This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
File: xhVwDXyIi-a6dQrezZTYhkaC42E.mft (raw, json)
Hash identifier: quhoBaWuBvh0nj2399CBtkUN2ri9IL9J6KOg4iwyhzM=
Subject key identifier: 22:39:24:EB:5A:42:7A:0D:B6:58:BF:26:2F:95:3F:E6:AF:70:B5:12
Authority key identifier: C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61
Certificate issuer: /CN=A91D0C14/serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361
Certificate serial: 0109
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
Manifest number: 0108
Signing time: Sun 25 Jan 2026 00:50:10 +0000
Manifest this update: Sun 25 Jan 2026 00:50:09 +0000
Manifest next update: Sun 01 Feb 2026 00:50:09 +0000
Files and hashes: 1: xhVwDXyIi-a6dQrezZTYhkaC42E.crl (hash: 5AccX9XpRVjtOp8x9LNM0vzRO/Am+Ylk+ln/C2IOnu4=)
2: 6C3911AC316A11F090B23283C4F9AE02.roa (hash: DgEucoR97Y9+a6MdEE8/uaZNnvtkSjr5/qYttwnSpcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl
rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C14, serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361
Validity
Not Before: Jan 25 00:50:09 2026 GMT
Not After : Feb 1 00:50:09 2026 GMT
Subject: CN=697568c2-eeb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:67:a1:04:ba:25:c9:96:db:84:e2:90:8d:
b0:97:75:7d:1f:56:d5:b7:82:d4:76:8b:85:89:3f:
7a:1f:a6:4d:3f:a4:31:b9:33:2a:76:97:88:89:97:
52:c4:d1:d6:b1:83:1b:1a:5f:0a:74:2b:aa:c2:45:
df:0d:8c:91:34:5f:cc:00:ba:85:f9:e5:77:c2:b8:
8d:77:07:2f:29:ab:51:5b:e0:6e:93:de:f0:c1:dc:
45:a8:7f:c1:9b:52:90:fa:29:29:94:91:b3:db:2e:
01:fc:75:bd:24:a5:87:b2:aa:ac:63:1e:a5:af:fc:
a5:c6:49:e1:4e:3d:cd:ac:38:56:2f:ce:d9:6c:f5:
1d:19:50:97:9e:c2:0c:0c:1a:32:f3:ac:8a:04:e0:
c1:37:7e:85:56:bb:ed:45:e9:ca:3d:19:4f:5e:f7:
07:7d:9e:df:1d:e1:f8:1d:1b:03:ce:12:6e:8c:57:
ac:62:ee:4c:ad:60:ad:2d:50:a5:0d:5e:be:4d:c4:
b3:29:d4:61:2b:63:4a:30:e0:92:fb:7b:60:05:31:
f8:c7:f3:f4:00:79:c0:bd:3e:9f:52:42:9f:ec:3e:
ed:bf:b9:12:d4:24:62:54:94:71:3d:61:6a:27:a0:
b7:dd:45:cb:4a:48:0d:8a:9c:d9:24:ef:9d:d3:c5:
9e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:39:24:EB:5A:42:7A:0D:B6:58:BF:26:2F:95:3F:E6:AF:70:B5:12
X509v3 Authority Key Identifier:
keyid:C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:4e:a6:c3:68:b7:8d:12:1a:ef:ce:ca:a4:5c:25:22:43:a4:
06:62:3d:4b:d5:ff:43:8c:15:94:e3:00:a6:dd:0a:4f:89:ad:
c1:82:ed:a6:48:0c:41:82:f1:de:0d:8f:3d:83:0b:20:b2:c6:
9a:69:ad:91:cd:5a:b4:d7:b3:2b:3e:b8:34:03:43:6d:d0:bc:
d3:67:e4:f8:a6:12:40:51:88:4a:c8:de:08:90:a8:20:cb:b3:
db:62:06:50:ab:0a:54:cd:79:6a:ac:fe:e6:17:ba:2b:ee:49:
ce:6d:38:09:55:e5:8a:35:d3:bc:f0:bd:52:5a:2e:9a:13:48:
e0:e6:b9:14:a5:26:a5:1b:92:a3:e4:db:2c:07:ce:50:11:e7:
8c:1a:62:36:e2:4c:c7:7f:7a:7b:bb:f7:78:a4:08:57:48:7c:
bb:d9:83:a2:94:9c:f8:38:4e:7b:8a:f3:05:3c:7d:70:86:c7:
40:47:04:1c:ac:04:a8:6a:70:2a:12:69:25:87:f4:62:37:c3:
d1:5c:6b:7f:42:65:5b:e4:28:2c:a1:af:33:2d:0b:91:5e:a6:
33:e0:22:24:b1:03:63:44:9b:04:be:a8:16:be:89:0e:e9:75:
e1:d3:cb:b7:ba:83:ca:20:6f:f2:37:0a:0a:67:f2:02:7c:fc:
cc:12:d8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:51:47 2026 by rpki-client