not Before: Jan 25 03:08:14 2026 GMT
Not After : Feb 1 03:08:14 2026 GMT
Subject: CN=6975891e-3271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:79:16:1d:f3:02:df:a1:8f:04:1e:59:e9:
56:b7:1c:1e:40:d5:52:d8:9d:cb:bd:d1:13:83:4a:
d1:ff:9f:90:a7:1b:f1:47:01:d1:cd:fd:d1:4c:b9:
20:b9:2d:19:20:53:46:ed:7e:e4:e6:ec:c3:57:71:
34:96:14:55:e0:a8:33:f7:3a:e0:ec:58:0a:37:29:
23:27:97:5d:01:50:9d:8b:cf:c4:2a:57:c9:35:3d:
36:f2:cc:15:c9:57:ab:11:86:b4:39:f5:63:84:34:
a4:aa:c7:ee:12:74:c6:29:68:c7:58:00:f3:8b:6c:
74:d4:ff:3a:57:4a:9b:ec:a5:0c:2e:1e:f6:36:e1:
86:f5:59:e7:f7:3c:73:40:9f:ba:6f:de:0b:42:b7:
26:01:29:c0:15:4b:c3:2f:91:46:9f:e9:24:56:99:
55:bf:f0:32:e9:99:e2:8d:77:2e:4f:00:d5:aa:87:
02:e8:fd:cc:ed:05:c0:f7:e4:7a:72:69:43:03:1d:
27:c8:e7:3f:94:5f:44:e4:a1:54:3e:74:76:1e:3f:
08:37:52:d4:ef:a4:7f:39:93:ef:7f:44:49:6a:f6:
65:9d:3c:21:08:f4:78:78:2a:1b:58:95:65:58:b5:
50:f7:0a:fc:26:b0:cf:89:5c:c3:2a:f8:dc:69:84:
99:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DA:1F:FC:71:E9:45:64:20:9E:86:93:D6:D6:7E:2D:25:DA:BC:33
X509v3 Authority Key Identifier:
keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:25:46:c3:da:ba:b8:42:4a:36:e0:d4:d9:d5:53:25:4e:5d:
44:e9:2f:c8:1d:1f:33:d7:5c:b3:44:56:9f:ac:67:c6:64:ae:
d3:96:37:51:e2:39:5c:55:a4:a4:8c:e5:88:f8:83:c5:33:b7:
e4:a4:c0:30:60:47:18:90:1f:68:90:c0:e9:91:4a:ab:d4:9c:
7f:6d:b7:62:7e:d2:cc:ee:5b:be:08:83:d0:d7:81:48:40:03:
65:64:e6:18:73:94:91:2c:16:d3:18:f9:c0:cf:0e:ef:08:c0:
7a:2e:53:62:63:94:ae:df:34:4f:60:20:2c:33:c0:08:fd:70:
46:51:cf:2b:6f:96:47:fc:be:5b:ab:69:c1:61:45:f6:43:f5:
f6:bd:60:f6:b4:93:2e:d6:91:5b:37:e3:20:a7:86:fc:a8:c4:
73:7e:57:66:b8:57:e9:58:7a:85:15:2c:f0:b8:11:c1:ee:1d:
db:e2:6f:a8:cb:ac:c6:d5:fa:55:74:bc:6a:e4:da:54:69:f6:
eb:30:de:84:2e:c7:ce:10:72:b1:3f:f5:16:0c:ea:f3:87:33:
51:be:91:5f:58:f8:5a:9f:8f:45:cd:2b:36:59:44:83:f5:21:
5d:94:11:b0:f3:3b:ee:e6:22:72:23:a6:89:d2:5a:59:74:90:
55:94:df:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:58:32 2026 by rpki-client