This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft
File: XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft (raw, json)
Hash identifier: a7lYQrce7tCwcegktz+6mT0HASLN0RUuImr0Z4wHVX0=
Subject key identifier: 7F:EE:05:28:14:D6:81:84:F8:BC:48:55:94:C1:18:D8:0F:2E:95:61
Authority key identifier: 5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00
Certificate issuer: /CN=A91D28E1/serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700
Certificate serial: 0192
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft
Manifest number: 018E
Signing time: Sun 25 Jan 2026 02:52:15 +0000
Manifest this update: Sun 25 Jan 2026 02:52:15 +0000
Manifest next update: Sun 01 Feb 2026 02:52:15 +0000
Files and hashes: 1: XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl (hash: nn+r76CnvEbc0jk31dB78VXPz7V5CYzP1nekK2seQrw=)
2: 0A576F089A4C11EEBD557E12C4F9AE02.roa (hash: DEN1WpJkF7KEBPtyWLNA539o6YV36ND+eTTHH4uvqCU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl
rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:52:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D28E1, serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700
Validity
Not Before: Jan 25 02:52:15 2026 GMT
Not After : Feb 1 02:52:15 2026 GMT
Subject: CN=6975855f-0b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:ae:6e:f0:b5:1b:95:b1:3c:8e:dc:d3:08:
a1:0e:98:5c:89:f4:fd:12:c9:44:47:1e:1e:00:0b:
e4:21:28:ef:b3:a8:7f:28:e7:3a:ea:df:4f:ff:68:
1c:c0:b6:c7:af:24:a2:28:ea:10:b5:6b:06:4f:ad:
4f:d6:e0:e8:a0:c0:c9:a4:76:49:ce:f4:bf:a3:66:
41:10:bc:99:70:b2:cd:d5:3d:aa:1c:31:87:d9:78:
6c:d6:ec:00:b4:51:41:af:f9:ec:5c:4f:a0:c6:09:
ba:b3:24:08:49:04:78:a2:de:51:6b:e1:b3:04:42:
c9:8a:51:cb:2c:4a:28:50:dc:24:58:50:2b:3e:98:
7e:c1:b6:1f:de:74:59:e3:13:ab:e8:e5:35:78:d5:
19:ba:d8:de:09:70:08:77:4f:c8:d0:68:5a:8b:29:
e1:20:5f:5e:51:df:30:d8:3b:b2:99:3d:30:8d:99:
c4:e1:bc:0b:b7:37:38:d3:5e:b5:90:a6:9d:6f:27:
75:bb:14:8a:d5:c9:b1:68:47:a3:7a:02:02:c0:a7:
c0:25:ee:ba:ce:7b:8c:b5:94:35:3e:f9:59:9d:57:
56:55:ba:c6:0d:a2:4e:c6:9b:34:2d:4b:04:ca:81:
20:ea:21:bb:1b:1c:e8:98:86:4e:7d:e4:08:47:55:
1e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EE:05:28:14:D6:81:84:F8:BC:48:55:94:C1:18:D8:0F:2E:95:61
X509v3 Authority Key Identifier:
keyid:5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5b:41:77:5b:90:19:ba:9a:f0:1d:0a:0a:f3:c8:4f:39:8a:
40:8f:d4:29:ef:b9:88:72:6e:8b:28:8d:6c:52:be:fa:5c:7b:
3f:89:7a:03:00:14:16:b9:2d:61:e7:a1:39:8b:0a:44:8e:4c:
f5:92:36:5e:60:56:19:09:31:06:3e:04:46:79:2f:b6:10:26:
53:4f:6a:57:87:b1:e2:74:58:18:a4:55:c1:99:28:24:e3:f6:
0e:2e:d8:8b:df:2f:b8:53:ed:cf:3f:38:8d:ec:c1:b4:b2:a0:
09:5b:b7:ab:3c:5a:fd:dc:b5:c9:3c:67:cc:fb:41:41:e3:ef:
8a:41:fb:a5:a4:90:e8:e0:e5:43:05:c8:75:6e:5a:8d:8f:b3:
92:fc:62:b3:65:a6:bd:69:31:95:f5:df:7c:0a:28:47:40:70:
8e:d1:81:92:61:80:12:27:63:ea:3f:74:c3:2a:a1:a1:55:8a:
07:aa:3e:27:a5:14:96:96:07:f1:9a:c8:a1:87:3e:d0:e7:10:
11:66:52:b4:8a:2b:ac:c8:60:36:0c:97:c5:63:24:65:87:4f:
9b:eb:b4:66:02:42:39:ca:7b:cb:fd:fd:44:b7:be:91:f9:42:
fc:4d:ef:66:15:96:61:3d:f5:fe:00:d1:c7:c3:52:ea:b0:00:
bd:1a:a3:62
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RDI4RTExMTAvBgNVBAUTKDVENUY2MTkwMjE1REZGMEFDMzU0MzJCQzNBNTJBMDhC
RDM0MUI3MDAwHhcNMjYwMTI1MDI1MjE1WhcNMjYwMjAxMDI1MjE1WjAYMRYwFAYD
VQQDDA02OTc1ODU1Zi0wYjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwRKubvC1G5WxPI7c0wihDphcifT9EslERx4eAAvkISjvs6h/KOc66t9P/2gc
wLbHrySiKOoQtWsGT61P1uDooMDJpHZJzvS/o2ZBELyZcLLN1T2qHDGH2Xhs1uwA
tFFBr/nsXE+gxgm6syQISQR4ot5Ra+GzBELJilHLLEooUNwkWFArPph+wbYf3nRZ
4xOr6OU1eNUZutjeCXAId0/I0GhaiynhIF9eUd8w2DuymT0wjZnE4bwLtzc40161
kKadbyd1uxSK1cmxaEejegICwKfAJe66znuMtZQ1PvlZnVdWVbrGDaJOxps0LUsE
yoEg6iG7GxzomIZOfeQIR1UeKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/uBSgU
1oGE+LxIVZTBGNgPLpVhMB8GA1UdIwQYMBaAFF1fYZAhXf8Kw1QyvDpSoIvTQbcA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhFMS9CQkUzRDQzQTlB
NDkxMUVFOTA5MkUwNzBDNEY5QUUwMi9YVjloa0NGZF93ckRWREs4T2xLZ2k5TkJ0
d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hWOWhrQ0ZkX3dyRFZESzhPbEtnaTlOQnR3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MjhFMS9CQkUzRDQzQTlBNDkxMUVFOTA5MkUwNzBDNEY5QUUwMi9YVjloa0NGZF93
ckRWREs4T2xLZ2k5TkJ0d0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBLW0F3W5AZuprwHQoK88hPOYpAj9Qp77mIcm6LKI1sUr76XHs/iXoD
ABQWuS1h56E5iwpEjkz1kjZeYFYZCTEGPgRGeS+2ECZTT2pXh7HidFgYpFXBmSgk
4/YOLtiL3y+4U+3PPziN7MG0sqAJW7erPFr93LXJPGfM+0FB4++KQfulpJDo4OVD
Bch1blqNj7OS/GKzZaa9aTGV9d98CihHQHCO0YGSYYASJ2PqP3TDKqGhVYoHqj4n
pRSWlgfxmsihhz7Q5xARZlK0iiusyGA2DJfFYyRlh0+b67RmAkI5ynvL/f1Et76R
+UL8Te9mFZZhPfX+ANHHw1LqsAC9GqNi
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:53:35 2026 by rpki-client